Privacy policy

NORDQR, S.L. informs you about its Privacy Policy regarding the processing and protection of personal data of users and clients that may be collected through browsing or contracting services via the Websites https://www.nordqr.com and https://app.nordqr.com.

In this regard, the Owner guarantees compliance with current regulations on the protection of personal data, reflected in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).

The use of the Website implies the acceptance of this Privacy Policy as well as the conditions included in the Legal Notice.


Identity of the Data Controller
  • Corporate Name: NORDQR, S.L.
  • Tax ID (NIF): B19427020
  • EU VAT Number: ESB19427020
  • Registered Office / Tax Address: Avenida de Carles III, 38. 1st Floor, Door 5. 08340 - Vilassar de Mar - Barcelona
  • Email: info@nordqr.com
  • Websites: https://www.nordqr.com, https://app.nordqr.com
  • Commercial Registry: Registered in the Commercial Registry of Barcelona, Volume 1000428431879, Folio 1, General Section of Companies, Sheet B-621511, 1st Inscription.
Principles applied in data processing

In the processing of your personal data, the Owner will apply the following principles that comply with the requirements of the new European data protection regulation:
  • Principle of lawfulness, fairness, and transparency: The Owner will always require consent for the processing of your personal data, which may be for one or more specific purposes about which you will be informed in advance with absolute transparency.
  • Principle of data minimization: The Owner will request only the data strictly necessary for the purpose or purposes for which it is requested.
  • Principle of storage limitation: The data will be kept for the time strictly necessary for the purpose or purposes of the processing. The Owner will inform you of the corresponding retention period according to the purpose. In the case of subscriptions, the Owner will periodically review the lists and delete those records that have been inactive for a considerable time.
  • Principle of integrity and confidentiality: Your data will be treated in such a way that its security, confidentiality, and integrity are guaranteed. You should know that the Owner takes the necessary precautions to prevent unauthorized access or improper use of the data of its users by third parties.
Collection of personal data

To browse https://www.nordqr.com and https://app.nordqr.com, you do not need to provide any personal data. The cases in which you do provide your personal data are the following:
  • When registering on the website.
  • When filling out the contact form.
Your rights

The Owner informs you that regarding your personal data you have the right to:
  • Request access to stored data.
  • Request rectification or erasure.
  • Request the restriction of its processing.
  • Object to the processing.
  • Request the portability of your data.
The exercise of these rights is personal and therefore must be exercised directly by the interested party, requesting it directly from the Owner. This means that any client, subscriber, or collaborator who has provided their data at any time can contact the Owner and ask for information about the data it has stored and how it was obtained, request the rectification of the same, request the portability of their personal data, object to the processing, restrict its use, or request the erasure of that data in the Owner's files.

To exercise your rights of access, rectification, erasure, portability, restriction, and objection, you must send an email to info@nordqr.com indicating the right you wish to exercise. Only in the event that there are reasonable doubts about your identity, the Owner may request additional information to confirm it.

You have the right to effective judicial protection and to file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency (AEPD), if you consider that the processing of personal data concerning you violates the Regulation.


Purpose of personal data processing

When you connect to the Website to send an email to the Owner or make a contract, you are providing personal information for which the Owner is responsible. This information may include personal data such as your IP address, first and last name, physical address, email address, phone number, and other information. By providing this information, you consent to your information being collected, used, managed, and stored by NORDQR, S.L., only as described in the Legal Notice and in this Privacy Policy.

The personal data and the purpose of the processing by the Owner vary according to the information capture system:
  • Registration form: The Owner requests the following personal data: First and last name, email address, and phone number.
  • Contact form: The Owner requests the following personal data: Name and email address.
  • The data you provide to the Owner will be located on Amazon AWS servers in Frankfurt.
There are other purposes for which the Owner processes your personal data:
  • To ensure compliance with the conditions set out in the Legal Notice and applicable law. This may include the development of tools and algorithms that help this Website ensure the confidentiality of the personal data it collects.
  • To support and improve the services offered by this Website.
  • To analyze navigation. The Owner collects other non-identifying data obtained through the use of cookies that are downloaded to your computer when you browse the Website, the characteristics and purpose of which are detailed in the Cookies Policy.
Under no circumstances will the Owner use the profiles of followers on social networks to send advertising individually.


Security of personal data

To protect your personal data, the Owner takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, improper access, disclosure, alteration, or destruction. The Website is hosted on AMAZON AWS in Frankfurt. The security of your data is guaranteed, as they take all the necessary security measures for it. You can check their privacy policy for more information.


Content from other websites

Pages on this Website may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if you had visited the other website. These Websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction using this code.


Cookies Policy

For this Website to work correctly, it needs to use cookies, which is information stored in your web browser. On the Cookies Policy page, you can consult all the information regarding the collection policy, the purpose, and the treatment of cookies. The digital menus generated for viewing by end diners at the establishments do not use tracking cookies or collect any type of personal data.


Legitimation for data processing

The legal basis for the processing of your data is: consent. To contact the Owner, subscribe to a newsletter, or make comments on this Website, you must accept this Privacy Policy.


Categories of personal data

The categories of personal data processed by the Owner are:
  • Identifying data.
Retention of personal data

The personal data you provide to the Owner will be kept until you request its erasure or until a reasonable time passes without access by you.


Recipients of personal data
  • Google Analytics is a web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States ("Google"). You will find more information at: https://analytics.google.com. Google Analytics uses "cookies", which are text files placed on your computer, to help the Owner analyze how users use the Website. The information generated by the cookie about the use of the Website (including your IP address) will be directly transmitted to and stored by Google on servers in the United States.
  • DoubleClick by Google is a set of advertising services provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States ("Google"). You will find more information at: https://www.doubleclickbygoogle.com. DoubleClick uses "cookies", which are text files placed on your computer and serve to increase the relevance of ads related to your recent searches. Google's Privacy Policy explains how Google manages your privacy regarding the use of cookies and other information.
You can also see a list of the types of cookies used by Google and its partners and all the information regarding their use of advertising cookies.


Web Navigation

When browsing https://www.nordqr.com and https://app.nordqr.com, non-identifying data may be collected, which may include IP address, geolocation, a record of how services and sites are used, browsing habits, and other data that cannot be used to identify you.

The Website uses the following third-party analysis services:
  • Google Analytics
  • DoubleClick by Google
The Owner uses the information obtained to acquire statistical data, analyze trends, administer the site, study browsing patterns, and to gather demographic information.


Accuracy and veracity of personal data

You commit that the data provided to the Owner are correct, complete, accurate, and current, as well as to keep them properly updated. As a User of the Website, you are solely responsible for the veracity and correctness of the data you submit to the site, exonerating the Owner from any responsibility in this regard.


Acceptance and consent

As a User of the Website, you declare to have been informed of the conditions regarding the protection of personal data, you accept and consent to the processing thereof by the Owner in the manner and for the purposes indicated in this Privacy Policy.


Revocability

To exercise your rights of access, rectification, erasure, portability, restriction, and objection, you must send an email to info@nordqr.com indicating the right you wish to exercise. Only in the event that there are reasonable doubts about your identity, the Owner may request additional information to confirm it.
The exercise of your rights does not include any data that the Owner is obliged to keep for administrative, legal, or security purposes.


Changes to the Privacy Policy

The Owner reserves the right to modify this Privacy Policy to adapt it to new legislation or jurisprudence, as well as to industry practices.
These policies will be in force until they are modified by others duly published.