Privacy Policy — Telfa PBX Integration
Privacy Policy of the application Telfa PBX Integration
Effective: 3 November 2026 · Provider: vJednom s.r.o., Jana Palacha 363, Zelené Předměstí, 530 02 Pardubice, Czech Republic, registered with the Regional Court in Hradec Králové, section C, insert 52328, IČO 07960786
Introduction
vJednom s.r.o. provides the Bitrix24 application Telfa PBX Integration (the "Application"). This policy applies to the Application.
The software connects your Bitrix24 portal with your own Telfa account.
This policy describes personal data processed to run that software. It says what we process, why, who else is involved, how long we keep it, and how to reach us.
The customer who owns the Bitrix24 portal is the controller of the CRM data. vJednom s.r.o. processes data for the integration.
We do not sell personal data. The public pages of this site do not use advertising. We measure visits only with your consent, using Google Analytics (see Cookies and local storage).
Data processed
| Source | Data | Purpose | Where it is stored, and for how long |
|---|---|---|---|
| App installation | Portal domain, portal id, name and email of the installing user, Bitrix user id, admin flag, language | Running the app, support, licence and billing records | Our server for the life of the app. The licence and billing records stay after uninstall. |
| Bitrix24 sign-in | Access and refresh tokens | Calling the Bitrix24 API for your portal | Our server, encrypted. Deleted on uninstall. |
| Telfa | API key | Calling the Telfa API | Our server, encrypted. Deleted on uninstall. An encrypted copy is kept for at most 14 days only when Telfa does not answer, so our webhook addresses can still be removed. |
| Calls | Phone numbers, time, direction, duration, operator, result, call ids, recording | CRM activities, call cards, the call overview, and the list of calls that could not be written | Written into your Bitrix24 CRM. A sync record stays on our server for 400 days. The audio is passed through in memory to Bitrix24 and is not kept as a file. |
| SMS | Numbers, time, delivery, and for a failed write the message text | Sending from CRM, inbound SMS as a card or a task, the list of SMS that could not be written | A successful write is in your Bitrix24. A row that is only waiting to be written does not store the number or the text. A failed row keeps a sealed copy, including the text, until it is written or for 30 days after the first failure. |
| Contacts and companies | Names, phone numbers, Telfa contact id | Phone book sync. It is turned on for the portal on request through vJednom support. After that, the administrator chooses contacts, companies, or both. | While it is off, the card stays hidden and these details are not copied. Once it is on, Bitrix24 stays the source. The link is stored in Bitrix24 and the contact in your Telfa account. |
| Users and operators | Name, extension, mobile number (masked on screen), presence and break, working-time status | Pairing, the operator panel, redirect during a break | Our server, Telfa and Bitrix24. |
| Operational logs | Redacted request data and correlation ids | Support and security | Our server. Kept for the duration of our cooperation, and for at least one year. |
| Backups | Copies of the data above that is kept on our server | Recovery | Kept for the duration of our cooperation, and for at least one year. |
Purpose
We process the data to install and run Telfa PBX Integration on your Bitrix24 portal and to answer requests about that software.
For this application that also means:
- place and show calls, call cards and SMS in your CRM;
- keep the operator status in step with Telfa and Bitrix24 working time;
- tell you when a call or an SMS could not be written.
External services
These parties process data because the product needs them:
- Bitrix24 — your portal, in the region you chose for it.
- Cloudflare — proxy in front of
*.vjednom.cz, including this website. - Google Ireland Ltd. — Google Analytics 4, anonymous measurement of visits to these pages, only with consent.
- The server that runs the integration — vJednom s.r.o. operates it.
- Backups — copies of the data on that server. The table above states how long they are kept.
- Telfa (https://telfa.cz) — your PBX. Calls, SMS and the phonebook live in your Telfa account under your contract with Telfa.
Retention
How long each category is kept is described for the application. Uninstalling the app removes the Bitrix24 tokens held for that portal. CRM records already written stay in your Bitrix24.
Call and SMS content that was written into Bitrix24 stays in your portal under your own retention. What remains on our server is in the table above.
If Telfa does not answer during uninstall, an encrypted copy of the key is kept for at most 14 days, only so the webhook addresses we added can still be removed. The licence and billing records of the portal are kept after uninstall.
