Privacy Statement
Last updated: August 2026
Summa Networks S.L. (“Summa Networks”, “we”, “us”) is committed to protecting your personal data. This privacy statement explains what information we collect, why we collect it, how we use it, and what rights you have under applicable data protection law — in particular the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law on Data Protection (LOPDGDD).
1. Who we are
Summa Networks S.L. is a software company that develops and supplies mobile core network products — including HLR/HSS, PCRF, AAA, SMSC and 5G core functions — to mobile operators, MVNOs and IoT service providers worldwide. We are part of the Enreach group.
Data controller: Summa Networks S.L., Madrid, Spain
Contact: go@summanetworks.com
2. What data we collect and why
2.1 Website visitors
When you visit summanetworks.com, we may collect technical data such as your IP address, browser type, pages visited, and time spent on the site. This data is collected through cookies and analytics tools (including Google Analytics and Google Tag Manager) to help us understand how the site is used and improve its content. Our lawful basis for this processing is legitimate interest (Article 6(1)(f) GDPR).
2.2 Contact and demo requests
When you submit a contact form or request a product demo, we collect your name, email address, company name, job title, and the content of your message. We use this data solely to respond to your inquiry or to schedule and follow up on a product demonstration. Our lawful basis is pre-contractual steps and legitimate interest (Article 6(1)(b) and (f) GDPR).
2.3 Business contacts and customers
When you enter into a business relationship with Summa Networks — as a customer, partner or reseller — we process professional contact details such as name, job title, email address and telephone number. This data is used for account management, product support, billing communications, and to fulfil our contractual obligations. Our lawful basis is performance of a contract (Article 6(1)(b) GDPR).
2.4 Job applicants
If you apply for a position at Summa Networks, we will process the personal data you provide in your application — such as your name, contact details, CV and professional background — for the purpose of evaluating your candidacy. Our lawful basis is pre-contractual steps (Article 6(1)(b) GDPR).
3. How long we keep your data
We retain personal data only for as long as necessary for the purposes described above, or as required by law:
- Website analytics data: up to 26 months.
- Contact inquiries (no contract formed): up to 3 years from the date of last contact.
- Customer and partner data: for the duration of the business relationship and up to 5 years after its end, in accordance with applicable legal and tax obligations.
- Job applicant data: up to 12 months after the end of the recruitment process, unless you have consented to a longer retention period for future opportunities.
4. Who we share your data with
Summa Networks does not sell personal data. We may share data with trusted third-party service providers who process it on our behalf, including:
- Hosting and infrastructure providers (servers located in the EU or with appropriate safeguards).
- Analytics providers (Google Analytics / Google Tag Manager).
- CRM and business communication tools used for customer and prospect management.
All third-party processors are bound by data processing agreements and are required to maintain appropriate security measures. We will also disclose data when legally required to do so by a competent authority.
5. International data transfers
Some of our service providers are located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission — to protect your personal data in accordance with GDPR requirements.
6. Security
Summa Networks is certified to ISO/IEC 27001:2022 — the international standard for information security management. We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction.
7. Your rights
Under GDPR, you have the following rights in relation to your personal data:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: ask us to correct inaccurate or incomplete data.
- Right to erasure: request deletion of your data where there is no legitimate reason for us to continue processing it.
- Right to restriction: ask us to limit how we use your data in certain circumstances.
- Right to data portability: receive your data in a structured, machine-readable format.
- Right to object: object to processing based on legitimate interests.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at go@summanetworks.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Spanish data protection authority: Agencia Española de Protección de Datos (AEPD) — www.aepd.es.
8. Cookies
Our website uses cookies — small text files placed on your device. We use:
- Essential cookies: required for basic website functionality. These cannot be disabled.
- Analytics cookies: used to understand how visitors interact with the site (Google Analytics). You can decline these via the cookie consent banner when you first visit the site.
You can also manage or disable cookies at any time through your browser settings.
9. Changes to this statement
We may update this privacy statement from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. We recommend checking this page periodically.
For any questions about this privacy statement or how we handle your data, please contact us at go@summanetworks.com.
