Privacy Policy

Effective date: 24 June 2026

This Privacy Policy explains how The Best Viewpoints processes personal data when you visit the website, contact us, subscribe to the newsletter or purchase and use a digital product such as the Interactive Stockholm Map.

1. Data controller

The data controller is:

Jaromir Zaoral
The Best Viewpoints
Swedish sole trader (enskild näringsidkare)
Organisation number: 891230-1291
VAT number: SE891230129101
Address: Parkvägen 16, 194 34 Upplands Väsby, Sweden
Email: info@thebestviewpoints.com

Contact info@thebestviewpoints.com for questions about this policy or to exercise a data-protection right.

2. Personal data we process

Depending on how you interact with us, we may process:

  • your name and contact details;
  • the email address used for an order;
  • the email address connected to the Google account selected for map access;
  • country, currency and limited billing details supplied through Stripe/Link;
  • order number, product, price, payment status, refund status and transaction date;
  • map-access records, including the authorised Google account and permission status;
  • communications, support requests and information you provide to resolve a problem;
  • newsletter subscription, consent and unsubscribe records;
  • IP address, device, browser, cookie identifiers and website interaction data, where you consent to analytics or advertising technologies; and
  • security and technical logs necessary to protect the website and delivery system.

We do not receive or store complete payment-card details. Stripe and its payment partners process those details.

3. Why we use personal data

Orders, delivery and map access

We use order and Google-account information to:

  • confirm and fulfil the purchase;
  • deliver the instruction PDF;
  • grant and maintain private map access;
  • send necessary service messages;
  • correct delivery errors;
  • provide customer support; and
  • remove access after expiry, refund, withdrawal or serious licence misuse.

Legal basis: performance of a contract and steps requested before entering a contract.

Payment, tax and accounting

We use limited transaction records to reconcile payments, refunds and payouts and to comply with bookkeeping, tax and legal obligations.

Legal basis: legal obligation and, where necessary, performance of the contract.

Product security and misuse prevention

We may use order, access and technical records to prevent unauthorised sharing, investigate security incidents and protect the private map and our legal rights.

Legal basis: legitimate interests in protecting the product, customers and business, balanced against the individual’s rights.

Customer communications

We use information in enquiries and complaints to respond, troubleshoot access and document how a matter was resolved.

Legal basis: performance of the contract, legal obligations and legitimate interests in managing customer relationships and legal claims.

The Best Viewpoints Newsletter

We use your email address to send The Best Viewpoints Newsletter only when you have made a separate, voluntary choice to subscribe. Newsletter consent is not required to purchase the map.

Legal basis: consent. You can unsubscribe at any time through the link in every newsletter or by contacting us.

Analytics and advertising

With your cookie consent, we use Google Analytics to understand website use and Meta Pixel to measure or personalise advertising. Google Tag Manager is used to manage website tags and must respect your consent choice.

Legal basis: consent. Non-essential analytics and advertising technologies should not activate before consent.

4. Sources of personal data

We receive personal data:

  • directly from you when you purchase, submit the Google-account email, subscribe or contact us;
  • from Stripe/Link in connection with a completed, failed, refunded or disputed transaction; and
  • from the website and consented analytics or advertising technologies when you use the site.

5. Service providers and recipients

We may share or make data available to the following recipients where necessary:

Stripe and Link

Stripe Managed Payments and Link process checkout, payment, indirect tax, receipts, invoices, refunds, fraud prevention and transaction-level customer support. Stripe/Link and The Best Viewpoints act as independent controllers for relevant transaction data, each under its own privacy information and legal responsibilities.

Google

Google processes the Google-account email and related information necessary to grant and maintain access to Google My Maps. Google also provides Google Analytics and Google Tag Manager where you have consented to those technologies.

Kit

Kit processes newsletter email addresses, consent records, delivery activity and unsubscribe requests for The Best Viewpoints Newsletter.

Make.com

Make.com may process order identifiers, email addresses, Google-account emails and delivery status solely to automate map access, delivery messages, access removal and internal order logging.

Meta

Meta Platforms processes website and advertising-event information through Meta Pixel only where you have consented to marketing technologies.

one.com and website providers

one.com hosts or supports relevant website and email services. WordPress, security, backup and consent-management providers may process limited technical data where necessary to operate and protect the website.

