YourReceptionist's data processing agreement is based on the Danish Data Protection Agency's (Datatilsynet) standard contractual clauses (Article 28(3)) and gives your business a number of specific guarantees when we process personal data on your behalf.
Processing only on your instructions
YourReceptionist may only process personal data on your documented instructions — never for its own purposes.
Clause 4Statutory duty of confidentiality
Only staff bound by confidentiality or a statutory duty of confidentiality have access to your call data.
Clause 5Encryption at rest and in transit
All call data, transcriptions and audio recordings are encrypted — both when transmitted and when stored.
Appendix C.230 days' notice of new sub-processors
You will always be notified in writing at least 30 days before a new sub-processor is engaged — with the right to object.
Clause 7.3Data breach notification within 24 hours
If a security breach occurs, you will be notified as soon as possible — and no later than 24 hours afterwards — so you can notify the Danish Data Protection Agency (Datatilsynet) in time.
Clause 10Right to audit and inspection
You have the right to receive documentation of our security measures and to carry out inspections with reasonable notice.
Clause 12Deletion or return on termination
When the agreement ends, we delete all personal data — or return it to you — and confirm this in writing.
Clause 11Assistance with data subjects' rights
We help you with access, erasure, rectification and data portability if a caller makes a request.
Clause 9