Privacy notice.

Who we are

The Configurations Lab LLC ("the Lab", "we"), a limited liability company organized under the laws of the State of Wyoming, USA, is the controller of the personal data described here, and the responsable del tratamiento for the purposes of Colombia's Ley 1581 de 2012 and Decreto 1377 de 2013. For any question or request about your data, write to us:

What we collect

• Messages you send us. If you email the Lab, we receive your name, email address, and whatever you choose to include in the message.
• Job applications. If you apply for an engineering engagement, we receive your CV and the details you send with it, such as your country and city of residence, your expected monthly fee, work history, and contact details. Please do not send identity-document numbers, photos, health information, or other sensitive data; we do not need them to assess an application.
• Technical data. When you visit the site, our hosting provider processes standard server data, such as IP address, browser type, and the pages requested, to deliver and secure the site. The site loads typefaces from Google Fonts, which receives your IP address when the fonts load.
• Cookies. The site does not set advertising or tracking cookies. If we ever add analytics that use non-essential cookies, we will ask for your consent before they run.

How we use it, and on what basis

• To reply to your message and continue the conversation you started. Basis: our legitimate interest in responding, or steps you ask us to take before entering a contract.
• To assess your application for an engineering engagement, contact you about it, and, if you are selected, prepare a contract. Basis: steps taken at your request before entering a contract, and your consent.
• To run and secure the website. Basis: our legitimate interest in keeping the site available and safe.

Under Ley 1581, sending us your message or application after reading this notice is the express, informed authorization (autorización) for us to process your data for the purposes above. You can withdraw that authorization at any time, as described in section 06. We do not use your data for marketing, and we do not make automated decisions about you.

Who we share it with

We do not sell or rent personal data. We share it only in these cases:

• Service providers who process data on our behalf, such as our email and website hosting providers, under terms that protect it.
• Client teams, for shortlisted candidates only. If you are shortlisted for an engagement, we may share your professional profile with the team you would work with. We tell you before we do, and we share only what is needed to assess fit.
• Where the law requires it, for example a valid request from a competent authority.

Some of these providers operate outside your country, including in the United States. Where data moves across borders, we rely on the safeguards the applicable law requires, such as standard contractual clauses.

How long we keep it

• General messages: deleted once they are no longer needed to deal with your inquiry, and in any case within 12 months.
• Applications: kept for up to 12 months after the selection process closes, so we can consider you for similar engagements, unless you ask us to delete them sooner. If you join an engagement, your data moves to the contract record and is kept as the law requires.
• Server data: kept by our hosting provider for the limited period it needs for security and operation.

Your rights

Depending on where you live, you have the right to access the personal data we hold about you; to correct or update it; to ask us to delete it; to withdraw your consent or authorization; to object to or restrict certain processing; to receive your data in a portable format; and to request proof of the authorization you gave us.

To exercise any of these rights, email info@theconfigurationslab.org with the subject "Data request". We answer queries (consultas) within 10 business days and complaints or correction requests (reclamos) within 15 business days, as Ley 1581 requires, and in any case within one month.

If you are not satisfied with our answer, you can complain to your data protection authority. In Colombia this is the Superintendencia de Industria y Comercio (SIC); in the European Union, the supervisory authority of your country.

Changes to this notice

We review this notice at least once a year. If we change how we use personal data, we will update this page and its effective date. The site is not directed at children, and we do not knowingly collect their data.