Legal

Privacy Policy

Introduction

At Summa Comunicació, S.A. ("Summa"), we are committed to providing you with the best possible experience through our products and services. To achieve this, it is sometimes necessary to collect and process personal information.

Your privacy is important to us, and we are committed to being transparent about how we collect, use and protect your personal data.

Accordingly, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR) and Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE), Summa, acting as the Data Controller, informs users that any personal data provided through this website will be processed in accordance with this Privacy Policy.

Our Commitment to Your Privacy

Our commitment to protecting your personal data is based on the following principles:

We collect only the information necessary to provide our services and improve your user experience.
We are transparent about the personal data we collect and the reasons why we collect it.
We process your personal data lawfully, fairly and transparently, always in compliance with applicable legislation.
Whenever your consent is required, we will request it explicitly before processing your personal data.
We understand that your personal data belongs to you. Therefore, you may request that we stop processing your data whenever legally applicable.
Protecting the security and confidentiality of your personal information is one of our highest priorities.

Data Controller

The Data Controller responsible for processing your personal data is:

Summa Comunicació, S.A. ("Summa")
Tax Identification Number (NIF): A58933581
Address: Calle Badajoz 127, Units 3–4, 08018 Barcelona, Spain
Telephone: +34 932 081 090
Email: barcelona@summa.es

Barcelona Mercantile Registry: Volume 10813, Book 9765, Section 2, Folio 210, Sheet B-125239, Entry 1.

For any questions relating to this Privacy Policy or the processing of your personal data, you may contact us using the details above.

What Personal Data Do We Collect?

Depending on your interaction with our website and services, we may collect the following categories of personal data:

Identification Data

Name.

Contact Details

Telephone number.
Email address.

Technical Information

When you access our website, certain technical information may be collected automatically, including:

IP address.
Date and time of access.
Internet browser information.
Device operating system.
Technical information relating to your visit.

Information You Voluntarily Provide

We may also process any additional information that you choose to provide voluntarily through:

Contact forms.
Information requests.
Email communications.
Any other communications you send us.

Please note that, in certain cases, providing personal data through our forms is mandatory in order to access specific services offered through the website. Failure to provide the required information or to accept this Privacy Policy may prevent you from registering, subscribing or participating in services or promotions where personal data is required.

Why Do We Process Your Personal Data?

At Summa, we process the personal data provided by users for the following purposes:

To respond to requests for information, enquiries or contact forms submitted through the website.
To manage and maintain our relationship with clients, users, suppliers and business partners.
To provide the products and services requested by users.
To manage the contractual relationship, including quotations, contracts, invoicing and customer support.
To carry out commercial communications where legally permitted.
To personalise the user experience by analysing user preferences and interests. Where applicable, this may include automated assessments, customer segmentation and profiling, always in accordance with applicable legislation.
To improve the functionality, performance and security of our website and services.
To comply with our legal obligations, including responding to requests from public authorities, regulatory bodies or courts where required by law.
To prevent fraud and protect the legitimate interests of Summa.

Where required by law, your personal data may also be processed for auditing, accounting, tax, legal or administrative purposes.

Legal Basis for Processing

The processing of your personal data is based on one or more of the following legal grounds, depending on the purpose of the processing:

Your consent, where you voluntarily provide your data through contact forms, newsletter subscriptions or requests for information.
The performance of a contract or the implementation of pre-contractual measures requested by you.
Compliance with legal obligations applicable to Summa.
The legitimate interests of Summa, including maintaining customer relationships, improving our services, ensuring the security of our systems and, where permitted by law, sending information about products or services that may be of interest to you.

Where profiling or automated decision-making requires your explicit consent under applicable legislation, such consent will always be requested beforehand.

How Long Do We Keep Your Data?

Your personal data will only be retained for as long as necessary to fulfil the purposes for which it was collected.

In particular:

Data relating to enquiries or requests for information will be retained for the time necessary to respond to your request.
Customer and supplier data will be retained for the duration of the contractual relationship and, subsequently, for the legally required retention periods.
Data processed for marketing communications will be retained until you withdraw your consent or object to receiving such communications.
Technical and browsing data will be retained in accordance with our Cookie Policy and applicable legislation.

