Privacy Policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, repealing Directive 95/46/EC (hereinafter RGPD), Law 34/2002 of 11 July, on information society services and electronic commerce (hereinafter, LSSI-CE) and the Organic Law 3/2018, on Personal Data Protection and guarantee of digital rights SUMBOX CARCELÉN PITALUGA guarantees the protection and confidentiality of personal data, of any kind provided by our customers, in accordance with the provisions of the General Regulation on the Protection of Personal Data.

The Data Protection Policy of SUMBOX  is based on the principle of proactive responsibility, according to which the Data Controller is responsible for compliance with the regulatory and jurisprudential framework, being able to prove it to the relevant supervisory authorities.

The data provided will be treated in accordance with the terms established in the RGPD, in this regard SUMBOX has adopted the legally required levels of protection, and has installed all the technical measures available to prevent loss, misuse, alteration, unauthorized access by third parties, as described below. However, the user should be aware that security measures on the Internet are not impregnable.

Responsible for the treatment: Who are we?

Title: SUMBOX WORLDWIDE, S.L.

VAT NUMBER: B66707654

Address: COMTE BORRELL 318, BAJOS DERECHA 08029 BARCELONA

Phone: 687823821

E-mail: info@sumbox.com

Purpose of processing: What will we use your data for?

All data provided by our customers and/or visitors to the SUMBOX website or its staff, will be included in the register of personal data processing activities, created and maintained under the responsibility of SUMBOX, essential to provide the services requested by users, or to resolve doubts or questions raised by our visitors. It is our policy not to profile users of our services.

Legitimacy of the treatment: Why do we need your data?
  1. a) Contractual relationship: It is the one that applies when you contract any of our services.
  2. b) Legitimate interest: To attend to the queries and claims that you submit to us and to manage the collection of the amounts owed.
  3. c) Your consent: If you are a user of our website, by checking the box on the contact form, you authorize us to send you the necessary communications to respond to your query or request for information.
Recipients: With whom do we share your data?

We do not disclose your personal data to anyone, except for those public or private entities to which we are obliged to provide your personal data in order to comply with any law. For example, the Tax Law requires that certain information on economic transactions exceeding a certain amount must be provided to the Tax Agency.

In the event that, apart from the aforementioned cases, we need to disclose your personal information to other entities, we will request your prior permission through clear options that will allow you to decide in this regard.

Communication: Where can we send your data?

We will not make international transfers of your personal data for any of the above purposes.

Retention: How long will we keep your data?

We will only retain your personal information for as long as necessary to achieve the purposes for which it was collected. In determining the appropriate retention period, we consider the risks involved in the processing, as well as our contractual, legal and regulatory obligations, internal data retention policies and our legitimate business interests as described in this Privacy Notice and Cookie Policy.

In this sense, SUMBOX will keep the personal data once its relationship with you has ended, duly blocked, during the period of prescription of the actions that could derive from the relationship maintained with the interested party.

Once blocked, your data will be inaccessible to SUMBOX, and will not be processed except to make them available to the Public Administrations, Judges and Courts, for the attention of possible liabilities arising from the processing, as well as for the exercise and defense of claims before the Spanish Data Protection Agency.

Security: How will we protect your data?

We use all reasonable efforts to maintain the confidentiality of personal information processed on our systems. We maintain strict levels of security to protect the personal data we process against accidental loss and against unauthorized access, processing or disclosure, taking into account the state of technology, nature and risks to which the data is exposed. However, we cannot be held responsible for the use you make of the data (including username and password) you use on our website. Our staff follows strict privacy standards and in the event that we contract with third parties to provide support services, we require them to abide by the same standards and allow us to audit them for compliance.

Your rights: What rights can you exercise as a data subject?

We inform you that you may exercise the following rights:

  1. a) Right of access to your personal data, to know which are being processed and the processing operations carried out with them;
  2. b) The right to rectify any inaccurate personal data;
  3. c) The right to erasure of your personal data, where this is possible (e.g., by law);
  4. d) The right to limit the processing of your personal data when the accuracy, lawfulness or necessity of the data processing is in doubt, in which case, we may retain them for the exercise or defense of claims.
  5. e) The right to object to the processing of your personal data, when the legal basis that enables us to process them is our legitimate interest. SUMBOX will stop processing your data unless it has a legitimate interest or it is necessary for the defense of claims.
  6. f) Right to data portability, when the legal basis that enables us to process your data is the existence of a contractual relationship or your consent.
  7. g) Right to revoke the consent given to SUMBOX. 
Guardianship of rights: Where can you file a claim?

In case you understand that your rights have been disregarded by our entity, you can file a complaint with the Spanish Data Protection Agency, through any of the following means:

Electronic headquarters: https://www.aepd.es

Postal address: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001, Madrid.

Telephone: 901.100.099 y 912.663.517

Filing a complaint with the Spanish Data Protection Agency does not entail any cost and the assistance of a lawyer or solicitor is not required.

Updates: What changes may be made to this Privacy Policy?

SUMBOX reserves the right to modify this policy to adapt it to new legislation or jurisprudence that may affect its compliance.