Privacy Policy
QuickServe B.V. ("QuickServe", "we", "us"), registered with the Dutch Chamber of Commerce (KvK) under number 42170863 at Lindepark 75, 1185 LD Amstelveen, provides in-seat and pickup QR ordering software for sports clubs, event venues, and stadiums in the Netherlands. This policy explains what personal data we process, why, and how it's protected, for both venue staff using our admin tools and the customers who place orders through our apps.
What we collect
If you place an order (customer): the items you ordered, the amount paid, and a way to notify you it's ready - typically nothing more than that. We don't require you to create an account or hand over a full identity to order a drink.
If you manage a venue (staff/admin): your name, email, and login activity for our admin panel, so we know who changed what.
If you just browse our marketing website: nothing identifiable. We run our own self-hosted, cookieless analytics (Umami) that counts visits and pages viewed without tracking you individually or storing your IP address.
Payments
We never see or store your card details. Payments are handled entirely by our payment processors - Mollie and, for some venues, Rootline - who are independently PCI-DSS compliant. We only receive confirmation that a payment succeeded or failed, plus a transaction reference.
Where your data lives
All order and account data is stored on servers located in the EU (Frankfurt, Germany), run on AWS infrastructure. We don't transfer personal data outside the EU/EEA.
Who else sees it
A short, real list - we don't sell data to anyone, and this is the complete set of parties involved:
- Mollie / Rootline - process your payment.
- Amazon Web Services (AWS) - hosts our servers and database, EU region only.
- Sentry - helps us catch and fix bugs in the ordering app; it may receive technical error details (device, browser, what went wrong) but not your order contents.
How long we keep it
Order records are kept for as long as required by Dutch tax/accounting law (currently 7 years for financial records), after which they're deleted. Admin account data is kept until the account is removed by the venue or by us on request.
Your rights
Under the GDPR, you can ask us to access, correct, or delete your personal data, or object to how it's processed. Contact us (see below) and we'll respond within the legally required timeframe. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Contact
Questions about this policy or your data: email info@quick-serve.nl or use the contact form on this site. QuickServe B.V., Lindepark 75, 1185 LD Amstelveen.