Privacy policy

Last updated: September 30, 2026

1. Data controller

In accordance with the provisions of Regulation (EU) 2016/679 (GDPR), Law 29/2021 of 28 October, qualified law on the protection of personal data (LQPD), and Decree 391/2022 approving the Regulation implementing LQPD 29/2021, we inform you that the personal data that may be processed through this platform will be the responsibility of:

• Company name: BITANUBE, S.L.U.
• Registered office: Avinguda El Través 21B, AD400, La Massana, Principality of Andorra.
• NRT: L-714954-Z.
• Registro de Comercio (Commercial Register) number: 923227-J.
• Website: wakaris.com
• Contact email: info@wakaris.com
• Email for privacy matters: privacidad@wakaris.com

Hereinafter, BITANUBE, S.L.U. may be referred to interchangeably as the “Company”, the “Controller” or “BITANUBE”.

The purpose of this Privacy Policy is to inform users and visitors of the website about how BITANUBE collects, uses, retains and protects the personal data that may be processed as a result of Users’ use of the services offered through wakaris.com.

For terms such as “personal data” or “processing”, we refer to the definitions contained in Article 4 of the General Data Protection Regulation (GDPR).

2. Applicable regulations and scope

Personal data will be processed in accordance with the applicable personal data protection regulations, including, in each specific case, Andorran Law 29/2021, qualified law on the protection of personal data (LQPD), Decree 391/2022 implementing Law 29/2021, Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), where applicable by reason of the processing, the territory or the status of the data subject, and the applicable regulations on electronic communications, cookies and commercial communications.

This Privacy Policy applies to persons who:

• Access or browse the website.
• Use the website analysis tool.
• Request or share a report generated by the tool.
• Contact the Company through the forms available on the website; or
• Interact with any of the functionalities that involve the processing of personal data.

Using the analysis tool does not necessarily require creating a user account.

BITANUBE will apply and respect at all times the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, accountability and confidentiality.

BITANUBE is particularly committed to protecting the data of Users of the services accessed through the website. Through this Privacy Policy, users of wakaris.com are informed of the processing and uses to which the personal data collected on the website are subject, so that they may decide, freely and voluntarily, whether they wish to provide the information requested.

3. Data processed, purpose and scope

Depending on the specific use of the Platform, BITANUBE may process different categories of personal data.

3.1. Identification and contact data

When the User requests that a report be sent or shared by email, an email address may be requested. In that case, the email address will be processed exclusively to:

• Send the requested report.
• Allow it to be downloaded or made available.
• Technically manage the delivery.
• Keep the necessary evidence of the request where required.
• Handle incidents related to such delivery.

The email address will not be used to send commercial communications unless the User has previously given explicit consent.

When the User uses the contact form, various data may be requested, including:

• The User’s first and last name.
• Email address.
• Company or organization.
• Position or professional role, where provided by the User in the form.
• Information voluntarily included in the message or contact form.

3.2. Technical and browsing data

When accessing the website, certain technical data necessary for the operation, security and maintenance of the Platform may be generated. Depending on the technical configuration used, these data may include information such as:

• IP address.
• Date and time of access.
• Language and general device settings.
• Referring URL.
• Pages or functionalities used.
• Information about errors or technical incidents.
• Technical identifiers necessary to maintain the security and operation of the Platform.
• Other data strictly necessary to ensure the operation and security of the service.

The Company will limit these data to those necessary for the corresponding purposes and will set appropriate retention periods.

3.3. Data derived from the reports

The platform generates technical results related to the analyzed URL, including performance, SEO and accessibility metrics, technical structure, publicly accessible content, detected technologies, metadata and other technical parameters.

4. Purpose, processing and legal basis

BITANUBE may process personal data for the following purposes:

4.1. Provision of the service

Managing, providing, updating or correcting the functionalities of Wakaris, including:

• Running technical analyses.
• Generating reports.
• Processing the URLs entered by Users.
• Sending requested reports by email.
• Enabling the operation of the chatbot.
• Handling queries and requests.
• Managing technical incidents.

4.2. Security of the Platform

Preventing, detecting, correcting and responding to:

• Abuse of the service.
• Cyberattacks.
• Unauthorized access attempts.
• Abusive automated use.
• Deliberate saturation of the infrastructure or of the analyzed URLs.
• Fraudulent activities.
• Conduct that may compromise the security of Wakaris or of third parties.

4.3. Improvement and optimization of the service

Analyzing the operation of the Platform in aggregate form or, where appropriate, by means of technical data, in order to:

• Detect errors.
• Improve the user experience.
• Optimize performance.
• Improve the infrastructure.
• Develop new functionalities.
• Improve the quality of the analyses.

