Privacy policy
Last updated: 25 October 2025
Who is the data controller
The controller of the data collected on this website is Duodat (duodat.com), contactable at Barcelona, Espanya. You can reach us about any privacy matter at [email protected].
What data we collect
On this website we only collect the data you voluntarily provide through the contact form:
- Your name.
- Your email address.
- Your phone number, if you choose to give it.
- Your company or organisation, if you choose to give it.
- The use case you are interested in, your approximate call volume and the message you write.
- The address of the page you submitted the form from, and your browsing language.
We do not use tracking cookies or analytics tools that profile you. There is no advertising and there are no third-party trackers on this website.
What we use it for
| Purpose | Legal basis | Retention |
|---|---|---|
| Responding to your request for information or a demo | Your consent and our legitimate interest in answering a business enquiry | Up to 24 months from the last contact |
| Preparing a quote or a trial of the service | Performance of a pre-contractual relationship | For the duration of the negotiation and its statutory limitation period |
| Meeting legal obligations (accounting, tax) | Legal obligation | The periods required by law |
We will not use your data to send you marketing about other products without asking your permission first.
Who can access your data
To operate, we rely on providers who act as data processors and who only process data on our instructions:
- The provider that processes the web form submission and delivers it to us by email.
- Our email provider.
- The hosting provider for this website.
We do not sell or share your data with third parties for commercial purposes. Where a provider involves an international data transfer, we make sure the safeguards the GDPR requires are in place, such as the European Commission's standard contractual clauses.
Data processed in the voice agent service
When a customer takes out the Duodat service, the data of the people who receive or make the calls is processed on behalf of that customer, who is the controller. In those cases Duodat acts as a processor and signs the agreement required by Article 28 of the GDPR. This processing covers:
- Identification and contact data needed to place the call.
- The transcript and summary of the conversation, and audio recording only if the customer enables it.
- Call metadata: date, time, duration and outcome.
Voice agents identify themselves as automated assistants at the start of every call. The customer decides the retention periods and whether audio is stored. This data is processed on servers located in the European Union.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given us. Just write to [email protected] telling us which right you want to exercise.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the Catalan Data Protection Authority (apdcat.gencat.cat).
Security
We apply reasonable technical and organisational measures to protect data: encrypted communications, role-based access control, minimising the data we collect and reviewing our providers. No system is infallible, but we commit to notifying you without undue delay if a security breach affects you.
Changes to this policy
If we change this policy, we will update the date at the top. We recommend checking back from time to time.