Privacy policy

This site is run from Spain and is subject to the GDPR (Regulation (EU) 2016/679) and to Spanish Organic Law 3/2018 (LOPDGDD).

The short version: this site sells nothing, sets no advertising or tracking cookies, and does not build a profile of you. What you type into a calculator is used to answer your question and then forgotten. The one thing it does keep is a comment you choose to write, and the sign-in that puts your name on it.

1. Who is responsible

Pekka Gaiser, Diseminado B-2, 35542 Tabayesco, Haría (Las Palmas), Spain

NIE: Y34888723M · Email: pekka@pekka.net

There is no obligation to appoint a Data Protection Officer under Art. 37 GDPR, and none has been appointed. Write to the address above with anything about your data.

2. What the calculators do with your figures

The calculators run on the server, not in your browser. When you enter an income, an expense figure, a year, or the quotas you have paid, those numbers are sent to the server, the result is calculated, and the answer is sent back to your browser.

Those figures are not stored. They are not written to a database, not kept in a log, not attached to you, and not used to build a profile. Once the response is sent they are gone from the server.

You are not asked for your name, your NIE, or any other identifying detail, and you should not type any into a calculator: nothing on this site needs them.

• Purpose: answering the question you asked the calculator
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in providing the tool you came to use
• Retention: none, beyond the moment of the calculation

3. "Save data on device"

Every calculator carries a switch marked Save data on device, off by default. Turning it on saves what you have typed so that you do not have to type it again on your next visit.

It is one switch for the whole site, not one per calculator: a single decision about whether this device holds any of your figures at all. Clicking it never acts on its own; it opens a dialogue that says what is about to happen, and only the button in there does anything.

What that means in practice:

• The values are stored in your own browser, using localStorage, one key per tool.
• They stay on your device. They are not a cookie, they are not sent to the server with every request, and there is no copy of them here. I cannot read them.
• The stored values are sent back to the server only when you return to that page with the switch on, so the calculator can be filled in again, and even then they are handled exactly as in section 2: used, then forgotten.
• Turning the switch off deletes everything this site has stored, from every calculator, immediately, not only the one you are looking at. Clearing your browser's site data does the same. Using a different browser, a different device, or a private window means there is nothing stored to find.

• Legal basis: your consent (Art. 6(1)(a) GDPR), given by turning the switch on and withdrawn by turning it off. Storage of this kind requires consent under Art. 22 LSSI, which is why the switch starts off and is never turned on for you.
• Retention: until you turn the switch off or clear your browser data.

4. Links that carry your settings

Some pages link to another tool with the settings you were using already filled in, and those settings appear in the address bar (for example ?year=2025&discount=tarifa_plana). This is only so the next tool opens ready to use.

Be aware that if you copy such a link and send it to somebody, whatever it carries goes with it. If you have typed an income into a tool, check the address bar before sharing the link.

5. Cookies

This site sets no advertising, marketing, or cross-site tracking cookies, and there is no cookie banner because there is nothing to ask you about.

Two strictly necessary technical cookies are used:

Cookie	What it is for	Lifetime
autonomotools_session	Keeps your visit together across page loads, so the calculators work at all.	2 hours
XSRF-TOKEN	Protects the forms against cross-site request forgery.	2 hours

Both are necessary for the site to function and are exempt from the consent requirement under Art. 22.2 LSSI. Neither identifies you, and neither is read by anyone else.

6. Visitor statistics

Visits are counted with Umami, an open-source analytics tool running on my own server in Germany (STRATO AG, at stats.pekka.net). The figures never reach a third-party analytics company, because there is no third-party analytics company involved.

Umami sets no cookies, collects no personally identifiable data, does not follow you to other websites, and needs no consent under the GDPR. What it records is:

• page views and a count of unique visitors, without identifying them
• where a visit came from (the referrer)
• how long a visit lasted
• the country, without any more precise location
• rough device and browser information

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in knowing which tools are used and which pages fail people. More about the software: umami.is

7. Server logs

The web server keeps the usual access log: IP address, time, the page requested, the browser's user agent, and the referring page. This is what makes it possible to find a fault or to notice an attack.

• Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in a working and secure site
• Retention: 3 months, then deleted

8. If you write to me

If you send an email, I have your address and whatever you put in the message, and I use them to answer you.

• Legal basis: your consent and legitimate interest (Art. 6(1)(a) and (f) GDPR)
• Retention: correspondence that leads nowhere is deleted after a year

9. Comments

You can leave a comment under any tool. To do so you sign in with Google (Facebook later), and that is the only thing an account here is for: there is no profile, no password, and nothing else it unlocks.

What is stored when you sign in: your name and email address as the provider gives them to me, the provider's id for you, and which language you were reading in. What is stored when you comment: what you wrote, when, which page it was on, and which of those accounts wrote it.

Your name is published beside your comment. Your email address is not, and neither is anything else the provider sent.

