QRForge je proizvod OD "DataPoint" vl. Hodzic Nermin, Milerova 2L, 75300 Lukavac, Bosna i Hercegovina, ID broj 4311703030009, PDV broj 311703030009 ("mi", "nas", "naš"). Upravljamo platformom QRForge koja pruža usluge generiranja QR kodova, naručivanja iz restorana i upravljanja dostavom.
QRForge is a product of OD "DataPoint" vl. Hodzic Nermin, Milerova 2L, 75300 Lukavac, Bosnia and Herzegovina, ID Number 4311703030009, VAT Number 311703030009 ("we", "us", "our"). We operate the QRForge platform, which provides QR code generation, restaurant ordering, and delivery management services.
Ko je odgovoran za koje podatke. QRForge je voditelj obrade za podatke potrebne za rad platforme: potvrdu broja telefona kupca, profil kupca, zapise o narudžbama, sprečavanje zloupotrebe te naloge i kredite partnera. Svaki restoran i svaka dostavna služba koji obrađuju vašu narudžbu su samostalni voditelji obrade za podatke o narudžbi koje primaju, i koriste ih samo da pripreme i dostave tu narudžbu. Za ograničene podatke koje QRForge obrađuje u ime partnera (nalozi osoblja partnera, a za dostavne službe i evidencija kurira te lokacija kurira za dodjelu narudžbi) QRForge je obrađivač partnera prema Ugovorima o obradi podataka. Za analitiku skeniranja vlastitih QR kodova kupca, kupac koji je vlasnik QR koda je voditelj obrade, a QRForge njegov obrađivač (vidi Uvjete korištenja, tačka 2.2).
Who is responsible for which data. QRForge is the controller for the data needed to run the platform: customer phone verification, the customer profile, order records, abuse prevention, and partner accounts and credits. Each restaurant and delivery service that handles your order is an independent controller for the order data it receives, and uses it only to prepare and deliver that order. For the limited data QRForge processes on a partner's behalf (the partner's staff accounts and, for delivery services, courier records and courier location used for dispatch), QRForge is the partner's processor under the Data Processing Agreements. For scan analytics of a customer's own QR codes, the customer who owns the QR code is the controller and QRForge is its processor (see Terms of Service, section 2.2).
Lične podatke obrađujemo u skladu sa Zakonom o zaštiti ličnih podataka Bosne i Hercegovine, koji je usklađen s Općom uredbom EU o zaštiti podataka (GDPR).
We process personal data in line with the BiH Law on Personal Data Protection, which is aligned with the EU General Data Protection Regulation (GDPR).
Prilikom registracije: e-mail adresa, lozinka (hashirana putem Firebase Auth), ime za prikaz. Opcionalno: broj telefona, profilna fotografija.
When you register: email address, password (hashed by Firebase Auth), display name. Optionally: phone number, profile photo.
Zapisi o skeniranju QR koda (vrijeme, koji QR kod, IP adresa uređaja koji skenira bez posljednjeg dijela, približna država, grad i koordinate izvedeni iz IP adrese, vrsta uređaja, preglednik, operativni sistem, user agent te da li je posjeta preusmjerena ili blokirana), pregledi stranica, interakcije s funkcijama, logovi grešaka. Lokaciju uređaja prikupljamo samo kako je opisano niže za narudžbe dostave.
QR code scan records (time, which QR code, the scanning device's IP address with the last part removed, approximate country, city and coordinates derived from the IP address, device type, browser, operating system, user agent, and whether the visit was redirected or blocked), page views, feature interactions, error logs. We collect device location only as described below for delivery orders.
