Privacy Policy for the AI-Powered Phone Assistant

When you call us, the call data is stored pseudonymously on the respective terminal device and with the telecommunications provider used. In addition, data such as name and telephone number can subsequently be sent by e-mail and stored for the purpose of responding to inquiries. The data is deleted as soon as the business case has been terminated and legal requirements permit.

AI-powered phone assistant (fonio.ai)

To assist with call handling and improve our telephone availability, we use an AI-powered phone assistant.

Provider: fonio GmbH, Joanelligasse 5/16, 1060 Vienna, Austria
Website: www.fonio.ai

Purpose of the processing:

– Answering and handling incoming phone calls
– Answering frequently asked questions about treatments, prices, and hours of operation
– Transferring calls to the appropriate staff members as needed
– Recording inquiries and contact information for callbacks
– Sending text messages with appointment booking links or directions

Data Processed:

– Caller’s phone number
– Date, time, and duration of the call
– Content of the conversation (Transcript of the call)
– Any personal data provided, such as name and email address
– Audio recording of the call, if applicable
– Automatically generated call logs and summaries
– Technical connection and metadata

Note: Callers are informed at the beginning of each call that they are speaking with an AI phone assistant and that the call is being recorded. By continuing the call after this notice, you consent to the data processing described below. If a caller objects to the recording, they will be transferred to a staff member. In this case, any call data and recordings accumulated up to that point will be automatically and immediately deleted.

Legal basis:

– Art. 6(1)(a) of the GDPR (Consent): The technically necessary recording and analysis of the call by the AI software is based on your consent, which you provide by continuing the call after receiving the relevant notice. Consent is voluntary and may be withdrawn at any time.

– Art. 6(1)(f) of the GDPR (legitimate interest): Our legitimate interest lies in the efficient organization of telephone availability and the structured recording of inquiries.

– Art. 6(1)(b) of the GDPR (performance of a contract or pre-contractual measures): To the extent that calls are made for the purpose of establishing or carrying out a treatment relationship.

Use of AI features:

fonio.ai uses AI-powered systems for speech recognition, conversation analysis, and the structured summarization of conversation content. Processing is automated but is used exclusively for organizational purposes (e.g., answering questions, forwarding messages to the team, and recording callback requests).

There is no automated decision-making as defined in Article 22 of the GDPR. Medical assessments and treatment decisions are made exclusively by our on-site physicians.

Neither fonio.ai nor its sub-processors use personal data for the training, improvement, or evaluation of AI models.

Data Processing:

A Data Processing Agreement (DPA) was entered into in accordance with Article 28 of the GDPR for the use of fonio.ai.

Server Location and Data Processing:

– Hosting: Hetzner Online GmbH, Nuremberg, Germany (EU)
– Language model (LLM): Microsoft Azure, Sweden (EU)
– All sensitive data remains within the European Union.

fonio.ai uses selected sub-processors to provide its services. To the extent that data is transferred to third countries, this is done exclusively on the basis of appropriate data protection safeguards, in particular through standard contractual clauses pursuant to Article 46 of the GDPR or within the framework of an adequacy decision by the European Commission.

A complete list of the sub-processors used by fonio.ai can be found in fonio.ai’s Privacy Policy: https://docs.fonio.ai/Datenschutz/AVV

Retention period:

Call records and transcripts are regularly reviewed and deleted as soon as they are no longer needed to process the inquiry, provided that no statutory retention periods require otherwise. Audio recordings are automatically deleted after a maximum of 30 days. If the caller objects to the recording, the transcript and audio recording are immediately and automatically deleted.

Note regarding sensitive data:

We ask that you refrain from sharing particularly sensitive personal information (e.g., health information that goes beyond the scope of your inquiry) during phone calls with the AI assistant. For medical inquiries, our doctors are available for a one-on-one consultation.

Your rights:

You have the following rights under the General Data Protection Regulation (GDPR):

– Right of access to the processed data (Art. 15 GDPR)
– Right to rectification of inaccurate data (Art. 16 GDPR)
– Right to erasure of your data (Art. 17 GDPR)
– Right to restriction of processing (Art. 18 GDPR)
– Right to data portability (Art. 20 GDPR)
– Right to object to processing (Art. 21 GDPR)
– Right to withdraw consent (Art. 7(3) GDPR), without affecting the lawfulness of processing carried out prior to the withdrawal

To exercise your rights, please contact: kontakt@goaesthetic.at

In addition, you have the right to file a complaint with the competent data protection authority:

Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

Notice pursuant to the EU AI Act:

In accordance with Regulation (EU) 2024/1689 (EU AI Act), we would like to inform you that an AI system may be used when you contact GoAesthetic by phone. The AI phone assistant identifies itself as artificial intelligence at the beginning of each call.

As of August 2026