1. Data controller
| Company name | Summum Civitas S.L. |
| Tax ID (CIF/NIF) | B-47762893 |
| Address | Calle Fray Luis de León, 3 · 1ºB, 47002 Valladolid, Spain |
| Contact | ia@gruposummum.es |
2. Data we collect
We only collect the data that the user voluntarily provides through the contact form:
- Full name.
- Email address.
- Contact telephone number (optional).
- Company or organisation (optional).
- Message content.
We do not collect browsing data, tracking cookies or device information beyond the web server's technical logs (source IP, user agent), which are kept for the minimum time necessary for the security of the service.
3. Purpose and legal basis of processing
| Purpose | Legal basis | Retention period |
|---|---|---|
| Responding to your enquiry sent via the contact form | Explicit consent of the data subject (art. 6.1.a GDPR) | Until the enquiry is resolved and, thereafter, for the time necessary to address any legal liabilities (max. 3 years) |
4. Recipients and data transfers
Summum Civitas S.L. does not transfer or disclose your personal data to third parties, except where required by law or requested by a competent authority.
Data is hosted on servers located in the European Union (hosting provider: Webempresa Europa S.L., Spain). No international data transfers are carried out.
5. Your rights
You can exercise the following rights against Summum Civitas S.L. at any time:
- Access — find out what personal data we process about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request the deletion of your data.
- Objection — object to the processing in certain circumstances.
- Portability — receive your data in a structured format.
- Restriction — request the restriction of processing.
To exercise these rights, send your request in writing to ia@gruposummum.es, indicating the right you wish to exercise and enclosing a copy of your ID document.
If you consider that the processing does not comply with applicable regulations, you can file a complaint with the Spanish Data Protection Agency (aepd.es).
6. Security
Summum Civitas S.L. applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss or accidental destruction, in accordance with the GDPR.
Communications between your browser and the website are encrypted using HTTPS (TLS 1.2+).
7. Changes to this policy
Summum Civitas S.L. may update this privacy policy to adapt it to legal or service changes. We recommend that you review it periodically. The date of the last update appears at the beginning of this document.
8. Aid alerts radar
If you subscribe to the "Aid alerts radar" from ayudas.html to receive email notifications about new grant and subsidy opportunities, this is an additional processing activity, independent from the contact form described in the sections above.
| Purpose | Legal basis | Retention period |
|---|---|---|
| Sending you email alerts about new grant opportunities matching the province and topics you choose | Express consent of the data subject (art. 6.1.a GDPR), given through double opt-in (sign-up email + confirmation click) and revocable at any time | Until you unsubscribe; the fact of unsubscribing is kept as a record of the erasure, to evidence the exercise of the right |
Data processed: email address, province and topics of interest that you select in the form. We do not request your name or any other data, and the IP address used to subscribe is not retained (data minimisation, art. 5.1.c GDPR).
Recipient / processor: these emails are sent through Resend, Inc., a transactional email delivery provider. Resend is based in the United States, outside the European Economic Area; the international transfer of your data to Resend is covered by the European Union Standard Contractual Clauses (SCCs), incorporated into the Data Processing Addendum (DPA) that Resend makes available to its customers (resend.com/legal/dpa). Resend acts as a data processor and only processes your data to deliver the email, following our instructions.
Your rights: you may exercise the same rights of access, rectification, erasure, objection, portability and restriction described in section 5, by writing to ia@gruposummum.es.
One-click unsubscribe: every alert email includes an unsubscribe link that requires no login or further confirmation; using it removes your subscription immediately and you will stop receiving alerts.