We respect your privacy. This website collects only voluntary inquiry information you explicitly provide (such as your name, business email, and message) and limited, anonymised server analytics for security monitoring and performance optimisation. We do not deploy marketing cookies, advertising pixels, or third-party tracking tools. For details on how Dealyv processes data as part of its B2B services, please refer to the Web Legal Terms section below. To request access, rectification, or deletion of your data, contact our Data Protection Officer at ****************.
By accessing or using this website you agree to the following terms. If you do not agree, please discontinue use immediately.
Legal Entity: Dealyv operates under the legal representation of MOST IBERIA GROUP S.L. (CIF ESB42580480) until its full incorporation as an independent entity.
Registered Office: Carrer Cirerer 7A, Denia, Alicante (Spain) — official address of MOST IBERIA GROUP S.L., registered under Spanish commercial legislation.
Jurisdiction: Spain (European Union)
Data Protection Officer (DPO): Anita Shneider Miro. Responsible for ensuring Dealyv's compliance with EU GDPR and Spanish data-protection law. She may be contacted via the details below.
Contact for Data Inquiries: ****************
Company Registration: MOST IBERIA GROUP S.L. — registered in the Registro Mercantil de Alicante, Spain.
In the course of providing the Dealyv lead-qualification and automation services (the "Services"), MOST IBERIA GROUP S.L., acting on behalf of Dealyv, processes limited personal data that has been lawfully collected by its business customers (the "Controllers").
The categories of data that may be processed include:
No additional categories of personal data are collected or inferred by Dealyv.
All personal data processed by Dealyv originates exclusively from the Customer's own lead-generation systems, including their CRM platforms, lead forms, or authorised WhatsApp integrations.
Dealyv processes personal data only for the following limited and explicit purposes:
Processing is carried out pursuant to Article 6(1)(b) GDPR (contractual necessity) and Article 6(1)(f) GDPR (legitimate interest) of the Customer in optimising sales efficiency, with Dealyv acting under written instructions from the Controller.
Dealyv retains only non-identifiable technical and performance metadata for up to 90 days following the conclusion of the lead's active lifecycle (which may last up to six months), unless longer retention is required by law or by explicit instruction of the Controller. See Section 3.4 for the full retention and deletion policy.
After expiration of the retention period, data are securely deleted or irreversibly anonymised.
Dealyv shall not use, sell, lease, or otherwise disclose personal data for marketing, profiling, or any purpose other than those expressly defined herein and in the applicable Data Processing Agreement (DPA).
For the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679 – "GDPR"), MOST IBERIA GROUP S.L., acting on behalf of Dealyv, acts as a Data Processor, processing personal data solely on the documented instructions of its business customers (the "Controllers").
The Controllers remain responsible for determining the lawful basis of processing and ensuring compliance with data-subject notification requirements.
Dealyv's data-processing environment is hosted within secure, GDPR-compliant data centers located in the European Union (EEA) to guarantee that all personal data remain protected under EU data-protection law.
Following Dealyv's formal incorporation, certain customers who so elect may have their data processed within data centers based in the United Arab Emirates (UAE).
Any such transfer will occur only after prior written notification to the Controller and will be governed by Standard Contractual Clauses (SCCs) or equivalent safeguards in accordance with Articles 44–46 of the GDPR.
Dealyv implements a "security-by-design and by-default" framework consistent with GDPR Articles 25–32.
Technical and organisational measures include:
Dealyv aligns its processing with the six-month lifecycle of each lead managed on behalf of the Controller.
Operational and performance metadata are retained for up to 90 days following the conclusion of the lead's active lifecycle, unless a longer period is required by law or specified contractually.
After the retention period expires, all personal or pseudonymised data are securely deleted or irreversibly anonymised using verified erasure protocols consistent with industry best practices.
Dealyv does not transfer personal data outside the EEA except when necessary for contractual performance and where adequate safeguards are applied, including:
All subprocessors and infrastructure partners engaged by Dealyv are contractually required to maintain security and privacy protections equivalent to those mandated under EU data-protection law.
To deliver its AI-driven lead-revival and qualification services, Dealyv engages a limited number of verified technology partners ("Sub-Processors").
These partners provide secure infrastructure, communication channels, and natural-language processing functions essential to the operation of the platform.
All subprocessors are contractually bound to comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679) and to implement equivalent data-protection standards.
The categories of subprocessors engaged include:
Each sub-processor operates under a written data-processing agreement that mirrors the obligations of Article 28 GDPR, including confidentiality, security, deletion, and audit rights.
Dealyv performs periodic due-diligence reviews of all subprocessors and provides prior notification of any material changes to its sub-processor list, ensuring Controllers retain oversight and objection rights.
Dealyv's public website is intended exclusively for business-to-business communication with real-estate agencies and developers.
All inquiry data are used exclusively to respond to requests, establish business relationships, and provide information about Dealyv's services in accordance with Article 6(1)(b) GDPR (contractual necessity).
Dealyv maintains an internal register of authorised subprocessors. Controllers will be notified of any intended changes at least 30 days in advance, with the right to object on reasonable data-protection or security grounds.
In accordance with Articles 15 to 22 of the EU General Data Protection Regulation (GDPR), any individual whose personal data are processed through the Dealyv system ("Data Subjects") retains the following rights:
Dealyv facilitates these rights on behalf of its agency clients, who remain the primary Data Controllers. When a lead (end user) submits such a request directly to Dealyv, the request will be forwarded without delay to the relevant Controller for validation and fulfilment.
To ensure authenticity, Dealyv may require verification of the requester's identity before processing any data-related request.
Dealyv and its represented Controllers will respond to all validated requests within 30 days of receipt, in accordance with Article 12(3) GDPR.
If a request is complex or involves multiple datasets, this period may be extended by up to two additional months, with prior written notice to the requester explaining the reason for delay.
For business customers (agency Controllers), Dealyv supports data-export functionality upon confirmation of a custom integration or via secure API connection.
Such exports are provided in a structured, machine-readable format consistent with Article 20 GDPR.
Dealyv ensures that exports contain only data belonging to the requesting Controller and that no other customer environments are affected.
Data Protection Officer (DPO): Anita Shneider Miro
Email: ****************
All privacy-related inquiries, complaints, or concerns regarding Dealyv's processing activities should be directed to the DPO. If an individual believes their data rights have been infringed, they also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or another competent supervisory authority within the EEA.
Dealyv processes personal data as necessary for the performance of a contract between its business customers (the Controllers) and Dealyv as their service provider. This includes all processing operations required to:
Such processing is justified under Article 6(1)(b) GDPR ("processing necessary for the performance of a contract").
Dealyv also processes limited pseudonymised and aggregated information to maintain and improve its services, ensure system security, and optimise operational performance. This activity is carried out under Article 6(1)(f) GDPR ("processing necessary for the purposes of legitimate interests") and is always balanced against the rights and freedoms of data subjects.
These legitimate interests include:
Where legitimate-interest processing is applied, Dealyv maintains internal documentation demonstrating the balancing test in accordance with Recital 47 GDPR.
When marketing communications or non-essential analytics are offered to agency customers, such processing is based on explicit, informed consent under Article 6(1)(a) GDPR. Customers may withdraw their consent at any time by contacting Dealyv or by using the unsubscribe or preference-management options provided in the relevant communication.
In certain cases, Dealyv may process or retain specific records to comply with applicable legal or regulatory obligations, such as tax, accounting, or data-protection reporting requirements, pursuant to Article 6(1)(c) GDPR.