DATA CONTROLLER
Who is responsible for your data.
Controller: Oliver Morales
Tax ID: 78548683A
Address: Seña Lorenza, 35
Email: contact@hvacdecisionengine.com
Website: https://hvacdecisionengine.com
DIAGNOSTIC DATA
The scan is designed to avoid unnecessary personal data.
The diagnostic asks for business-operational information such as team size, revenue range, booking performance, capacity, callbacks and pricing confidence. No account is required to use the scan.
The diagnosis is calculated from the answers you provide. Do not enter medical data, payment-card data, government identifiers, passwords or other sensitive information into diagnostic, feedback or contact fields.
Diagnostic questions are optional in the sense that you are not legally required to provide them, but the engine cannot produce a diagnosis without enough answers to apply its decision rules.
AUTOMATED OUTPUT
The engine applies deterministic rules, not legally significant automated decisions.
The service automatically applies documented decision logic to the business inputs you provide in order to identify a likely constraint and generate decision-support output. This processing is intended to support a business decision, not to make a legal, employment, credit, insurance or similarly significant decision about an individual.
The current service does not use the diagnostic to make decisions producing legal effects or similarly significant effects concerning a natural person, and it does not create an advertising profile from diagnostic answers.
CONTACT FORM
What we collect when you contact us.
The contact form requests your name, email address, enquiry category and message. Company name is optional. Required fields are necessary to receive and answer the request; if they are not provided, the form cannot be submitted.
We use contact-form information to answer the enquiry, manage related correspondence, protect the form against abuse and, where applicable, take steps requested by you before entering into a contractual or commercial relationship.
The form includes a data-protection acknowledgement. It confirms that the information has been shown to you; it is not blanket consent for unrelated processing or advertising.
Cloudflare Turnstile is used as an anti-abuse control and processes technical security signals needed to distinguish legitimate visitors from automated traffic. Turnstile does not receive the contents of your message through our implementation. Contact emails are delivered through Resend.
PURPOSES & LEGAL BASES
We process only what is needed for defined purposes.
- Provide the diagnostic and site functionality: processing requested by you in order to provide the tool and its output.
- Optional analytics: consent. GA4 remains disabled unless you accept optional analytics cookies.
- Contact requests: steps taken at your request before a possible contract where relevant; otherwise our legitimate interest in responding to communications directed to us.
- Security and abuse prevention: our legitimate interest in protecting the website, contact form and users from automated abuse and misuse.
- Legal obligations and claims: processing where required by law or necessary to establish, exercise or defend legal claims.
MEASUREMENT & SEARCH PERFORMANCE
We separate optional on-site analytics from search-performance tools.
Google Analytics 4: when a production GA4 measurement ID is configured, GA4 is loaded only after you accept analytics cookies. Advertising storage, Google Signals and ad-personalization signals are disabled in our configuration.
After consent, GA4 may measure page views, referrer and campaign parameters, scan CTA clicks, scan progress, diagnosis completion, Decision Lab usage and software-fit interactions. Free-text feedback comments and contact-form message content are not sent to analytics. The production GA4 property is intended to use a 2-month user/event retention setting, and first-party GA cookies are configured with a 90-day expiry.
Google Search Console: we may use Search Console to review how pages perform in Google Search, including clicks, impressions, CTR, average position, queries, countries, devices and pages. Search Console is not loaded as an on-site analytics script by this application and is not controlled by the optional analytics-cookie switch.
Cloudflare Web Analytics: if enabled for this Pages project, Cloudflare's Web Analytics beacon may collect aggregate page-performance and usage metrics. Cloudflare documents this product as cookie-free and states that it does not collect or use visitors' personal data. It is therefore separate from the optional GA4 cookie category.
AFFILIATE & REFERRAL LINKS
Monetized outbound links can contain a partner identifier.
Some links to third-party software providers include an affiliate or referral identifier associated with HVAC Decision Engine. The identifier allows the destination provider or its partner platform to attribute a qualifying signup, purchase or subscription to this site.
HVAC Decision Engine does not ask you to create an account with us before following these links and does not receive the personal information you later submit directly to the provider as part of the ordinary affiliate-link flow. Once you leave this site, the destination provider is responsible for its own collection of connection data, cookies, account information and other personal data under its own privacy policy.
Our monetized outbound links are opened with browser protections that prevent this site from controlling the destination tab and suppress the referring-page header. We may record the outbound provider click in our own optional analytics only when analytics consent has been granted.
RECIPIENTS & INTERNATIONAL TRANSFERS
Service providers process limited data where necessary.
Cloudflare provides hosting, security and Turnstile anti-abuse services. Resend provides transactional email delivery for the contact form. Google provides optional analytics only after consent.
Some provider processing can involve the United States. Where European data-protection law applies, these transfers must rely on an applicable adequacy mechanism or safeguards such as the EU Standard Contractual Clauses. Cloudflare publishes a Data Processing Addendum incorporating transfer safeguards. Resend's DPA incorporates the EU Standard Contractual Clauses and its service documentation states that customer data is stored in the United States.
Third-party software vendors linked from this site are independent controllers for information you submit directly to them.
RETENTION
We keep data only as long as necessary.
Diagnostic answers are not intended to create a persistent customer profile in the current product.
Contact correspondence is retained while the enquiry is active and normally for no more than 12 months after resolution, unless a longer period is necessary to comply with a legal obligation, handle an ongoing commercial relationship or establish, exercise or defend legal claims. Resend may retain email and delivery-log data for the period applicable to the selected Resend plan.
Optional analytics user/event data is intended to use a 2-month GA4 retention setting. Aggregated standard reports may be subject to Google's separate service retention behavior.
YOUR RIGHTS
You can exercise your data-protection rights.
Where applicable, you may request access, rectification, erasure, restriction, portability or objection. Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal.
Send requests to contact@hvacdecisionengine.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.
CHANGES
This policy follows the real implementation.
We may update this policy when the service, providers or legal requirements change. Material changes will be reflected on this page.
Last updated: September 22, 2026