Last updated September 2, 2026
Privacy policy
This site is published by OMITSIS CONSULTING SL. This policy says what personal data it collects, why, on what legal basis, how long it is kept, who else sees it and what you can demand of us. It covers this site only; the publisher's other sites have their own.
Who is responsible
The controller is OMITSIS CONSULTING SL, tax ID B64967979, registered at C/ Balmes 76, Principal 2 – 08007 Barcelona, Spain.
For anything in this policy, including exercising the rights below, write to privacidad@omitsis.com. A single address on purpose: a request that has to find the right department is a request that gets lost.
The census itself collects nothing
Every page that publishes census figures is a static file. It sets no cookie, runs no analytics, and asks you for nothing. You can read the whole census without giving us a single piece of personal data, and that is deliberate.
The figures themselves are not personal data: they are measurements of public websites, aggregated by technology, market and country, and published with their sample size.
What we collect, and only when you ask us to
There are exactly three moments where personal data reaches us, and each one starts with you doing something:
- You ask for a report on a web page. We process the address you type, in full: the host and the path. An address is normally not personal data, but it can be — a freelancer's own name in the host, or a name in the path — so we treat the request as if it were. Measuring a page rather than a whole site means the address can say more than a domain did, which is why this says «in full».
- You ask us to email you a report. We process your email address and the page address it is about.
- You buy a report or ask for an audit. We process what the payment and the enquiry need.
Why, and on what legal basis
Sending you the report you asked for is not marketing: it is the delivery of the thing you requested. The basis is Article 6(1)(b) of the GDPR — performance of a contract, or steps taken at your request before one — so it needs no consent, and there is no consent box to tick for it.
Anything beyond that delivery — news about the census, or offers — is separate, optional, and asked for on its own unticked box. That is consent, Article 6(1)(a), and Article 21 of Spain's LSSI. You can withdraw it in one click from any message, and withdrawing it does not affect the report you already asked for.
A purchase is Article 6(1)(b) as well; keeping the invoice afterwards is Article 6(1)(c), a legal obligation we do not get to choose.
How long we keep it
What we keep, and until when:
- Your email address and the address of the page you asked about: for as long as the service runs. It goes the day you ask, and every message we send carries a link that does it in one click, without waiting for us.
- The measurement of a website: kept while it is useful and re-measured on request. It is a cache, not a record about you.
- Records of a sale: for as long as tax and commercial law require, and not longer.
Who else sees it
Nobody buys it, nobody rents it, and it is never sold. It reaches three kinds of provider, each under a contract that binds them to process it only on our instructions:
- The provider that delivers our email, so the report reaches you.
- Stripe, which takes the payment. We never see or store your card details: they go to Stripe directly.
- Anthropic, whose model writes the paid report.
The model is never told who you are
This is a design rule, not a promise: when a report is written by a model, the request carries the page's measurements and its address. It never carries your name, your email address or anything you typed about yourself. A check in our build enforces it — the code that assembles the request cannot read the table your address is in.
The consequence is worth stating plainly: that step processes no personal data at all, so there is nothing about you being transferred to it.
Data leaving the European Union
Stripe and Anthropic are established in the United States. Those transfers are made under the safeguards Chapter V of the GDPR requires — the European Commission's standard contractual clauses, or an adequacy decision where one applies. You can ask us for a copy of the relevant safeguard.
Our own servers and our email provider are in the European Union.
Your rights
You can demand access to your data, its rectification, its erasure, the restriction of its processing, its portability, and you can object to processing. You can withdraw consent you have given at any time.
Write to privacidad@omitsis.com. Every report we email carries a «delete my data» link, which does the same thing without waiting for us.
If you think we have handled your data badly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es). You can also write to us at privacidad@omitsis.com.
Cookies
The census pages set no cookie of their own and carry no analytics.
Where this site shows advertising, the advertising is what may set cookies, and it does so only after you have agreed to it. You can change your mind at any time, and refusing does not take any part of the census away from you.
Which version counts
This policy is published in English, Spanish and Catalan. The controller is a Spanish company and the supervisory authority is Spanish, so where the versions differ, the Spanish one prevails.
When it changes materially, the date at the top changes with it. We do not change it quietly.