1. Introduction

“Digital business” LTD (SIA “Digital business”), reg. No. 40003875786, address: 13 Rigas Street, Valmiera, Valmiera municipality, Latvia (hereinafter referred to as QR.menu), on the website www.tastyqr.menu (hereinafter referred to as the Website) processes personal data obtained from the data subject - the Website user (hereinafter referred to as the User).

QR.menu takes care of the User's privacy and personal data protection, respects the User's right to the legality of personal data processing in accordance with the General Data Protection Regulation (hereinafter referred to as the Regulation) and other applicable laws in the field of privacy and data processing.

Taking into account the aforementioned, QR.menu has developed the present Privacy Policy to provide the User with the information stipulated in the Regulation.

2. Identity and Contact Information of the Controller

The controller of QR.menu is “Digital business” LTD, reg. No. 40003875786, address: 13 Rigas Street, Valmiera, Valmiera municipality, website: www.tastyqr.menu, e-mail: info@tastyqr.menu.

3. Purposes of Processing, Legal Basis of Processing

If the User submits their personal data to QR.menu, such as name, surname, identity number, e-mail or postal address, phone number, personal messages, etc., using the Website's contact forms, e-mail or other type of mail, QR.menu stores and uses this information to execute or conclude a relevant service provision agreement.

The processing of the aforementioned data is necessary for QR.menu to identify the customer, prepare, conclude and prove the fact of conclusion of any agreement, ensure/maintain the operation of any services, provide customer service, review and process applications and objections, administer payments, as well as for other purposes directly related to the conclusion or execution of agreements.

The legal basis for data processing is the sub-clause “b” of the clause 1 of the Article 6 of the Regulation, which states that data processing is legal if the processing is necessary for the execution of an agreement or for taking measures at the request of the data subject before concluding the agreement.

4. Categories of Personal Data

Categories of personal data – name, surname, identity number, e-mail or postal address, IP address, phone number, message or letter content, etc.

5. Categories of Recipients of Personal Data

The data is disclosed to those QR.menu employees who need it to perform their direct duties in order to execute or conclude a relevant service provision agreement.

When obtaining and using personal data, QR.menu partly uses the services of external service providers who, according to the agreement, strictly follow the instructions of the Controller and who are constantly controlled by QR.menu before using the service and also further on.

6. Categories of Data Subjects

Categories of data subjects – officials and contact persons of existing, former and potential customers of the Controller.

7. Transfer of Data outside the European Union

The received data is not and will not be transferred outside the European Union or the European Economic Area, nor will it be transferred to any international organization.

8. Duration of Data Storage

Unless stated otherwise in the data protection instructions, we delete personal data no later than three months after the original reason for data retention is no longer valid, except in cases where we are legally obliged to continue to retain this data (for example, but not limited to, accounting records or for legal proceedings).

9. Data Subject Access to Personal Data

The data subject has the right to receive access to the data subject's personal data within one month from the date of submission of the relevant request.

The User can submit a request for the exercise of their rights in writing in person at the Controller's legal address (by presenting a personal identification document) or by e-mail signing with a qualified electronic signature.

Upon receiving the User's request for the exercise of their rights, QR.menu verifies the User's identity, evaluates the request and fulfils it in accordance with the regulatory enactments.

The user has the right to receive the information stipulated in the regulatory enactments in relation to the processing of their data, the right to request access to their personal data, as well as to request QR.menu to supplement, correct or delete it, limit the processing or the right to object to the processing, as long as these rights do not conflict with the data processing purposes (conclusion or execution of agreements).

Contacts