• Legal basis: your consent (Art. 6(1)(a) GDPR), given by signing in and by posting
• Retention: a published comment stays until you or I remove it. Ask me to delete your account and the comments go with it
• Moderation: comments appear immediately. I read them afterwards and can hide or delete anything abusive, off-topic or dangerously wrong, without notice and without owing an explanation

Replies, mentions, and the emails they cause

You can reply to a comment, and you can put someone's name in yours by writing @ in front of it. You can only name someone who has already commented in the same thread. There is no directory of people who use this site and no way to search one, so nobody can be named, or emailed, out of the blue.

When someone replies to your comment or names you in one, you get an email. It tells you who did it and on which page, and it links to the page. It does not quote what they wrote. An email is a copy that outlives the page: quoting would put somebody else's words permanently in your mailbox, where nothing that happens to that comment afterwards, including its author deleting it, could reach them.

• Legal basis: legitimate interest (Art. 6(1)(f) GDPR). You wrote something in public and somebody responded to it; being told is what you would expect. These are service messages about your own comments and nothing else is ever sent to that address: no announcements, no newsletter, no marketing
• Your control: the first time you comment there is a tick box for it, and every one of these emails has a link that stops them. It needs no password. The same link turns them back on if you change your mind
• What stopping them does not do: your comments stay where they are. You simply stop hearing about replies to them

At most five people can be named in one comment, so a single comment cannot be used to mail a crowd.

Please do not put anything in a comment you would not want read by strangers, and in particular do not put your NIE, your figures, or anything else about your own tax affairs in one. A comment is a public page on the internet.

To have a comment removed, or your account and everything attached to it deleted, write to pekka@pekka.net.

The feedback box

Every tool has a "give feedback" button. What you write there is private: it is emailed to me and stored, and it is never published anywhere on this site. No sign-in is needed, and the name and contact fields are both optional.

Along with what you write, I keep the page you were on (which usually explains the complaint), the language you were reading in, and, if you happened to be signed in, which account you were.

• Legal basis: your consent (Art. 6(1)(a) GDPR), given by pressing send
• Retention: kept while it is still useful for fixing what it describes, and deleted within two years
• If you leave no contact: there is nothing to identify you by and nothing I could answer

10. Who else sees any of this

No data from this site is sold, rented, or shared for anyone else's purposes. The only third parties involved are the companies whose machines it runs on, acting as data processors under Art. 28 GDPR:

• ALL-INKL.COM – Neue Medien Münnich, Germany — web hosting
• Hetzner Online GmbH, Germany — server hosting
• STRATO AG, Berlin, Germany — hosts the self-hosted analytics server

One more, and only if you choose to use it:

• Google Ireland Limited, Dublin, Ireland — the sign-in used for comments. Nothing reaches Google until you press the sign-in button. When you do, you leave this site for Google's, and what happens there is governed by Google's own privacy policy, not by this one. Google tells me your name, your email address and an id; I tell Google nothing about you.

Data may also be disclosed to a public authority where the law requires it.

11. International transfers

The machines this site runs on are all in Germany, inside the European Economic Area.

The one exception is the sign-in. If you sign in to leave a comment, you deal with Google, whose processing may involve servers outside the EEA under its own transfer safeguards. That is a choice you make by pressing the button, and it is the only part of this site that involves anyone outside Europe. Everything you do here without signing in stays in Germany.

Otherwise these pages load nothing from anywhere else: no external fonts, no CDN, no embedded videos, no social media widgets. Every script, font and image comes from this site's own server, so opening a page does not announce your visit to anyone. The sign-in button is an ordinary link, not an embedded Google script: it sends nothing until you click it.

12. Your rights

You may ask for access to your data, its rectification or erasure, the restriction of its processing, its portability, and you may object to processing based on legitimate interest or withdraw consent at any time. Spanish law adds the right not to be subject to automated decisions and the rights of heirs to a deceased person's data.

Two practical notes, because they save everybody time:

• Anything you saved with the browser switch is yours to delete, right now, by turning the switch off. I have no copy to erase.
• The figures you type into a calculator are never stored, so there is nothing to give you access to or to delete.
• A comment you wrote is the one thing here that is stored on the server. Ask, and it goes, along with the sign-in account behind it.

To exercise a right, write to pekka@pekka.net, say which right you mean, and expect an answer within one month. I may need to establish that you are who you say you are before handing over data.

If you are not satisfied, you can complain to the Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid — aepd.es, electronic office sedeagpd.gob.es.

13. Security

The site is served over HTTPS, kept up to date, and backed up. Access to the server is restricted and protected by two-factor authentication where the provider supports it. No system is perfect, but there is very little here worth stealing: no accounts, no payment details, and no stored calculations.

14. Automated decisions

The calculators compute a figure from the numbers you give them and show it to you. That is arithmetic, not a decision about you: nothing is decided, scored, ranked, or profiled, and no result affects you in any legal or similarly significant way.

15. Minors

This site is aimed at self-employed adults. It is not directed at children, and it collects nothing that would identify one.

16. "Do Not Track"

Browser "Do Not Track" signals are not acted on, because no uniform standard for them exists. It makes no practical difference here: nothing on this site tracks you across websites in the first place.

17. Changes to this policy

This policy will change when the site does, and the date at the top will say when. Accounts, saved calculations and payments are planned; none of them exist yet, and this document will describe them before they are switched on rather than afterwards.