DATA CONTROLLER
Who is responsible for your data.
Controller: Configured at deployment
Tax ID: Configured at deployment
Address: Configured at deployment
Email: contact@hvacdecisionengine.com
Website: https://hvacdecisionengine.com
DIAGNOSTIC DATA
The scan is designed to avoid unnecessary personal data.
The diagnostic asks for business-operational information such as team size, revenue range, booking performance, capacity, callbacks and pricing confidence. No account is required to use the scan.
The diagnosis is calculated from the answers you provide. Do not enter medical data, payment-card data, government identifiers, passwords or other sensitive information into diagnostic, feedback or contact fields.
Diagnostic questions are optional in the sense that you are not legally required to provide them, but the engine cannot produce a diagnosis without enough answers to apply its decision rules.
AUTOMATED OUTPUT
The engine applies deterministic rules, not legally significant automated decisions.
The service automatically applies documented decision logic to the business inputs you provide in order to identify a likely constraint and generate decision-support output. This processing is intended to support a business decision, not to make a legal, employment, credit, insurance or similarly significant decision about an individual.
The current service does not use the diagnostic to make decisions producing legal effects or similarly significant effects concerning a natural person, and it does not create an advertising profile from diagnostic answers.
CONTACT FORM
What we collect when you contact us.
The contact form requests your name, email address, enquiry category and message. Company name is optional. Required fields are necessary to receive and answer the request; if they are not provided, the form cannot be submitted.
We use contact-form information to answer the enquiry, manage related correspondence, protect the form against abuse and, where applicable, take steps requested by you before entering into a contractual or commercial relationship.
The form includes a data-protection acknowledgement. It confirms that the information has been shown to you; it is not blanket consent for unrelated processing or advertising.
Cloudflare Turnstile is used as an anti-abuse control and processes technical security signals needed to distinguish legitimate visitors from automated traffic. Turnstile does not receive the contents of your message through our implementation. Contact emails are delivered through Resend.
PURPOSES & LEGAL BASES
We process only what is needed for defined purposes.
- Provide the diagnostic and site functionality: processing requested by you in order to provide the tool and its output.
- Optional analytics: consent. GA4 remains disabled unless you accept optional analytics cookies.
- Contact requests: steps taken at your request before a possible contract where relevant; otherwise our legitimate interest in responding to communications directed to us.
- Security and abuse prevention: our legitimate interest in protecting the website, contact form and users from automated abuse and misuse.
- Legal obligations and claims: processing where required by law or necessary to establish, exercise or defend legal claims.
ANALYTICS
Google Analytics 4 is optional.
When a production GA4 measurement ID is configured, Google Analytics is loaded only after you accept optional analytics cookies. Advertising storage, Google Signals and ad-personalization signals are disabled in our configuration.
After consent, GA4 may measure page views, referrer and campaign parameters, scan CTA clicks, scan progress, diagnosis completion, Decision Lab usage and software-fit interactions. Free-text feedback comments and contact-form message content are not sent to analytics.
The production GA4 property is intended to use the minimum available user/event retention setting of 2 months. First-party GA cookies are configured with a shorter 90-day expiry rather than Google's two-year default.
RECIPIENTS & INTERNATIONAL TRANSFERS
Service providers process limited data where necessary.
Cloudflare provides hosting, security and Turnstile anti-abuse services. Resend provides transactional email delivery for the contact form. Google provides optional analytics only after consent.
Some provider processing can involve the United States. Where European data-protection law applies, these transfers must rely on an applicable adequacy mechanism or safeguards such as the EU Standard Contractual Clauses. Cloudflare publishes a Data Processing Addendum incorporating transfer safeguards. Resend's DPA incorporates the EU Standard Contractual Clauses and its service documentation states that customer data is stored in the United States.
Third-party software vendors linked from this site are independent controllers for information you submit directly to them.
RETENTION
We keep data only as long as necessary.
Diagnostic answers are not intended to create a persistent customer profile in the current product.
Contact correspondence is retained while the enquiry is active and normally for no more than 12 months after resolution, unless a longer period is necessary to comply with a legal obligation, handle an ongoing commercial relationship or establish, exercise or defend legal claims. Resend may retain email and delivery-log data for the period applicable to the selected Resend plan.
Optional analytics user/event data is intended to use a 2-month GA4 retention setting. Aggregated standard reports may be subject to Google's separate service retention behavior.
YOUR RIGHTS
You can exercise your data-protection rights.
Where applicable, you may request access, rectification, erasure, restriction, portability or objection. Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal.
Send requests to contact@hvacdecisionengine.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.
CHANGES
This policy follows the real implementation.
We may update this policy when the service, providers or legal requirements change. Material changes will be reflected on this page.
Last updated: September 18, 2026