Once the applicable retention periods have expired, your personal data will be securely deleted or anonymised.

Who Do We Share Your Data With?

As a general rule, Summa does not sell or disclose personal data to third parties.

However, where necessary for the provision of our services or to comply with legal obligations, your personal data may be shared with:

Technology and cloud hosting providers.
IT support and maintenance providers.
Email and communication service providers.
Financial institutions for payment processing.
Professional advisers, auditors or legal consultants.
Public authorities, courts or regulatory bodies where disclosure is required by law.

Any third-party service provider processing personal data on behalf of Summa will do so as a Data Processor, under the terms required by Article 28 of the GDPR, and only in accordance with our documented instructions.

Where Is Your Data Stored?

As a general rule, your personal data is stored within the European Economic Area (EEA).

Should it become necessary to transfer personal data outside the EEA, Summa will ensure that such transfers are carried out in accordance with the GDPR and are subject to appropriate safeguards, including, where applicable:

An adequacy decision adopted by the European Commission.
Standard Contractual Clauses (SCCs).
Any other lawful transfer mechanism recognised under applicable data protection legislation.

What Are Your Rights?

Under the General Data Protection Regulation (GDPR), you have the right to exercise the following rights regarding your personal data:

Right of Access

You have the right to obtain confirmation as to whether we are processing your personal data and, where that is the case, to access that information.

Right to Rectification

You may request the correction of inaccurate or incomplete personal data.

Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected or where another legal basis for erasure applies.

Right to Restriction of Processing

You may request that we restrict the processing of your personal data in the circumstances provided for by applicable legislation.

Right to Object

You may object to the processing of your personal data where such processing is based on our legitimate interests or is carried out for direct marketing purposes.

Right to Data Portability

Where applicable, you may request a copy of your personal data in a structured, commonly used and machine-readable format, or request that it be transferred directly to another data controller where technically feasible.

Right Not to Be Subject to Automated Individual Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, where such decision produces legal effects concerning you or similarly significantly affects you, except where otherwise permitted by applicable law.

How Can You Exercise Your Rights?

You may exercise any of the rights described above by contacting us at:

Email: barcelona@summa.es

To protect your privacy, we may request information necessary to verify your identity before processing your request.

If you believe that the processing of your personal data does not comply with applicable data protection legislation, you also have the right to lodge a complaint with the competent data protection supervisory authority, including the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) where appropriate.

Accuracy of the Information Provided

Users are solely responsible for ensuring that the personal data they provide is accurate, complete and up to date.

By submitting personal data, users warrant that the information provided is truthful and undertake to notify Summa of any changes or updates.

Summa reserves the right to suspend or terminate services where inaccurate, false, incomplete or outdated information has been provided.

Summa accepts no responsibility for information originating from third parties or external sources and shall not be liable for any damages resulting from reliance on such information.

Likewise, Summa reserves the right to update, modify or remove the information contained on its website, or to restrict access to such information where appropriate.

Security of Personal Data

Summa has implemented the technical and organisational measures required by applicable legislation to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Although we make every reasonable effort to safeguard your personal information, no Internet transmission or electronic storage system can be guaranteed to be completely secure.

Accordingly, while Summa applies appropriate security measures, users acknowledge that Internet security cannot be guaranteed absolutely.

Children's Privacy

Our website is not intended for children who are not legally entitled to provide consent under the applicable data protection legislation.

Where the processing of a minor's personal data requires parental or legal guardian authorisation, such authorisation must be obtained before any processing takes place.

If Summa becomes aware that personal data has been collected from a minor without the required legal authorisation, appropriate steps will be taken to delete such information as soon as reasonably possible.

Links to Third-Party Websites

Our website may contain links to external websites operated by third parties.

Once you leave our website, any personal data you provide will be subject to the privacy policy of the relevant third party.

Summa accepts no responsibility for the privacy practices, content or data processing activities carried out by external websites.

Changes to This Privacy Policy

Summa reserves the right to modify this Privacy Policy at any time in order to adapt it to legislative developments, regulatory requirements or changes in the services provided.

Any updates will be published on this page.

We encourage users to review this Privacy Policy periodically to remain informed about how we protect their personal data.