Privacy Policy

Last updated · 11 November 2026

This policy explains what personal data Veturo collects through this website, why we collect it, and the rights you have over it. It covers the website only. Data processed on the Veturo fleet platform is governed by the service agreement signed with each customer.

1. Who we are

Veturo provides GPS fleet tracking: devices, a live platform, installation and support. The controller of personal data collected through this website is Gradac Trade Mirjana Plazinić PR, Vukašina Ignjatovića 14/2, 32000 Čačak, Serbia, company registration number 66477436, tax number 112971677 (contact: info@veturo.io). Any question or request regarding your data can be sent to that address.

2. What we collect

Requests sent through the contact form: company name, your name, email, phone (optional), fleet size and industry. A request from our ad landing page asks for your name, company, phone, fleet size and city. You provide this data yourself through the form.

Attribution: the form records which campaign or link brought you to the site (UTM parameters, the click ID of a Google or Meta ad and the referring page), so we know which of our channels work. This is stored with your request, not used to profile you.

Preferences: one functional cookie remembers your language choice for up to one year. It stores a preference, not an identity. Cookies that measure visits and ads (Google Analytics, Google Ads and the Meta Pixel) are set only if you accept them.

Technical logs: like almost every website, our hosting infrastructure keeps short-lived technical logs (such as IP address and time of request) for security and troubleshooting.

3. Why we process it

To answer your request and prepare a pilot, offer or demo: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR; Article 12 of the Serbian Personal Data Protection Act, ZZPL).

To keep the website working and secure: our legitimate interest (Article 6(1)(f) GDPR).

To measure visits and ads, and to show you our ads on Facebook and Instagram, if you accept this in the cookie notice: your consent (Article 6(1)(a) GDPR; Article 12 ZZPL), which you can withdraw at any time through the cookie settings in the footer.

We do not sell personal data, and we use it for ads only with your consent.

4. Who processes it for us

Analytics and ad measurement: if you accept cookies, Google Analytics 4 (Google Ireland Limited) processes your visit as our processor, and if you came through a Google ad, Google Ads links your visit to that click to measure the ad. IP addresses are truncated, Google Signals is switched off, and the data is not used for personalised ads. If you do not accept, none of this data is collected. Google may also process data in the USA, under the standard contractual clauses (SCC). See the Cookie Policy.

Meta Pixel: if you accept cookies, Meta Platforms Ireland Limited learns that you visited our site and whether you came through our ad on Facebook or Instagram, sent a request or contacted us. From this data Meta also builds for us an audience of our site's visitors, to whom we show our ads on Facebook and Instagram; a visitor stays in it for at most 180 days after their last visit. For collecting and passing on this data, Meta and we are joint controllers; Meta then processes it as an independent controller, under its own privacy policy, and may transfer it to the USA. If you do not accept, the Meta Pixel does not load.

E-mail: Resend (Plus Five Five, Inc., USA) delivers your request to our inbox and sends the e-mails you ask for (confirmation, price list), from its region in Ireland, under a data processing agreement and the standard contractual clauses (SCC).

Hosting: this website runs on Hetzner Online GmbH servers in Helsinki (Finland).

For the fleet platform we also use Hetzner (servers in Germany and Finland), Backblaze (encrypted backups in the EU), Mapbox (maps), LocationIQ (backup maps and addresses), 1NCE (SIM cards in the devices), Google Firebase (push notifications and app crash reports) and the OpenStreetMap Foundation (address search in the Places editor). Details and safeguards are in the Platform Privacy notice and the DPA.

5. How long we keep it

Form requests: as long as needed to respond and follow up, and no longer than 12 months after our last contact, unless we enter into a contract, in which case the data becomes part of the customer relationship.

Preference cookie: up to 12 months, or until you change or delete it.

6. Your rights

You can request access to your data, correction, deletion, restriction of processing, data portability, and you can object to processing based on legitimate interest.

Write to info@veturo.io. We respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik); in the EU, your local data protection authority.

7. Data from the fleet platform

Vehicle-tracking data processed on the Veturo platform is governed by the service agreement and the data-processing agreement (DPA) we sign with each customer. As part of onboarding, employers receive a ready-made employee notification template (GDPR / ZZPL).

8. Changes to this policy

If this policy changes, we update the date at the top of this page. Substantive changes will be clearly noted here.