Privacy Notice

1. Who we are

This privacy notice applies to the Theremia Pilot platform (the Platform), operated by Theremia. The data controller is Margaux Törnqvist. For any privacy-related request, contact us at [email protected].

2. What data we collect

We collect only the data strictly necessary to operate the Platform and improve your experience:

• Usage data (pages visited, time spent, interactions): collected via analytics cookies, only with your consent.
• Technical data (browser type, device, IP address): collected automatically for security and performance purposes.
• Contact information (email address): only if you contact us directly.

3. Why we collect it

4. Cookies

We use analytics cookies (Hotjar) to understand how visitors interact with the Platform. These cookies are only activated after you give your explicit consent via the banner. No analytics data is collected before consent.

5. Data sharing

We do not sell your personal data. We share data only with the following processors, each under a Data Processing Agreement:

• Our analytics provider (Hotjar, Inc.), only when you have consented to analytics cookies.
• Our email delivery provider (Resend, Inc.), which processes the information you submit through our contact, newsletter and pilot request forms (name, email address, message and company details) in order to deliver it to our team.

These providers may store or transfer data outside the EU (including in the United States) under Standard Contractual Clauses.

6. Data retention

Analytics data is retained for up to 13 months. Technical logs are deleted after 90 days. Contact information is kept only as long as necessary to respond to your request. Email delivery logs held by our email provider are retained for 30 days.

7. Your rights

Under the GDPR, you have the right to:

• Access the data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing
• Withdraw your consent at any time (without affecting past processing)
• Lodge a complaint with your local data protection authority

To exercise your rights, contact us at [email protected]. We will respond within 30 days.

8. Changes to this notice

We may update this notice from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.