PRIVACY POLICY

According to the obligations established in the Spanish Organic Law 3/2018 of 5 December, on Data Protection and Guarantee of Digital Rights, you are hereby informed of the processing of your personal data:

Who is responsible for the processing of your data?

PLACE ANALYTICS, S.L.. TAX ID: ESB74387366

Address: C. Catedrático Álvarez Buylla 59 N 33013, Oviedo, Asturias, Spain

Email: rgpd@betterplaceapp.com

Web: www.betterplaceweb.com

Data protection officer: PRODAT PRINCIPADO, S.L. – TORRECERREDO, 4 – BAJO – 33012 OVIEDO – 985 11 40 57 – DPDASTURIAS@PRODAT.ES

You can contact us in any way to communicate with us.

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend you check it, and if you have registered and you log in to your account or profile, you will be informed of any changes.

If you belong to one of the following groups, please check the drop-down information:

+ WEBSITE OR EMAIL CONTACTS

What data do we gather through the website?

We can process your IP, what operating system or browser you use, and even the length of your visit, anonymously.

If you provide us with information in the contact form, you will identify yourself so as to be contacted, if necessary.

What is the legal basis for the processing of your data?

  • To answer your queries, applications or requests.
  • To manage the requested service, answer your application, or process your request.
  • For information concerning your application, by electronic means.
  • For commercial or events information by electronic means, provided that express authorisation has been given.
  • To perform analyses and improvements on the website, about our products and services. To improve our commercial strategy.

What is the legal basis for the processing of your data?

The acceptance and consent of the interested party: Whenever it is necessary to fill in a form and click on the submit button to make a request, to complete the form shall necessarily imply that you have been informed and have expressly given your consent to the content of the clause annexed to said form or acceptance of the privacy policy.

All our forms show the symbol * when data are obligatory. If you do not complete these fields, or do not tick the acceptance checkbox for the privacy policy, sending the information will not be allowed. The following formula is usually shown: “□I am over the age 14 and I have read and accept the Privacy Policy”.

+ NEWSLETTER CONTACTS

What data do we collect through the newsletter?

You can subscribe to the Newsletter on the Web if you provide us with an e-mail address, to which the newsletter will be sent.

We will only store your e-mail in our database, and then we will send you e-mails periodically, until you request cancellation, or we stop sending e-mails.

You will always have the option to cancel your subscription, in any communication.

For what purposes do we process your personal data?

  • To manage the requested service.
  • For information concerning your application, by electronic means.
  • For commercial or events information by electronic means, provided that express authorisation has been given.
  • To perform analysis and improvements in mailing, to improve our commercial strategy.

What is the legal basis for the processing of your data?

The acceptance and consent of the interested party: For those cases where you subscribe, it will be necessary to accept a checkbox and click on the submit button. This will necessarily imply that you have been informed and have expressly granted your consent to receiving the newsletter.

If you do not tick the acceptance checkbox for the privacy policy, sending of the information will not be allowed. The following formula is usually shown: “□I am over the age 14 and I have read and accept the Privacy Policy”.

+ CLIENTS

For what purposes do we process your personal data?

  • Preparation of the budget and monitoring of the same through communications between both parties.
  • For information concerning your application, by electronic means.
  • For commercial or events information by electronic means, provided that express authorisation has been given.
  • Manage the administrative, communications and logistical services provided by the Controller.
  • Invoicing and filing of the appropriate taxes.
  • Carrying out the corresponding transactions.
  • Control and collection procedures.

+ QUALITY SURVEYS

For what purposes do we process your personal data?

  • To assess the level of quality in the service provided.
  • To improve the services offered, in accordance with ISO standards.

What is the legal basis for the processing of your data?

The legal basis is the express consent of the survey respondent.

+ SUPPLIERS

For what purposes do we process your personal data?

  • For information concerning your application, by electronic means.
  • For commercial or events information by electronic means, provided that express authorisation has been given.
  • Manage the administrative, communications and logistical services provided by the Controller.
  • Invoicing.
  • Carrying out the corresponding transactions.
  • Invoicing and filing of the appropriate taxes.
  • Control and collection procedures.

What is the legal basis for the processing of your data?

The legal basis is the acceptance of a contractual relationship, or failing that, your consent to contact us or offer us your products by any means.

+ SOCIAL MEDIA CONTACTS

For what purposes do we process your personal data?

