Privacy Policy

Neotel 2000, S.L. is aware of how important the use we make of your personal information, and the way we share it, is to you. This Privacy Policy explains what data we collect, why we process it and how we protect it.

This website does not collect personal data from users without their knowledge, nor does it share such data with third parties.

This website contains links to third-party websites, whose privacy policies are independent of those of Neotel 2000, S.L. When you access them, you can decide whether to accept their privacy and cookie policies. You can accept or reject third-party cookies from your browser settings. Full information is available in our Cookie Policy.

You can contact our Data Protection Officer at dpd@neotel2000.com.

Processing of personal data:

of clients, potential clients, employees, suppliers, professional contacts and distributors

Who is responsible for processing your data?

Responsible: NEOTEL 2000, S.L.
Tax ID (CIF): B52009743
Address: 29010 Málaga (Spain) C/ Fiscal Luis Portero García, 3 – P-7 Office 1-1º
Telephone: 952 64 10 34
Data Protection Officer (DPO): dpd@neotel2000.com

For what purpose do we process your data?

We process your data to provide the service you requested; to follow up, maintain and develop the contractual relationship; to comply with our legal obligations; and to send you, by email, phone or post, information related to the products and services you have contracted with us. If you do not wish to receive commercial information, please email our DPO at dpd@neotel2000.com.

What is the legal basis for processing your data?

Performance of a contract to which you are a party.
Compliance with legal obligations applicable to us.
Legitimate interest of the Controller.
Your consent, where we ask for it (for example, when you connect your Google account).

How long will we keep your data?

We process your data while the contractual relationship remains in force. Once it ends, we keep it blocked and available only to the competent authorities, courts and public administrations, for the applicable legal limitation periods.

Under Spanish Law 25/2007, of 18 October, on the retention of data relating to electronic communications, Neotel 2000, S.L. retains traffic and location data for 12 months, in order to respond to requests from the Judicial Authority.

Who will your data be shared with?

A) Public authorities, where required by law, such as judicial, tax and customs authorities, Authorised Agents and 112 emergency services.

B) Suppliers that carry out activities necessary to provide our services on our behalf, such as other telecommunications operators, premium-rate service providers, billing and collection services, and the technology providers of our virtual PBX and its AI features.

C) Credit reference files. In the event of non-payment, data relating to the debt may be shared with legally authorised companies that manage the non-fulfilment of financial obligations.

Processing of Data on Social Media

NEOTEL 2000, S.L. is present on several social media platforms. We act as Data Controller for the data we publish there and for the data users send us privately so that we can answer their queries. In these cases, we apply the same legal basis, recipients and retention periods as for the contact data of prospective clients.

We will never extract personal data from social media without the user’s express consent, except to answer a query made by the user through that social network.

Legal basis: pre-contractual measures taken at the data subject’s request.

Retention: data stays on the social network for as long as the user does not delete it. NEOTEL 2000, S.L. is not responsible for data stored there; it only extracts it to answer queries made through that network.

Your data protection rights

Right of access to your personal data.
Right to rectification or erasure.
Right to restriction of processing.
Right to object to processing.
Right to data portability.
Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

You can exercise these rights by emailing our DPO at dpd@neotel2000.com or by post to C/ Fiscal Luis Portero García, 3 – P-7, Office 1-1º, 29010 Málaga (Spain).

If you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency at www.aepd.es.

International data transfers

Some of our technology providers may process data outside the European Economic Area: Google, when a user connects their Google account, and the providers of our AI voice assistants. In these cases, transfers are based on the EU-US Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.

Data obtained from Google services

This section applies to the Neotel applications that can connect to a Google account:

Nea, the web panel of Neotel’s virtual PBX, available at each client’s address (client.neotel2000.com).
pbx.neotel2000.com, Neotel’s client access panel.

Connecting a Google account is optional. NEOTEL 2000, S.L. only accesses Google data after the user authorises it on Google’s own consent screen (OAuth 2.0), only for the permissions shown there, and only while the connection remains active.

1. Data we access and why

Basic account information (Nea). Name, email address and profile photo, used to let the user sign in to Nea with Google. Permissions: openid, email, profile.
Google Contacts (Nea). Names, phone numbers, email addresses, company and notes of the user’s contacts. Nea keeps its address book and Google Contacts in sync in both directions. Contacts from Google are shown in the PBX address book and used to display the caller’s name on incoming calls. Contacts that the user creates, edits or deletes in Nea are created, edited or deleted in Google Contacts. Permission: https://www.googleapis.com/auth/contacts.
Google Calendar (Nea). The list of the user’s calendars and the events in the calendar the user chooses, from about one month back to thirteen months ahead. Nea keeps its calendar and Google Calendar in sync in both directions. Meetings, appointments and scheduled calls that the user creates, changes or cancels in Nea are written to Google Calendar, and changes made in Google Calendar are brought into Nea. The list of calendars is used only to let the user choose which calendar Nea writes to. Permissions: https://www.googleapis.com/auth/calendar.events and https://www.googleapis.com/auth/calendar.readonly.
Google Calendar and Contacts (pbx.neotel2000.com). Calendar events, to check availability and to create or update events linked to calls and appointments. Contact details, to make them available in the address book.
Gmail (pbx.neotel2000.com only). Used only to send the emails the user requests from their own linked account. The inbox and received messages are not accessed. Nea does not access Gmail.
Personal and company accounts. Each user can connect their own Google account for their personal contacts and calendar, which only that user sees in the PBX. An authorised administrator can also connect a company Google account for the shared company address book and calendar. The users of that company’s PBX can see them according to their role.

2. How we use this data

Data obtained from Google is used only to provide the features described above, which the user sees and controls in the application. It is not sold and not used for advertising or to build user or advertising profiles. It is never used to create, train or improve artificial intelligence or machine learning models.

3. Human access

Neotel staff do not read Google user data, except in these cases:

with the user’s explicit consent, to resolve a support request;
when necessary for security, such as investigating abuse;
to comply with the law.

4. Sharing and transfer

Data obtained from Google is not shared with or transferred to third parties, except when required by law or with the user’s express authorisation.

If the client company enables greeting callers by name, the name and company of a calling contact may be sent to the provider of the AI voice assistant to greet the caller. This happens only during that call. This provider does not use the data for any other purpose or to train its models.

5. Storage and security

Google data used by Nea is stored on the PBX server of the client company, hosted by Neotel in the European Union. All communication with Google uses encrypted HTTPS/TLS connections. The authorisation obtained from Google is stored encrypted and is used only for the operations the user has authorised. Access within the application is restricted by user roles.

6. Retention, revocation and deletion

The user can disconnect their Google account at any time with the “Disconnect” button in the application, or from myaccount.google.com/permissions. Disconnecting deletes the stored authorisation and stops synchronisation immediately.

Contacts and events already synchronised remain in the PBX address book and calendar until the user or an administrator deletes them. When the contract ends, they are kept only for the legally required periods described in this policy.

Deleting a synchronised contact or event in Nea also deletes it from the linked Google account.

Users can request the deletion of their data at any time by emailing dpd@neotel2000.com. We respond within one month.

7. Legal basis

The legal basis is the user’s consent, given when authorising the connection of their Google account. Where applicable, it is also the performance of the virtual PBX service contract with Neotel 2000, S.L.

8. Limited Use

The use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.