4.4. Handling of communications

Responding to requests made by Users by email, contact forms, the chatbot or other enabled channels.

4.5. Commercial communications

Where there is a valid legal basis for doing so, and the corresponding consent has been obtained, BITANUBE may send commercial communications related to its services, news, functionalities, products or content.

The User may object or withdraw consent at any time by sending an email to privacidad@wakaris.com or by using the unsubscribe link at the bottom of each commercial communication received.

4.6. Compliance with legal obligations

Processing and retaining certain data where necessary to comply with legal, tax, accounting, administrative, judicial or regulatory obligations.

4.7. Exercise and defense of rights

Data may be processed where necessary to bring, exercise or defend claims or judicial or extrajudicial actions of Users or of interested third parties.

The Company will not use personal data for purposes incompatible with those for which they were collected.

4.8. Legal basis and legitimate interest

BITANUBE may process certain data on the basis of its legitimate interest, provided that such interest is compatible with the rights and freedoms of data subjects and the corresponding balancing tests have been carried out where necessary. These interests may include:

• Carrying out automated public review processes.
• Market analysis for SEO.
• Ensuring the security of the Platform.
• Preventing abuse and fraudulent use.
• Maintaining and improving the infrastructure.
• Carrying out certain technical measurements.
• Defending the rights and legitimate interests of BITANUBE.
• Properly managing the service.
• Technically analyzing public URLs and content where appropriate.

BITANUBE has carried out and keeps a legitimate interest assessment for the specific processing.

5. Data retention period

Personal data will be retained for as long as necessary to fulfill the purposes for which they were collected and, thereafter, for the periods necessary to comply with legal obligations or to bring, exercise or defend possible claims. In particular:

• Contact data: for the time necessary to handle the request and, thereafter, for a maximum of 90 days from the date of the request, for the sole purpose of managing the technical delivery and handling possible incidents. After that period, the data will be securely deleted or anonymized.
• Email used to share the report: for the period necessary to manage the delivery and any related incidents and, thereafter, for a maximum of 90 days from the date of the request, for the sole purpose of managing the technical delivery and handling possible incidents. After that period, the data will be securely deleted or anonymized.
• Technical data and security logs, operation and maintenance of the service, in accordance with the applicable technical configuration.
• Data used on the basis of consent: until the data subject withdraws consent or for the period defined for the corresponding purpose, without prejudice to legal retention obligations.

When certain data are no longer necessary, they will be deleted or anonymized in accordance with the applicable technical and organizational measures.

6. International transfers

The Company has its registered office in Andorra.

The European Commission recognizes Andorra as a country that provides an adequate level of protection of personal data for the purposes of the international transfers provided for in European regulations.

Where certain technology providers are located outside the European Economic Area or involve an international transfer of data, the Company will adopt the safeguards required by the applicable regulations, including, where appropriate, adequacy decisions, standard contractual clauses or other legally provided mechanisms.

7. Cookies and similar technologies

Cookies

The website may use cookies and similar technologies.

Specific information about the cookies used, their purpose, duration, ownership and, where applicable, the mechanism for accepting, rejecting or configuring cookies is available in the corresponding Cookie Policy.

Where certain cookies or similar technologies require consent, they will not be used before the corresponding consent has been obtained, except for those strictly exempted by the applicable regulations.

Google Analytics

The Google Analytics component has been integrated into the Platform, using the anonymization function and advanced consent mode. It is a data analysis service provided by Google Ireland Limited (Google). The legal basis for this processing is your consent (Article 6(1)(a) GDPR).

Google Analytics is a web analytics service. The purpose of the tool is purely statistical: it allows the Company to understand how visitors interact with the website, which sections are most visited and how the browsing experience can be improved.

What data is collected?

Google Analytics collects information about the User’s use of the website by placing small cookies in the User’s browser. These data include:

• Browsing data: pages the User visits, time spent on the website, links clicked, or the website from which the User arrived at the Platform.
• Technical information: device type (mobile, computer, tablet), operating system, browser type and version, and screen resolution.
• Approximate location: country, region and city from which the User connects (derived from the IP address).

IP anonymization

To protect Users’ privacy as much as possible, the Company has enabled the IP anonymization function of Google Analytics. This means that the full IP address is truncated and shortened within the Member States of the European Union before being processed or stored by Google. In this way, it is impossible to associate the browsing information with your person or device in an identifiable manner.

Legal basis and User control

These data are processed only if the User gives prior consent by accepting analytics cookies in our privacy banner.

The User may withdraw or modify consent at any time by rejecting cookies from the Platform’s cookie settings or by disabling them directly in the browser. The User may also prevent tracking by Google Analytics on any website by installing Google’s browser opt-out add-on.

