Your data, kept to a minimum.
We are an authentication company, and we hold ourselves to the same standard on our own website: collect as little as possible, keep it safe, and delete it when it is no longer needed. qrlay.no uses no cookies and no tracking.
Who we are
Qrlay AS is the data controller for personal data collected through qrlay.no.
Organisation number 935 112 680
Forskningsparken USN
Raveien 205
3184 Borre
Norway
Email: post@qrlay.no
Pilot sign-up
When you sign up for our pilot or beta programme, we collect your name, organisation, email address and the interest you select.
- Purpose: to contact you about taking part in the pilot or beta programme.
- Legal basis: steps taken at your request before a possible pilot agreement (GDPR Article 6(1)(b)), and our legitimate interest in following up enquiries from organisations (Article 6(1)(f)).
- Retention: kept until the pilot programme ends, then deleted. You can ask us to delete your details at any time before that.
- Storage: saved on our web server in a file outside the public web folder, with access limited to Qrlay.
If you email us, we use your message and contact details to reply and to follow up the matter. We keep correspondence only for as long as needed for that purpose, or as required by law, for example Norwegian bookkeeping rules where a message forms part of an agreement.
Server logs
Like all websites, our hosting provider records technical information when a page is requested: IP address, time, the page and file requested, and browser type. This is used to run the site securely and to detect abuse (legitimate interest, GDPR Article 6(1)(f)), and is kept for a limited period under the hosting provider's routines. We do not use these logs to profile visitors.
Cookies
qrlay.no sets no cookies. We use no analytics, no advertising, no tracking pixels and no social media plugins. Fonts and all other files are served from our own server, so no information about your visit is sent to third parties such as Google.
If you choose a language or pause motion, your browser remembers that choice in its local storage, so you don’t have to choose again. Nothing is stored unless you make the choice, nothing is sent to us, and you can clear it at any time in your browser settings.
Because no cookies are used, there is no cookie consent banner. If this changes, we will update this page and ask for your consent where the law requires it.
Who processes data
We do not sell or share personal data for marketing. We use these providers to run our services, under data processing agreements:
- SiteGround: web hosting for qrlay.no, including the pilot sign-up form.
- Microsoft: email, through Microsoft 365, for messages sent to our @qrlay.no addresses.
Your rights
You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable format. Contact post@qrlay.no and we will respond within one month.
If you believe we handle your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet.
Security
All traffic to qrlay.no is encrypted with HTTPS. To report a security issue, write to security@qrlay.no.
Changes
We will update this page if the way we handle personal data changes. The date at the top shows the latest version.