This is an English translation of the Slovak original. If the two versions differ, the Slovak version prevails.
Effective from September 25, 2026
This policy explains what personal data we process in connection with the website vernioapp.com and the Vernio service, why we do it, how long we keep the data, and what rights you have. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”) and Slovak Act No. 18/2018 Coll. on the Protection of Personal Data.
1. Who the controller is
Filip Brády
Place of business: Čergovská 7258/24, 080 01 Prešov, Slovakia
Company ID (IČO): 55 584 268
Tax ID (DIČ): 1082754090, VAT ID: SK1082754090 (registered under § 7a of the Slovak VAT Act)
Registered in the Trade Register of the District Office Prešov, No. 750-64905
Email: filip@vernioapp.com
We have not appointed a Data Protection Officer (DPO), as the GDPR does not require us to. Please send any questions about personal data directly to the email address above.
2. What data we process and why
2.1 Contact form and email
If you send us an inquiry through the contact form on the website, email us, or request an app demo, we process the data you provide: your name, email, phone number, business name and address, and the content of your message. Form submissions are stored in the website’s admin and also sent to us by email. We use them to reply to you, prepare a quote or demo, and schedule a meeting.
Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR), or our legitimate interest in replying to a message we received (Art. 6(1)(f) GDPR).
Retention: for the duration of the communication and no longer than 24 months after the last contact, unless it leads to a contract. Form submission records in the website admin are deleted on a rolling basis after no more than 12 months.
If you have consented to analytics cookies, Google Analytics records that the form was submitted (without its content) so that we know which sources our visitors come from (see section 2.5).
2.2 Reaching out to potential clients
Vernio offers its service to businesses (coffee shops, restaurants, bowling alleys, salons, fitness centers and similar). We occasionally contact businesses that might find our service useful with one email and no more than two follow-ups.
What data: the business name and address, the business’s contact email and phone number, links to its website and social media profiles, its public rating on Google Maps, and publicly available information about the business that our message refers to. If a business’s contact address is also the address of a specific individual (e.g. a sole trader), it is personal data.
Source: we obtain the data exclusively from publicly available sources: the business’s website, Google Maps and the business’s public social media profiles. We do not buy contact databases.
Purpose: offering our service to businesses and keeping a record of communication so that we never contact anyone repeatedly.
Legal basis: our legitimate interest in promoting our own services to businesses (Art. 6(1)(f) GDPR). We only contact addresses published for business purposes and send no more than three messages.
Retention: if you do not reply, we keep the data for no longer than 12 months after the last message. If you reply, section 2.1 applies.
How to make it stop: simply reply to any of our emails with the word “unsubscribe” or write to filip@vernioapp.com. We will not send you any further messages. We keep only your email address or domain on a suppression list, solely so that we do not contact you again in the future.
2.3 Links in our emails
Links to our website in our emails may contain parameters that identify the source of the visit (e.g. utm_source=email). These parameters do not identify any individual. If you have consented to analytics cookies, Google Analytics uses them to count how many visits came from emails.
2.4 Contractual relationship with clients
If you order our service, we process identification and contact data about you and your contact persons, billing data, and communication related to the contract.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations, in particular in accounting and tax (Art. 6(1)(c) GDPR).
Retention: for the duration of the contract; accounting records for 10 years under Slovak Act No. 431/2002 Coll. on Accounting; other data for no longer than 4 years after the contract ends, in case of possible legal claims.
2.5 Website visits, cookies and Google Analytics
Cookies are small text files that a website stores in your browser. We use them in two categories:
Necessary cookies keep the website working and remember your cookie consent choice. We set them without consent, because the website would not work properly without them (§ 109(8) of Slovak Act No. 452/2021 Coll. on Electronic Communications).
Analytics cookies are used by Google Analytics 4, which shows us how many people visit the website, which sources they come from, which pages they view and whether they submit the contact form. Google Analytics works with a device identifier, a truncated IP address, browser and device data, approximate location (country, city) and data about behavior on the website. We set these cookies only with your consent (Art. 6(1)(a) GDPR and § 109(8) of Act No. 452/2021 Coll.). Until you give consent, no analytics cookies are set.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| consent management tool cookie | vernioapp.com | stores your cookie choice | up to 12 months |
| _ga | distinguishes visitors for statistical purposes | 2 years | |
| _ga_* | maintains session state | 2 years |
Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. We keep data in Google Analytics for no longer than 14 months. More information: policies.google.com/privacy.
How to change or withdraw consent: at any time in the cookie settings on our website. You can also delete or block cookies in your browser settings. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.
Our web hosting provider automatically logs technical data on every visit (IP address, time, requested page, browser type) to keep the service running and protect it against attacks, based on legitimate interest (Art. 6(1)(f) GDPR). These logs are kept only for as long as necessary to ensure the operation and security of the website.
3. Who we share data with
We do not sell personal data. To run the service we use the following vendors, who process data on our behalf and on our instructions (processors):
- a web hosting and email service provider;
- a provider of artificial intelligence tools that we use to look up publicly available information about businesses and to draft messages: Anthropic, PBC, USA;
- an accounting service provider — for contractual relationships;
- Google Ireland Limited (Google Analytics) — only if you consent to analytics cookies.
We may also disclose data to public authorities where the law requires us to.
4. Transfers outside the EU
Some of our vendors (Anthropic, PBC and, for Google Analytics, Google LLC) are based in the USA. We transfer data to third countries only on the basis of safeguards under Chapter V of the GDPR, in particular the European Commission’s adequacy decision (EU-US Data Privacy Framework) where the recipient is certified, or standard contractual clauses approved by the European Commission.
5. Automated decision-making
We use software tools when selecting which businesses to contact. However, we do not make any decisions based solely on automated processing that would have legal effects on you or similarly significantly affect you, and we do not profile individuals.
6. Your rights
In connection with the processing of your personal data, you have the right:
- to access your data and obtain a copy,
- to have inaccurate or incomplete data corrected,
- to have your data erased if it is no longer needed or is being processed unlawfully,
- to restrict processing,
- to data portability for data you provided to us under a contract or consent,
- to object to processing based on legitimate interest; if you object to processing for direct marketing (outreach under section 2.2), we will stop using your data for that purpose immediately,
- to withdraw your consent at any time where processing is based on consent; withdrawal does not affect the lawfulness of processing before it.
To exercise your rights, email filip@vernioapp.com. We will respond without undue delay and within one month at the latest.
If you believe we are handling your data unlawfully, you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
7. Data of end users of our clients’ apps
For the apps we operate for our client businesses, the controller of their users’ personal data is the respective business, not us. We process that data as a processor, on the business’s instructions and under a data processing agreement. Information about the processing can be found in the privacy policy of the specific app, and you should exercise your rights with that business.
8. Security
We protect personal data with appropriate technical and organizational measures, in particular encrypted transmission (HTTPS, TLS for email), password-based restricted access and regular software updates.
9. Changes to this policy
We may update this policy, for example when our services or the law change. The current version is always published on this page with its effective date.