Kada neko skenira QR kod napravljen u QRForgeu, bilježimo skeniranje kako je opisano iznad: vrijeme, koji QR kod, IP adresu uređaja koji skenira bez posljednjeg dijela, približnu državu, grad i koordinate izvedene iz IP adrese, vrstu uređaja, preglednik, operativni sistem, user agent te da li je posjeta preusmjerena ili blokirana. Posjete trailu (njegovom ulaznom QR kodu i svakoj stanici) bilježe se odvojeno: trail i stanica, vrijeme, prvih 300 znakova user agenta i nasumični identifikator posjetioca koji se čuva u kolačiću qf_vid. Kolačić traje 180 dana. Detaljni zapisi o skeniranju čuvaju se 540 dana u našem analitičkom skladištu podataka (Google Cloud BigQuery, u EU), a radna kopija koju koristi aplikacija briše se nakon 30 dana. Pojedinačni zapisi o posjetama trailu čuvaju se 30 dana. Dnevni zbirni podaci o skeniranjima i posjetama trailu čuvaju se 3 godine, u svim paketima. Dnevni zbirni podaci o skeniranjima čuvaju se samo u analitičkom skladištu podataka, a dnevni zbirni podaci o posjetama trailu u bazi podataka aplikacije.
When someone scans a QR code made with QRForge, we record the scan as described above: the time, which QR code, the scanning device's IP address with the last part removed, approximate country, city and coordinates derived from the IP address, device type, browser, operating system, user agent, and whether the visit was redirected or blocked. Visits to a trail (its entry QR code and each stop) are recorded separately: the trail and stop, the time, the first 300 characters of the user agent, and a random visitor id kept in a qf_vid cookie. The cookie lasts 180 days. Detailed scan records are kept for 540 days in our analytics warehouse (Google Cloud BigQuery, in the EU), and the working copy the app uses is deleted after 30 days. Individual trail visit records are kept for 30 days. Daily totals of scans and trail visits are kept for 3 years, on every plan. Daily scan totals are kept only in our analytics warehouse; daily trail visit totals are kept in the app's database.
Google Analytics 4, kada ga poveže vlasnik QR koda. Ako je vlasnik QR koda povezao svoj Google Analytics 4 property, svako izbrojano skeniranje šalje se i u vlasnikov GA4 property, i to samo sa sljedećim podacima:
Google Analytics 4, when the QR code's owner connects it. If the owner of a QR code has connected their own Google Analytics 4 property, each counted scan is also sent to the owner's GA4 property, with only these fields:
IP adresu, puni user agent, kolačiće niti bilo koji identifikator koji povezuje dva skeniranja nikada ne šaljemo. Signali pristanka za oglašavanje uvijek se šalju kao odbijeni. Skeniranja botova te skeniranja pauziranih ili isteklih QR kodova, QR kodova koji su dostigli ograničenje skeniranja i neobjavljenih stranica ne šalju se.
We never send the IP address, the full user agent, cookies or any identifier that links two scans together. The advertising consent signals are always sent as denied. Scans by bots, and scans of paused or expired QR codes, of QR codes over their scan limit or of unpublished draft pages, are not sent.
Za ove podatke voditelj obrade je vlasnik QR koda, a QRForge ih šalje samo po njegovoj uputi. Google ih obrađuje prema ugovoru koji vlasnik ima s Googleom; vidi Googleovu politiku privatnosti. Zahtjeve u vezi s ovim podacima najbolje je uputiti vlasniku QR koda koji ste skenirali.
For this data the QR code's owner is the controller, and QRForge sends it only on the owner's instruction. Google processes it under the owner's own agreement with Google; see Google's Privacy Policy. Requests about this data are best made to the owner of the QR code you scanned.
Za narudžbe hrane ne prikupljamo podatke o platnim karticama. Kuriru plaćate gotovinom.
We do not collect payment card data for food orders. You pay the courier in cash.
Poslovni i kontakt podaci, identifikatori Telegram razgovora/grupe za obavještenja, nalozi osoblja, stanje i historija kupovine kredita (plaćanje obrađuje LemonSqueezy) te, za kurire, ime, telefon, Telegram nalog, status dostupnosti i lokacija dok su dostupni (radi ponude obližnjih narudžbi i procjene vremena dolaska).
