{"id":3,"date":"2025-12-09T15:35:10","date_gmt":"2025-12-09T14:35:10","guid":{"rendered":"http:\/\/bricks2-tw4.local\/?page_id=3"},"modified":"2026-09-29T15:48:28","modified_gmt":"2026-09-29T13:48:28","slug":"politica-privacidad","status":"publish","type":"page","link":"https:\/\/www.civitphone.com\/en\/politica-privacidad\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

{post_title}<\/h1>\n\n

www.civitphone.com<\/b><\/h4>\n
\n

1. Responsible for the processing<\/p>\n<\/div>\n

    \n
  • \n

    Identity: CIVITPHONE, S.L.<\/p>\n<\/li>\n

  • \n

    NIF: B22954366<\/p>\n<\/li>\n

  • \n

    Registered office: Calle Mart\u00edn el Humano, 16-2, 46008 Valencia<\/p>\n<\/li>\n

  • \n

    Commercial Registry: Valencia Commercial Registry, Electronic Volume, Electronic Folio, Sheet V-228353, IRUS: 1000457305255<\/p>\n<\/li>\n

  • \n

    Legal representative: Jordi Gisbert Rodas<\/p>\n<\/li>\n

  • \n

    Email: info@civitphone.com<\/p>\n<\/li>\n

  • \n

    Phone: 696 821 823<\/p>\n<\/li>\n

  • \n

    Website: www.civitphone.com<\/p>\n<\/li>\n<\/ul>\n

    \u00a0<\/div>\n

    Data Protection Officer (DPO)<\/p>\n

      \n
    • \n

      Name:\u00a0Francisco<\/span>\u00a0Marco Bataller \u2013 Quantum Consultores<\/p>\n<\/li>\n

    • \n

      Email:\u00a0Francisco<\/span>@quantumconsultores.es<\/p>\n<\/li>\n

    • \n

      Phone: 961 943 944<\/p>\n<\/li>\n<\/ul>\n

      \u00a0<\/div>\n
      \u00a0<\/div>\n

      2. Purposes of the processing<\/h2>\n
      \u00a0<\/div>\n

      CIVITPHONE, S.L. processes the personal data provided by users for the following purposes:<\/p>\n

      a) Requests for demonstration and commercial contact<\/p>\n

      \u00a0<\/div>\n

      Purpose: to manage the requests for demonstration of the CivitPhone platform and to answer commercial inquiries made through the contact form on the website.<\/p>\n

      Legal basis: consent of the interested party (Article 6.1.a GDPR) and application of pre-contractual measures (Article 6.1.b GDPR).<\/p>\n

      Storage period: the data will be kept for the time necessary to manage the request and, subsequently, for a maximum period of two (2) years, unless the interested party objects to the processing.<\/p>\n

      b) Customer management and service provision<\/p>\n

      \u00a0<\/div>\n

      Purpose: manage the contractual relationship with municipalities and public entities, including billing, technical support and the provision of the citizen service telephone service through artificial intelligence.<\/p>\n

      Legal basis: execution of the contract (Article 6.1.b GDPR).<\/p>\n

      Storage period: the data will be kept for the duration of the contractual relationship and, subsequently, for the periods legally established in commercial, accounting and fiscal matters, with a minimum of six (6) years.<\/p>\n

      c) Sending commercial communications (newsletter)<\/p>\n

      \u00a0<\/div>\n

      Purpose: sending information about news, platform updates, success stories, public sector events and other commercial communications related to CIVITPHONE services.<\/p>\n

      Legal basis: express consent of the interested party (Article 6.1.a of the GDPR).<\/p>\n

      Storage period: the data will be kept until consent is withdrawn.<\/p>\n

      d) Attention to rights and claims<\/p>\n

      \u00a0<\/div>\n

      Purpose: to manage the exercise of the rights recognized in data protection regulations and to handle possible claims.<\/p>\n

      Legal basis: compliance with legal obligations (Article 6.1.c GDPR).<\/p>\n

      Storage period: the data will be kept for the time necessary to process the request and, subsequently, for the periods of limitation of the applicable legal actions.<\/p>\n

      e) Data processed in telephone calls from citizens<\/p>\n

      \u00a0<\/div>\n

      Important information: citizens who contact the municipalities through the CivitPhone platform do not provide their data to CIVITPHONE, S.L., but to the corresponding municipality, which acts as the Data Controller. CIVITPHONE, S.L. acts solely as the Data Processor.<\/p>\n

