Privacy policy

1. Data controller

In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we inform you that personal data provided through this Website will be processed by:

Controller: Altoclick S.L.

Tax ID: ESB64562044

Address: C/ Cecs de la Boquería 4, 3 A – 08002 – Barcelona, Spain

Phone: +34 931 006 305

Contact email: info@bestviews.ai

2. Personal data we process

We may process the following categories of data:

Registration data: name, surname, email, password, language, company, country.

Billing data: company name, tax ID, billing address, payment data (managed by the payment provider).

Platform usage data: projects created, tools used, access date and time, IP address, device type, browser, technical logs.

Uploaded images and files: property photographs and other graphic resources necessary to provide the Service.

Support data: messages sent through contact forms, chat or email.

Commercial data: newsletter subscription, communication preferences, email open/click history.

In principle, we do not collect special categories of data (sensitive data). If the User decides to upload images containing personal data, they will be solely responsible for having an adequate legal basis for doing so.

3. Purposes and legal bases

We process your data for the following purposes:

Account management and provision of BestViews Service Account creation, access to the Platform and use of tools. Legal basis: contract execution (art. 6.1.b GDPR).

Billing and compliance with legal obligations Payment management, invoice issuance, accounting and tax obligations. Legal basis: compliance with legal obligation (art. 6.1.c GDPR).

Customer service and support Response to queries, incidents or information requests. Legal basis: contract execution (art. 6.1.b GDPR) or legitimate interest (art. 6.1.f GDPR) when you are not yet a customer.

Platform maintenance, security and improvement Analyze usage, detect errors, prevent abuse and improve performance. Legal basis: legitimate interest of Altoclick S.L. (art. 6.1.f GDPR).

Sending commercial communications Information about Service improvements, new functionalities, usage tips and, where applicable, BestViews-related promotions. Legal basis: Legitimate interest for customers who have already contracted (similar services) or consent for users who are not yet customers. You can unsubscribe at any time.

Web analytics and cookies Use of technical, analytical and, where applicable, marketing cookies, as detailed in the Cookie Policy. Legal basis: legitimate interest (technical cookies) and consent (analytics/marketing).

4. Retention period

In general:

We retain your data as long as you maintain an active account or there is a contractual relationship with you.

Once the relationship has ended, we will keep the data blocked for the applicable legal periods (for example, 6 years for accounting and tax documentation).

Data used for commercial communications will be retained until you object or request their deletion.

Uploaded images and files will be retained as long as you maintain the projects or do not delete them; they may remain in backups for a limited time.

5. Recipients and data processors

Your data may be communicated to:

Service providers acting as data processors (hosting services, cloud infrastructure, email tools, support, analytics, payment gateways, etc.), with whom contracts required by the GDPR have been signed.

Public administrations and authorities when there is a legal obligation.

In case of international data transfers outside the European Economic Area, Altoclick S.L. will ensure that they are carried out with the appropriate safeguards (standard contractual clauses, adequacy decisions or other mechanisms provided by the GDPR).

6. User rights

You may exercise the following rights, under the terms provided in the regulations:

Right of access: know what data we process.

Right of rectification: request the correction of inaccurate data.

Right of erasure: request the deletion of your data when they are no longer necessary.

Right of restriction: temporarily restrict processing in certain cases.

Right to object: object to processing based on legitimate interest.

Right to portability: receive your data in a structured format and transmit them to another controller.

To exercise them, send a written request to info@bestviews.ai indicating the right you wish to exercise and including a copy of an identification document.

If you consider that your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es) or another competent supervisory authority.

7. Minors

BestViews is not aimed at minors under 18 years of age. If we detect that data from minors have been collected without authorization, we will proceed to their immediate deletion.

8. Security

Altoclick S.L. applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration or destruction, in accordance with the state of the art and the associated risks.

9. Changes to the Privacy Policy

We may update this Privacy Policy to adapt it to legal changes or the evolution of the Service. The current version will always be available on the Website, and you will be notified of relevant changes through the Platform or by email.