Business and contact details, Telegram chat/group identifiers used for notifications, staff accounts, credit balance and purchase history (payment handled by LemonSqueezy) and, for couriers, name, phone, Telegram account, online status and location while online (used to offer nearby orders and estimate arrival times).
Datum i vrijeme prihvatanja Uvjeta korištenja i Politike privatnosti.
The date and time you accepted the Terms of Service and the Privacy Policy.
| Svrha | Podaci | Pravni osnov | Purpose | Data | Legal basis |
|---|---|---|---|---|---|
| Pružanje platforme | Račun, korištenje | Izvršenje ugovora | Provide the platform | Account, usage | Contract performance |
| Prijem, prosljeđivanje, dostava i praćenje narudžbe | Telefon, ime, adresa, podaci o narudžbi | Izvršenje ugovora (radnje na vaš zahtjev) | Take, pass on, deliver and track your order | Phone, name, address, order details | Performance of a contract (taking steps at your request) |
| Potvrda broja telefona | Telefon, SMS kod, reCAPTCHA signali | Ugovor; legitimni interes sprečavanja lažnih narudžbi | Verify your phone number | Phone, SMS code, reCAPTCHA signals | Contract; legitimate interest in preventing fake orders |
| Lokacija za dostavu | GPS lokacija (samo na dodir) | Vaš zahtjev kada dodirnete dugme | Locate you for delivery | GPS location (only on tap) | Your request when you tap the button |
| Prosljeđivanje napomena o alergijama ili prehrani | Napomene narudžbe | Vaš izbor da ih upišete | Pass on allergy or dietary notes | Order notes | You choose to enter them |
| Obavještenja o statusu | Pretplata na obavještenja | Pristanak (dozvola preglednika) | Status notifications | Push subscription | Consent (browser permission) |
| Sprečavanje zloupotrebe (ponovljena otkazivanja, lažne narudžbe) | Brojači narudžbi, otkazivanja | Legitimni interes | Prevent abuse (repeated cancellations, fake orders) | Order counters, cancellations | Legitimate interest |
| Obavještavanje partnera o narudžbama (Telegram, e-mail) | Podaci o narudžbi uključujući ime, telefon, adresu, napomenu | Izvršenje ugovora | Notify partners about orders (Telegram, email) | Order details incl. customer name, phone, address, note | Contract performance |
| Kupovina kredita partnera | Nalog partnera, evidencija kupovina | Ugovor; zakonska obaveza (računovodstvo) | Partner credit purchases | Partner account, purchase records | Contract; legal obligation (accounting) |
| Sigurnost i prevencija prevare | Logovi, IP | Legitimni interes | Security & fraud prevention | Logs, IP | Legitimate interest |
| Sprečavanje ponovnog besplatnog probnog perioda | Jednosmjerni hash e-mail adrese ili broja telefona i ID-a računa | Legitimni interes | Prevent repeat free trials | One-way hash of the email address or phone number and of the account ID | Legitimate interest |
| Analitika i poboljšanje | Korištenje, događaji | Legitimni interes | Product analytics & improvement | Usage, events | Legitimate interest |
| Zapisi o skeniranju QR koda za analitiku vlasnika QR koda | Podaci o skeniranju opisani u odjeljku Posjetioci koji skeniraju QR kod | Legitimni interes (rad i sigurnost usluge, prikaz analitike vlasniku QR koda) | QR code scan records for the QR owner's analytics | Scan data as described under QR code scan visitors | Legitimate interest (running and securing the service, showing owners their analytics) |
| Slanje događaja skeniranja u Google Analytics 4 vlasnika QR koda | Polja navedena u odjeljku Posjetioci koji skeniraju QR kod | Po uputi vlasnika QR koda, kao njegov obrađivač; vlasnik određuje pravni osnov prema svojim posjetiocima | Send scan events to the QR owner's Google Analytics 4 | The fields listed under QR code scan visitors | On the QR owner's instruction, as their processor; the owner sets the legal basis toward their visitors |
| Marketinška komunikacija | Pristanak (opt-in) | Marketing communications | Consent (opt-in) | ||
| Zakonske obaveze i revizije | Račun, transakcije | Zakonska obaveza | Legal obligations & audits | Account, transactions | Legal obligation |
