PRIVACY POLICY
Neuroexcellence provides this privacy policy to explain how personal data is handled when using our services, in accordance with the provisions of the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter “GDPR”) and other applicable legislation.
Processing of personal data
The GDPR defines “personal data” as any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
We are committed to keeping personal data protected. To do this, we have implemented appropriate technical and organizational measures to ensure security and prevent undue disclosure, loss, and use, as well as against unauthorized access or any other form of unlawful processing, such as creating and implementing data protection policies and adopting IT and network system security solutions. However, users should take additional appropriate security measures to ensure that their devices are properly protected.
Necessary Personal Data
The use of Neuroexcellence services does not require the provision of personal data.
However, the data required to create a user account, such as a name and an email address, may constitute personal data if they allow the identification of the natural person.
Storage period
Neuroexcellence keeps personal data in identifiable form for the shortest period necessary to fulfill the purposes required by the respective processing of personal data.
After this period, we will no longer store personal data, which we will delete, unless processing and storage are legally required or if you give us consent for prolonged storage.
Categories of data, purposes, and legal basis for processing
When using our services, you must create a user account and provide us with a username and an email address, which may constitute personal data.
We will process personal data to provide the contracted services and based on the need to execute a concluded contract.
The data processed includes identification data (name), contact data (email address), and access data (password).
The data provided serves to protect the security of the user account and to ensure that access to its content is not made by third parties.
If you wish, the email address may be used to send important information about our services, products, services, applications, or user account, as well as important information about security or substantial changes to this Privacy Policy.
If you also wish, our services may collect and perform automated statistical analysis of your use of our products (not profiling), making periodic reports, to improve the user experience and product functionality.
Personal data will be kept for the duration of the contract or for a longer period if processing and storage are legally required or if you give us consent for prolonged storage.
You can request the deletion of the user account at any time.
Within a maximum of 180 days after such a request, we will deactivate the account and delete all account data, except for data that must be kept to fulfill any legal obligations.
Once the maximum retention period for any data has elapsed, the data becomes irrecoverable.
Transmission of personal data and international transfers
We do not transmit personal data to third parties, except if the transmission is necessary to provide our requested services or to fulfill any legal obligations to which we are subject.
We may share personal data of users of our services with external service providers, namely legal and administrative services and website hosting, as well as public authorities in compliance with legal obligations.
We may transfer data to third countries, which are countries outside the European Union, within the scope of the objectives established in this Privacy Policy and in strict compliance with legal requirements. The transmission will be made if we believe, in good faith, that it is necessary to provide the requested services, for reasons related to legal requirements, with the protection of our users, for example, to prevent spam or user fraud attempts, for the operation and maintenance of the security of our services, including the prevention or interruption of an attack on our systems or computer networks.
In any case, data transfers to third countries will be made with respect for the fundamental rights, freedoms, and interests of data subjects and based on one of the following legal bases: if the transmission serves the purpose of executing the contract with you, if we obtain your consent, or if it is for one of the cases provided for in Article 49 of the GDPR.
Rights of the data subject
The data subject has the following rights:
1. Right of access
The data subject has the right to obtain, at any time, our confirmation as to whether personal data concerning them is being processed and, where applicable, access to such data and the information provided for in Article 15 of the GDPR.
2. Right to rectification
The data subject has the right to obtain the rectification of inaccurate personal data concerning them without undue delay. Considering the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of an additional statement.
3. Right to erasure (“right to be forgotten”)
The data subject has the right to obtain the erasure of their personal data without undue delay in certain legally provided circumstances, namely if the personal data is no longer necessary for the purpose for which it was collected or if the data subject decides to withdraw their consent (if this is the legal basis for the processing and when there is no other legal basis for it).
This right may be limited in certain situations, namely if processing is necessary for compliance with a legal obligation that requires processing.
4. Right to restriction of processing
The data subject has the right to obtain the restriction of the processing of their personal data in certain legally provided situations.
Among these situations are cases where the accuracy of their personal data is contested, for a period that allows us to verify its accuracy, and cases where they have objected to processing, until it is verified whether our legitimate grounds override theirs.
5. Right to data portability
If the processing is based on consent or a contract to which the data subject is a party, you have the right to receive these data in a structured, commonly used, and machine-readable format.
6. Right to object
If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for these purposes with effect for the future, including profiling, to the extent that it is related to such purposes. In this case, we will no longer process your data for this purpose.
7. Right to withdraw consent
When processing is based on consent, you have the right to withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. In this case, and unless there is another legal basis that requires or permits it, such as compliance with a legal obligation or the performance of a contract to which the data subject is a party, your personal data will no longer be processed.
8. Right to lodge a complaint
The data subject has the right to lodge a complaint with the supervisory authority regarding issues related to the processing of their personal data. In Portugal, the supervisory authority is the National Data Protection Commission (CNPD). For more information, visit www.cnpd.pt.
To exercise any right, you should send us an email to the address indicated below. For this purpose, we may require additional information to verify your identity. The exercise of rights is free of charge, except if the request is manifestly unfounded, excessive, or repetitive.
How can you contact us?
If you have any questions or need more information about how personal data is handled or your rights as a data subject, please contact us through the following channels:
Email: info@neuroexcellence.pt
Letter: Rua Academia Fc Famalicão Famalicão, Pavilhão 7 4760-482 Esmeriz Portugal
Changes to this Privacy Policy
We may revise and update this Privacy Policy without prior notice and with immediate effect. Therefore, we recommend that you review this Privacy Policy regularly.