A client calls, leaves a voicemail with his name and number.
A vendor calls, leaves account information and address information. This call is also transcribed and sent via email.
The above are common communications left to individual employees' voicemail. Do these fall under GDPR protection laws, and how are they to be handled?
I understand when a consumer calls, they are informed that call may be recorded, but with the above type of communication is this implicitly assumed?