AutoQR.de AutoQR.de

PRIVACY POLICY

Privacy Policy

This policy explains how AutoQr handles your data under GDPR and German data protection law.

Last updated: April 2026

Information we collect

When you create an AutoQR account, we collect your name, email address, phone number, and shipping details for order fulfilment. When you activate a QR code, we store the profile you attach to it (vehicle or keyring details, optional photos, and contact preferences).

When someone scans your QR code, we log the scan event, the message or call request, and optional photos uploaded by the scanner. We do not collect or store the scanner's phone number unless they voluntarily provide it to initiate a call.

  • Account and profile data
  • QR activation and ownership records
  • Scan, message, and call-bridge metadata
  • Order and payment references (processed by Stripe)

How we use your information

We use your data exclusively to operate the AutoQR service: activating QR codes, routing anonymous contact requests, processing orders, preventing abuse, and providing customer support.

We do not sell your personal data to third parties. We do not use your phone number for marketing without your explicit consent. Aggregated, anonymised statistics may be used to improve product reliability.

Data retention & security

We retain account data for as long as your account is active. Scan and incident logs are kept for up to 24 months for safety and dispute resolution, then anonymised or deleted.

All data is hosted on servers in Germany. Connections are encrypted in transit (TLS) and sensitive credentials are hashed at rest. Access is restricted to authorised personnel only.

Your rights under GDPR

Under the GDPR and German BDSG, you have the right to access, rectify, export, restrict processing, and delete your personal data. You may withdraw consent at any time where processing is consent-based.

To exercise your rights, contact us at privacy@autoqr.de. We respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.