      Purpose: processing of telephone calls through conversational artificial intelligence to answer citizen inquiries, manage appointments, and inform about municipal procedures.<\/p>\n

      Legal basis: treatment carried out on behalf of the client\u2019s municipality, which determines the purposes and means of the treatment.<\/p>\n

      Storage period: Voice recordings are processed in real time and deleted immediately after the call ends. Anonymized metadata (duration, time, and type of query) are stored on encrypted European servers for statistical purposes.<\/p>\n

      To exercise their rights, citizens must go directly to the corresponding municipality.<\/p>\n

      \u00a0<\/div>\n
      \u00a0<\/div>\n

      3. Categories of personal data processed<\/h2>\n

      CIVITPHONE, S.L. may process the following categories of personal data:<\/p>\n

      Commercial contact details: name and surname, position or role, entity or municipality, professional email address and professional telephone number.<\/p>\n

      Customer data (municipalities): fiscal and billing data, banking data (where applicable) and technical configuration data of the platform.<\/p>\n

      Data of citizens (treated as Data Controller): voice (processed in real time and not stored), phone number (only during the call) and content of the query (anonymized).<\/p>\n

      No special categories of data are processed, unless the citizen voluntarily provides them during the call.<\/p>\n

      \u00a0<\/div>\n
      \u00a0<\/div>\n

      4. Recipients and international data transfers<\/h2>\n

      Personal data may be disclosed to third parties in the following circumstances:<\/p>\n

      a) Technology service providers<\/span><\/h3>\n

      \u00a0(Responsible for the Treatment)<\/i><\/p>\n

      \u00a0CIVITPHONE uses specialized technology providers to provide its conversational artificial intelligence services. All of them act as data processors under contract and only process personal data following our instructions.<\/p>\n

      Providers with servers in the European Union<\/h3>\n

      OVH Cloud (Strasbourg, France)<\/p>\n

        \n
      • \n

        Service: Hosting of the backoffice platform.<\/p>\n<\/li>\n

      • \n

        Treatment: Encrypted storage of metadata and configurations.<\/p>\n<\/li>\n

      • \n

        Guarantees: Double encryption and data anonymization.<\/p>\n<\/li>\n

      • \n

        Location of the servers: France (European Union).<\/p>\n<\/li>\n<\/ul>\n

        \u00a0Microsoft Azure AI (France)<\/p>\n

          \n
        • \n

          Service: Artificial intelligence processing and natural language analysis. Real-time telephone call processing through conversational artificial intelligence (voice-to-text and text-to-voice).<\/p>\n<\/li>\n

        • \n

          Treatment: Processing of anonymized data exclusively.<\/p>\n<\/li>\n

        • \n

          Certification: ENS Compliance.<\/p>\n<\/li>\n

        • \n

          Location of the servers: France (European Union).<\/p>\n<\/li>\n<\/ul>\n

          \u00a0Meta Platforms Inc. (WhatsApp Business)<\/p>\n

            \n
          • \n

            Service: Management of communications via WhatsApp with citizens.<\/p>\n<\/li>\n

          • \n

            Treatment: End-to-end encrypted messaging.<\/p>\n<\/li>\n

          • \n

            Guarantee: CIVITPHONE is the official technological partner of Meta.<\/p>\n<\/li>\n

          • \n

            Note: Data processed through WhatsApp is subject to the privacy policy of Meta Platforms Inc.<\/p>\n<\/li>\n<\/ul>\n

            \u00a0Make (Integromat)<\/p>\n

              \n
            • \n

              Service: Process automation.<\/p>\n<\/li>\n

            • \n

              Treatment: Temporary processing of incoming emails.<\/p>\n<\/li>\n

            • \n

              Location of the servers: European Union.<\/p>\n<\/li>\n<\/ul>\n

              Providers with international transfers (United States)<\/h3>\n

              CIVITPHONE uses artificial intelligence-based telephony providers located in the United States for the processing of real-time telephone calls.<\/p>\n

