Privacy Policy

Effective Date: 14.04.2025

Website: https://www.qlist.io

Company Name: Maksi Srečko Čemažar s.p.

Address: Celovška cesta 136, 1000 Ljubljana, Slovenia

Contact Email: info@qlist.io

Introduction

At QList, we value your privacy and are committed to protecting your  personal data. This Privacy Policy explains how we collect, use, and  protect your information when you use our website and services. By using www.qlist.io, you agree to the terms of this policy.

What Data We Collect

We collect the following types of personal data:
a. Account  Information
When you create an account on our platform, we collect:
- Name  (if provided)
- Email address
- Login credentials (secured and encrypted)

b. QR Code Activity
When users scan or interact with a QR code generated via our system, we may collect:
- IP address
- Timestamp of scan - This data helps you track QR code performance and optimize campaign outcomes.

c. Website Usage Data
Through cookies and analytics tools, we collect:
- Browser type  and version
- Pages visited
- Device information
- Referral URL

How We Use Your Data

We use the collected data to:
- Provide and maintain the platform and its  features.
- Enable QR code generation and scan analytics
- Improve user  experience and platform performance
- Monitor platform usage and  security
- Communicate important service updates

Cookies and Tracking Technologies

QList uses cookies to enhance your experience and collect usage data.  
Cookies may be used for:
- Session management
- Preferences (e.g.,  language)
- Anonymous usage analytics (e.g., through Supabase or similar  tools)

You can manage cookie preferences via the cookie banner displayed  on your first visit or through your browser settings

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), our processing of personal data is based on:
- Your consent (e.g., accepting cookies)
- Performance of a contract (e.g., when you register and use our services)
- Legitimate interests (e.g., security, analytics, improving services)

Data Sharing

We do not sell your personal data. We only share your data with:
- Our  service provider Supabase (used for hosting, database, and  analytics)
- Legal authorities, if required by law

Supabase is compliant  with data protection frameworks and stores data within the EU.

Data Retention

We retain personal data only for as long as necessary to provide our  services and fulfill legal obligations. You may request the deletion of  your account and associated data at any time

Your Rights

Under GDPRAs a user based in the EU, you have the right to:
- Access your  personal data
- Correct inaccurate or outdated data
- Request deletion of your data
- Object to or restrict processing
- Withdraw consent at any time
- Request data portability

To exercise any of these rights, contact us at info@qlist.io

International Data Transfers

Although we primarily operate within the EU, some technical processing  may involve international service providers. We ensure all partners  (like Supabase) have adequate protections in place, such as Standard  Contractual Clauses.

Data Security

We use appropriate technical and organizational measures to protect your data, including:
- Encrypted connections (HTTPS)
- Secure database  storage
- Access controls and monitoring

Children’s Privacy

QList is not intended for use by children under the age of 16. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy from time to time. All updates will be published on this page, and significant changes will be communicated  via email or banner notifications.

Contact Us

For questions, requests, or concerns regarding your data or this Privacy Policy, Contact by Email: info@qlist.io

Related Policies

Please also review our Terms and Conditions, which govern your use of our services.