  • To answer your queries, applications or requests.
  • To manage the requested service, answer your application, or process your request.
  • To connect with you and create a community of followers.

How long do we keep personal data?

We can only consult or cancel your data in a restricted way as they are part of a specific profile. We will handle them for as long as you allow us to do so by following us, being a friend or by clicking “like”, “continue” or similar buttons.

Any rectification of your data or restriction on information or publications must be made through the configuration of your profile or user on the social network itself.

+ JOB SEEKERS

For what purposes do we process your personal data?

  • Organisation of selection processes for the recruitment of employees.
  • To arrange job interviews and evaluate your application.
  • If you have given us your consent, we can pass it on to collaborating companies or similar, with the sole purpose of helping you find a job.
  • If you tick the checkbox to accept the privacy policy, you give us your consent to pass your job application on to the entities that make up the group of companies in order for you to be included in their personnel selection processes.

We also inform you that one year after receiving your curriculum vitae, we will proceed to its secure destruction.

What is the legal basis for the processing of your data?

The legal basis is your unequivocal consent by sending us your CV.

Do we include third-party personal data?

No, as a general rule we only handle the personal data provided by the data subjects. If you supply us with third-party data, before you do so you must inform such third party and ask for its consent; otherwise, you hold us harmless for noncompliance with this requirement.

And children’s data?

We do not handle data of children under the age of 14. Therefore, please refrain from providing such data if you are under the age of 14 or, as the case may be, from supplying data about third parties who are not of said age. PLACE ANALYTICS, S.L. disclaims any liability for failure to comply with this provision.

Do we send communications by electronic means?

  • They are made only to deal with your application if electronic communication is one of the means of communication you have supplied us with.
  • If we make any commercial communications, it will be because they have been previously and expressly authorized by you.

What security measures do we apply?

You can rest easy: We have adopted an optimal level of protection for the Personal Data we handle and have installed all the technical means and measures at our disposal according to the state of technology to avoid personal data loss, misuse, alteration, unauthorized access and theft.

Who will your data be transferred to?

Your data will not be transferred to third parties, unless there is a legal obligation to do so. In particular, your data shall be disclosed to the State Agency of Tax Administration and to banks and financial entities for collection for the service provided or product acquired and to those in charge of data processing, as necessary to perform the agreement.

In the event of purchase or payment, if you choose an application, platform, bank card, or another on-line service, your data will be transferred to that platform or will be processed in its environment, always with the utmost security.

When requested by us, the web development and maintenance company, or the hosting company, will have access to our web. These companies will have signed a service provision agreement that obliges them to uphold the same privacy standards as we do.

What are your rights?

  • To know if we are processing your data or not.
  • To access your personal data.
  • To request rectification of your data if they are wrong.
  • To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
  • To request limited processing of your data, in certain situations, in which case we will keep them only in accordance with the regulations in force.
  • To transfer your data, which will be provided to you in a structured, commonly used or machine-readable format. If preferred, we can send them to the new manager you designate. This is valid only in certain cases.
  • To file a complaint with the Spanish Data Protection Agency or competent supervisory authority if you consider that we have not provided you with the correct service.
  • To withdraw your consent for any processing for which you gave your consent, at any time.

If you modify any data, please let us know, so as to keep them updated.

Would you like a form to exercise your rights?

  • We have forms for you to exercise your rights. You can request them by email, or if you prefer, you can use the forms prepared by the Spanish Data Protection Agency or third parties.
  • These forms must be electronically signed or accompanied by a photocopy of your National ID card.
  • If someone represents you, you must attach copy of their ID card, or they must sign with their electronic signature.
  • Forms may be submitted in person, sent by letter or by mail to the address of the Data Controller mentioned at the beginning of this section.

How long do we take to reply to the exercise of your rights?

This depends on the right. However, it will take a maximum of one month from your request, and two months if the subject matter is highly complex and you have been notified that we need more time.

Do we process cookies?

If we use other types of cookies that are not necessary, you can consult the cookies policy in the corresponding link from the homepage of our website.

How long do we keep your personal data?

  • Your personal data are kept for as long as you have a relation with us.
  • Once that relation is terminated, the personal data processed for each purpose will be kept for the legally established periods, including the period within which a judge or a court may request them, the statute of limitations for legal actions being taken into account.
  • Processed data will be kept for as long as the legal deadlines referred to above do not expire, if there is a legal obligation to keep them, or, if there is no legal deadline, until the interested party requests to have such data suppressed or the consent given by such interested party is withdrawn.
  • We will keep all information and communications about your purchase or the provision of our service for as long as the guarantees of products or services are valid, so as to deal with possible claims.

