Roles
When we operate a client's social media, campaigns or forms, the client is the controller of their contacts' data and Vero 8 acts as processor, handling data according to the instructions received.
Subject matter and duration
Processing is limited to what is necessary to perform the contracted service and lasts as long as the contract.
Types of data
| Category | Examples |
|---|---|
| Contact | Name, email and phone sent by form or message |
| Interaction | Comments, direct messages and replies on social media |
| Audience | Aggregated campaign data provided by the advertising platforms |
Security
- Access restricted to the people who need it to carry out the work.
- Two-factor authentication on the accounts that offer it.
- Return or deletion of the data at the end of the contract, as instructed by the client.
Sub-processors
We use third-party platforms such as Meta, Google and hosting services that are necessary to the work. The client acknowledges this use when contracting the service.
Incidents
In the event of a security incident that may pose a risk to data subjects, we notify the client without delay so they can assess reporting to the National Data Protection Authority and to the data subjects.
Data subject rights
Data subject requests received by us are forwarded to the controlling client. We provide reasonable support so they can respond within the legal deadline. Last reviewed on 13 October 2026.