GDPR compliance
DialPhone processes customer personal data as a Processor under GDPR Article 28. EU data residency, SCCs, and a published DPA make compliance straightforward for EU-based customers and US customers with EU data subjects.
Technical & organizational measures
- EU data residency option (Frankfurt, Dublin) with no cross-region replication unless customer-enabled
- Standard Contractual Clauses (SCCs) for transfers outside the EEA
- UK International Data Transfer Addendum (IDTA) for UK transfers
- Swiss FADP addendum for Swiss transfers
- Data Processing Agreement (DPA) executed with every paid plan — auto-incorporated into Terms
- Appointed EU Representative per GDPR Article 27
- Data Protection Officer (DPO) for privacy inquiries
- 72-hour breach notification to Controllers
- Subprocessor registry with 30-day advance change notices
Data Subject Rights supported
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Rights related to automated decision-making (Art. 22)
Documents
- → Data Processing Agreement (DPA)
- → Privacy Policy
- → Subprocessor registry
- → Standard Contractual Clauses (incorporated by reference in the DPA)
GDPR FAQ
Is DialPhone GDPR compliant?
Yes. DialPhone processes personal data per GDPR Article 28 as Processor for customers who are Controllers. The DPA is auto-incorporated into every paid subscription; the SCCs cover transfers where needed.
Where is EU customer data stored?
EU regions only (Frankfurt, Dublin) when EU residency is enabled — default for EU-billed accounts. Data does not cross regions without customer-enabled cross-region replication.
Do you have an EU Representative?
Yes, appointed per GDPR Article 27 for non-EU-established entities. Contact details available via privacy@dialphone.com.
How do I respond to a Data Subject Rights request?
Tools inside the admin portal handle access, export, and deletion requests for data in DialPhone. For requests DialPhone needs to assist with, contact privacy@dialphone.com.
Can I execute a signed DPA?
The DPA at /legal/dpa is auto-incorporated. Countersigned paper copies for procurement: request via legal@dialphone.com.
Who is the Data Protection Officer?
DialPhone's DPO is reachable at dpo@dialphone.com. Named individual details provided under NDA to regulated-industry customers.