GDPR Compliance
Last updated: December 18, 2024
1. Introduction
GenerateQR is committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements and your rights under this regulation.
2. Data Controller
The data controller for personal data collected through GenerateQR is:
Mithril Ventures OÜ
Registry code: 16583624
Address: Nurmiku tn 7, Liikva küla, 76921 Harku vald, Harju maakond, Estonia
Contact for data protection inquiries: info@generateqr.eu
3. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract: Processing necessary to fulfill our service agreement with you
- Consent: When you explicitly agree to specific processing activities
- Legitimate Interest: For business purposes that don't override your rights
- Legal Obligation: When required by applicable laws
4. Your GDPR Rights
Under GDPR, you have the following rights:
Right to Access
Request a copy of your personal data we hold
Right to Rectification
Request correction of inaccurate personal data
Right to Erasure
Request deletion of your personal data ("right to be forgotten")
Right to Restrict Processing
Request limitation of processing your data
Right to Data Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interests
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Account data is retained while your account is active. Upon account deletion, personal data is removed within 30 days, except where legal retention requirements apply.
6. International Data Transfers
When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by the European Commission
- Binding Corporate Rules where applicable
7. Data Security Measures
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication mechanisms
- Employee training on data protection
- Incident response procedures
8. Exercise Your Rights
To exercise any of your GDPR rights, please contact us:
Mithril Ventures OÜ
Registry code: 16583624
Address: Nurmiku tn 7, Liikva küla, 76921 Harku vald, Harju maakond, Estonia
Email: info@generateqr.eu
You can also exercise certain rights through your account settings. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority (in Estonia: Andmekaitse Inspektsioon).