Legal
Privacy for guests
You scanned a QR code at a restaurant, café or other venue, and it opened a short survey. This page explains what that survey records, who sees it, and how to have it deleted.
1. Who is responsible
The venue whose QR code you scanned is responsible for your answers (the data controller). It chose the questions and the coupon, and it decides what to do with your answers.
Kiwiback provides the survey software and stores the answers for the venue, on its instructions (the data processor). We don't use your answers for any purpose of our own.
A venue can link its own privacy policy from the survey. If the link brought you here, this page describes what the survey does. For anything else the venue does with your information, ask the venue.
2. What we never ask
Your name, email address, phone number or an account. The survey works without knowing who you are.
3. What is recorded
- Your answers, including anything you type into a free-text question. Please don't type personal details there.
- Your coupon: its code, its offer and conditions, its language, when it was given, and whether and when it was redeemed at the venue.
- Which of the venue's QR codes you scanned, for example which table.
- A random device ID. Your browser generates it and stores it on your phone. It doesn't come from your phone's hardware and says nothing about you. It lets the venue give one coupon per phone in a set period, and lets your answers be found if you ask for them to be deleted.
- Your visit to the survey: when you opened it, how far you got and whether you finished, the language, the type of device (phone, tablet or computer), your browser's user agent, your IP address and the country it belongs to.
4. Why
- To give the venue your feedback, and to give you the coupon you're offered.
- To stop abuse: one coupon per phone in a set period, and a limit on how many answers one IP address can send in an hour.
- To show the venue how its survey performs, for example how many people who open it finish it. That is counted across all guests, never per person.
The legal basis is the venue's legitimate interest in hearing from its guests and preventing abuse (GDPR Article 6(1)(f)). Answering is up to you. You can close the survey at any point.
5. What the survey stores in your browser
| Name | What it is | How long |
|---|---|---|
kiwiback_device_fingerprint |
The random device ID above (local storage) | Until you clear the site's data |
kiwiback_survey_… |
Your answers so far, so a reload doesn't lose them (session storage) | Until you submit or close the tab |
kiwiback_session_… |
Ties the steps of one visit together (session storage) | Until you close the tab |
locale |
A cookie with the language you picked, set only if you change it | One year |
No advertising or analytics cookies, and no tracking by third parties. If the page hits an error, a technical report goes to our error monitoring (Sentry), through our own server.
6. Who sees it
- The venue sees your answers and your coupon in its Kiwiback app. Its app doesn't show your IP address or browser details.
- Kiwiback stores everything on the venue's behalf, and looks at it only to run and fix the service or when the venue asks for help.
- Our providers: Hetzner (servers in Germany), Cloudflare (network) and Sentry (error reports, in Germany). The full list is in our privacy policy.
If you tap Send to WhatsApp, your own WhatsApp sends the coupon link to the venue's WhatsApp number. That message goes from you to the venue, and Kiwiback receives none of it. A link to leave a Google review takes you to Google, under Google's own privacy policy.
7. How long it's kept
For as long as the venue uses Kiwiback, unless the venue deletes it sooner. When the venue's location or account is deleted, everything recorded about its guests is deleted at once and can't be recovered.
8. Your rights
You can ask to see your answers, or to have them deleted. Ask the venue first, since it is responsible for them. You can also write to us at [email protected], and we'll help the venue answer you.
Since we don't know your name, tell us the venue, roughly when you answered, and anything that helps us find your answers. We'll delete what we can link to you.
You can also complain to a data protection authority where you live or work, or where the venue is.