In accordance with the provisions of Law 34/2002 on Information Society Services and Electronic Commerce, as well as Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or GDPR), we inform you that ownership of the domain of our website www.evisa-assist.com belongs to Sumando, Servicios Inteligentes SL, with registered address at Calle Río Ulla, 8 – Plt 1 C, 28017 Madrid, Madrid.

Company contact details as data controller

Sumando, Servicios Inteligentes SL
Address: Calle Río Ulla, 8 – Plt 1 C, 28017 Madrid, Madrid
Tel.: +34 91 785 17 07
Email: info@evisa-assist.com

Visiting our website does not imply that the user is required to provide any personal data. However, if the user provides personal information, the data collected on this website will be processed lawfully, fairly, and transparently, in full compliance with Regulation (EU) 2016/679, Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, as well as the rest of the applicable regulations.

Sumando, Servicios Inteligentes SL guarantees the protection of all personal data provided by the user through the website and, in compliance with the applicable regulations, informs you of the following:

All personal data provided to Sumando, Servicios Inteligentes SL, in its capacity as data controller, will be processed under its responsibility. The main purpose of such processing shall be the management, handling, and, where applicable, follow-up of the visa or electronic authorization application requested by the user.

Sumando, Servicios Inteligentes SL guarantees the confidentiality of the data provided and ensures that, under no circumstances, will it be used for purposes other than those for which it was collected, unless required by law or with the prior, express, and informed consent of the data subject. Only data that is adequate, relevant, and limited to what is necessary for the provision of the requested service will be requested.

Users guarantee that the data provided is true, accurate, complete, and up to date, and shall be responsible for any direct or indirect damage or loss that may arise from failure to comply with this obligation. If the data provided belongs to a third party other than the person submitting it, the user guarantees that they have previously informed said third party of the matters contained in this Privacy Policy and have obtained their authorization to provide their data to Sumando, Servicios Inteligentes SL.

The customer must notify Sumando, Servicios Inteligentes SL of any change to their personal data in order to keep it duly updated and ensure the proper management of the service, especially with regard to contact details such as name, address, email address, or telephone number.

In the event that the application or service is contracted by a legal entity, the consent given by its representatives, attorneys-in-fact, or authorized persons, for the purposes of Article 21 of Law 34/2002, shall be understood to have been granted both in their own name and on behalf of the entity they represent.

Consent

The personal data collected through the website forms are necessary in order to properly attend to, manage, and process the request made by the user. Therefore, providing such data is mandatory in those fields identified as required, since, if not provided, Sumando, Servicios Inteligentes SL will not be able to properly deliver the requested service.

By accepting the corresponding conditions and submitting the forms, we understand that the user gives their consent to the processing of their data in accordance with the purposes indicated in each of them. Sumando, Servicios Inteligentes SL will not disclose the data to third parties except in cases provided for by law, when necessary for the provision of the contracted service, or where the data subject has expressly authorized it.

Likewise, Sumando, Servicios Inteligentes SL may send commercial communications by electronic means or equivalent methods related to its services, provided that it has the appropriate legal basis to do so, especially the user’s consent where required by applicable regulations. Consent given for the receipt of commercial communications or for the transfer of data to third parties may be revoked at any time, without retroactive effect.

Legal basis for processing

The legal basis that legitimizes the processing of the data provided by the user is the performance of the contractual or pre-contractual relationship arising from the request or purchase of the service. In cases where advertising or commercial communications are sent, the legal basis shall be the consent previously given by the user, where required by applicable regulations.

Data retention period

The personal data provided by the user will be kept for the time necessary for the provision of the requested service, while the contractual or commercial relationship remains in force and, subsequently, for the periods legally required in order to meet any possible legal or contractual liabilities.

In the case of data provided through contact forms or requests that do not result in a contractual relationship, such data will be retained for a maximum period of two years from the last interaction or confirmation of interest by the user, unless the user requests its deletion beforehand.

Purposes of data processing

We inform you that the data collected may be processed for the following purposes:

Management, review, and resolution of your visa application, electronic authorization, or related administrative procedure.

Sending information on the status of the contracted services.

Sending commercial communications, newsletters, or promotional information by electronic means regarding eVisa Assist, its activities, products, and services, provided there is a legal basis for doing so.

Sending notices or reminders regarding the expiry of contracted services or administrative procedures that must be renewed.

In the collection and processing of personal data, the necessary technical and organizational measures have been adopted to prevent loss, alteration, unauthorized processing, or improper access, in accordance with Regulation (EU) 2016/679.

Sumando, Servicios Inteligentes SL undertakes to protect the confidential information to which it has access and not to use under any circumstances the personal data that the user makes available to it for purposes other than those authorized or incompatible with those for which they were collected.

The user declares that they are over 18 years of age and have sufficient legal capacity to validly consent to the processing of their personal data, all in accordance with the provisions of this Privacy Policy.

Maximum commitment and respect for your data

The user may exercise at any time their rights of access, rectification, erasure, objection, restriction of processing, data portability, and withdrawal of consent previously granted, by means of a written and signed request addressed to Sumando, Servicios Inteligentes SL at the postal address indicated above, enclosing a copy of their DNI/NIF or equivalent proof of identity, or by sending a communication to the following email address:

info@evisa-assist.com

Likewise, we inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe that the processing of your personal data does not comply with the applicable regulations.

The user authorizes the processing of the personal data provided under the terms set out above. For this purpose, they may express their acceptance by clicking the “Submit form” button or the equivalent mechanism included in the relevant data collection form.