Professional and legal recipients

Information may be shared with accountants, professional advisers, insurers, public authorities or courts where necessary to comply with law, establish or defend legal claims or protect legal rights.

We do not sell personal data.

Mediavine Programmatic Advertising (Ver 1.1)

The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a “device”) by the web server so that a website can remember some information about your browsing activity on the Website.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, “Tags”) may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser’s cache. The “help” feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser’s cache. For more information about cookies and how to disable them, you can consult the information at All About Cookies.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.

The Website collects the following data using a cookie when serving personalized ads:

  • IP Address
  • Operating System type
  • Operating System version
  • Device Type
  • Language of the website
  • Web browser type
  • Email (in hashed form)

Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor’s referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit National Advertising Initiative opt out page. You may also visit Digital Advertising Alliance website and Network Advertising Initiative website to learn more information about interest-based advertising. You may download the AppChoices app at Digital Advertising Alliance’s AppChoices app to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each collects and their data collection and privacy policies, please visit Mediavine Partners.

6. International data transfers

Some providers, including Google, Stripe, Kit, Make.com and Meta, may process data outside Sweden or the European Economic Area.

Where required, transfers are protected using an applicable adequacy decision, the EU–US Data Privacy Framework, European Commission standard contractual clauses or another lawful safeguard. Additional information is available in each provider’s privacy notice.

7. Retention

We retain personal data only for as long as necessary for the stated purpose:

  • Map permission: while the customer has active access. The permission is removed following expiry, a completed refund or valid termination.
  • Order and access records: during the access period and normally for up to three years afterwards where necessary for support, complaint handling, licence enforcement or legal claims.
  • Accounting records: for the period required by Swedish bookkeeping law, generally seven years after the end of the calendar year in which the relevant financial year ended.
  • Support communications: normally for up to three years after the matter is closed, unless a longer period is required for an unresolved claim or legal obligation.
  • Newsletter information: until you unsubscribe or withdraw consent. A minimal suppression record may be retained to ensure that no further marketing is sent and to document compliance.
  • Analytics and advertising data: according to the configured retention period, provider settings and your consent. You may withdraw consent at any time. Aggregated statistics that no longer identify an individual may be retained longer.
  • Security logs: only for a proportionate period necessary to detect, investigate and prevent security incidents.

8. Necessary emails and marketing emails

Order confirmations, access instructions, service notices, important map-access information and responses to support requests are necessary transactional communications. They are not newsletter marketing and may be sent without newsletter consent where necessary to perform the contract.

The Best Viewpoints Newsletter and promotional messages require a separate voluntary subscription. Refusing or withdrawing newsletter consent does not affect a purchase or map access.

9. Cookies

The website uses necessary cookies and, with consent, analytics and advertising technologies. More information appears in the Cookie Policy and consent settings.

You can reject non-essential technologies and change your choice later through the persistent Cookie settings link on the website.

10. Your rights

Subject to applicable law and relevant exceptions, you may have the right to:

  • receive information about how your data is used;
  • request access to your personal data;
  • correct inaccurate or incomplete information;
  • request deletion;
  • restrict processing;
  • object to processing based on legitimate interests;
  • receive certain data in a portable format;
  • withdraw consent at any time; and
  • lodge a complaint with a supervisory authority.

Withdrawing consent does not make processing that occurred before withdrawal unlawful. Some information cannot be deleted immediately when it must be retained for accounting, fraud prevention, contractual or legal purposes.

To exercise a right, contact info@thebestviewpoints.com. We may request reasonable information to verify your identity.

The Swedish supervisory authority is:

Integritetsskyddsmyndigheten (IMY)
https://www.imy.se/

11. Stripe, Google and other independent controllers

Some providers determine their own purposes and methods for parts of their processing. Requests concerning payment-card data, a Link account, a Google account or a Meta account may need to be directed to the relevant provider. We will provide reasonable assistance where appropriate.

12. Security

We use reasonable technical and organisational safeguards, including restricted map permissions, account access controls, two-factor authentication where available and limited access to customer information.

No online service can guarantee absolute security. Customers should protect their Google and email accounts and notify us promptly if they believe map access or personal information has been compromised.

13. Children

The product and newsletter are not intentionally directed to children who cannot lawfully enter the relevant agreement or provide valid consent. A parent or legal guardian should make the purchase where required.

14. Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change. The current effective date appears at the top. Material changes will be communicated where required by law.