1. Who we are

QRSolutions is a service provided by Just-Solutions, a company registered in the Netherlands. We operate the QR code management platform available at this website. If you have any questions about this policy, please contact us at privacy@qr-solutions.online.

2. What data we collect

Account data: Username and email address provided during registration.
Usage data: QR code scan counts and, per scan, the IP address (stored in raw form), user-agent, device type, browser, operating system, and an approximate location derived from the IP address (country, city and coordinates) at the time of scanning. The raw IP address and precise location are anonymised after 2 years (see §4).
Payment data: Subscription and payment status. All card and bank payment details are processed exclusively by Mollie B.V. We do not store any card or payment credentials on our servers.
Technical data: Session refresh tokens stored in an HttpOnly cookie, and authentication state stored in your browser's local storage.

3. Purpose and legal basis

We process your data on the following legal bases under the GDPR:

Contract performance (Art. 6(1)(b)): To create and manage your account, process payments, and deliver the QR code service.
Legitimate interest (Art. 6(1)(f)): To analyse aggregate scan analytics and improve the service.
Legal obligation (Art. 6(1)(c)): To retain payment and invoice records as required by Dutch tax law.

4. Data retention

Account data: Retained as long as your account is active. Deleted within 30 days of account deletion request.
Scan analytics: Retained for 2 years, then aggregated and anonymised.
Payment and invoice records: Retained for 7 years as required by Dutch tax law.

5. Third-party processors

Mollie B.V. — payment processing. Data processed under Mollie's own privacy policy.
Google Ireland Limited (US parent Google LLC) — website analytics via Google Analytics 4. Runs cookielessly by default (anonymous, aggregate; IP anonymised); cookie-based analytics is enabled only if you opt in via the cookie banner. Data may be processed outside the EEA (including the USA) under the EU Standard Contractual Clauses. See our Cookie Policy.
Contabo GmbH (Germany) — hosting and infrastructure. Your account and scan data are stored on servers in the EU (Germany).
TransIP B.V. (Netherlands) — domain registration.
Email/SMTP — transactional email delivery (activation, password reset, invoices) via our own SMTP server on our Contabo VPS (Germany).
MaxMind, Inc. (USA) — geo-IP. Scan-location lookups run locally on our server using the GeoLite2 database; that database is periodically downloaded from MaxMind in the USA (relying on the EU-US adequacy decision / Standard Contractual Clauses). No scanner IP addresses are sent to MaxMind.
ALTCHA — privacy-friendly, self-hosted bot protection (proof-of-work) on authentication and scan forms. Verification runs entirely on our own servers; no data is sent to any third party and no cookie is set.

6. Your rights

Under the GDPR you have the following rights with respect to your personal data:

Access: Request a copy of the data we hold about you.
Rectification: Correct inaccurate data.
Erasure: Request deletion of your data (subject to legal retention requirements).
Portability: Receive your data in a machine-readable format.
Objection: Object to processing based on legitimate interest.

To exercise any of these rights, please email privacy@qr-solutions.online. We will respond within 30 days.

7. Contact

Data Controller: Just-Solutions, KvK 42024979, VAT NL005439088B10, Panna 3, 5126 DJ Gilze, the Netherlands.
Email: privacy@qr-solutions.online
Given the nature and scale of our processing we are not legally required to appoint a Data Protection Officer; please direct privacy queries to the address above.
The Service is not directed at children under 16 and we do not knowingly collect their personal data.
You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Privacy Policy