Privacy notice | VLAN IT

Who is responsible

VLANit is the brand of Alexander Kuznetsov, owner of the individual establishment VLANIT FOR INFORMATION TECHNOLOGY, Abu Dhabi freelancer licence CN-6843231, Abu Dhabi, United Arab Emirates (VLANit, we). For this website we are the controller of your personal data under the UAE Personal Data Protection Law, Federal Decree-Law 45 of 2021 (the PDPL). For the CRM connectors we act for the company that uses them: see CRM connectors.

Questions, requests to see or delete your data, and withdrawal of consent: support@vlanit.com.

What is collected, and when

If you only read. No account, no cookies, no advertising or social media pixels on any page. Our web server logs the network address and browser of each request to keep the site secure. These logs are kept for 14 days.
The 12-point check stores your answers in your own browser only. They never reach this server. A “resume link” carries them inside the link itself.
The form on the analysis page sends what you type: name, work email, company and phone if you give them, your two consent choices, and the failed or unsure numbers from your checklist if you ran it. The server records the date and time, your IP address and the exact consent wording you agreed to, so that your consent can be shown later.
Aggregate visit statistics. Pages, referrers, countries, browser types and screen sizes, counted with a self-hosted, cookieless tool (GoatCounter). It sets no cookie and keeps no persistent identifier for a visitor. Nothing is shared with any third party.
Booking a call. “Book a call” opens the booking page of Cal.com, Inc. (United States) over our page. What you enter there (name, email, notes and the time you pick) goes to Cal.com and to us, under Cal.com’s own privacy policy.

Why, and on what basis

Form data is used to answer what you asked for: your checklist result and what closes the gaps. It is processed on the basis of the consent you tick on the form. The optional second box lets us contact you by phone or WhatsApp; without it, email only. Statistics are used to see which pages are read and where visitors come from.

Where it goes

Form submissions are stored on our server in Germany (Hetzner, Nuremberg). A copy goes to our phone through Telegram, so that we can reply; Telegram may hold it on servers outside the UAE. They are not sold, rented or added to any list, and no marketing platform receives them. Emails you send us pass through our mail forwarding service (ImprovMX) to our mailbox at Google. Email to support@vlanit.com also goes to Amazon Web Services in the United States, which keeps a copy for 30 days and turns it into a support ticket in our portal.

How long, and how to delete

Form submissions are kept for twelve months from the last contact, then deleted. Write to support@vlanit.com at any time to have your record deleted earlier, to see what is held, or to withdraw consent; withdrawal stops any further contact. Aggregate statistics contain no personal record to delete.

CRM connectors

Our CRM connectors link a company’s VLANit phone system with its CRM: VLANit PBX by VLANit for Kommo, VLANit PBX for Zoho CRM, and VLANit PBX for Bitrix24 and for Salesforce. The call data in them belongs to that company. The company is the controller and we are its processor: we process the data only on the company’s instructions, under our data processing agreement with it.

What a connector handles. For each call: the caller’s and the called number, the time and length, the line and extension, the CRM user who took or made the call, the CRM record it was logged on, the result, and a link to its recording. For a number the CRM does not know, it creates a lead or contact named after the number. To work, it keeps the company’s CRM account id and the authorisation the company gave in its CRM.
What it does not keep. Recordings stay on the company’s phone system. When someone plays one in the CRM, it is streamed through our server and not stored. In Bitrix24 the company may turn on a recording copy; a copy then goes into its own Bitrix24. Call transcripts are off. If a company turns them on in writing, its own phone system makes them, the connector writes the text into the CRM and then deletes its own copy. We read no CRM data beyond the records, users and tasks the calls need.
Where it runs. Today Kommo and Salesforce run on our server in Germany (Hetzner, Nuremberg). Bitrix24 and Zoho CRM run on our server in the UAE (Microsoft Azure, UAE North) since 30 October 2026; their earlier data stays on our server in Germany as a fallback until 13 November 2026, then it is deleted. Call events for all four pass through our server in Germany, which also answers at integrations.vlanit.com. We update this notice before a connector moves. The company instructs this transfer in our data processing agreement with it, which binds us and Hetzner to protection at least equal to the PDPL (Art 23). The calls a connector writes are stored in the company’s CRM like any other record, in its CRM provider’s data centre, under the company’s own contract with that provider. If a Bitrix24 company turns on the recording copy, the copy is stored in its Bitrix24 the same way.
How long. Call details are deleted 30 days after the call. A call event that could not be delivered to the CRM is kept up to 90 days so that it can be sent again. Daily copies of the connector’s database keep call details for up to 14 more days. Our logs show phone numbers by their last 3 digits. When a recording is played, the log keeps the listener’s network address and browser. Logs are kept for 14 days.
Security. Every connection over the internet is encrypted: with TLS (version 1.3 wherever the other side supports it) and, between our servers and the phone systems, with WireGuard. Recording links are signed and can be revoked. We store no CRM passwords, only the access tokens each CRM issues to us.
When the company disconnects. When a company removes the connector, our access to its CRM ends at once. We delete its stored call details within 10 working days of its request or the end of the service, and our copies follow within 30 days. On request we also delete the call details we hold for a phone number. Records already written stay in its CRM, under its control.
Questions. If your number or calls are in a company’s CRM, ask that company first; we help it answer. About the connectors themselves: support@vlanit.com. Report a security issue to the same address. Support for the Kommo integration: vlanit.com/integrations/kommo.

Your rights

Under the PDPL you may ask us for a copy of your data, also in a machine-readable form; have it corrected or deleted; have its use restricted while a dispute is open; object to its use, including for direct marketing; and withdraw a consent at any time, as easily as you gave it. Write to support@vlanit.com. We may ask you to confirm who you are, and we answer within 30 days. If your data is in a company’s CRM, that company decides on your request; we help it. You may also complain to the UAE Data Office, now part of the Artificial Intelligence and Data Authority.

Changes

If this notice changes, the date at the top changes with it. The consent wording on the form carries its own version, which is stored with each submission.