| Kategorija | Period čuvanja | Category | Retention period |
|---|---|---|---|
| Podaci aktivnog računa | Trajanje računa + 30 dana nakon zahtjeva za brisanje | Active account data | Duration of account + 30 days after deletion request |
| Račun i podaci besplatnog probnog perioda koji je istekao bez pretplate | Brišu se najranije 7 dana nakon isteka probnog perioda i najranije 7 dana nakon našeg e-maila o tome (vidi niže) | Account and data of a free trial that ended without a subscription | Deleted no earlier than 7 days after the trial ends and no earlier than 7 days after our email about it (see below) |
| Zapis o iskorištenom probnom periodu: jednosmjerni hash vaše e-mail adrese (ili broja telefona, ako račun nema e-mail adresu) i ID-a računa, s datumom upisa | 2 godine od upisa, i nakon brisanja računa. Koristi se samo da se spriječi ponovni besplatni probni period. | Repeat-trial record: a one-way hash of your email address (or phone number, if the account has no email address) and of your account ID, with the date it was recorded | 2 years after it is recorded, also after your account is deleted. Used only to prevent repeat free trials. |
| Profil kupca (ime, sačuvana adresa, jezik, brojači, vrijeme pristanka) i potvrđeni broj telefona u Firebase Auth | Dok ne zatražite brisanje | Customer profile (name, saved address, language, counters, consent time) and verified phone number in Firebase Auth | Until you ask us to delete it |
| Zapisi o narudžbama dostave (uključujući ime, telefon, adresu, lokaciju, napomene, stavke, iznose) | Koliko je potrebno za računovodstvo i pravne zahtjeve. Zadržavaju se i nakon brisanja profila kupca, kao evidencija transakcija. | Delivery order records (incl. name, phone, address, location, notes, items, totals) | For as long as needed for accounting and legal claims. They are kept after you delete your customer profile, as transaction records. |
| Kopija narudžbe na kuhinjskom ekranu | 30 dana nakon narudžbe | Kitchen-screen copy of an order | 30 days after the order |
| Ponuda narudžbe kuriru | Najviše 2 dana | Courier order offer | Maximum 2 days |
| Zaštita od dvostruke narudžbe | 90 dana | Duplicate-order guard | 90 days |
| Oznaka brisanja u toku | 90 dana | Erasure-in-progress marker | 90 days |
| Pojedinačni zapisi o skeniranju QR koda | 540 dana u analitičkom skladištu. Radna kopija u aplikaciji: 30 dana. | Individual QR scan records | 540 days in the analytics warehouse. Working copy in the app: 30 days. |
| Pojedinačni zapisi o posjetama trailu | 30 dana | Individual trail visit records | 30 days |
| Dnevni zbirni podaci o skeniranjima i posjetama trailu | 3 godine, u svim paketima | Daily totals of scans and trail visits | 3 years, on every plan |
| Analitičke kopije nakon brisanja računa (ili QR koda koji podrška obriše na vaš zahtjev) | Brišu se u roku od nekoliko sati. Druga provjera dan kasnije potvrđuje da ništa nije ostalo, obično u roku od 2 dana od brisanja. | Analytics copies after an account is deleted (or a QR code that support deletes at your request) | Deleted within a few hours. A second check a day later confirms that nothing is left, normally within 2 days of the deletion. |
| Sigurnosni/revizijski logovi | 12 mjeseci | Security/audit logs | 12 months |
| Zapisi o neuspjeloj kupovini kredita | 90 dana | Partner credit purchase failure records | 90 days |
| Sirovi LemonSqueezy događaji | 30 dana | Raw LemonSqueezy event payloads | 30 days |
| Telegram poruke o narudžbama u chatovima partnera | Ostaju u Telegram chatovima partnera. QRForge ih može izmijeniti radi promjene statusa i ne briše ih. | Telegram order messages in partner chats | They stay in the partners' Telegram chats. QRForge may edit them for status changes and does not delete them. |
| Zapisi o pristanku | Trajanje računa + 5 godina | Consent records | Duration of account + 5 years |
| Sigurnosne kopije | Maksimalno 56 dana | Backups | Maximum 56 days |
Po isteku perioda čuvanja, podaci se trajno brišu ili anonimiziraju. Možete zatražiti ranije brisanje — vidi Odjeljak 7.