Security
Access to the integration is limited to operating it.
Tokens and the Telfa key are stored encrypted. Support staff do not ask you to send the API key. Recordings are not kept as a file library on our server: the audio needed for a CRM recording is passed through in memory and handed to Bitrix24.
Your rights
You can ask for access, correction, deletion, restriction, and a copy of your data, and you can object to processing that is based on a legitimate interest. Where the law gives you a right to complain, the authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů). Requests about CRM records in your portal go to your portal administrator first. Requests about this integration go to [email protected].
A personal-data breach
If a breach on our side is likely to put people at risk, we tell the controller and, when the law requires it, the supervisory authority.
Order form (Bitrix24 CRM)
The order page can load a Bitrix24 CRM form. The details you enter (company, contact and the subscription you choose) are stored in our Bitrix24 portal at vjednom.bitrix24.eu. Bitrix24 operates that portal as our processor. The other pages of this site do not load the form.
The form loads only with your consent: after you choose "Accept" in the cookie banner or click "Accept and show the form" on the order page. Without consent the page loads nothing from Bitrix24 servers and none of the items below is stored.
After consent the page loads scripts, styles and, if needed, fonts from Bitrix24 servers (cdn.bitrix24.eu, vjednom.bitrix24.eu and fonts.bitrix24.eu). Those servers receive the visitor's IP address.
Above the form there is a company search by name or company ID (IČO), and the form can fill in the company name, VAT ID and registered address from the company ID. The details come from ARES, the public Czech business register run by the Ministry of Finance of the Czech Republic. When you use the search or the prefill, the browser sends the name or company ID you entered directly to ARES (ares.gov.cz), so ARES also receives the visitor's IP address. Nothing is sent to ARES until you type into the search or the company ID field. The page sends no other form details to ARES and stores nothing there.
As soon as it loads, before anything is filled in, the form stores the entries b24_crm_guest_utm (where the visit came from, such as UTM campaign parameters) and b24_crm_guest_pages (the addresses, times and titles of the pages of this site you viewed) in the browser's local storage (localStorage). When the visit comes from a link on another website, it also stores b24_crm_guest_ref. When you start filling in the form, it writes markers named b24-analytics-counter-… to session storage (sessionStorage). After submission it may store b24-form-user and b24-form-field-stored-values (the contact details you entered, for next time) and the cookie b24_crm_guest_id. Bitrix24 uses these entries to attribute the order in our CRM. The page removes the order parameters from the in-app link (portal, plan, tenant_ref) from the address before the form loads, so they do not end up in these entries.
The local storage entries stay until you delete them. When you reject or withdraw consent, the page deletes the Bitrix24 entries stored for this site.
Cookies and local storage
These public pages set the cookie vj_lang when you choose CS or EN (a link with ?lang=cs or ?lang=en). The value is cs or en. It is sent as Path=/; Max-Age=31536000; SameSite=Lax; Secure — 31536000 seconds is one year. It is not used for tracking.
Your choice in the cookie banner is stored in the cookie vj_consent with the value accepted or rejected. It is sent as Path=/; Max-Age=15552000; SameSite=Lax; Secure — 15552000 seconds is 180 days. After that the banner is shown again. This cookie and vj_lang are strictly necessary for features you choose yourself and do not require consent (Section 89(3) of Czech Act No. 127/2005 Coll.).
With consent, the order page loads the Bitrix24 form, which stores the data described in the Order form section above. Rejecting does not affect the rest of the site; you can also order by email at [email protected]. You can change your choice at any time with the "Cookie settings" link in the footer of every page.
With your consent these pages also load Google Analytics 4 from Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland). The purpose is anonymous measurement of traffic: how many people open the pages and which pages they open. The browser then sends a request to Google's servers, so Google receives the IP address; Google Analytics 4 does not store the full IP address. The cookies _ga and _ga_* are written in the browser and last at most two years. If you reject consent or withdraw it later, the measurement does not load and these cookies are deleted.
Changes
A new version of this policy is published at this address with a new effective date.
Contact
vJednom s.r.o., Jana Palacha 363, Zelené Předměstí, 530 02 Pardubice, Czech Republic, registered with the Regional Court in Hradec Králové, section C, insert 52328, IČO 07960786, DIČ CZ07960786.