Last updated: 4 July 2026

Privacy Policy

This Privacy Policy explains how Verro Media d.o.o. ('Verro', 'we', 'us', or 'our') collects, uses, shares, and protects personal data when you visit our website at verrostudios.com and its subdomains (the 'Site'), book a call with us, or otherwise interact with our services (together, the 'Services').

We are the data controller within the meaning of Regulation (EU) 2016/679 (the General Data Protection Regulation, 'GDPR').

1. Who We Are

Verro Media d.o.o.
Medpotoki 16, 10000 Zagreb, Croatia
VAT: HR39758590967
Email: sales@verrostudios.com

2. What Data We Collect

Data you provide to us

When you book a call, fill in a form, contact us by email, or become a client, we may collect your name, email address, phone number, company or brand name, social media handles, the content of your messages, and any other information you choose to share with us.

Data collected automatically

Our Site is a static website. It does not set advertising cookies, does not use advertising trackers, and does not build advertising profiles of visitors. Our hosting and content delivery provider processes technical data that browsers transmit automatically, such as your IP address, browser type, device information, referring page, and the date and time of your visit, in server and security logs. This data is used to deliver the Site, keep it secure, and defend against abuse, and is retained only for a short period.

Data processed by embedded and linked services

Some parts of the Services are provided through third parties:

• Video hosting (Wistia). Videos on the Site are embedded from Wistia. When you load or play a video, Wistia receives technical data from your browser and may set cookies or similar technologies to deliver the video and measure playback. See Wistia's privacy policy for details.
• Booking and scheduling. When you click a call-to-action such as 'Go Viral', you are taken to our booking pages, where scheduling and customer relationship tools (including HighLevel and Calendly) process the details you enter in order to arrange and manage your appointment.
• Social media. The Site links to our Instagram profiles. If you follow those links, Instagram processes your data under its own privacy policy.

We do not knowingly collect any special categories of personal data (such as health data or data revealing political opinions) and ask that you do not send us such data.

3. Purposes and Legal Bases

We process personal data for the following purposes and on the following legal bases:

• Responding to inquiries and arranging calls — to communicate with you and take steps at your request before entering into a contract (Article 6(1)(b) GDPR).
• Providing our services to clients — to perform our contract with you (Article 6(1)(b) GDPR).
• Operating, securing, and improving the Site — our legitimate interests in running a functional, safe website (Article 6(1)(f) GDPR).
• Business communications and follow-ups with prospects and clients — our legitimate interest in developing our business (Article 6(1)(f) GDPR); where consent is required, we rely on your consent (Article 6(1)(a) GDPR).
• SMS messages. Where you have provided your phone number and consented to SMS communications, we may send you messages relating to your booking or our services (Article 6(1)(a) GDPR). You can opt out at any time by replying 'STOP'.
• Compliance with legal obligations, such as tax, accounting, and record-keeping requirements under Croatian law (Article 6(1)(c) GDPR).
• Establishing, exercising, or defending legal claims — our legitimate interests (Article 6(1)(f) GDPR).

Where we rely on consent, you may withdraw it at any time with effect for the future. Where we rely on legitimate interests, you have the right to object as described in Section 8.

4. Who We Share Data With

We do not sell personal data. We share personal data only with:

• Service providers (processors) that help us run the Services, such as website hosting and content delivery, video hosting, scheduling, customer relationship management, and email providers. These providers process data on our documented instructions under data processing agreements in accordance with Article 28 GDPR.
• Professional advisers and authorities, where required to comply with law, enforce our terms, or protect our rights.

5. International Transfers

Some of our service providers are located in, or process data in, countries outside the European Economic Area, including the United States. Where that is the case, we rely on appropriate safeguards under Chapter V GDPR, such as an adequacy decision of the European Commission (including, where applicable, certification under the EU-U.S. Data Privacy Framework) or the European Commission's Standard Contractual Clauses, together with additional measures where needed. You may contact us for more information about the safeguards used.

6. How Long We Keep Data

• Inquiries and prospect data: for as long as needed to handle your inquiry and for up to two years after our last contact, unless you ask us to delete it sooner.
• Client and contract data: for the duration of our relationship and thereafter for as long as required by Croatian tax, accounting, and statute-of-limitations rules.
• Technical logs: for a short period consistent with security practices.

When data is no longer needed, we delete or anonymise it.

7. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, and reliance on reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your data in line with recognised standards.

8. Your Rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data rectified and incomplete data completed;
• have your data erased in the circumstances set out in Article 17 GDPR;
• restrict processing in the circumstances set out in Article 18 GDPR;
• receive the data you provided to us in a structured, commonly used, machine-readable format and have it transmitted to another controller (data portability);
• object to processing based on our legitimate interests, and object at any time to processing for direct marketing;
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at sales@verrostudios.com. We may need to verify your identity before acting on a request, and we will respond within one month, extendable where permitted by law. Exercising your rights is free of charge except in the cases set out in Article 12(5) GDPR.

You also have the right to lodge a complaint with a supervisory authority, in particular the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), Selska cesta 136, 10000 Zagreb, Croatia, www.azop.hr, or the authority of the EU member state where you live or work.

9. Automated Decision-Making

We do not use your personal data for automated decision-making, including profiling, that produces legal or similarly significant effects on you.

10. Children

The Services are intended for persons who are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

11. Cookies

The Site itself does not set cookies. Embedded third-party content, such as Wistia video players, may set cookies or use similar technologies when you interact with it, as described in Section 2. You can control and delete cookies through your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be published on this page with its 'Last updated' date. If changes are material, we will take reasonable steps to bring them to your attention.

13. Contact

For any questions about this Privacy Policy or our handling of personal data, contact:

Verro Media d.o.o.
Medpotoki 16
10000 Zagreb, Croatia
sales@verrostudios.com