For additional information on the processing carried out by Google, please consult the Google Analytics privacy documentation and Google’s privacy policy:

• Google privacy policy: www.google.com/intl/en/policies/privacy/
• Google Analytics terms: www.google.com/analytics/terms/us.html
• Information about Google Consent Mode and how it works: support.google.com/google-ads/answer/10000067
• More about Google Analytics: www.google.com/analytics/

Google Tag Manager

The website/platform uses Google Tag Manager, a service provided by Google Ireland Limited (“Google”).

Google Tag Manager is a tag management system that acts as an intermediary technical infrastructure. Its sole function is to implement, centralize and manage the execution of scripts and code snippets (tags) of other analytics and functional tools on our website.

Data processing and technical operation

• No cookies of its own: Google Tag Manager does not create or use cookies or local storage files to track or identify Users.
• Processing of requests: in order to load and deliver the necessary scripts to your browser, the service processes technical connection data (such as the device’s IP address and browser header information).
• Privacy control: Google Tag Manager is configured to respond directly to the preferences you select in our cookie banner. If you do not consent to the use of analytics or advertising tools, Tag Manager will not run the scripts corresponding to those categories.

Legal basis

The use of Google Tag Manager is based on our legitimate interest (Art. 6(1)(f) GDPR and equivalent Andorran regulations) in ensuring the technical, efficient and secure management of the services and tools integrated into our website.

PostHog

The website/platform uses PostHog, a product analytics service provided by PostHog, Inc. (with the option of storage on servers within the European Union).

The purpose of using this tool is purely analytical and technical: it allows us to understand how users interact with the functionalities of wakaris.com, measure the performance of the platform, detect navigation errors and optimize the user experience.

What data is processed and to what extent?

When browsing or using the website/platform, PostHog collects and processes the following information through the use of local identifiers and analytics cookies:

• Interaction events: pages visited, buttons clicked, time spent and navigation flow within the platform.
• Device and system information: device model, browser used, operating system and screen resolution.
• Network and location data: IP address (processed in anonymized form to prevent direct identification of the User).

Privacy and international safeguards

PostHog processes data under strict pseudonymization measures. Where the information is transferred or processed outside the European Economic Area (EEA) or territories with an equivalent level of protection (such as Andorra), such transfer is carried out under Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of protection in accordance with current regulations.

Legal basis and right of withdrawal

The legal basis for this processing is the User’s explicit consent (Art. 6(1)(a) GDPR and applicable Andorran regulations), which the User gives by accepting the use of analytics cookies in the privacy banner.

If consent is refused or withdrawn at any time:

• The User may adjust their preferences from the Cookie Settings Panel.
• PostHog tracking scripts will not store any persistent file or identifier in the User’s browser.

8. Users’ rights

The data subject may exercise the rights to which they are entitled under Regulation (EU) 2016/679 (GDPR), Law 29/2021 of 28 October, qualified law on the protection of personal data (LQPD), and Decree 391/2022 approving the Regulation implementing LQPD 29/2021, namely:

• Right of access: to access specific information about the processing of their personal data and to obtain a copy of such information.
• Right of confirmation: to obtain confirmation as to whether their personal data are being processed.
• Right to rectification: to request the correction of personal data that are inaccurate or incomplete.
• Right to erasure (right to be forgotten): to request the deletion of their data where, among other reasons, they are no longer necessary for the purposes for which they were collected.
• Right to object: to object at any time to the processing of their data where it is based on the legitimate interest of the Company.
• Right to data portability: to receive the personal data provided in a structured, commonly used and machine-readable format, or to request their direct transmission to another controller where technically feasible.
• Right to restriction of processing: to request the suspension of the processing of their data in certain cases, for example while their accuracy is being verified or while the processing is being contested.

The exercise of these rights is free of charge, except in the cases provided for by law.

To exercise their rights, the User may send a request to privacidad@wakaris.com. The request must indicate the right the User wishes to exercise and provide sufficient information to reasonably verify the identity of the requester.

9. Right to lodge a complaint with the supervisory authority

Without prejudice to any other administrative or judicial remedy, the User has the right to lodge a complaint with the competent data protection authority if they consider that the processing of their personal data infringes the applicable regulations.

Where the Spanish authority is competent, the data subject may contact the Agencia Española de Protección de Datos (AEPD) through the forms available on its website (www.aepd.es).

Likewise, where appropriate by reason of the controller or the processing, the data subject may contact the Agència Andorrana de Protecció de Dades (APDA) through the forms available on its website (www.apda.ad).

10. Automated analysis of public websites

Wakaris allows the analysis of certain web pages that are publicly accessible on the Internet.

