1. DATA CONTROLLER

The data controller responsible for the processing of personal data is Sonido Travel Tech SL, a company registered in Spain, operating commercially under the Crystal Sound® brand.

Company name: Sonido Travel Tech SL
Tax ID (NIF): B75271019
Registered address: Calle Ancha del Carmen 46, 3º C, 29002 Málaga, Spain
Website: www.crystalsound.eu

For any inquiries related to this Privacy Policy or the processing of personal data, you may contact us using the contact details available on the Website.

2. TYPE OF PERSONAL DATA COLLECTED

Depending on how Users interact with the Website, Crystal Sound may collect the following categories of Personal Data, either directly or through third parties:

• Contact details (such as name, email address, phone number);
• Company-related information (company name, role, country);
• Usage Data (such as IP address, browser type, operating system, access times);
• Cookies and other tracking technologies;
• Communication data (emails, inquiries, messages sent via contact forms).
• Complete details about each type of Personal Data collected are provided in the relevant sections of this Privacy Policy or through specific information notices displayed prior to data collection.
• Personal Data may be provided voluntarily by the User or, in the case of Usage Data, collected automatically when using the Website.
• Unless explicitly stated otherwise, all data requested by Crystal Sound is mandatory, and failure to provide such data may make it impossible to provide certain services or respond to inquiries.
• Users who are uncertain about which Personal Data is mandatory may contact Crystal Sound for clarification.

3. COOKIES AND TRACKING TECHNOLOGIES

The Website uses cookies and similar tracking technologies to distinguish Users, improve browsing experience, analyze traffic, and enhance Website performance.

Detailed information about the use of cookies and how to manage preferences is available in the Cookie Policy published on the Website.

Any use of cookies or other tracking tools by Crystal Sound or third-party service providers serves the purpose of providing the requested services and improving the Website, in accordance with this Privacy Policy and applicable law.

4. PURPOSES OF PROCESSING PERSONAL DATA

Personal Data concerning Users is collected and processed for the following purposes:

• To provide and manage Website services;
• To respond to inquiries, requests, and communications;
• To prepare quotations, offers, contracts, and commercial proposals;
• To fulfill contractual and legal obligations;
• To improve Website functionality, security, and performance;
• To analyze usage trends and Website traffic;
• To protect Crystal Sound’s rights, property, and legitimate interests;
• To detect and prevent fraudulent or malicious activity.

Where required by applicable law, processing is based on the User’s consent, which may be withdrawn at any time.

5. METHODS OF PROCESSING AND SECURITY MEASURES

Personal Data is processed using computers and IT-enabled tools, following organizational and technical procedures strictly related to the stated purposes.

Crystal Sound implements appropriate technical and organizational security measures to protect Personal Data against unauthorized access, disclosure, alteration, or destruction.

Access to Personal Data is limited to authorized personnel (such as sales, marketing, administration, legal, and IT staff) and to external service providers acting as Data Processors where necessary.

An updated list of Data Processors may be requested from Crystal Sound at any time.

6. PLACE OF DATA PROCESSING AND TRANSFERS

Personal Data is processed at Crystal Sound’s operating offices and in any other locations where the parties involved in the processing are situated.

If Personal Data is transferred outside the European Economic Area (EEA), such transfers shall take place only where adequate safeguards are in place, in compliance with GDPR requirements.

7. DATA RETENTION

Personal Data shall be stored for no longer than is necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law or based on the User’s consent.

8. DISCLOSURE OF PERSONAL DATA

Crystal Sound may share Personal Data with:

• Internal staff and authorized representatives;
• Trusted service providers (such as IT, hosting, analytics, CRM, communication, or logistics providers);
• Public authorities, where required by law.

Personal Data will never be sold or disclosed to third parties for marketing purposes without the User’s explicit consent.

9. USER RIGHTS UNDER GDPR

Users have the right to:

• Access their Personal Data;
• Request rectification or erasure of Personal Data;
• Restrict or object to processing;
• Request data portability;
• Withdraw consent at any time, where processing is based on consent;
• Lodge a complaint with a competent data protection authority.

To exercise these rights, Users may contact Crystal Sound using the contact details available on the Website.

10. THIRD-PARTY WEBSITES

The Website may contain links to third-party websites. Crystal Sound is not responsible for the privacy practices or content of such external websites. Users are encouraged to review the privacy policies of any third-party websites they visit.

11. CHANGES TO THIS PRIVACY POLICY

Crystal Sound reserves the right to update or modify this Privacy Policy at any time. Any changes will be published on this page and, where appropriate, notified to Users by electronic means.

Users are encouraged to review this page regularly to stay informed about how their Personal Data is protected.

12. CONTACT INFORMATION

For any inquiries related to this Privacy Policy or the processing of Personal Data, you may contact Sonido Travel Tech SL, operating commercially under the Crystal Sound® brand, through the information available at www.crystalsound.eu.