QRForge is a product of OD DataPoint, vl Hodzic Nermin, registered in Bosnia and Herzegovina ("we", "us", "our"). We operate the QRForge platform, which provides QR code generation, restaurant ordering, and last-mile delivery management services.
QRForge je proizvod OD DataPoint, vl Hodzic Nermin, registriranog u Bosni i Hercegovini ("mi", "nas", "naš"). Operiramo platformom QRForge koja pruža usluge generiranja QR kodova, naručivanja iz restorana i upravljanja dostavom.
We act as the data controller for information you provide when using QRForge. For restaurant and fleet partners, separate Data Processing Agreements govern our relationship as a processor of your customers' data.
Nastupamo kao voditelj obrade podataka koje nam dajete pri korištenju QRForgea. Za restorane i flotne partnere, posebni Ugovori o obradi podataka reguliraju naš odnos kao obrađivača podataka vaših kupaca.
Although Bosnia and Herzegovina is not an EU member state, we voluntarily align with the General Data Protection Regulation (GDPR) as the highest available standard for privacy protection.
Iako Bosna i Hercegovina nije članica EU, dobrovoljno se usklađujemo s Opštom uredbom o zaštiti podataka (GDPR) kao najvišim raspoloživim standardom zaštite privatnosti.
When you register: email address, password (hashed by Firebase Auth), display name. Optionally: phone number, profile photo.
Prilikom registracije: e-mail adresa, lozinka (hashirana putem Firebase Auth), ime za prikaz. Opcionalno: broj telefona, profilna fotografija.
QR code scan logs (timestamp, approximate device locale, user agent), page views, feature interactions, error logs. We do not collect precise geolocation unless you explicitly enable delivery features.
Zapisi o skeniranju QR koda (datum i vrijeme, aproksimativni locale uređaja, user agent), pregledi stranica, interakcije s funkcijama, logovi grešaka. Ne prikupljamo preciznu geolokaciju osim ako izričito ne aktivirate dostavne funkcije.
For delivery orders: name, delivery address, phone number, order contents, total amount, delivery timestamps. Payment processing is handled by third-party providers; we store only transaction identifiers, not raw card data.
Za dostavne narudžbe: ime, adresa dostave, broj telefona, sadržaj narudžbe, ukupni iznos, vremenski pečati dostave. Plaćanje obrađuju treće strane; čuvamo samo identifikatore transakcija, ne sirove podatke kartice.
Timestamp and version of Terms and Privacy Policy accepted at registration.
Datum i verzija Uvjeta korištenja i Politike privatnosti prihvaćenih pri registraciji.
| Purpose | Data | Legal basis |
|---|---|---|
| Provide the platform | Account, usage | Contract performance |
| Process and deliver orders | Order, contact | Contract performance |
| Security & fraud prevention | Logs, IP | Legitimate interest |
| Product analytics & improvement | Usage, events | Legitimate interest |
| Marketing communications | Consent (opt-in) | |
| Legal obligations & audits | Account, transactions | Legal obligation |
| Category | Retention period |
|---|---|
| Active account data | Duration of account + 30 days after deletion request |
| Order records | 5 years (accounting/legal obligation) |
| QR scan logs | 24 months |
| Security/audit logs | 12 months |
| Consent records | Duration of account + 5 years |
| Backups | Maximum 90 days |
When the retention period expires, data is permanently deleted or anonymised. You may request earlier deletion — see Section 7.
Po isteku perioda čuvanja, podaci se trajno brišu ili anonimiziraju. Možete zatražiti ranije brisanje — vidi Odjeljak 7.
Some processors (Google, Sentry) operate globally. Where data is transferred outside Bosnia and Herzegovina, we ensure appropriate safeguards are in place — including Standard Contractual Clauses (SCCs) with Google under its GDPR-compliant Data Processing Addendum.
Neki obrađivači (Google, Sentry) posluju globalno. Gdje se podaci prenose izvan Bosne i Hercegovine, osiguravamo odgovarajuće zaštitne mjere — uključujući Standardne ugovorne klauzule (SCC) s Googleom u okviru njegovog GDPR-usklađenog Dodatka za obradu podataka.
You have the following rights regarding your personal data:
Imate sljedeća prava u pogledu vaših ličnih podataka:
QRForge is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a minor has provided data to us, contact us for immediate deletion.
QRForge nije namijenjen djeci mlađoj od 16 godina. Ne prikupljamo namjerno lične podatke maloljetnih osoba. Ako vjerujete da nam je maloljetna osoba dostavila podatke, kontaktirajte nas radi trenutnog brisanja.
Data Controller: OD DataPoint, vl Hodzic Nermin
Bosnia and Herzegovina
Email: admin@qrforge.link
Voditelj obrade: OD DataPoint, vl Hodzic Nermin
Bosna i Hercegovina
E-mail: admin@qrforge.link
If you believe we have not adequately addressed a privacy concern, you have the right to lodge a complaint with the relevant supervisory authority in your country of residence.
Ako smatrate da nismo na odgovarajući način odgovorili na vaše pitanje u vezi s privatnošću, imate pravo podnijeti pritužbu nadležnom nadzornom tijelu u vašoj zemlji boravišta.
We may update this Policy from time to time. The "Effective date" at the top will always reflect the latest version. Continued use of the platform after changes constitutes acceptance.
Ovu Politiku možemo povremeno ažurirati. "Datum stupanja na snagu" na vrhu uvijek odražava najnoviju verziju. Nastavak korištenja platforme nakon izmjena smatra se prihvatanjem.