LEGAL · PRIVACY

Privacy Policy

BioVoxel.Earth processes personal data for professional contact, the handling of strategic briefing requests, institutional communication and continuous improvement of the site. This policy describes what data we collect, for what purpose, which technical tools are involved and what rights you have. Last updated: 2026-04-28.

1 · Data controller

TMD Consulting International, the operating company behind BioVoxel.Earth in collaboration with Fundación Megabiodiversidad. Operating address: Panama, Republic of Panama. General contact: contacto@biovoxel.earth. For specific privacy and data protection matters, write to contacto@biovoxel.earth with the subject "Privacy — Request".

2 · Applicable jurisdiction

Processing takes place from Panama under Law 81 on Personal Data Protection and its Executive Decree 285/2021. When the user resides in the European Union, GDPR (EU 2016/679) protections additionally apply regarding data subject rights and international transfers.

3 · Categories of data we may collect

(a) Contact data: name, organization, role, email, optional phone. (b) Professional context data: country, type of actor (government, fund, company, cooperation, fisheries), territory or jurisdiction, timeframe, type of support sought. (c) Message data: description of the decision or problem and additional context. (d) Aggregate technical data: pages visited, session duration, traffic source, device (collected by analytics tools with or without cookies according to consent).

4 · Purposes by category

Contact and context data: respond to the briefing request, assess case fit and open professional conversation. Message data: understand the problem before the first meeting. Technical data: measure aggregate site usage to improve it. We do not use personal data for profiling, automated scoring or automated decisions.

5 · Legal basis for processing

Explicit user consent when submitting the form and accepting cookie banner categories. Legitimate interest in responding to a professional request initiated by the user. Compliance with tax or regulatory legal obligations where applicable.

6 · Technical tools and providers

(a) Plausible Analytics — cookieless aggregate usage analytics, hosted in EU, no third-party advertising data sharing. (b) Vercel Analytics and Speed Insights — technical performance and load speed metrics, primarily hosted in the US, with active data processing agreement. (c) LinkedIn Insight Tag — optional tag for professional audiences, only active with explicit banner consent; allows measuring conversions from LinkedIn campaigns. (d) Resend — transactional email provider for briefing confirmations and material delivery. (e) Neon Database — structured storage of contractual events (Atlas Sala) under encryption. Each tool's activation follows banner consent choices.

7 · International transfers

Some technical providers (Vercel, LinkedIn, Resend, Neon) may host or process data outside Panama and the European Union, mainly in the United States and the EU. Where applicable, Standard Contractual Clauses (SCC) and equivalent contractual and technical protection mechanisms are used. Users may request detail of specific transfers by writing to privacy.

8 · Retention periods

Contact and professional context data: as long as needed to handle the request and, if a professional relationship is established, for a reasonable follow-up period (up to 3 years from last active contact, unless higher legal obligation). Aggregate technical data: up to 24 months depending on the tool. Contractual events (Atlas Sala): according to contract duration and associated legal obligations.

9 · User rights

Access, rectification, erasure, restriction, objection and portability. Also the right not to be subject to automated decisions with legal effects. To exercise any of these rights, write to contacto@biovoxel.earth with subject "Privacy — [right exercised]". We respond within 30 calendar days. If you consider the processing does not comply with regulations, you may file a claim with ANTAI (Panama) or, where applicable, the supervisory authority of your country of residence.

10 · Withdrawal of consent

You may withdraw consent at any time without affecting the lawfulness of prior processing. For tools with cookies (LinkedIn Insight Tag), the banner allows reconfiguring the choice. For form data already submitted, write to privacy requesting erasure.

11 · Cookies and trackers

(a) Necessary: session cookies and minimal preferences for the site to work (language, consent banner). (b) Analytics: Plausible uses no cookies; Vercel Analytics uses anonymous identifiers. (c) Advertising: LinkedIn Insight Tag installs measurement cookies only with explicit user consent. Exact detail of each cookie and its duration is available in the configuration banner.

12 · Security and confidentiality

We apply reasonable technical and organizational measures: in-transit encryption (HTTPS/TLS), encrypted storage at database providers, role-based access control, logging of critical events (access to NDA dossiers), and periodic provider review. The team operates under professional confidentiality with explicit contractual commitments.

13 · Sensitive professional information sent via the form

If your message includes sensitive information about your organization, jurisdiction or end client, we recommend limiting what you send to the minimum necessary to frame the conversation. You may request NDA signature before sharing confidential details by writing to contact.

14 · Changes to this policy

This policy is reviewed periodically and updated when technical tools, providers or the applicable regulatory framework change. Material changes will be communicated via visible notice on the site. The last updated date appears at the beginning of this page.

15 · Privacy contact

Any inquiry about this policy or request related to your personal data may be directed to contacto@biovoxel.earth with subject "Privacy". The data controller maintains a specific channel to handle data subject rights according to applicable regulations.