+ USE OF GOOGLE DATA

Optional connection with Google Contacts

The Client may optionally connect their Google account from the integrations section of REALMAKER AI in order to activate synchronisation with Google Contacts. This connection uses Google OAuth 2.0 and requests the permission https://www.googleapis.com/auth/contacts, which allows reading, creating, updating and deleting Google contacts on behalf of the connected user, exclusively to provide the contact synchronisation functionality.

Google data we access

When the Client authorises the connection, REALMAKER AI may access and process the following Google data:

  1. Data from the connected Google account: name and email address of the account, for the purpose of showing the Client which account is linked.
  2. Google Contacts data: names, telephone numbers, email addresses, contact notes or biographies, technical identifiers of the Google contact, update metadata, etags, deletion marks and technical synchronisation tokens. REALMAKER AI only imports contacts that contain a telephone number into the platform, although the Google API may return other contacts during the reading process.
  3. Authorisation and synchronisation data: OAuth access and refresh tokens, token type, expiry date, permissions granted, temporary state/verifier of the OAuth flow, date of last synchronisation, technical synchronisation errors, synchronisation job logs and technical mappings between Google contacts and REALMAKER AI contacts.

Use of Google data

REALMAKER AI uses Google data only to:

  1. Authenticate and maintain the connection authorised by the Client.
  2. Import into REALMAKER AI Google contacts that have a telephone number.
  3. Maintain bidirectional synchronisation between Google Contacts and REALMAKER AI contacts.
  4. Create, update or delete contacts in Google Contacts when the Client modifies synchronised contacts in REALMAKER AI.
  5. Show the connection status, the connected account, the last synchronisation and the technical synchronisation results.
  6. Resolve technical incidents and ensure the security and proper functioning of the integration.

REALMAKER AI does not use data obtained from Google Contacts for advertising, data sales, the creation of commercial profiles unrelated to the Service, or the training of artificial intelligence models. The use of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

Communication or transfer of Google data

REALMAKER AI does not sell or rent Google Contacts data and does not share them with other Clients.

Google data may be processed by the following categories of third parties only when necessary to provide, maintain or protect the Service:

  1. Google, as provider of the APIs used to authorise the connection and synchronise contacts.
  2. Infrastructure, hosting, database, security, monitoring and technical support providers, subject to contractual confidentiality and data protection obligations.
  3. Public authorities, judges, courts or competent administrations, where there is a legal obligation.

When a contact imported from Google is subsequently used by the Client within other REALMAKER AI functionalities, such as lead management, conversations, alerts or visit bookings, its data will be processed in accordance with the general purposes described in this Privacy Policy.

Storage and protection

Google data are stored in REALMAKER AI systems while the integration remains connected or while necessary to provide the Service. OAuth tokens are kept to allow automatic and manual synchronisation without requesting a new authorisation for each use.

REALMAKER AI applies technical and organisational measures aimed at protecting these data, including encrypted communications, access control, limitation of privileges, activity logging and monitoring, database security measures, backups, incident management and data processing agreements with providers involved in the provision of the Service.

Retention, disconnection and deletion

Temporary data from the OAuth flow are kept for the time strictly necessary to complete the authorisation.

The Client may disconnect the Google Contacts integration at any time from the platform. When the integration is disconnected, REALMAKER AI revokes Google tokens where possible, deletes the stored OAuth tokens, deletes the linked Google account data and deletes the technical synchronisation mappings. From that moment, REALMAKER AI stops synchronising data with Google Contacts.

Disconnecting Google Contacts does not automatically delete from REALMAKER AI the contacts that had already been imported, as they become part of the Client’s address book/contacts within the Service. The Client may delete them from the platform or request their deletion through the channels indicated in this Policy. Disconnection also does not automatically delete the existing contacts in the Client’s Google account, which must be managed from Google Contacts.

The Client may also request the deletion of their data or delete their account in accordance with the corresponding section of this Policy. In the event of account deletion, REALMAKER AI will delete the data associated with the user in accordance with the applicable legal retention periods and will revoke the connection with Google Contacts where appropriate.