10. Additional information for United States users (including California)

To the extent that United States privacy legislation applies to certain users (for example, the California Consumer Privacy Act – CCPA, as amended by the California Privacy Rights Act – CPRA, or other similar state laws), this section provides additional information on how we process personal data of United States residents, particularly California residents.

10.1. Categories of personal information we may process

For the purposes described in this Policy, and when applicable to users in the United States, we may have collected the following categories of personal information (as generally defined in the CCPA/CPRA):

Identifiers: name, surname, email address, account identifiers, online identifiers (for example, IP address, cookie identifiers).

Commercial information: data related to subscriptions, contracted plans, billing histories (not including complete card data), pack purchases, etc.

Internet or electronic network activity information: Platform usage data, access logs, interaction with functionalities, technical logs, device and browser information.

Professional or business-related information: company, position, sector and other similar data when acting on behalf of an organization.

Content you provide us: images and files you upload to the Platform (property photographs or other content necessary to provide the service).

We do not deliberately process special categories of sensitive data under California regulations, nor do we knowingly collect information from minors under 16 years of age.

10.2. Sources from which we obtain information

The above categories may be obtained from:

Information you provide directly when registering, contracting a plan, uploading content or contacting us.

Data automatically generated by use of the Platform (logs, usage analytics).

Cookies and similar technologies (according to the Cookie Policy).

10.3. Business and commercial purposes

The purposes for which we may use personal information of United States residents are essentially the same as those described in the previous sections of this Policy, including:

Provision and maintenance of the BestViews Platform.

Management of the contractual relationship and billing.

Security, fraud prevention and service improvement.

Usage analytics and development of new functionalities.

Service-related communications and, where appropriate, commercial communications about similar products or services.

10.4. Sale or sharing of personal information

Altoclick S.L. does not sell personal information of users in the traditional sense (receiving money in exchange for personal data).

Certain third-party cookies or technologies could be considered, under some US state regulations, as "sale" or "sharing" for targeted advertising purposes. To the extent this may apply:

Such use is primarily limited to analytics and digital marketing.

You can manage your preferences through the cookie banner and cookie configuration panel available on the Website.

Our business model does not include commercialization of user databases.

We do not knowingly collect personal information from minors under 16 years of age, nor do we sell or share such information.

10.5. Privacy rights of California and other state residents

To the extent that the CCPA/CPRA or other similar state laws apply, California residents (and, as applicable, residents of other states) may have the right to:

Right to access / know: request information about the categories of personal information collected, sources, purposes and third parties to whom it is communicated or shared.

Right to access specific data: receive a copy of certain personal data we have collected about you.

Right to correction: request correction of inaccurate personal information.

Right to deletion: request deletion of your personal information, with exceptions provided by law (for example, legal obligations, security, fraud prevention).

Right to opt-out of sale or sharing: object to the "sale" or "sharing" of your personal information for targeted advertising, in cases where applicable.

Right to limit use of sensitive personal information (if we were to collect such information).

Right not to receive discriminatory treatment for exercising your privacy rights.

10.6. How to exercise your privacy rights in the United States

If you are a resident of California or another state with applicable privacy legislation, you can exercise your rights as follows:

By sending an email to: info@bestviews.ai

Subject: "Privacy request – USA"

In your request, clearly indicate:

What right you wish to exercise (access, deletion, correction, etc.).

From which country/state you are contacting us (for example, "California, USA").

The email address associated with your BestViews account.

To protect your privacy, we may request reasonable additional information to verify your identity before processing the request.

If your state's legislation permits, you may also designate an authorized agent to submit requests on your behalf; in that case, we may require documentation proving such authorization.

10.7. Contact and complaints

If you have any questions about this section or how we apply United States privacy regulations, you can write to us at: info@bestviews.ai

Notwithstanding the above, for matters related to the GDPR and European regulations, you may contact the Spanish Data Protection Agency (AEPD) or another competent supervisory authority in the EU, as indicated in the previous sections of this Policy.