              Retell AI, Inc. (United States)<\/p>\n

                \n
              • \n

                Service: Real-time processing of telephone calls through conversational artificial intelligence (voice-to-text and text-to-voice).<\/p>\n<\/li>\n

              • \n

                Address: 1121 Industrial Ave., Suite 500, San Carlos, CA 94070 (United States).<\/p>\n<\/li>\n

              • \n

                Treatment: Voice processing exclusively during the call, with no subsequent storage.<\/p>\n<\/li>\n

              • \n

                List of subprocessors: https:\/\/trust.retellai.com\/subprocessors<\/p>\n<\/li>\n<\/ul>\n

                \u00a0Characteristics of the treatment<\/p>\n

                  \n
                • \n

                  Retell AI processes voice data only during the call, in real time.<\/p>\n<\/li>\n

                • \n

                  It does not store personal data on its servers once the call is finished.<\/p>\n<\/li>\n

                • \n

                  The voice recordings are deleted immediately after processing.<\/p>\n<\/li>\n

                • \n

                  The generated metadata is transferred to European servers of CIVITPHONE (OVH Cloud, France), where it is stored in encrypted and anonymized form.<\/p>\n<\/li>\n<\/ul>\n

                  \u00a0<\/p>\n

                  Guarantees of protection for international transfers<\/h3>\n

                  For international data transfers to the United States, CIVITPHONE has implemented the following legal guarantees, in accordance with Article 46 of the GDPR:<\/p>\n

                  \u00a0Type Contractual Clauses (SCC) approved by the European Commission (Decision 2021\/914), signed with Retell AI on 21\/11\/2025.<\/p>\n

                    \n
                  • \n

                    Data Processing Officer (DPA) contract incorporating the guarantees required by Article 28 of the GDPR, signed on 21\/11\/2025.<\/p>\n<\/li>\n

                  • \n

                    Certification under the EU-U.S. Data Privacy Framework, in the event that Retell AI is a member of that framework.<\/p>\n<\/li>\n

                  • \n

                    Right of objection to subprocessors: CIVITPHONE has a 10-day period to object to the incorporation of new subprocessors.<\/p>\n<\/li>\n<\/ul>\n

                    \u00a0<\/p>\n

                    Additional technical and organizational measures<\/h3>\n

                    In addition, the following security measures apply:<\/p>\n

                      \n
                    • \n

                      End-to-end encryption during voice transmission.<\/p>\n<\/li>\n

                    • \n

                      Immediate removal of recordings after their processing.<\/p>\n<\/li>\n

                    • \n

                      Exclusive storage of anonymized metadata on European servers.<\/p>\n<\/li>\n

                    • \n

                      Explicit contractual prohibition of the storage of voice data by providers located in the United States.<\/p>\n<\/li>\n<\/ul>\n

                      You can request a copy of the applicable guarantees (including the signed Standard Contractual Clauses) by contacting info@civitphone.com or the Data Protection Officer at\u00a0Francisco<\/span>@quantumconsultores.es.<\/p>\n

                      b) Other recipients<\/p>\n

                      Public administrations (AEPD, AEAT, judicial bodies), financial institutions and professional advisors, when necessary for the fulfillment of legal or contractual obligations.<\/p>\n

                      CIVITPHONE, S.L. does not sell or transfer personal data for commercial purposes.<\/p>\n

                      \u00a0<\/div>\n

                      5. Rights of the interested parties<\/h2>\n

                      The interested party may exercise the rights of access, rectification, deletion, limitation of processing, portability, opposition and not being subject to decisions based solely on automated processing.<\/p>\n

                      How to exercise your rights<\/p>\n

                      Email: info@civitphone.com or\u00a0Francisco<\/span>@quantumconsultores.es<\/p>\n

                      Postal address: CIVITPHONE, S.L., Calle Mart\u00edn el Humano, 16-2, 46008 Valencia<\/p>\n

                      Response time: maximum one (1) month, extendable in complex cases.<\/p>\n

                      You can also file a complaint with the Spanish Data Protection Agency (www.aepd.es).<\/p>\n

