Controller

The controller is TesisPro, Potrero Alto - La Colmena 4470, Paraguarí, Paraguay. Tax ID (RUC): 8911296-2. Email: contacto@tesispro.lat. Further identification is on the legal notice. TesisPro is established in Paraguay, not in the European Union.

Which site / which laws

tesispro.org is for the European Economic Area, the United Kingdom and the rest of the world. It is not the primary site for Latin America or the United States — that is https://tesispro.lat.

This notice is written first under the GDPR (and UK GDPR where it applies). Because the server is in Brazil, Brazil’s LGPD also applies to the technical processing, even if you are not in Brazil. Paraguay law applies to the provider as such.

When the GDPR applies

This site offers academic advising and scientific writing to persons in Europe and the rest of the world (outside Latin America as the primary market). If you are in the EEA, the GDPR may apply (Art. 3(2) — offering of services). If you are in the United Kingdom, UK GDPR may apply. If you are in Latin America, please use tesispro.lat. The United States uses this site..

EU representative and data protection officer

No representative in the Union has been designated under Art. 27 GDPR. Until one is appointed and named here, data subjects in the EEA exercise their rights against the controller at the email above.

No data protection officer has been appointed. Art. 37 GDPR does not require one for this processing (we are not a public body; processing of special categories or large-scale systematic monitoring is not our core activity). Write to the same email.

Personal data we process

You provide most of it on the diagnostic form. We also store a small amount of technical data needed to run the site.

Form: name, email, phone (optional), country, time zone, working language, type of request, level, style manual, phase, deadline, description of what already exists, institution or journal (optional), uploaded file (optional).
Integrity: that you accepted the integrity text, with UTC timestamp and version of that text.
Technical: language of the page, request path, a truncated hash of the IP address (not the raw IP), a truncated user-agent string, date and a short reference number.
If we later contract: the written scope and ordinary business correspondence.

Purposes and legal bases (Art. 6 GDPR)

Handle your diagnostic request, assess fit, write a scope, and — if you hire us — perform the contract: Art. 6(1)(b) (steps at your request before a contract, or performance of a contract).
Keep the timestamped integrity acceptance so we can show that the site does not offer ghostwriting of assessed work: Art. 6(1)(c) (duties under consumer and unfair-commercial-practice rules that apply to us) and Art. 6(1)(f) (legitimate interest in documenting what was offered).
Operate a secure site (session, CSRF protection, language, abuse detection): Art. 6(1)(f). Strictly necessary cookies are also allowed without consent under ePrivacy rules.
We do not sell lists, do not advertise with tracking profiles, and do not send newsletters unless you separately ask.

Legitimate interests (Art. 6(1)(f))

Our interests are a functioning, secure site and being able to prove the integrity limits of the offer. They do not override your interests in a way that would justify selling or profiling your data. You may object under Art. 21 GDPR to processing based on Art. 6(1)(f).

Recipients

People at TesisPro who handle diagnostics and, if contracted, the work.
Technical hosting of this website and of diagnostic mail (SMTP) on a server in Brazil. The host has no commercial right to use your research beyond operating the service.
No social pixels and no third-party analytics in this version.
WhatsApp is not enabled. If it is enabled later, Meta would become a recipient and this notice would be updated first.

Hosting in Brazil and transfers outside the EEA (Chapter V GDPR)

The server that hosts tesispro.org and that sends the diagnostic notification mail is located in Brazil. The controller is established in Paraguay. The European Commission has not adopted an adequacy decision for Brazil or for Paraguay (Art. 45 GDPR).

If you are in the EEA, using this site or submitting the form therefore involves a transfer of personal data to Brazil (hosting and mail) and processing by a controller in Paraguay.

Where Chapter V GDPR applies: submitting the diagnostic is a transfer necessary for pre-contractual steps taken at your request (Art. 49(1)(b) GDPR). Delivering the website from Brazil is the technical means of providing the site you chose to visit.

We do not invent Standard Contractual Clauses or an adequacy decision we do not have. You may ask us in writing for more detail on technical and organisational measures (encryption in transit, access limited to operators, no sale of data).

Retention

Diagnostic with no later contract: 12 months after the last contact, then deletion or anonymisation, unless a dispute requires longer.
If a contract follows: the engagement plus the limitation period for claims (under Paraguayan civil/commercial rules typically up to five years; longer if a mandatory rule at your place of residence requires it).
Integrity timestamp: kept with the diagnostic record.
IP hash and user-agent: 30 days, unless needed to investigate abuse.
Session cookie: end of the browser session. Language cookie (tp_lang): up to 12 months.

Your rights

If the GDPR applies you may request access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18) and portability (Art. 20), and object (Art. 21) to processing based on Art. 6(1)(f). Write to contacto@tesispro.lat.

You may lodge a complaint with a supervisory authority in the EEA, typically in your Member State of residence, place of work or the place of the alleged infringement (Art. 77 GDPR). The European Data Protection Board publishes a list of authorities. For the UK, the ICO if UK GDPR applies.

We do not charge a fee for a first reasonable request.

Cookies and similar storage

We use only what the site and the form need. Details are on the Cookies page. Strictly necessary cookies do not require consent. There is no advertising identifier.

Uploads and other people’s data

A file you upload may contain data about others (for example research participants). You must have a legal basis to send it. We use the file only to assess your request and to perform a later contract if any. Do not upload special-category data unless it is strictly necessary for the academic work you describe and you may lawfully share it.

Automated decisions

We do not take decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects (Art. 22 GDPR).

Security

Transport is encrypted (HTTPS / SMTPS). Access to diagnostics is limited to operators. IP addresses are stored only as a truncated hash. No measure makes processing risk-free.

Children

The service is aimed at university-level work, not at children. Do not submit a diagnostic for a person under 16.

Changes

If processing changes (analytics, WhatsApp, an EU representative, another host country), we will update this notice. Version date: 26 August 2026.

LGPD (Brazil) and ANPD

The server that hosts this site and sends diagnostic mail is in Brazil. LGPD Art. 3(I) therefore applies to that processing. You may contact us as privacy / encarregado contact at contacto@tesispro.lat. You may complain to the ANPD (gov.br/anpd) as well as to an EEA supervisory authority if the GDPR applies.

Hosting in Brazil does not mean TesisPro has a Brazilian company or CNPJ.

Privacy for the US, Europe and the rest of the world