When the retention period expires, data is permanently deleted or anonymised. You may request earlier deletion — see Section 7.
Besplatni probni period. Kada istekne besplatni probni period započet bez platne kartice, a vi se niste pretplatili, vaši QR kodovi, stranice i trailovi prestaju raditi i više se ne mogu uređivati (osim Wi-Fi QR kodova podešenih da telefon direktno spoje na mrežu, koji ne idu preko QRForgea i rade i dalje). O tome vam šaljemo e-mail, a podsjetnik oko 2 dana prije datuma brisanja. Do tada se u bilo kojem trenutku možete pretplatiti i sve se vraća kako je bilo, ili sami obrisati račun. U suprotnom se račun i njegovi podaci brišu, na isti način kao kada sami obrišete račun, najranije 7 dana nakon isteka probnog perioda i najranije 7 dana nakon našeg e-maila. Ovo se ne odnosi na plaćene pretplate, na probne periode započete pri plaćanju platnom karticom niti na račune partnera za dostavu.
Free trials. When a free trial started without a payment card ends and you have not subscribed, your QR codes, pages and trails stop working and can no longer be edited (except Wi-Fi QR codes set to connect phones to the network directly, which do not go through QRForge and keep working). We email you when this happens, and send a reminder about 2 days before the deletion date. Until then you can subscribe at any time to restore everything, or delete your account yourself. Otherwise the account and its data are deleted, the same way as when you delete your account yourself, no earlier than 7 days after the trial ends and no earlier than 7 days after our email. This does not apply to paid subscriptions, to trials started at checkout with a payment card, or to delivery partner accounts.
Kada počne besplatni probni period (ili, za probne periode iz vremena prije ovog zapisa, kada se račun obriše), čuvamo zapis o tome da je iskorišten: jednosmjerni hash vaše e-mail adrese (ili broja telefona, ako račun nema e-mail adresu) i ID-a računa, s datumom upisa. Zapis ne sadrži vašu e-mail adresu, broj telefona ni ime u čitljivom obliku. Koristi se samo da ista e-mail adresa ne dobije drugi besplatni probni period. Čuva se 2 godine od upisa, i nakon brisanja računa, a zatim se automatski briše.
When a free trial starts (or, for trials from before this record existed, when the account is deleted), we keep a record that it was used: a one-way hash of your email address (or phone number, if the account has no email address) and of your account ID, with the date it was recorded. It does not contain your email address, phone number or name in readable form. It is used only to stop the same email address from getting a second free trial. It is kept for 2 years after it is recorded, also after your account is deleted, and is then deleted automatically.
Period analitičke historije vašeg paketa (npr. 365 dana u paketu Pro) govori koliko unazad možete pregledati analitiku. To nije period čuvanja: podaci se čuvaju kako je navedeno iznad, u svim paketima.
Your plan's analytics history (for example 365 days on Pro) is how far back you can view analytics. It is not a retention period: the data is kept as listed above, on every plan.
Ako povežete Google Analytics 4, kopija anonimnih podataka o svakom skeniranju šalje se i u vaš vlastiti GA4 property. Tu kopiju uređuju vaše GA4 postavke i na nju se ne odnose periodi iznad. Brisanjem QRForge računa ne brišu se događaji skeniranja koji su već poslani u vaš GA4 property. Oni su na vašem Google računu. Obrišite ih tamo ako je potrebno.
