How your call is handled

Effective as of: August 21, 2026

The short version: the business you called uses an AI assistant, provided by Veillant, to answer its phone. We do not record your call, we do not keep a transcript of it, and we do not store your phone number (with one exception, explained below). What you tell the assistant is used to answer you and, if a person needs to follow up, is passed to the business you were trying to reach. The technology providers that carry and process the call are listed at veillant.eu/subprocessors. We do not sell your data and we do not use it to train AI models.

Who is who

When you call, the business you dialed remains responsible for your data (the "controller" in GDPR terms). Veillant (CVR 46669207, Rødovre Port 52, 5. 1., 2610 Rødovre, Denmark) operates the assistant on the business's behalf and under its instructions, as its processor. This page describes what Veillant's system does with your data during and after the call. For anything about the business's own handling of your information, including who they are and how to reach them, contact the business you called; this page covers the call itself. Veillant has not appointed a data protection officer (none is required for this processing); its data-protection contact is privacy@veillant.eu.

What the assistant tells you up front

Every call opens with a fixed sentence, written by Veillant, in which the assistant says it is an artificial intelligence assistant, that it does not record the call, and that you can ask for a person. The business cannot edit it, shorten it or switch it off. It is spoken in the language the business's assistant answers in. If you ask the assistant what happens to your data, it answers honestly, in line with this page.

What happens to your voice

Your voice is processed live to hold the conversation and is not recorded. There is no audio store, and no transcript of the conversation is kept. When the call ends, the conversation is discarded; what remains on our side is operational call data with no caller identifier (duration, cost, status), used for billing and reliability.

One thing is derived from the conversation and kept: at the end of the call an automated step picks, from a fixed list, roughly what the call was about, and adds one to a counter. It stores no words, no dates and nothing that identifies you. See "Statistics" below.

How long: nothing about you as an individual is kept, so there is nothing on our side with a retention period attached to you. The operational record and the counters carry no caller identity and live for as long as the business's Veillant account does; the statistics rows that carry a date are deleted after 24 months.

What happens to your phone number

We do not store it. It is used during the call, and in one case it travels further: if you ask for a human, or the assistant decides a person should follow up, and the business has switched that handover on, we send the business an email carrying your number, your name if you gave one, and a short reason and note written by the AI, so someone can call you back. That email goes to the account the business signs in with and lives in the business's own inbox, under its control. Veillant keeps no copy.

Where your number comes from: you do not give it to us. The telephone network presents it when your call connects, through the telephony provider listed at veillant.eu/subprocessors.

If you volunteer sensitive information

Veillant does not require any health or other sensitive information to answer a call, and nothing you say is stored on our side. If you do give such information and a person needs to follow up, it can appear in the message sent to the business, the same as if you had told it to someone taking a message. What the assistant asks you is configured by the business you called.

No automated decisions about you

No decision with a legal or similarly significant effect on you is made automatically by the assistant. It answers questions and, when it cannot help, logs the request for the business so a person can follow up. Whether that request is also emailed to the business is the business's own setting.

Statistics

The business sees aggregate statistics about its calls (how many, when, broadly why people called, from the fixed-list counter described above). These are counters with no caller identity attached: no number, no name, no combination that points back at you, and they are only shown above minimum volumes.

The providers involved

Veillant runs on a small set of infrastructure providers (telephony, AI processing, email delivery, hosting). The live list, with each provider's role, country of processing, and what they have confirmed to us in writing about retention, is public at veillant.eu/subprocessors, with a dated change log. Each provider's own privacy terms are linked from that page.

Some of these providers process data outside the EU, including in the United States. Those transfers rely on the safeguards named in Veillant's Data Processing Agreement (Annex I): standard contractual clauses adopted by the European Commission, EEA contracting entities where the provider offers one, and an adequacy decision where the provider is certified under it. To ask for a copy of the safeguards that apply to a given provider, write to privacy@veillant.eu.

Your right to object, and the fastest way to use it

You can object at any time to your call being handled this way, on grounds relating to your particular situation (GDPR art. 21). On the phone, the shortest route is to say so: the assistant tells you at the start that you can ask for a person. When you do, it stops trying to answer you itself and logs your request for the business; if the business has switched the email handover on, your request, your number and your name if you gave one are sent to it so a person can call you back. The assistant cannot transfer you to a person during the call. In writing, address the objection to the business you called, which is responsible for deciding it; you can copy privacy@veillant.eu and Veillant will pass it on and assist.

Your other rights

You can ask for access, correction, deletion or restriction (GDPR arts. 15 to 18). Because the business is the controller, address requests to the business you called; Veillant assists it in answering. Because Veillant stores no audio, no transcript and no caller number, there is nothing on our side to retrieve, correct or erase for an individual caller; Veillant will confirm that in writing to the business so it can forward it to you, and will ask the email provider to delete the delivery record of an escalation you identify. You can also complain to the Danish supervisory authority, Datatilsynet (datatilsynet.dk), or to your local data protection authority.

The legal basis

The business you called decides why it answers its phone and on what legal basis, and it has to tell you that; this page cannot decide it for them. What Veillant can tell you is how the system was built: no recording, no transcript kept, no phone number stored, and statistics that carry no identity. Veillant's own written assessment of the aggregate statistics it derives (GDPR art. 6(1)(f)) is available on request at privacy@veillant.eu.