Privacy policy
Last updated: 26 October 2026
This policy explains how the website companysimulator.app handles personal data, in line with the EU General Data Protection Regulation (GDPR) and Spain's data protection law (LOPDGDD). The website does not use forms, advertising or tracking cookies, and collects as little as it can.
It covers this website only. The Company Simulator application (reached through "Sign in") has its own privacy terms, agreed with each customer.
1. Who is responsible for your data
- Controller
- Juan Manuel Calisto, self-employed (autónomo), trading as Company Simulator
- Tax ID (NIF)
- Y6676197R
- Address
- Carrer de Garcilaso 163, 08027 Barcelona, Spain
- [email protected]
We have not appointed a Data Protection Officer, as the law does not require one for this activity. Write to the email above for anything about your data.
2. What we collect and why
Visiting the website
When you open a page, your browser sends technical data that any website receives: your IP address, browser type, the page requested and the time. Our host, Cloudflare, uses it to deliver the page and protect the site from attacks and abuse.
- Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
- Retention: we do not keep server logs ourselves. Cloudflare keeps security logs for a short period under its own policy.
Visit statistics
We use Cloudflare Web Analytics to count visits: which pages are read, from which country and referring site, and on which kind of device. It uses no cookies, does not store anything on your device, does not fingerprint you and does not follow you across websites. We only see totals, never individual visitors.
- Legal basis: our legitimate interest in understanding which parts of the site are useful (Art. 6(1)(f) GDPR).
- Retention: aggregated statistics, kept by Cloudflare for up to 6 months.
Emailing us
If you write to [email protected], we receive your email address, your name if you give it, and whatever you write. We use it to answer you and, if you ask, to arrange a demo or a pilot.
- Legal basis: steps you ask us to take before a possible contract (Art. 6(1)(b) GDPR), or our legitimate interest in answering messages (Art. 6(1)(f) GDPR).
- Retention: as long as the conversation needs, and no more than 2 years after our last contact, unless you become a customer.
Booking a demo
The "Book a demo" buttons open a booking page hosted by Google Calendar. There you give your name, email and a time slot, and the demo itself runs on Google Meet. Google processes this on our behalf under its data processing terms for Google Workspace.
- Legal basis: steps you ask us to take before a possible contract (Art. 6(1)(b) GDPR).
- Retention: the calendar entry and our notes are kept for no more than 2 years after the demo, unless you become a customer.
We do not sell your data, use it for advertising, or make automated decisions about you. We will not add you to a mailing list without asking.
3. Who else handles your data
We use these providers, each bound by a data processing agreement:
| Provider | What for | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting, security, visit statistics and forwarding email | Global network; company in the USA |
| Google Ireland Ltd. (Google Workspace) | Email inbox, demo booking page and video calls | EU and USA |
Both companies may process data in the United States. They are certified under the EU–US Data Privacy Framework, which the European Commission recognises as giving adequate protection (Art. 45 GDPR), and also sign the Commission's Standard Contractual Clauses (Art. 46 GDPR).
We may also share data if the law requires it, for example with a court or the authorities.
4. Your rights
You can ask us, at any time and free of charge, to:
- tell you what data we hold about you and give you a copy (access),
- correct it (rectification),
- delete it (erasure),
- limit what we do with it (restriction),
- stop using it on the basis of legitimate interest (objection),
- send it to you or another company in a common format (portability).
Write to [email protected]. We answer within one month. We may ask you to confirm your identity first.
If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid) or to the authority where you live. We would appreciate the chance to fix it first.
5. Children
This website is for businesses. It is not meant for children under 14, and we do not knowingly collect their data.
6. Cookies
The website sets no cookies of its own. See the cookie policy for the one setting it stores on your device.
7. Changes
If we change how we handle data, we will update this page and the date at the top.