                      \u00a0<\/div>\n

                      6. Security measures<\/h2>\n

                      CIVITPHONE, S.L. has adopted appropriate technical and organizational measures to address the risk, including data encryption, anonymization, access control, multi-factor authentication, security breach management, staff training, periodic audits, and the use of certified providers in accordance with the National Security Scheme and ISO 27001.<\/p>\n

                      \u00a0<\/div>\n
                      \u00a0<\/div>\n

                      7. Data retention<\/h2>\n

                      Personal data will be kept for the minimum period necessary to fulfill the purposes described in this policy, in accordance with the following criteria:<\/p>\n

                        \n
                      • \n

                        Requests for demonstration and commercial contact will be kept for a maximum period of two (2) years, unless the interested party objects.<\/p>\n<\/li>\n

                      • \n

                        The data of active customers will be kept for the duration of the contractual relationship.<\/p>\n<\/li>\n

                      • \n

                        Data after the contract has been completed will be kept for six (6) years, in compliance with fiscal and commercial obligations.<\/p>\n<\/li>\n

                      • \n

                        The data used for sending commercial communications will be kept until the withdrawal of consent.<\/p>\n<\/li>\n

                      • \n

                        The voice recordings of citizen calls are deleted immediately after processing.<\/p>\n<\/li>\n

                      • \n

                        The anonymized call metadata are retained indefinitely as they do not allow for the identification of individuals.<\/p>\n<\/li>\n

                      • \n

                        The data processed for the exercise of rights and claims will be kept for three (3) years.<\/p>\n<\/li>\n<\/ul>\n

                        After these deadlines have passed, the data will be securely deleted or anonymized.<\/p>\n

                        \u00a0<\/div>\n

                        8. Accuracy of the data<\/h2>\n

                        The user guarantees that the data provided is truthful, accurate and up-to-date, being responsible for any damage resulting from incorrect or inaccurate information.<\/p>\n

                        \u00a0<\/div>\n

                        9. Minors<\/h2>\n

                        This website is intended for people over 14 years of age. In the event that data processing is detected in minors without valid consent, such data will be deleted immediately.<\/p>\n

                        \u00a0<\/div>\n

                        10. Modifications to the Privacy Policy<\/h2>\n

                        CIVITPHONE, S.L. reserves the right to modify this policy to adapt it to regulatory changes or the evolution of its services. Relevant modifications will be communicated to users in an appropriate manner.<\/p>\n

                        \u00a0<\/div>\n
                        \u00a0<\/div>\n

                        11. Additional information<\/h2>\n

                        Responsible for the processing:<\/p>\n

                        CIVITPHONE, S.L. \u2013 info@civitphone.com \u2013 696 821 823<\/p>\n

                        Data Protection Officer:<\/p>\n

                        Francisco<\/span>\u00a0Marco Bataller \u2013 Quantum Consultores<\/p>\n

                        Francisco<\/span>@quantumconsultores.es \u2013 961 943 944<\/p>\n

                        \u00a0<\/div>\n

                        Last update: February 2026<\/p>\n

                        \u00a0<\/h3>","protected":false},"excerpt":{"rendered":"

                        {post_title} www.civitphone.com 1. Responsable del tratamiento Identidad:\u00a0CIVITPHONE, S.L. NIF:\u00a0B22954366 Domicilio social:\u00a0Calle Mart\u00edn el Humano, 16-2, 46008 Valencia Registro Mercantil:\u00a0Registro Mercantil de Valencia, Tomo electr\u00f3nico, Folio electr\u00f3nico, Hoja V-228353, IRUS: 1000457305255 Representante legal:\u00a0Jordi Gisbert Rodas Correo electr\u00f3nico:\u00a0info@civitphone.com Tel\u00e9fono:\u00a0696 821 823 Sitio web:\u00a0www.civitphone.com \u00a0 Delegado de Protecci\u00f3n de Datos (DPO) Nombre:\u00a0Francisco\u00a0Marco Bataller \u2013 Quantum Consultores Correo electr\u00f3nico:\u00a0francisco@quantumconsultores.es […]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.civitphone.com\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.civitphone.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.civitphone.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.civitphone.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.civitphone.com\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":14,"href":"https:\/\/www.civitphone.com\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":741,"href":"https:\/\/www.civitphone.com\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/741"}],"wp:attachment":[{"href":"https:\/\/www.civitphone.com\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}