# Privacy Policy

- Canonical: https://qrgate.az/en/legal/privacy-policy
- Markdown: https://qrgate.az/en/legal/privacy-policy.md
- Language: en

This Privacy Policy explains what data Proveb MMC collects through the **QR Gate** system, for what purpose it is processed and how it is protected.

## 1. Data collected

- **Account data:** first name, last name, e-mail, phone number, position.
- **Company data:** company name, contact details, official registration details, branch and structure data.
- **Employee and attendance data:** employee record, work schedule, check-in / check-out records, lateness and early-leave indicators, leave and time-off records.
- **Technical data:** IP address, device and browser details, coordinates at the moment of a scan, system logs.
- **Payment data:** subscription, payment history and invoice details. Card details are not stored in the System - payments are processed through a licensed payment institution.

## 2. Purposes of processing

- providing the service and maintaining attendance records;
- producing reports, timesheets and analytics;
- ensuring account security and detecting abuse;
- providing technical support and responding to user requests;
- fulfilling obligations arising from legislation;
- sending service-related notifications.

## 3. Sharing of data

Data is not sold to third parties. Sharing is possible only in the following cases:

- with technical providers necessary for the operation of the service (hosting, e-mail / SMS delivery, payment institution) - only to the extent required;
- where required by law and upon a substantiated request from a competent state authority;
- with the explicit consent of the user.

## 4. Retention period

Data is retained for as long as necessary to provide the service, as well as for the record-keeping and archiving periods established by law. Once that period expires, data is deleted or irreversibly anonymised.

## 5. Security

Technical and organisational measures are applied to protect data: encrypted connections, role-based restriction of access rights, operation logs and regular backups. Nevertheless, no data transmitted over the internet can be considered 100% secure.

## 6. User rights

- to obtain information about their own data;
- to request correction of inaccurate data;
- to request erasure in the cases provided for by law;
- to lodge a complaint regarding processing.

To make a request: [info@qrgate.az](mailto:info@qrgate.az)

## 7. Changes

This policy may be updated. The current text is always published on this page.

## Related pages

- Automatic time calculation - [Markdown](https://qrgate.az/en/automatic-working-time-calculation.md) | [HTML](https://qrgate.az/en/automatic-working-time-calculation)
- Distributing notifications - [Markdown](https://qrgate.az/en/distributing-attendance-notifications.md) | [HTML](https://qrgate.az/en/distributing-attendance-notifications)
- Leave and time-off management - [Markdown](https://qrgate.az/en/leave-and-time-off-management.md) | [HTML](https://qrgate.az/en/leave-and-time-off-management)
- Attendance and payroll - [Markdown](https://qrgate.az/en/attendance-and-payroll.md) | [HTML](https://qrgate.az/en/attendance-and-payroll)
- Scheduled attendance reports - [Markdown](https://qrgate.az/en/scheduled-attendance-reports.md) | [HTML](https://qrgate.az/en/scheduled-attendance-reports)
- Multi-branch attendance system - [Markdown](https://qrgate.az/en/multi-branch-attendance-system.md) | [HTML](https://qrgate.az/en/multi-branch-attendance-system)