Beyond Reality AR

Privacy Policy

1) What data we collect

• Identification and contact data: name, business email, phone, company, role, country/region.
• Professional and transactional data: project details you share with us, meeting notes, demo requests, support tickets.
• Technical data: IP address, device and browser identifiers, language, pages viewed, referral sources, session metadata.
• Preference and communication data: consents, newsletter preferences, forms history.

2) How we collect data

• Directly from you (forms, emails, events, demos).
• Automatically through cookies and similar technologies (see Cookie Policy).
• From third parties (e.g., partners or integrators) when you authorize them to share data with us.

3) Purposes of processing

We process personal data for the following purposes:

• Responding to enquiries and demo requests.
• Providing product information and updates (when you opt in).
• Customer administration and technical support.
• Website analytics and service improvement.
• Security, fraud prevention and legal compliance.

4) Legal bases (GDPR Art. 6)

• Consent (e.g., marketing subscriptions, optional cookies).
• Pre‑contractual/contractual necessity (e.g., demos, proposals, support to clients).
• Legitimate interests (e.g., service security, basic analytics, B2B communications aligned with expectations).
• Legal obligations (e.g., tax and accounting record‑keeping).

5) Data retention

We retain personal data only as long as necessary for the purposes above and to meet legal requirements. Typical retention:

• Commercial contacts: up to 24 months from last interaction.
• Clients and suppliers: while the relationship remains and for statutory limitation periods.
• Cookies: per the durations set in the Cookie Policy and your preferences.

6) Sharing and recipients

We do not sell personal data. We may share data with:

• Service providers (hosting, CRM, analytics, email delivery) under data‑processing agreements that ensure GDPR compliance.
• Partners/integrators when collaboration requires it and you have requested or authorized the interaction.
• Authorities when legally required.

7) International transfers

When using service providers located outside the EEA, we rely on adequacy decisions (Art. 45 GDPR) or Standard Contractual Clauses (Art. 46 GDPR) with supplementary safeguards as needed.

8) Your rights

• You may access, rectify, erase, and port your data, and request restriction or object to processing.
• Where processing is based on consent, you can withdraw consent at any time without affecting the lawfulness of prior processing.
• To exercise your rights, contact: info@beyondreality-ar.tech (include proof of identity if needed).
• If you consider your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Authority (AEPD).

9) Security

We apply technical and organizational measures appropriate to risk, including encrypted transport (TLS), access controls, least‑privilege practices and vendor due diligence.

10) Changes

We may update this policy to reflect legal, technical or business changes. We will post the latest version on this page and, where appropriate, notify you.