1. Data controller
| Company name | Summum Civitas S.L. |
| Tax ID (CIF/NIF) | B-47762893 |
| Address | Calle Fray Luis de León, 3 · 1ºB, 47002 Valladolid, Spain |
| Contact | consultoria@gruposummum.es |
2. Data we collect
We only collect the data that the user voluntarily provides through the contact form:
- Full name.
- Email address.
- Contact phone number (optional).
- Company or organisation (optional).
- Message content.
We collect browsing data in aggregate form through Google Analytics 4, and only if you accept analytics cookies. If you reject them, only the web server's technical logs remain (source IP, user agent), kept for the minimum time necessary for the security of the service. The details are in our cookie policy.
3. Purpose and legal basis for processing
| Purpose | Legal basis | Retention period |
|---|---|---|
| Replying to your query sent through the contact form | Explicit consent of the data subject (art. 6.1.a GDPR) | Until the query has been resolved and, thereafter, the time needed to address possible legal liabilities (max. 3 years) |
4. Recipients and disclosures
Summum Civitas S.L. does not disclose or share your personal data with third parties, except where required by law or requested by a competent authority.
Data is hosted on servers located in the European Union (hosting provider: Hetzner Online GmbH, Germany). No international data transfers are carried out.
5. Your rights
You can exercise the following rights at any time against Summum Civitas S.L.:
- Access — find out what personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request the deletion of your data.
- Objection — object to processing in certain circumstances.
- Portability — receive your data in a structured format.
- Restriction — request the restriction of processing.
To exercise these rights, send your request in writing to consultoria@gruposummum.es, indicating the right you wish to exercise and attaching a copy of your identity document.
If you believe the processing does not comply with applicable regulations, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).
6. Security
Summum Civitas S.L. applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss or accidental destruction, in accordance with the GDPR.
Communications between your browser and the website are encrypted using HTTPS (TLS 1.2+).
7. Changes to this policy
Summum Civitas S.L. may update this privacy policy to adapt it to legal or service changes. We recommend reviewing it periodically. The date of the last update appears at the top of this document.
8. Aid alerts radar
If you subscribe to the "Aid alerts radar" from ayudas.html to receive email notifications about new grant and subsidy opportunities, this is an additional processing activity, independent from the contact form described in the sections above.
| Purpose | Legal basis | Retention period |
|---|---|---|
| Sending you email alerts about new grant opportunities matching the province and topics you choose | Express consent of the data subject (art. 6.1.a GDPR), given through double opt-in (sign-up email + confirmation click) and revocable at any time | Until you unsubscribe; the fact of unsubscribing is kept as a record of the erasure, to evidence the exercise of the right |
Data processed: email address, province and topics of interest that you select in the form. We do not request your name or any other data, and the IP address used to subscribe is not retained (data minimisation, art. 5.1.c GDPR).
Recipient / processor: these emails are sent through Resend, Inc., a transactional email delivery provider. Resend is based in the United States, outside the European Economic Area; the international transfer of your data to Resend is covered by the European Union Standard Contractual Clauses (SCCs), incorporated into the Data Processing Addendum (DPA) that Resend makes available to its customers (resend.com/legal/dpa). Resend acts as a data processor and only processes your data to deliver the email, following our instructions.
Your rights: you may exercise the same rights of access, rectification, erasure, objection, portability and restriction described in section 5, by writing to consultoria@gruposummum.es.
One-click unsubscribe: every alert email includes an unsubscribe link that requires no login or further confirmation; using it removes your subscription immediately and you will stop receiving alerts.