Privacy Policy
1. General information
This Privacy Policy describes how Verge — Digital Studio (hereinafter: "Verge", "we", "us", "our") collects, uses, stores and protects the personal data of users of this website.
This Policy applies to all data that Verge collects through the website madebyverge.com and through other communication with users and clients.
Data controller
NOVA DIGITAL, obrt za usluge, vl. Ana Matković (sole proprietorship; brand: Verge — Digital Studio)
Business owner: Ana Matković
OIB (tax ID): 09241109410
MBO (business reg. no.): 99303647
Registered seat: Mostarska 46, 21000 Split, Croatia
Office: Ul. Mejaši 51, 21000 Split, Croatia
Email: info@madebyverge.com
Phone: +385 21 770 726
By using the Verge website, you accept the terms of this Privacy Policy.
2. What data we collect
Verge collects the following categories of personal data:
2.1. Data you provide explicitly
Through the contact form, booking a consultation or direct communication (email, phone):
- First and last name
- Email address
- Phone number (optional)
- Company or business name (if applicable)
- Information about your project and business that you voluntarily provide
- The content of the message you send us
2.2. Data collected automatically
When you visit the site, we automatically collect the following technical data:
- IP address
- Browser type and version
- Device operating system
- Date and time of visit
- Pages you visited
- The source you came from (referrer)
- Duration of visit
Part of this data is collected via cookies (Google Analytics), and only after your consent. Regardless of consent, we also run our own cookieless traffic measurement, described in section 2.3. For details, see the Cookie Policy.
2.3. Cookieless traffic measurement
So that we know how much each page is read and what visitors find useful, we keep our own visit statistics. It sets no cookies and stores nothing on your device, so we do not ask for consent. We record only:
- the type of event (page view or submitted inquiry)
- the page path, without the query string
- the host you arrived from (e.g. “google.com”), never the full URL
- a daily visitor digest and the time of the event
We do not store your IP address. It exists only for the duration of the request and is used to compute an irreversible daily digest, together with a secret key we rotate every 24 hours. Because of that rotation, the same visitor cannot be linked tomorrow to today, so we do not track you over time or across other websites. To recognise the source of a visit we read the previous-page value the browser sends on its own, and keep only the host from it.
The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in understanding how the site is used. The data is not shared with third parties and is not used for advertising. You may object to this processing at info@madebyverge.com.
3. Purpose of data processing
We process your personal data solely for the following purposes:
4. Who has access to your data
We do not sell, share or transfer your personal data to third parties for marketing purposes.
Access to your data is held by:
- The business owner (Ana Matković) — as data controller
- Technical service providers — strictly to the extent necessary:
- Hosting: Vercel Inc., USA
- Email (form delivery): Resend, Inc., USA
- Email (mailbox): Google Ireland Ltd (Google Workspace)
- Database, chatbot & traffic statistics: Supabase, Inc., USA
- Analytics (with consent): Google LLC (Google Analytics)
- Calendar (bookings): Cal.com, Inc., USA
- Accounting service — for meeting tax and legal obligations
- Competent authorities — only on the basis of a legal order
Data transfers outside the EU
Some technical providers (Google, Vercel, Resend, Supabase, Cal.com) are based outside the EU (mostly the USA). Data transfers to the USA are carried out on the basis of the EU-U.S. Data Privacy Framework or Standard Contractual Clauses, which ensure an adequate level of protection.
5. How long we keep data
After the period expires, the data is permanently deleted or anonymized.
6. Your rights
Under the GDPR and Croatian law, you have the following rights:
6.1. Right of access
You have the right to obtain confirmation as to whether we process your personal data and a copy of that data.
6.2. Right to rectification
You have the right to request the correction of inaccurate data or the completion of incomplete data.
6.3. Right to erasure (“right to be forgotten”)
You have the right to request the deletion of your data when it is no longer needed for the purpose of processing or when you withdraw your consent.
6.4. Right to restriction of processing
You have the right to request restriction of processing under certain conditions.
6.5. Right to data portability
You have the right to receive your data in a structured, machine-readable format.
6.6. Right to object
You have the right to object to processing based on legitimate interest.
6.7. Right to withdraw consent
You can withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.
How to exercise your rights
To exercise any of these rights, contact us at:
- Email: info@madebyverge.com
- Post: Ul. Mejaši 51, 21000 Split, Croatia
We respond within the statutory period of 30 days from receipt of the request.
Right to lodge a complaint with the supervisory authority
If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP):
- Address: Selska cesta 136, 10 000 Zagreb
- Email: azop@azop.hr
- Web: www.azop.hr
7. Voice AI assistant
A voice AI assistant of Verge — Digital Studio (the data controller) is available on our website and at the phone number +385 21 770 726. By talking to the assistant, you accept the following data processing:
- What is processed: your voice is processed in real time for speech recognition; a written transcript of the conversation is stored (the audio recording is not stored). If you choose to leave your name, phone number or email during the conversation, we store that data as well.
- Purpose: answering questions about our services and contacting you back when you request it.
- Legal basis: legitimate interest (answering inquiries) and your consent (when you leave contact details so we can reach you).
- Processors: speech is processed by Soniox (speech recognition and synthesis, EU region) and OpenAI (text processing); data is stored on our server in the EU. The data is not used to train AI models and is not sold to third parties.
- Retention: transcripts and contact details are kept for a maximum of 12 months, or until the purpose is fulfilled or you request deletion.
- Your rights: you can request access, correction or deletion of your data at any time at info@madebyverge.com. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
8. Data security
Verge applies appropriate technical and organizational measures to protect your personal data, including:
- SSL encryption (HTTPS) on all pages
- Secure data storage with vetted providers
- Restricted access to data (authorized persons only)
- Regular security updates of systems
- Data backups
Although we take all reasonable protective measures, we cannot guarantee the absolute security of data transmission over the internet.
9. Cookies
Our site uses cookies. For details on the types of cookies, purposes and management options, see the Cookie Policy.
10. Minors
Our services are not intended for persons under 16 years of age. We do not knowingly collect personal data of minors without the consent of a parent or guardian.
11. Changes to this Policy
Verge reserves the right to amend this Privacy Policy. We will notify you of significant changes via the website or by email (if you are a subscriber).
The current version is always available on this page. The date of the last change is stated at the top of the document.
12. Contact
For any questions regarding this Privacy Policy:
Verge — Digital Studio
Email: info@madebyverge.com
Phone: +385 21 770 726
Address: Ul. Mejaši 51, 21000 Split, Croatia