Privacy Policy
Last updated: 10 August 2026
1. Data controller and system owner
The owner of the Veruno system and the controller of personal data collected through veruno.app is Sendormeco Holding sp. z o.o., ul. Złota 75a/7, 00-819 Warsaw, Poland, registered in the Polish National Court Register (KRS) under number 0000906110, VAT ID (NIP) 525-286-64-57, REGON 389194801.
Data protection contact: kontakt@veruno.app. The controller has not appointed a data protection officer — requests are handled directly at that address.
2. What this policy covers
This policy describes how we process data on the veruno.app website (the product pages and the contact form). Data that restaurants using Veruno enter into the application itself — including data about their guests — is processed by us as a data processor, on that restaurant's instructions and under a data processing agreement with it. The restaurant remains the controller of that data and is responsible for informing its own guests.
3. What data we collect
- Contact form: full name, restaurant name (optional), email address, phone number (optional), message content and the language the enquiry was sent in.
- Website analytics: Google Analytics 4 — only after you accept the cookie banner. We collect aggregated, pseudonymised data on how the site is used (pages visited, time on site, approximate location, device and browser type), with IP anonymisation enabled.
- Technical data: standard web server logs (IP address, date and time of the request, page requested, user agent) recorded automatically for security and diagnostics.
We do not collect special categories of data (Article 9 GDPR) and never ask for them in the form — please do not include anything in your message beyond what we need in order to reply.
4. Purposes and legal bases
- Answering your enquiry and following up on it — Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and Article 6(1)(f) GDPR (legitimate interest in handling correspondence and product enquiries).
- Website analytics (Google Analytics) — Article 6(1)(a) GDPR (consent given in the cookie banner). Declining consent does not restrict access to any content on the site.
- Security, diagnostics and abuse prevention (server logs, spam protection on the form) — Article 6(1)(f) GDPR.
- Establishing, exercising or defending legal claims — Article 6(1)(f) GDPR.
5. How long we keep data
- Contact form correspondence — for as long as it takes to handle your enquiry and any follow-up about working together, and no longer than 24 months from the last contact; if a contract is signed, for its duration and the applicable limitation period.
- Server logs — no longer than 12 months, after which they are rotated out or deleted.
- Google Analytics data — per the retention setting in GA4, by default 14 months from the user's last activity.
- Your cookie choice — until you clear this site's data in your browser.
6. Recipients of the data
We share data only with the providers we need in order to run the site, each under a data processing agreement:
- Hetzner Online GmbH (Germany) — hosting for the server running the site and its backups.
- Google Ireland Ltd. / Google LLC — Google Analytics 4, only after you give consent.
- Brevo (Sendinblue SAS, France) — outgoing mail server used to deliver contact form messages.
- Cloudflare, Inc. — DNS for the veruno.app domain.
Data may also be disclosed to public authorities where they request it on a legal basis. We do not sell data and do not share it with third parties for their own marketing purposes.
7. Transfers outside the EEA
The website, its email and its backups run on infrastructure inside the European Union. The exceptions are Google Analytics and DNS, whose providers may also process data in the United States. Those transfers rely on the European Commission's adequacy decision (EU–U.S. Data Privacy Framework), backed by standard contractual clauses. If you decline analytics cookies, no data about you reaches Google Analytics at all.
8. Your rights
You have the right to access your data, to rectify it, erase it, restrict its processing, to data portability, and to object to processing based on legitimate interest. You can withdraw your analytics consent at any time without affecting the lawfulness of processing before withdrawal — just clear this site's data in your browser settings. We handle requests sent to kontakt@veruno.app without undue delay and within one month at the latest. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw) or with the supervisory authority in your country of residence.
9. Cookies and browser storage
The site itself uses no cookies to function. Your choice from the banner is saved in your browser's local
storage (the veruno-consent key) — without it, the banner would reappear on every visit.
Only after you click "Accept" do we load the Google Analytics 4 script, which sets its own cookies
(_ga and _ga_<id>, valid for up to 2 years) used to distinguish sessions and
users. Until then the script is not downloaded at all, and consent defaults to denied under Google Consent
Mode v2.
10. Profiling and automated decisions
We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.
11. Is providing data required?
Filling in the form is voluntary, but your name, email address and message are needed for us to reply — without them the enquiry cannot be submitted. The remaining fields are optional.
12. Changes to this policy
If the way we process data changes, we will update this document and the date at the top of it. The current version is always available at veruno.app/en/privacy-policy.html.
13. Contact
For anything related to personal data, write to kontakt@veruno.app or by post: Sendormeco Holding sp. z o.o., ul. Złota 75a/7, 00-819 Warsaw, Poland.