If you connect Google Analytics 4, a copy of each scan's anonymous details is also sent to your own GA4 property. That copy is controlled by your GA4 settings and is not covered by the periods above. Deleting your QRForge account does not delete the scan events already sent to your GA4 property. They are in your own Google account. Delete them there if you need to.
Glavna baza podataka je u EU (Google Cloud EU multi-region). Neki pružaoci (Google, Telegram, Resend, LemonSqueezy, Sentry, push servisi preglednika te Google Analytics samo kada ga poveže vlasnik QR koda) mogu obrađivati podatke izvan Bosne i Hercegovine i EU. U tom slučaju se oslanjamo na zaštitne mjere propisane zakonom.
Our main data store is in the EU (Google Cloud EU multi-region). Some providers (Google, Telegram, Resend, LemonSqueezy, Sentry, browser push services, and Google Analytics only where a QR code owner connects it) may process data outside Bosnia and Herzegovina and the EU. Where they do, we rely on the safeguards required by law.
Imate sljedeća prava u pogledu vaših ličnih podataka:
You have the following rights regarding your personal data:
Kupci dostave nemaju korisnički panel. Za kopiju podataka ili brisanje profila kupca i potvrđenog broja telefona pišite na support@qrforge.link, uz broj telefona s kojim ste naručivali. Prije postupanja provjerit ćemo da je broj vaš. Profil se ne može obrisati dok je narudžba u toku. Zapisi o narudžbama čuvaju se kako je opisano u Odjeljku 4. Lokaciju i obavještenja možete prestati dijeliti u svakom trenutku: ne dodirujte „koristi moju lokaciju" i isključite obavještenja u pregledniku.
Delivery customers do not have a dashboard. To get a copy of your data or have your customer profile and verified phone number deleted, write to support@qrforge.link from, or mentioning, the phone number you ordered with. We will verify that it is your number before acting. You cannot delete a profile while an order is in progress. Order records are kept as described in Section 4. Location and notifications: you can stop sharing at any time by not tapping "use my location" and by turning off notifications in your browser.
QRForge je namijenjen osobama od najmanje 18 godina. Ne prikupljamo namjerno lične podatke maloljetnih osoba. Ako vjerujete da nam je maloljetna osoba dostavila podatke, kontaktirajte nas radi brisanja.
QRForge is intended for persons aged 18 or over. We do not knowingly collect personal data from minors. If you believe a minor has provided data to us, contact us and we will delete it.
Voditelj obrade: OD "DataPoint" vl. Hodzic Nermin
Milerova 2L, 75300 Lukavac, Bosna i Hercegovina
ID broj / ID Number 4311703030009 · PDV broj / VAT Number 311703030009
Zahtjevi u vezi s privatnošću i pravima ispitanika: support@qrforge.link
Naplata: billing@qrforge.link
Data Controller: OD "DataPoint" vl. Hodzic Nermin
Milerova 2L, 75300 Lukavac, Bosnia and Herzegovina
ID broj / ID Number 4311703030009 · PDV broj / VAT Number 311703030009
Privacy and data-subject requests: support@qrforge.link
Billing: billing@qrforge.link
Imate pravo podnijeti prigovor Agenciji za zaštitu ličnih podataka u Bosni i Hercegovini prema Zakonu o zaštiti ličnih podataka BiH, ili nadležnom tijelu u državi prebivališta.
You have the right to lodge a complaint with the Personal Data Protection Agency of BiH (Agencija za zaštitu ličnih podataka u BiH) under the BiH Law on Personal Data Protection, or with the authority in your country of residence.
Ovu Politiku možemo povremeno ažurirati. "Datum stupanja na snagu" na vrhu uvijek odražava najnoviju verziju. Nastavak korištenja platforme nakon izmjena smatra se prihvatanjem.
We may update this Policy from time to time. The "Effective date" at the top will always reflect the latest version. Continued use of the platform after changes constitutes acceptance.