Privacy Policy

1. Who We Are

TESSA Labs ("we", "us", "our") is a thermal engineering consultancy based in Madrid, Spain. This privacy policy explains how we handle information when you visit our website at tessalabs.space.

Data Controller: TESSA Labs, Madrid, Spain.
Privacy Contact: Contact form

2. Information We Collect

We collect personal information in the following ways:

• Contact form: If you contact us through our website, we collect your name, email address, and message, along with optional organisation and country fields. This information is used solely to respond to your inquiry.
• Course interest form: If you express interest in our training course, we collect your name, email, organisation, country, role, preferred training format, and optionally the number of participants. This information is used to follow up on your interest and arrange training.
• Course waitlist: If you join our course waitlist, we collect your email address to notify you when the course becomes available.

3. Analytics & Tracking

With your consent, we use privacy-focused analytics to understand how our site is used and improve the experience. These services collect anonymous, aggregated page view data and real-user performance metrics (page load times). No personal data or cookies are used for analytics purposes.

You can accept or decline analytics tracking when you first visit our site. Your choice is stored locally in your browser and can be changed at any time via the "Cookie Settings" link in the footer. For full details, see our Cookie Policy.

4. Third-Party Services

We use a limited number of third-party services to operate this website. We only share data with these services to the extent necessary for their function:

• Hosting: Our hosting infrastructure may collect standard server logs (browser type, timestamps) as part of normal operations. We do not use these logs for tracking or profiling.
• Email delivery: Form submissions trigger confirmation and notification emails via a third-party email service provider. Your information is transmitted solely for the purpose of delivering those emails and is not used for marketing or shared with other parties.
• Bot protection: All forms on our site use Cloudflare Turnstile for invisible bot detection. Turnstile may collect browser metadata to verify you are a human visitor. No personal data is stored by us from this process. See Cloudflare's Privacy Policy.
• Currency conversion: Our course page fetches live exchange rates from an external API to display prices in your local currency. This request is made from your browser and no personal data is sent by us.

5. Data Retention

Waitlist email addresses are retained until the course launches and the notification is sent, after which they are deleted unless you opt into further communications. Contact form and course interest submissions are retained for as long as necessary to respond to your inquiry or follow up on your interest, and then deleted.

6. Your Rights (GDPR)

As we are based in the EU, you have the right to access, correct, or delete any personal data we hold about you. You also have the right to object to processing and to request data portability. To exercise these rights, contact us via our contact form. We will respond within 30 days.

7. Changes to This Policy

We may update this policy as our services evolve. Any changes will be reflected on this page with an updated date.

8. Contact

For any privacy-related questions, please contact us via the contact form.