1. Data controller
This website (summy.pro) is operated by Summy. For any matter relating to your personal data you can contact us at info@summy.pro.
2. Data we process
We only process the data you voluntarily provide when filling in one of our forms (Demo, Talk to sales or Contact), along with minimal technical data associated with each submission.
Form data
- Name and surname
- Work email
- Company
- Team size
- Free-form message you choose to include
Technical data
- IP address (used to rate-limit form abuse)
- User-Agent header (browser and operating system)
- Submission timestamp
We do not process special categories of data under Art. 9 GDPR, nor data from minors.
3. Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Reply to your request and manage commercial contact | Pre-contractual measures at your request (Art. 6.1.b GDPR) | 12 months after the last contact |
| Prevent form abuse (rate limiting, anti-bot) | Legitimate interest in protecting the integrity of the service (Art. 6.1.f GDPR) | 30 days |
| Comply with legal obligations (accounting, tax) | Compliance with legal obligation (Art. 6.1.c GDPR) | Applicable legal periods |
4. Recipients and data processors
We do not sell or share your data with third parties for commercial purposes. The only processors that handle the data are listed below, all contractually bound to GDPR compliance:
| Provider | Service | Location | Policy |
|---|---|---|---|
| DonDominio (DNB Soluciones Internet, S.L.) | SMTP email delivery service | Spain (EU) | https://www.dondominio.com/legal/privacidad/ |
| Hetzner Online GmbH | Website hosting | Germany (EU) | https://www.hetzner.com/legal/privacy-policy/ |
5. International transfers
We do not perform international transfers of personal data outside the European Economic Area (EEA). All listed providers process data within the EU.
6. Your rights
As the data subject, you have the following rights over the information we process:
- Access to your personal data
- Rectification of inaccurate data
- Erasure ("right to be forgotten")
- Restriction of processing
- Data portability
- Objection to processing
- Not to be subject to automated decision-making
To exercise them, write to info@summy.pro stating which right you wish to exercise and attaching a copy of your ID or equivalent document proving your identity.
If you believe your right to data protection has been violated, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.
8. Security
We apply reasonable technical and organisational measures to protect your data: encryption in transit (HTTPS), access control over our mailboxes, rate limiting on the forms, and periodic review of providers that process data.
9. Changes to this policy
If we modify this policy, we will publish the new version here with the update date. When changes are substantial, we will announce them visibly on the site.
10. Contact
For any privacy-related question or to exercise your rights, contact us at info@summy.pro.