To carry out these analyses, the Platform may make automated requests to the URLs entered by the User and process information that is publicly available. The analysis may include technical information such as:

• Public code and structure of the page.
• Metadata.
• Headers.
• Performance-related information.
• Public resources.
• Detectable technologies.
• SEO information.
• Accessibility-related information.
• Visible elements of the page.
• Other technical parameters necessary to prepare the report.

The sole purpose of this processing is to provide the requested technical review service and to improve its operation.

BITANUBE does not intend to identify natural persons from the analyzed websites or to create personal profiles of the owners or visitors of such websites unless the User gives explicit consent to do so.

11. Security

The Company adopts reasonable and appropriate technical and organizational measures to protect personal data against loss, destruction, alteration, unauthorized access, disclosure or any other form of unlawful processing. These measures may include, as appropriate:

• Encrypted communications.
• Access control.
• Authentication measures.
• Server and infrastructure security measures.
• Backups.
• Security monitoring.
• Abuse prevention mechanisms.
• Data minimization.
• Security incident management procedures.

The specific measures will be reviewed periodically, taking into account the nature and risks of the processing carried out.

12. Minors

The platform’s services are not specifically directed at minors.

Where a minor uses the website, they must do so in accordance with the conditions and requirements established by the applicable regulations and, where appropriate, under the responsibility of their parents, guardians or legal representatives.

13. Automated decision-making and profiling

Using the tool may involve automated processes to technically analyze a URL and generate results related to the performance, visibility, SEO or other parameters of the analyzed page.

The purpose of these processes is to analyze the specified website, and they are not used to make automated decisions that produce legal effects on or significantly affect the User as a natural person, nor to create personal profiles of Users, unless specifically informed of this and there is a corresponding legal basis.

14. Screenshots and thumbnails

As part of the technical analysis, Wakaris may generate a screenshot, thumbnail or static representation of the analyzed public page. This image is used for technical and illustrative purposes, mainly to:

• Visually display the analyzed page.
• Make it easier to check the result of the analysis.
• Help identify rendering or layout problems.
• Include a visual reference in the generated report.

Screenshots are not interactive and are not intended to replace or functionally reproduce the analyzed website.

Where technically possible and appropriate, BITANUBE will apply measures aimed at minimizing the unnecessary exposure of personal data that may appear incidentally on a public page.

Likewise, website owners may request the exclusion of their domain in accordance with the exclusion procedure described in the Legal Notice (section 7).

15. Chatbot and artificial intelligence systems

Wakaris may incorporate automated assistance functionalities based on artificial intelligence technologies. When the User interacts with such functionalities:

• The User will be informed that they are interacting with an automated system.
• The messages entered may be processed to generate the requested response.
• The content of conversations may be processed to provide, maintain and improve the functionality, in accordance with the configuration and technology providers used.
• The User should not enter particularly sensitive or confidential information that is not necessary for the query.

The responses provided by the chatbot are informative in nature and do not constitute legal, tax, medical, financial, professional or any other kind of advice.

Where external technology providers are used to provide artificial intelligence functionalities, they may act as processors or, where appropriate, as independent controllers, in accordance with the contractual relationship and the applicable regulations.

16. Providers and processors

BITANUBE may use external providers for certain functions necessary for the provision of the service. These may include:

• Hosting and servers.
• Cloud infrastructure.
• Email delivery.
• Analytics and monitoring.
• Security services.
• Artificial intelligence processing.
• Customer support tools.
• Storage services.
• Payment services, where necessary.
• Technical and maintenance services.

Where these providers act as processors, BITANUBE will establish the corresponding contractual safeguards and will require the data to be processed in accordance with the Controller’s instructions and the applicable regulations. These safeguards may include, where appropriate:

• Adequacy decisions.
• Standard contractual safeguards.
• Additional safeguards.
• Appropriate technical and organizational measures.
• Other legally recognized mechanisms.

The use of certain technology services may involve processing information in jurisdictions other than Andorra or the European Economic Area.

The Company will not sell Users’ data to third parties.

17. Amendments to the privacy policy and regulatory changes

BITANUBE reserves the right to modify this policy in order to adapt it to legislative or case-law developments. Such changes will be communicated on our website with such advance notice as may be necessary, without prejudice to requesting the necessary consent from those affected where it is not deemed to have been given under the terms of this policy. If you have any doubts, questions or comments regarding this policy, please do not hesitate to contact us at info@wakaris.com.

When relevant modifications are made, the date shown at the beginning of this Policy will be updated.

However, these modifications will apply only in relation to the provisions concerning the processing of data.

Where it is necessary to obtain users’ consent, or where certain elements of the Privacy Policy contain provisions that form part of the contractual relationship with users, modifications will only be made with the users’ consent.

Users are advised to periodically review the content of this Privacy Policy.