IViewMedia ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Dutch privacy law.
The data controller is IViewMedia, reachable at info@iviewmedia.io.
1. Data We Collect
Account data
When you create an account, we collect your name, company name, email address, and billing address. This data is necessary to provide the Service and process payments.
Payment data
Payment card details are processed directly by Stripe and are never stored on our servers. We store only a reference to your Stripe customer ID and subscription status.
Media content
Photos, floorplans, PDFs, videos, and logos you upload are stored on Amazon Web Services S3. This content belongs to you and is used solely to display your property viewers.
Usage data
We collect anonymous visitor statistics for each viewer you create: page views, unique visitors (identified by a persistent browser identifier), call clicks, and social shares. We do not collect names or email addresses of property viewer visitors.
Contact form data
If you contact us via our website contact form, we collect your name, company, email address, and message content solely to respond to your enquiry.
Technical data
We collect standard server logs including IP addresses, browser type, and request timestamps for security and operational purposes. These logs are retained for a maximum of 30 days.
2. How We Use Your Data
- To provide, operate, and improve the Service
- To process payments and manage your subscription
- To send transactional emails (password reset, subscription notifications)
- To respond to support requests and enquiries
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
We do not use your data for advertising purposes and we do not sell your data to third parties.
3. Legal Basis for Processing
- Contract performance — processing necessary to deliver the Service you subscribed to
- Legitimate interests — security monitoring, fraud prevention, and service improvement
- Legal obligation — compliance with tax and financial regulations
- Consent — where we ask for your explicit consent (e.g. marketing communications)
4. Sub-processors
We use the following trusted third-party services to operate the platform. Each acts as a data processor under a formal agreement:
5. Data Retention
We retain your account data for as long as your account is active. Upon account termination:
- Media files (photos, floorplans, PDFs, logos) are deleted from AWS S3 within 15 days
- Account data is deleted within 30 days, except where retention is required by law (e.g. financial records, which are retained for 7 years)
- Server logs are deleted after 30 days
- Viewer statistics (anonymous) may be retained in aggregated form
6. Cookies and Tracking
Our platform uses a single persistent browser identifier (ivm_visitor_id) stored in the visitor's browser localStorage to count unique visitors to property viewers. This identifier contains no personal information and is not linked to any individual.
We do not use advertising cookies, tracking pixels, or third-party analytics services (such as Google Analytics).
Our website may use essential session cookies for authentication purposes only.
7. Your Rights Under GDPR
As a data subject under EU/GDPR law, you have the following rights:
To exercise any of these rights, contact us at info@iviewmedia.io. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encrypted connections (HTTPS/TLS) for all data in transit
- Encrypted storage for sensitive data at rest
- Access controls limiting data access to authorised personnel only
- Regular security updates and monitoring
- S3 bucket access restricted via IAM policies — media files are served via signed URLs
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.
9. International Transfers
Your data is primarily processed within the European Economic Area (EEA). Where data is transferred outside the EEA (e.g. some Stripe and AWS infrastructure), such transfers are protected by Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice in the platform. The "last updated" date at the top of this page reflects the most recent revision.
11. Contact
For privacy-related questions, requests, or complaints, please contact us at:
IViewMedia
Email: info@iviewmedia.io
Iview Media B.V. · KVK 81134169 · BTW NL004524922B61
A. Hofmanweg 1A, 2031 BH Haarlem, Nederland