Privacy notice

Who is responsible

The data controller is Neurologyca Science & Marketing S.L., Villagarcía Av, 7, Santiago de Compostela 15706, Spain. Tax ID B01531482.

For anything in this notice, including any of the requests described below, write to info@neurologyca.com.

We have appointed a Data Protection Officer, who you can contact directly at dpd@neurologyca.com.

What we collect

Only what you type into the form, plus two timestamps. There is no hidden collection.

Name

So we can address you properly when we reply.

Email

The address we reply to. It is the only way we contact you.

Company

Context for the reply.

Your four answers

What your company does, what you are hoping to get from us, whether you need a live reading or analysis afterwards, and roughly how many people. Whoever replies uses these to understand what you need before writing back.

Path

Whether you asked to be contacted first or read the sample report first. Used only to understand how the form is used.

Timestamps

When you pressed Send, and when our server stored it.

Consent record

The exact sentence shown to you when you consented. We store the wording itself, not merely the fact that you agreed, so we can always show you what you were told.

Demo request

Whether you also asked for access to the Video Content Suite demo.

What we do not collect

• No cookies and no tracking on this form. It sets no cookies, loads no analytics, and contains no third-party scripts, advertising, or social media pixels.
• No IP address or device fingerprint is stored with your enquiry.
• No profiling and no automated decision-making. Nothing about you is scored or decided by software. A person reads your enquiry and replies.

Giving us your details is entirely voluntary. You can read the sample report without submitting anything at all. If you do not fill the form in, nothing happens and nothing is stored.

Why we may lawfully use it

Your consent, under Article 6(1)(a) GDPR. You give it by choosing to submit the form, having been shown the sentence we store alongside your enquiry. We rely on no other legal basis for this data, and we do not use it for marketing.

Who else sees it

Your enquiry is stored in a database on a single server we control, hosted at OVH in France, inside the European Economic Area. It is not sold, rented, or shared for anyone else's purposes, and it goes to no advertiser or data broker.

One other service is involved. Google Workspace (Google Ireland Limited) carries our email. The internal alert telling our team that an enquiry has arrived deliberately contains no personal data at all — only a count, timestamps, and a link. Your address passes through Google only when we actually write to you.

If you ask us for access to the Video Content Suite demo, we use the address you gave here to send you your credentials. What the demo does with your data once you are using it is covered by its own privacy notice rather than this one.

Transfers outside the EEA

Your enquiry itself does not leave the EEA — it stays on our server in France. Google may process email in transit outside the EEA; where that happens it is covered by the European Commission's Standard Contractual Clauses and, for transfers to the United States, by the EU–US Data Privacy Framework, under Google's data processing terms for Workspace.

How long we keep it

We keep your enquiry for 24 months after our last contact with you, and then delete it.

If you become a customer within that time, your details are kept as part of that relationship instead — on a different legal basis, and for as long as the relationship and the record-keeping duties attached to it require.

You can ask us to delete your enquiry sooner at any time, and we will.

Your rights

Under the GDPR you can ask us to:

• Show you what we hold about you, and give you a copy (Art. 15).
• Correct anything inaccurate or incomplete (Art. 16).
• Delete it (Art. 17). Because we rely on your consent, we will honour this — there is no competing interest we would weigh against it.
• Restrict what we do with it while a question is resolved (Art. 18).
• Receive it in a portable format to take elsewhere (Art. 20).
• Object to our use of it (Art. 21).

Withdrawing consent is always available and costs you nothing (Art. 7(3)). Tell us and we stop, and we delete what we hold. Withdrawing does not make our earlier use of the data unlawful.

We answer these requests within one month and free of charge. We may ask you to confirm who you are first, so nobody else can use this route to reach your data.

Complaints

If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain directly to the Spanish supervisory authority, whatever we say:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan 6, 28001 Madrid, Spain
www.aepd.es

Security

The form is served only over HTTPS. The credential the page uses to submit your enquiry can create a record and nothing else — it cannot read any enquiry back, not yours and not anyone else's. Reading enquiries requires a separate, verified company sign-in that exists only on our server. No credential capable of reading or deleting data is ever sent to a visitor's browser.

Changes

If we change this notice we will update the date at the top. Your stored enquiry keeps the consent wording you were actually shown, which does not change retroactively.