Privacy Policy


The protection of your personal data is important to us. In this Privacy Policy, we inform you about the relevant aspects of the data processing on our website.

1. Identity and contact details of the data controller

The data controller responsible in accordance with the purposes of the General Data Protection Regulation (GDPR) of the European Union and other data protection regulations is:

QRCode Monkey GmbH
Am Lenkwerk 13
33609 Bielefeld

2. Use of ‘cookies’, caching and web storage

The QRCode Studio web server transmits small text files (so-called ‘cookies’) to the web browser of its users and these are saved (and stored) on the recipient computer or terminal equipment. The web server of QRCode Studio also employs caches to facilitate the improvement of operations and uses web storage space to hold raised information.
The ‘cookies’, caches’ and ‘web storage space’ are necessary for the use of the services of QRCode Studio; but these contain no personally referred data.
If you have an account with QRCode Studio, the ‘cookies’, which save and store registration data are erased from the ‘CMS’ when the user or contractual party logs off (signs out). Customers and visitors of our website can erase the cookies, caches and web storage at any time manually via the browser settings.

3. Provision of website

The web server of this website automatically raises, saves and stores information on each received enquiry in an event record log. This includes:

  • the host name of the accessing computer (the ‘IP’ address);
  • the date and time of the enquiry;
  • the name of the path of the requested document or file;
  • the transmitted data volume; and
  • the ‘http’ status code of the enquiry.

These data are automatically transmitted by the internet browser of the visitor or Customer to the QRCode Studio web server. This data is stored in the log files of our system. This data is not stored together with other personal data of the user.

4. Contact via Email

You can contact us via the email address provided on our website. In this case the personal data of the user transmitted with the email will be stored. The data will be used exclusively for the processing of the conversation.
If you contact us via email, this also constitutes the necessary legitimate interest in the processing of the data. The legal basis for the processing of data transmitted while sending an email is Art. 6 (1) (1) (f) GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (1) (b) GDPR.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation ends when it can be concluded from the circumstances that the matter in question has been conclusively resolved.

5. Use of Google Analytics

1. Scope of the processing of personal data

We use Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google).
Google Analytics examines, among other things, the origin of visitors, the time they spend on individual pages and the use of search engines, thus allowing better monitoring of the success of advertising campaigns. Google sets a cookie on your computer. This allows personal data to be stored and analysed, including:

  • The user's activity (in particular, which pages have been visited and which elements have been clicked on),
  • Device and browser information (in particular the IP address and the operating system),
  • data about the advertisements displayed (in particular which advertisements were displayed and whether the user clicked on them) and
  • Data from advertising partners (in particular pseudonymised user IDs).

The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
We have activated IP anonymisation. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
We use Google Analytics to evaluate your use of our online presence, to compile reports on your activities and to use further Google services associated with the use of our online presence and internet use.
Further information on the processing of data by Google can be found here:

2. Purpose of the data processing

The use of Google Analytics including Google Analytics Remarketing serves us to evaluate the use of our online presence as well as the targeted playout of advertising to those persons who have already expressed an initial interest by visiting our website.

3. Legal basis for the processing of personal data

The legal basis for the processing of the user's personal data is always the user's consent in accordance with Art. 6 (1) (1) (a) GDPR.

4. Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes. Advertising data in server logs will be anonymised by Google deleting parts of the IP address and cookie information after 9 and 18 months respectively.

5. Removal options

You can prevent the collection as well as the processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser.
You can find further information on objection and removal options from Google at:

6. Subscription

If you decide to sign up for QRCode Studio we process your personal data in order to provide our service to you. To create an account, your email address and a username are necessarily processed. Additionally the following information may be processed: firstname, lastname, language, timezone, company, address, zipcode, city, region, country.
If you choose a paid service, we may additionally collect and process payment data, such as bank account, credit card number or VAT number. We process this data for the purpose of payment processing and invoicing for our customers.
The legal basis for data processing is the fulfillment of a contract or the implementation of pre-contractual measures with the data subject within the meaning of Art. 6 (1) (1) (b) GDPR.
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.
We are using third-party payment service providers for payment processing and invoicing of our Customers. The legal basis for this processing is our legitimate interest under article Art. 6 (1) (1) (f) GDPR.

7. Rights of the data subjects

When your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights:

  • Right of access concerning your data stored by us pursuant to Art. 15 GDPR,
  • Right to rectification of inaccurate data pursuant to Art. 16 GDPR,
  • Right to erasure concerning your data stored by us pursuant to Art. 17 GDPR,
  • Right to restriction of processing concerning your data stored by us pursuant to Art. 18 GDPR
  • Right to portability pursuant to Art. 20 GDPR,
  • Right to withdrawal at any time pursuant to Art. 7 (3) GDPR of consent that may have been provided to us(Consent Manager); this has the result that in the future we are no longer allowed to continue to process data based on this consent.
  • Right to lodge a complaint with a competent supervisory authority pursuant to Art. 77 GDPR, if in your view the processing of your personal data violates the rules of the GDPR.

If you wish to exercise your rights as a data subject according to the GDPR, please send your request to

8. Contact

In case of questions you can reach us under