Compliance and GDPRClear roles.
Clear roles.
Clear rules.
You decide what you record and why. We process the content on your instructions, under a data processing agreement.
Consents and settings
Recording notice
Consent to a voice profile
Send notes to CRM

RolesWho is who
Who is who
under GDPR.
The user or their company is the controller of call content, including data about the other person. Somple is the processor. We are the controller of account and billing data.
- Content: you or your company as controller
- Somple: processor (Art. 28 GDPR)
- Account data: Somple as controller

Data processing agreementThe DPA is part
The DPA is part
of the Terms.
The terms for entrusting data processing are part of the Terms (§7). We never use content for any purposes of our own.
Read the Terms (PL) →Recording
Recording notice
RecordingRecording calls
Recording calls
in Poland.
A participant in a call may record it. For full transparency Somple can play a recording notice, and we describe the information duties towards the other person in our documents. This is general information, not legal advice; rules differ between countries.
Rights and safeguards
Individual rightsAccess, rectification, erasure, restriction, portability and objection.
Biometric dataVoice profile only with explicit consent (Art. 9 GDPR).
No decisions by AI aloneAnalyses are an aid; HR decisions may not rely on them alone.
BreachesNotified to the Polish data protection authority within 72 hours when required.
Transfers outside the EEAData Privacy Framework or standard contractual clauses.
ComplaintsYou can lodge a complaint with the President of the UODO.