Privacy Policy#
Last updated: May 8, 2026
This privacy policy applies to posimatiq.com and related apps operated by Tomatiq Research SL (the “Company”).
All of our policies regarding data and its storage
Policy overview#
The Company’s underlying policy is to collect as little personal data as possible.
The website posimatiq.com is a static website. It has no forms, no payments, no Stripe integration or other payment integration, and no account login on the website itself.
The website uses GoatCounter to understand basic website usage, such as the number of visits and which pages are viewed. GoatCounter is used without cookies.
The website includes two OpenStreetMap embeds. When a visitor loads a page with an embedded map, the visitor’s browser connects to OpenStreetMap-related services in order to display the map.
The website includes a dark/light switcher. This only remembers the visitor’s visual theme preference on the same device.
Some Company apps allow users to create anonymous accounts. These accounts use a randomly generated username and a passkey. A passkey is a device-based sign-in method approved on the user’s device by Face ID, fingerprint, or PIN. The Company does not receive the user’s Face ID, fingerprint, or PIN. No phone number, name, email address, or other direct contact detail is required for these anonymous accounts.
Some Company apps require an email address to create an account. This is used to let the user access the same account from different devices.
The purpose and legal basis for each processing#
Website analytics#
Basic website analytics are processed for the purpose of understanding website usage.
The processing is based on the Company’s legitimate interest in understanding basic website usage without using advertising tracking, profiling, or cookies.
App accounts#
Account data is processed for the purpose of creating, maintaining, securing, and providing access to user accounts in Company apps.
For anonymous accounts, the processing is necessary to provide the app account requested by the user.
For email-based accounts, the processing is necessary to provide the app account requested by the user and to allow access to the same account from different devices.
Categories of personal data#
The Company is processing the following categories of personal data.
Website analytics data#
- Page views.
- Visited pages.
- Referrers.
- Basic browser and device information.
- Approximate location.
- Time of visit.
Anonymous app accounts#
- Randomly generated username.
- Passkey-related authentication data needed to let the user sign in.
- Account data created by the user inside the app, depending on the app.
The Company does not receive the user’s Face ID, fingerprint, or device PIN.
Email-based app accounts#
- Email address.
- Account data created by the user inside the app, depending on the app.
How long is the personal data saved?#
The time periods for which the personal data will be saved are the following.
Website analytics retention#
Website analytics data is kept only for as long as it is useful for understanding basic website usage.
App account retention#
App account data is kept while the account remains active.
If an account is deleted, the account data is deleted unless the Company must keep limited data for legal, security, or abuse-prevention reasons.
Third-party recipients#
Personal data will only be shared with third-party suppliers who are performing services on behalf of the Company and for the purposes stated above.
The categories of such recipients are:
- website hosting providers;
- website analytics providers;
- app hosting and infrastructure providers;
- email delivery providers, where email-based accounts or account messages are used.
Is any transfer made to a third country?#
Some service providers may process data outside the European Union or the European Economic Area.
Where such transfers take place, the Company relies on safeguards required by applicable data protection law.
Automated decision making#
No automated decision making, including profiling, takes place.
The rights of individuals#
You have the right, in certain situations, to request the Company to correct or delete personal data regarding you and/or restrict the processing, as well as a right to data portability, if applicable.
Where the legal basis for the processing is based on a weighing of interests, you are as a data subject entitled to object at any time to the processing of your data.
You also have the right to request a copy of your personal data.
However, in many cases the Company will not be able to provide data about website visits or anonymous app accounts unless enough information is provided to identify the relevant visit, account, or request.
You have the right to make a complaint to the Agencia Española de Protección de Datos.
If you would like to exercise your rights, please contact the Company using the contact information below.
Please note that exercising some rights may limit the Company’s ability to provide services that require such information, for example access to an email-based account. The Company may also be unable to approve some requests due to legal requirements or because the processing of personal data is based on a legal basis to which the right does not apply.
Data controller contact information#
Company name: Tomatiq Research SL
Company registration number: B24837072
Company address: BIC Bizkaia Ezkerraldea, Edificio Ilgner, Avenida Altos Hornos de Vizcaya, 33, 48901 Barakaldo, Bizkaia, Spain
Contact email: info@posimatiq.com
To exercise your rights under the General Data Protection Regulation or if you have any questions regarding the Company’s processing of your personal data, please send your inquiry to the e-mail address above.
Updates#
This Privacy policy may be updated and, in such case, a new version will be published on the Company’s website.