Privacy Policy for BC Scan

Effective date: 25 August 2026  
Last updated: 25 August 2026

 

1. App and developer identification

This Privacy Policy applies to BC Scan, the Brandcloud event ticket-scanning application published in the Apple App Store and Google Play Store.

  • App name: BC Scan
  • Developer / publisher name: The Working Group
  • Legal entity responsible for the app: The Working Group BV
  • Registered office: Generaal De Wittelaan 15, 2800 Mechelen, Belgium
  • Belgian company number: 0739.868.587
  • iOS bundle identifier / Android package name: `live.brandcloud.scan`
  • Privacy contact: [email protected]

In this policy, “we”, “us” and “our” refer to The Working Group BV, operating the Brandcloud platform and publishing BC Scan under the developer name Digital TWG.

 

2. Purpose of BC Scan

BC Scan is intended for authorised event staff. It connects to an event in the Brandcloud platform and enables staff to scan ticket QR codes, validate tickets, register check-ins, and review the scanning history for that event.

The organisation responsible for an event (the “event organiser”) determines why attendee and ticket data is processed. For that event data, the event organiser normally acts as the data controller and The Working Group BV processes the data on the organiser’s behalf. The event organiser’s own privacy policy may therefore also apply.

 

3. Information processed through the app

Depending on the event configuration and use of the app, BC Scan may process the following information:

 

Scanner and event configuration

  • The scanning or access code entered by the user;
  • The scanner name entered by the user, which may be a person’s name;
  • Event identifiers and event name;
  • Permitted ticket types and the scanner session expiry time.

 

Ticket and attendee information

  • The unique ticket identifier contained in a scanned QR code;
  • Ticket type, ticket status, check-in status and check-in time;
  • The name or identifier of the scanner that performed the action;
  • Attendee name and email address, when supplied by the event organiser;
  • Event-specific attendee fields and personalised ticket information, when configured by the event organiser;
  • Scan history, including successful and unsuccessful scan attempts and related timestamps.

 

Technical information

The app and the services it connects to may process limited technical information required for security, connectivity, delivery of software updates and reliable operation. This can include IP address, operating system and platform, app version, update channel, network availability, request timestamps, and technical error or server-log information.

BC Scan does not contain advertising SDKs or third-party analytics SDKs. We do not use the app to track users across apps or websites.

 

4. Camera permission and QR codes

BC Scan requests access to the device camera solely to scan event ticket QR codes.

Camera images and video are processed on the device for QR-code recognition. The app does not upload, save or share camera images or video. Only the ticket identifier decoded from a valid QR code is sent to the Brandcloud service for validation and check-in.

Camera access can be denied or revoked through the device settings. Ticket scanning will not function without camera access.

 

5. How information is used

Information is processed only as necessary to:

  • Connect an authorised scanner to an event;
  • Validate ticket QR codes and prevent unauthorised or duplicate entry;
  • Register and display ticket check-ins;
  • Show authorised event staff the event’s scan history and relevant ticket or attendee details;
  • Secure, maintain and troubleshoot the app and Brandcloud service;
  • Provide app and security updates;
  • Comply with applicable legal obligations and establish, exercise or defend legal claims.

Where The Working Group BV determines the purposes of processing, processing is based on the performance of a contract, our legitimate interests in providing and securing the service, compliance with legal obligations, or consent where the law requires it. Where we act for an event organiser, the organiser determines the applicable legal basis.

 

6. Local storage on the device

BC Scan stores the connected scanner configuration locally on the device so that the scanner can remain connected between app sessions. It also stores the user’s light or dark display preference.

The locally stored scanner configuration can be removed by choosing Disconnect Scanner in the app. Uninstalling the app also removes app data from the device, subject to the operating system’s backup and restore functions.

Ticket and attendee history is retrieved from the Brandcloud service when needed and is not intentionally stored by BC Scan as a permanent local history database.

Disconnecting or uninstalling the app does not automatically delete check-in records or server logs held for the event. Requests concerning those records can be made as described in section 10.

 

7. Sharing and service providers

We do not sell personal information.

Information may be accessible to or shared with:

  • The event organiser and its authorised staff;
  • The Working Group BV personnel and contractors who require access to operate, support or secure Brandcloud;
  • Hosting, infrastructure and technical service providers acting under appropriate contractual and confidentiality obligations;
  • Expo Application Services for delivery of over-the-air app updates, where applicable;
  • Apple or Google for app distribution, update delivery and platform security. Their own privacy policies apply to information they process independently;
  • Public authorities or other parties when disclosure is required by law or necessary to protect legal rights or security.

We require service providers acting on our behalf to process information only for the agreed purposes and to apply appropriate safeguards.

 

8. International data transfers

Where personal data is transferred outside the European Economic Area, we use a legally recognised transfer mechanism where required, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary safeguards when appropriate.

 

9. Retention and security

Scanner configuration remains on the device until the scanner is disconnected, the app data is cleared, or the app is uninstalled.

Event, attendee, ticket and scan-history data is retained according to the event organiser’s instructions, the applicable agreement, and legal or security requirements. The exact retention period may therefore differ between events. Technical logs are retained only for as long as reasonably necessary for security, troubleshooting and legal compliance.

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or alteration. No electronic transmission or storage method can be guaranteed to be completely secure.

 

10. Your privacy rights and deletion requests

Depending on applicable law, individuals may have rights to access, correct, delete or restrict the processing of their personal data, object to certain processing, receive portable data, and lodge a complaint with a competent data protection authority.

For attendee or ticket information, please contact the event organiser first, because the organiser normally controls that data and can identify the relevant event and ticket. You may also contact us at [email protected]. Please include enough information to identify the event and relevant record, but do not send passwords, full access codes or unnecessary sensitive information by email.

Where processing is based on consent, consent can be withdrawn without affecting processing that occurred before withdrawal. Individuals in Belgium may lodge a complaint with the Belgian Data Protection Authority at www.dataprotectionauthority.be.

BC Scan does not provide personal end-user accounts. Removing the local scanner connection is available through Config > Disconnect Scanner. Server-side deletion requests are handled through the event organiser or the privacy contact above.

 

11. Children

BC Scan is a professional tool for authorised event staff and is not directed to children. The app does not knowingly invite children to create accounts or use the scanner. An event organiser may process attendee information relating to minors for an event; in that situation, the organiser is responsible for ensuring an appropriate legal basis, information and safeguards.

 

12. Changes to this policy

We may update this Privacy Policy to reflect changes to BC Scan, our processing activities or legal requirements. We will publish the revised policy with a new “Last updated” date. Material changes will be communicated where required by law.

 

13. Contact

For questions, privacy requests or complaints about BC Scan, contact:

The Working Group BV 
Attn. Privacy – BC Scan / Brandcloud  
Generaal De Wittelaan 15  
2800 Mechelen  
Belgium  
Email: [email protected] 
Company number: 0739.868.587