Last updated: 22 September 2026

Privacy Policy

This Privacy Policy explains how Verro Media d.o.o. ('Verro', 'we', 'us', or 'our') collects, uses, shares, and protects personal data when you visit our website at verrostudios.com and its subdomains (the 'Site'), book a call with us, or otherwise interact with our services (together, the 'Services').

We are the data controller within the meaning of Regulation (EU) 2016/679 (the General Data Protection Regulation, 'GDPR').

1. Who We Are

Verro Media d.o.o.
Medpotoki 16, 10090 Zagreb, Croatia
VAT: HR39758590967
Email: sales@verrostudios.com

2. What Data We Collect

Data you provide to us

When you book a call, fill in a form, contact us by email, or become a client, we may collect your name, email address, phone number, company or brand name, social media handles, the content of your messages, and any other information you choose to share with us. Booking information also includes your selected appointment time and time zone. Providing information is voluntary, but we need the required contact and booking fields to respond or arrange a meeting.

Data collected automatically

The main website does not include our own advertising trackers or analytics scripts. Our hosting and content delivery provider processes technical data that browsers transmit automatically, such as your IP address, browser type, device information, referring page, and the date and time of your visit, in server and security logs. This data is used to deliver the Site, keep it secure, and defend against abuse, and is retained only for a short period.

Data processed by embedded and linked services

Some parts of the Services are provided through third parties:

• Cal.com scheduling. The main website embeds Cal.com. Loading the calendar sends technical browser information to Cal.com; submitting a booking sends your contact details, appointment choices and booking answers. Cal.com processes attendee data on our behalf, and connected calendar or meeting services receive the details needed to arrange the meeting. The embed also forwards page query parameters. See Cal.com’s privacy policy.
• Separate booking and campaign pages. Our existing booking funnels may use HighLevel and Calendly, and existing video pages may use Wistia. Those services process the details you submit or technical information needed to provide their features. These integrations are separate from the Cal.com calendar on the main website; check the notices on the page you use.
• Social media. Client profile cards on the main website are locally hosted images, not live Instagram embeds. If you follow a social-media link from another Verro page, the destination platform processes your data under its own privacy policy.

We do not knowingly collect any special categories of personal data (such as health data or data revealing political opinions) and ask that you do not send us such data.

3. Purposes and Legal Bases

We process personal data for the following purposes and on the following legal bases:

• Responding to inquiries and arranging calls — to communicate with you and take steps at your request before entering into a contract (Article 6(1)(b) GDPR). For inquiries made on behalf of a company, we rely on our legitimate interest in handling business communications (Article 6(1)(f) GDPR).
• Providing our services to clients — to perform our contract with you (Article 6(1)(b) GDPR).
• Operating, securing, and improving the Site — our legitimate interests in running a functional, safe website (Article 6(1)(f) GDPR).
• Business communications and follow-ups with prospects and clients — our legitimate interest in developing our business (Article 6(1)(f) GDPR); where consent is required, we rely on your consent (Article 6(1)(a) GDPR).
• SMS messages. Where you have provided your phone number and consented to SMS communications, we may send you messages relating to your booking or our services (Article 6(1)(a) GDPR). You can opt out at any time by replying 'STOP'.
• Compliance with legal obligations, such as tax, accounting, and record-keeping requirements under Croatian law (Article 6(1)(c) GDPR).
• Establishing, exercising, or defending legal claims — our legitimate interests (Article 6(1)(f) GDPR).

Where we rely on consent, you may withdraw it at any time with effect for the future. Where we rely on legitimate interests, you have the right to object as described in Section 8.

4. Who We Share Data With

We do not sell personal data. We share personal data only with:

• Service providers (processors) that help us run the Services, such as website hosting and content delivery, video hosting, scheduling, customer relationship management, and email providers. These providers process data on our documented instructions under data processing agreements in accordance with Article 28 GDPR.
• Professional advisers and authorities, where required to comply with law, enforce our terms, or protect our rights.

5. International Transfers

Some of our service providers are located in, or process data in, countries outside the European Economic Area, including the United States. Cal.com states that it processes data in the United States. Where that is the case, we rely on appropriate safeguards under Chapter V GDPR, such as an adequacy decision of the European Commission (including, where applicable, certification under the EU-U.S. Data Privacy Framework) or the European Commission's Standard Contractual Clauses, together with additional measures where needed. You may contact us for more information about the safeguards used.

6. How Long We Keep Data

• Inquiries and prospect data: for as long as needed to handle your inquiry and for up to two years after our last contact, unless you ask us to delete it sooner.
• Client and contract data: for the duration of our relationship and thereafter for as long as required by Croatian tax, accounting, and statute-of-limitations rules.
• Technical logs: for a short period consistent with security practices.

When data is no longer needed, we delete or anonymise it.

7. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, and reliance on reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your data in line with recognised standards.

8. Your Rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data rectified and incomplete data completed;
• have your data erased in the circumstances set out in Article 17 GDPR;
• restrict processing in the circumstances set out in Article 18 GDPR;
• receive the data you provided to us in a structured, commonly used, machine-readable format and have it transmitted to another controller (data portability);
• object to processing based on our legitimate interests, and object at any time to processing for direct marketing;
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at sales@verrostudios.com. We may need to verify your identity before acting on a request, and we will respond within one month, extendable where permitted by law. Exercising your rights is free of charge except in the cases set out in Article 12(5) GDPR.

You also have the right to lodge a complaint with a supervisory authority, including the Croatian Personal Data Protection Agency (AZOP), or the authority of the EU member state where you live or work. AZOP’s website provides its current contact details and complaint procedure.

9. Automated Decision-Making

We do not use your personal data for automated decision-making, including profiling, that produces legal or similarly significant effects on you.

10. Children

The Services are intended for persons who are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

11. Cookies

The main website does not add advertising or analytics cookies. The Cal.com calendar may use cookies or similar storage for scheduling, preferences and security. Cal.com describes its app cookies in its privacy policy. Other booking or video pages may use the third-party technologies described in Section 2. You can manage cookies through your browser settings; blocking necessary cookies may affect booking features. Where non-essential cookies are used, consent is required before they are activated.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be published on this page with its 'Last updated' date. If changes are material, we will take reasonable steps to bring them to your attention.

13. Contact

For any questions about this Privacy Policy or our handling of personal data, contact:

Verro Media d.o.o.
Medpotoki 16
10090 Zagreb, Croatia
sales@verrostudios.com