🔒 Privacy Policy

This Privacy Policy explains how Ouhud GmbH processes personal data when you use our website and services, especially Ouhud QR. We process your data confidentially in line with GDPR, Swiss revDSG and UAE requirements.

🏢 1. Controller

Ouhud GmbH
Kaiserswerther Straße 135
40474 Düsseldorf, Germany
Represented by: Hamza Mehmalat
E-mail: info@ouhud.com
Website: https://ouhud.com

📋 2. Data Categories

Registration: name, email, hashed password
Usage: created QR codes, anonymized scan statistics
Profile (optional): address, phone and related data
Payments: transaction and billing data (Stripe)
Server logs: IP, browser, date/time for security purposes

⚖️ 3. Purposes and Legal Basis

Contract performance (Art. 6(1)(b) GDPR)
Legal obligations (Art. 6(1)(c) GDPR)
Legitimate interests (Art. 6(1)(f) GDPR)
Consent (Art. 6(1)(a) GDPR)

🌐 4. Recipients and Transfers

Payment processor: Stripe Payments Europe Ltd.
Hosting/IT: EU-based providers and contracted processors
International transfer: only with adequate safeguards (e.g. SCCs)
Authorities: only if legally required

⏳ 5. Retention

Data is stored only as long as needed for the purpose.
Accounts can be deleted via settings or support request.
Billing data may be retained based on statutory retention duties.

🧍 6. Your Rights

Access, rectification, erasure
Restriction, portability, objection
Withdrawal of consent at any time

🍪 7. Cookies

We use essential cookies. Optional analytics/marketing cookies are only used with your consent.

💳 8. Payments

Payments are processed by Stripe. We do not store full payment card data on our servers. Stripe Privacy Policy

🔐 9. Security

SSL/TLS encryption
Password hashing (BCrypt)
Access control and regular security checks

📄 10. Updates

This policy is updated when legal or technical changes require it.

📧 11. Contact

For privacy requests, contact us at info@ouhud.com.