Privacy Policy - The Best Viewpoints

Effective date: 24 June 2026

This Privacy Policy explains how The Best Viewpoints processes personal data when you visit the website, contact us, subscribe to the newsletter or purchase and use a digital product such as the Interactive Stockholm Map.

1. Data controller

The data controller is:

Jaromir Zaoral
The Best Viewpoints
Swedish sole trader (enskild näringsidkare)
Organisation number: 891230-1291
VAT number: SE891230129101
Address: Parkvägen 16, 194 34 Upplands Väsby, Sweden
Email: info@thebestviewpoints.com

Contact info@thebestviewpoints.com for questions about this policy or to exercise a data-protection right.

2. Personal data we process

Depending on how you interact with us, we may process:

your name and contact details;
the email address used for an order;
the email address connected to the Google account selected for map access;
country, currency and limited billing details supplied through Stripe/Link;
order number, product, price, payment status, refund status and transaction date;
map-access records, including the authorised Google account and permission status;
communications, support requests and information you provide to resolve a problem;
newsletter subscription, consent and unsubscribe records;
IP address, device, browser, cookie identifiers and website interaction data, where you consent to analytics or advertising technologies; and
security and technical logs necessary to protect the website and delivery system.

We do not receive or store complete payment-card details. Stripe and its payment partners process those details.

3. Why we use personal data

Orders, delivery and map access

We use order and Google-account information to:

confirm and fulfil the purchase;
deliver the instruction PDF;
grant and maintain private map access;
send necessary service messages;
correct delivery errors;
provide customer support; and
remove access after expiry, refund, withdrawal or serious licence misuse.

Legal basis: performance of a contract and steps requested before entering a contract.

Payment, tax and accounting

We use limited transaction records to reconcile payments, refunds and payouts and to comply with bookkeeping, tax and legal obligations.

Legal basis: legal obligation and, where necessary, performance of the contract.

Product security and misuse prevention

We may use order, access and technical records to prevent unauthorised sharing, investigate security incidents and protect the private map and our legal rights.

Legal basis: legitimate interests in protecting the product, customers and business, balanced against the individual’s rights.

Customer communications

We use information in enquiries and complaints to respond, troubleshoot access and document how a matter was resolved.

Legal basis: performance of the contract, legal obligations and legitimate interests in managing customer relationships and legal claims.

The Best Viewpoints Newsletter

We use your email address to send The Best Viewpoints Newsletter only when you have made a separate, voluntary choice to subscribe. Newsletter consent is not required to purchase the map.

Legal basis: consent. You can unsubscribe at any time through the link in every newsletter or by contacting us.

Analytics and advertising

With your cookie consent, we use Google Analytics to understand website use and Meta Pixel to measure or personalise advertising. Google Tag Manager is used to manage website tags and must respect your consent choice.

Legal basis: consent. Non-essential analytics and advertising technologies should not activate before consent.

4. Sources of personal data

We receive personal data:

directly from you when you purchase, submit the Google-account email, subscribe or contact us;
from Stripe/Link in connection with a completed, failed, refunded or disputed transaction; and
from the website and consented analytics or advertising technologies when you use the site.

5. Service providers and recipients

We may share or make data available to the following recipients where necessary:

Stripe and Link

Stripe Managed Payments and Link process checkout, payment, indirect tax, receipts, invoices, refunds, fraud prevention and transaction-level customer support. Stripe/Link and The Best Viewpoints act as independent controllers for relevant transaction data, each under its own privacy information and legal responsibilities.

Google

Google processes the Google-account email and related information necessary to grant and maintain access to Google My Maps. Google also provides Google Analytics and Google Tag Manager where you have consented to those technologies.

Kit

Kit processes newsletter email addresses, consent records, delivery activity and unsubscribe requests for The Best Viewpoints Newsletter.

Make.com

Make.com may process order identifiers, email addresses, Google-account emails and delivery status solely to automate map access, delivery messages, access removal and internal order logging.

one.com and website providers

one.com hosts or supports relevant website and email services. WordPress, security, backup and consent-management providers may process limited technical data where necessary to operate and protect the website.

Professional and legal recipients

Information may be shared with accountants, professional advisers, insurers, public authorities or courts where necessary to comply with law, establish or defend legal claims or protect legal rights.

We do not sell personal data.

6. International data transfers

Some providers, including Google, Stripe, Kit, Make.com and Meta, may process data outside Sweden or the European Economic Area.

Where required, transfers are protected using an applicable adequacy decision, the EU–US Data Privacy Framework, European Commission standard contractual clauses or another lawful safeguard. Additional information is available in each provider’s privacy notice.

7. Retention

We retain personal data only for as long as necessary for the stated purpose:

Map permission: while the customer has active access. The permission is removed following expiry, a completed refund or valid termination.
Order and access records: during the access period and normally for up to three years afterwards where necessary for support, complaint handling, licence enforcement or legal claims.
Accounting records: for the period required by Swedish bookkeeping law, generally seven years after the end of the calendar year in which the relevant financial year ended.
Support communications: normally for up to three years after the matter is closed, unless a longer period is required for an unresolved claim or legal obligation.
Newsletter information: until you unsubscribe or withdraw consent. A minimal suppression record may be retained to ensure that no further marketing is sent and to document compliance.
Analytics and advertising data: according to the configured retention period, provider settings and your consent. You may withdraw consent at any time. Aggregated statistics that no longer identify an individual may be retained longer.
Security logs: only for a proportionate period necessary to detect, investigate and prevent security incidents.

8. Necessary emails and marketing emails

Order confirmations, access instructions, service notices, important map-access information and responses to support requests are necessary transactional communications. They are not newsletter marketing and may be sent without newsletter consent where necessary to perform the contract.

The Best Viewpoints Newsletter and promotional messages require a separate voluntary subscription. Refusing or withdrawing newsletter consent does not affect a purchase or map access.

9. Cookies

The website uses necessary cookies and, with consent, analytics and advertising technologies. More information appears in the Cookie Policy and consent settings.

You can reject non-essential technologies and change your choice later through the persistent Cookie settings link on the website.

10. Your rights

Subject to applicable law and relevant exceptions, you may have the right to:

receive information about how your data is used;
request access to your personal data;
correct inaccurate or incomplete information;
request deletion;
restrict processing;
object to processing based on legitimate interests;
receive certain data in a portable format;
withdraw consent at any time; and
lodge a complaint with a supervisory authority.

Withdrawing consent does not make processing that occurred before withdrawal unlawful. Some information cannot be deleted immediately when it must be retained for accounting, fraud prevention, contractual or legal purposes.

To exercise a right, contact info@thebestviewpoints.com. We may request reasonable information to verify your identity.

The Swedish supervisory authority is:

Integritetsskyddsmyndigheten (IMY)
https://www.imy.se/

11. Stripe, Google and other independent controllers

Some providers determine their own purposes and methods for parts of their processing. Requests concerning payment-card data, a Link account, a Google account or a Meta account may need to be directed to the relevant provider. We will provide reasonable assistance where appropriate.

12. Security

We use reasonable technical and organisational safeguards, including restricted map permissions, account access controls, two-factor authentication where available and limited access to customer information.

No online service can guarantee absolute security. Customers should protect their Google and email accounts and notify us promptly if they believe map access or personal information has been compromised.

13. Children

The product and newsletter are not intentionally directed to children who cannot lawfully enter the relevant agreement or provide valid consent. A parent or legal guardian should make the purchase where required.

14. Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change. The current effective date appears at the top. Material changes will be communicated where required by law.