Privacy and your data

Who is responsible?

The controller for this website and client accounts is AVI Media, obrt za digitalni marketing i kreiranje sadržaja, Susedsko polje 33h, Zagreb, Croatia. For questions and requests about personal data, contact info@avi-media.com. This notice applies to avi-media.com and www.avi-media.com. Updated: 24 September 2026.

What information do we use and why?

When you contact us, we process your email address, your name if supplied, and your message to respond and discuss a potential collaboration. For enquiries before entering a contract, the legal basis is taking steps at your request before entering that contract. For other business communication, we rely on our legitimate interest in responding to enquiries and maintaining business relationships.

Your client account and results

The client portal uses your email address, account identifier, authentication information, assigned brand and access permissions. AVI Media creates accounts; public registration is not available. Processing supports delivery of the contracted service. Identity checks, access controls and technical records support our legitimate interest in protecting accounts and data. Your email and authentication information are necessary to use the portal. Without them, we cannot provide access.

Information in reports

The portal displays advertising results from sources connected to a particular client. Access to each client workspace is restricted by account permissions; the AVI Media administrator has access to manage the service. Aggregate business metrics are not necessarily personal data. Where we process customer personal data on a client's behalf, the roles and obligations are covered by a separate processing arrangement. This notice does not replace that client's privacy notice.

Your browser, sign-in and cookies

Your browser stores your language preference and session information locally to keep you signed in. A session can refresh while the account remains valid, but may end when you log out, clear browser data or following a security change. Log out after using a shared device. The initial language is selected from supported browser language preferences; nationality is not inferred from an IP address.

Analytics and technical records

Optional marketing analytics are not enabled in this version of the website. Hosting and authentication services may process IP addresses, browser information, request times and outcomes to deliver the site, maintain security and troubleshoot errors. If we later enable optional analytics, we will request consent before loading it and provide a way to change your choice. The client portal and resources are excluded from the website's marketing tracking.

Who provides the technical services?

The site is published through OpenAI Sites and its hosting infrastructure. Supabase provides authentication, the database, private storage and processing of report requests. Resend delivers service messages, such as a password reset message when you request one. Google Sheets and Looker Studio are used for report sources and display. Creating a portal account does not subscribe you to a newsletter.

External links and embedded content

The call booking button opens Lemcal. Some reports use Google Looker Studio and guides may include YouTube videos. Opening an external page or loading embedded content connects your browser to that provider, which may receive your IP address and device information and apply its own policies and cookie settings. The privacy of a source Google document also depends on its separate sharing settings; signing into the portal does not change those settings.

Processing outside the European Economic Area

These providers operate internationally, so processing or access may involve countries outside the EEA. The applicable safeguard depends on the provider and contracted service, including adequacy decisions or standard contractual clauses where applicable. You can request information about the specific recipients and safeguards for your data at info@avi-media.com.

How long do we keep information?

We keep contact messages for as long as needed to handle the enquiry and related business communication. Client account information and permissions are retained while access to the contracted service is needed. When the need ends, we review deletion or anonymisation, except where retention is required by law or to establish, exercise or defend legal claims. Technical record and backup retention also depends on provider settings. You can remove locally stored browser information through your browser settings.

Your rights

Subject to the applicable conditions, you may request access, correction, erasure, restriction or portability. You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing. Send your request to info@avi-media.com; we may request proportionate identity verification to protect your data. You may complain to the Croatian Personal Data Protection Agency (AZOP) or another competent supervisory authority.

Automated decisions and changes

This portal does not make automated decisions with legal or similarly significant effects on users. If the purposes or methods of processing change, we will update this notice and, where required, notify users separately.

AZOP · European Commission: data protection