GDPR Notice
Ultimo aggiornamento: 30 maggio 2026
Under the EU General Data Protection Regulation (GDPR), as data controller we explain how your personal data is processed.
1. Data controller
Your personal data is processed by QuvtyQR (data controller) within the scope described below. Contact: [email protected].
2. Data we process and purposes
- Identity/contact data: Account creation and service delivery.
- Transaction security data: IP and session logs — security and abuse prevention.
- Customer data: Name and phone collected from businesses' customers for orders/reservations.
3. Legal basis
We process your data on the bases of performance of a contract, compliance with legal obligations and our legitimate interests (Art. 6 GDPR).
4. International transfers
Where data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses with our infrastructure and payment providers.
5. Your rights (GDPR Art. 15–22)
- Access your personal data and obtain a copy,
- Rectify inaccurate data or complete incomplete data,
- Erase your data (‘right to be forgotten’) and restrict processing,
- Data portability, and object to processing — including lodging a complaint with your supervisory authority.
6. Exercising your rights
To exercise your rights, contact [email protected]. We respond within one month at the latest.