Privacy policy
01Data controller
The controller of your personal data is:
- Owner
- SUNDER PROJECTS, S.L.
- Tax ID (NIF)
- B56195290
- Address
- Camino Cuesta del Palmar, s/n, 29130 Alhaurín de la Torre (Málaga), Spain
For any question about your data, write to us at that address.
02Data we collect
This site has no forms, asks no one to sign up and uses no analytics or advertising cookies. We only process personal data in these cases:
- When you call us, email us or send us a message on Instagram: your name, your contact details and whatever you tell us (your car and what you want to do with it, for example).
- If we prepare a quote or do a job: the data needed to do it and invoice it.
- When you visit the site: the server logs technical data of the connection (IP address, browser, page and time), for security.
03Purpose and legal basis
- Answering your enquiry: steps you ask for before a contract (article 6.1.b GDPR).
- Preparing quotes, doing the work and invoicing it: performance of the contract (article 6.1.b) and our legal, accounting and tax obligations (article 6.1.c).
- Keeping the site secure (server logs): legitimate interest (article 6.1.f).
We do not use your data to send you advertising, make no automated decisions and build no profiles.
04Retention
- Enquiries that do not lead to a job: as long as needed to answer you and, at most, 1 year.
- Customers: while the relationship lasts and, after it, for the periods the law sets (six years for commercial records and four for tax records).
- Server logs: at most 30 days.
05Recipients
We do not share your data with anyone, unless the law requires it (with the tax authority, for example).
Some providers process data on our behalf, under contract and only to provide their service: the hosting of the site (Vercel Inc., United States) and email (Google (Gmail)).
If you write to us on Instagram, Meta Platforms Ireland Ltd. processes your messages under its own privacy policy. This may involve transfers to the United States, covered by the EU-US Data Privacy Framework.
06Your rights
You can ask us at any time to access, correct or erase your data, to object to or restrict its processing, and to receive it in a format you can take elsewhere (portability). If you gave us your consent, you can withdraw it whenever you like.
Write to sundermotorworks@gmail.com saying which right you want to exercise. If we have doubts about your identity, we may ask you to prove it. We will answer within one month at most.
If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).