Privacy policy

Who is the data controller

NEUREKALAB S.L. is the controller of the personal data of users of this website (the Controller). Data is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

• Company name: NEUREKALAB S.L.
• Tax ID (NIF): B67514497
• Address: Carrer de la Llotja s/n, 08500 Vic (Barcelona), Spain
• Phone: +34 630 483 592
• Email: [email protected]

Why we process your data

To maintain our relationship with users. Specifically, to:

• Handle your enquiries and requests, and process any orders or requests you make through the contact forms on this website.
• Send you commercial communications about the Controller’s products and services, or those of partners and suppliers with whom it has agreed a promotion, by email or other electronic or physical means. These communications are always sent by the Controller: third parties have no access to your data.
• Send you our newsletter, news, offers and promotions about our activity.
• Carry out market research and statistical analysis.
• Measure use of the website and the effectiveness of our advertising campaigns on Facebook and Instagram, only if you accept analytics or advertising cookies (see the cookie policy).

Legal basis

Processing is lawful under Article 6 of the GDPR on the basis of:

• Your consent: for commercial communications and the newsletter, and for measurement with analytics and advertising cookies, including telling Meta about enquiries submitted through the form. You can withdraw it at any time from “Cookie settings” at the bottom of every page.
• The Controller’s legitimate interest: for market research and statistical analysis, and for processing the orders and requests you make to us.

How long we keep your data

We keep it for as long as it is needed for the purpose for which it was collected, or for as long as the law requires us to keep it. When it is no longer needed, it is deleted using appropriate security measures to ensure it is anonymised or completely destroyed.

Google Analytics data is kept for 14 months.

Who we share your data with

We do not plan to share personal data with third parties, except:

• with the Controller’s service providers (for example, communications providers) where necessary to fulfil the purposes described above. The confidentiality and data processing agreements required by privacy law have been signed with all of them;
• with Google (Google Ireland Limited), if you accept analytics cookies: it receives Google Analytics browsing data as a data processor;
• with Meta (Meta Platforms Ireland Limited), if you accept advertising cookies: it receives Meta pixel data and, when you submit a form, the fact that an enquiry has been made, together with your email address converted into an irreversible code (SHA-256 hash), your IP address and technical browser data, so that it can be attributed to a campaign. Meta does not receive the content of the form. NeurekaLab and Meta are joint controllers for the collection and transmission of this data; Meta’s further use of it is governed by its privacy policy. Nothing is sent to Meta from pages about dyslexia and dyscalculia;
• where required by a legal obligation.

International transfers

Google and Meta may process data in the United States. Both companies are certified under the EU-US Data Privacy Framework, which the European Commission has recognised as an adequate safeguard since 10 July 2023.

Your rights

• Withdraw your consent at any time.
• Access, rectify and erase your data, and request its portability.
• Restrict or object to its processing.
• Lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing does not comply with the law.

How to exercise your rights

Write to the Controller at: NEUREKALAB S.L., Carrer de la Llotja s/n, 08500 Vic (Barcelona), Spain.

Required and optional data

In our forms, fields marked as required are needed to handle your request; all other fields are optional. If you do not complete the required fields, we will not be able to handle your request, or our reply may not fully meet your needs.

By submitting a form, you freely, expressly and unambiguously agree that we may process that data to handle your request. You confirm that the data you provide is accurate and undertake to tell us about any changes.

Security measures

The Controller complies with the GDPR and the LOPDGDD when processing the personal data for which it is responsible and, in particular, with the principles set out in Article 5 of the GDPR: data is processed lawfully, fairly and transparently, and is adequate, relevant and limited to what is necessary for the purposes for which it is processed.

The Controller has put in place appropriate policies and technical and organisational measures to protect users’ rights and freedoms. For any questions about privacy safeguards, please write to the address above.

Cookies

This website uses first-party technical cookies and, only if you accept them, analytics cookies (Google Analytics) and advertising cookies (Meta). See the cookie policy for details and how to change your choice.