Privacy policy

Last updated: 2026-06-12

Who is the controller

The controller of any personal data processed through this site is José Manuel Volante González (NIF 49108819R), C/ Zafra 5, 21310 La Zarza (Huelva), España, operating NIS2 Entity Scope Check at https://nis2.sellerguardrails.com. Contact: contact email.

Data minimisation by design

NIS2 Entity Scope Check is a static, client-side tool. The sector, size and EU-presence inputs you enter are processed entirely in your browser to compute the classification result — they are not transmitted to, or stored on, our servers. There is no account, no login and no form that sends your inputs to us.

What we do process

• Aggregated, non-identifying traffic measurement. The static host (Cloudflare Pages) and a privacy-respecting analytics signal record aggregate page-view counts. This data does not identify you and is not combined to build a profile.
• Communications you initiate. If you email us, we process your email address and the content of your message to reply and keep a record of the correspondence.

Lawful bases

• Legitimate interest (Article 6(1)(f) GDPR) for aggregate, non-identifying audience measurement and for the security and integrity of the site.
• Consent / your request (Article 6(1)(a)/(b) GDPR) when you choose to contact us.

We do not use the tool's inputs for advertising, profiling, or automated decision-making with legal effects.

Retention

We keep email correspondence only for as long as needed to handle your request and to meet any legal record-keeping duty, then delete it. Aggregate traffic metrics are retained in non-identifying form.

International transfers

Where a processor (e.g. the hosting/CDN provider) processes data outside the EEA, that processor relies on an adequacy decision or the European Commission's Standard Contractual Clauses.

Your rights

You have the right of access, rectification, erasure, portability, restriction and objection, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your supervisory authority — in Spain, the Agencia Española de Protección de Datos (https://www.aepd.es). To exercise any right, email contact email.

Changes to this policy

If we introduce analytics, advertising or any processing that requires consent, this page will be updated and, where required, consent will be requested before any non-essential processing begins.