Privacy policy

Last updated: 2026-06-12 — GDPR (EU) 2016/679 aware

1. Data controller

Email to exercise privacy rights: contact email

2. Purposes of processing

We process personal data for the following purposes:

  1. Technical operation of the site: serving pages, measuring aggregate usage through anonymous analytics, and keeping the service available.
  2. Handling enquiries: replying to messages received at the contact email.
  3. Legal compliance: responding to requests from competent authorities where required.

No automated decision-making producing legal effects or significantly affecting you takes place (Article 22 GDPR). No commercial profiling is performed. The site has no user accounts, no registration, no subscriptions and no paid features. The figures you type into the applicability checker (turnover, headcount, balance-sheet totals, listing flags) are processed entirely in your browser to compute the verdict — they are never transmitted to or stored by us.

3. Lawful bases

4. Categories of data processed

5. Retention

6. Recipients

Data may be disclosed to:

No identifiable personal data is transferred outside the European Economic Area except under the safeguards of Chapter V GDPR (Cloudflare's standard contractual clauses).

7. Your rights

You have the right to:

To exercise any of these rights: email contact email with "Privacy request" in the subject line and proof of identity.

8. Complaints to supervisory authorities

If you consider the processing of your data unlawful, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, https://www.aepd.es/) or with your local EU data protection authority.

9. Source of the data

The personal data processed comes directly from you: technical data collected automatically when you visit the site, or information you voluntarily send by email.

10. Automated decisions

No automated decisions producing legal effects or significantly affecting you are made within the meaning of Article 22 GDPR. The applicability verdict is an indicative computation, not a decision taken by us about you.

11. Registration

The controller keeps the Record of Processing Activities required by Article 30 GDPR, available to the supervisory authority on request.

12. Changes

This privacy policy may be updated to reflect regulatory or operational changes. The current version is always the one published at this URL with the last-updated date shown at the top.

Contact

For any question about the processing of your data: contact email.