GDPR Compliance
QR Forge is committed to compliance with the General Data Protection Regulation (GDPR). Learn how we handle your personal data and the rights you have as a data subject.
Your Rights under GDPR
As a data subject in the EU, you have the following rights: the right to access your personal data; the right to rectification of inaccurate data; the right to erasure ("right to be forgotten") in certain circumstances; the right to restrict processing; the right to data portability; and the right to object to processing. You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.
Legal Basis for Processing
QR Forge processes personal data based on: your explicit consent where required; the necessity to perform our contract with you; compliance with legal obligations; the protection of vital interests; the performance of tasks in the public interest; and our legitimate interests in improving and securing our service. We do not process data on any basis without a valid legal justification.
Data Subject Requests
You have the right to request a copy of your personal data, request corrections, request deletion, or request restriction of processing. To exercise these rights, please contact our Data Protection Officer using the contact information provided in our Privacy Policy. We will respond to all requests within 30 days as required by GDPR, unless a longer period is necessary due to the complexity of your request.
Data Transfers
If your data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or your explicit consent. We do not transfer personal data to countries without an adequate level of data protection unless you have given explicit consent or other legal mechanisms apply.
Data Protection Officer
QR Forge has appointed a Data Protection Officer to ensure compliance with GDPR. If you have any concerns about how your data is being processed, you can contact our DPO directly through the contact information provided on this site.
Privacy by Design
We implement privacy by design principles throughout our service, minimizing data collection, using privacy-enhancing technologies, and conducting regular Data Protection Impact Assessments (DPIAs) for high-risk processing activities.