top of page

PRIVACY POLICY

Last updated: 01.07.2024

Introduction 

Welcome to NeurCG GmbH!

We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. If you have any questions or concerns, please contact us at neurcg@gmail.com.

1. Data Controller

The data controller responsible for your personal data is:

NeurCG GmbH

Fuerstrasse 19

72072 Tübingen

neurcg@gmail.com

+49 1512 8950793

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the website, express interest in obtaining information about us or our products and services, participate in activities on the website, or otherwise contact us.

The personal information that we collect depends on the context of your interactions with us and the website, the choices you make, and the products and features you use. The personal information we collect may include the following:

  • Name and Contact Data: We collect your first and last name, email address, postal address, phone number, and other similar contact data.

  • Credentials: We collect passwords, password hints, and similar security information used for authentication and account access.

  • Payment Data: We collect data necessary to process your payment if you make purchases, such as your payment instrument number (e.g., credit card number), and the security code associated with your payment instrument.

3. How We Use Your Information

We use personal information collected via our website for a variety of business purposes described below:

  • To facilitate account creation and logon process.

  • To send administrative information to you for our business purposes, such as information regarding our services and changes to our terms, conditions, and policies.

  • To fulfill and manage your orders, payments, returns, and exchanges made through the website.

  • To send you marketing and promotional communications.

  • To enforce our terms, conditions, and policies for business purposes, to comply with legal and regulatory requirements, or in connection with our contract.

  • To respond to legal requests and prevent harm.

4. Sharing Your Information

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations. We may process or share data based on the following legal basis:

  • Consent: We may process your data if you have given us specific consent to use your personal information for a specific purpose.

  • Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.

  • Performance of a Contract: Where we have entered into a contract with you, we may process your personal information to fulfill the terms of our contract.

  • Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.

5. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure.

6. Your Data Protection Rights

If your personal data are processed, then you are a data subject within the language of GDPR, and you have the following rights vis-à-vis the controller:

Right to information

According to Art. 15 GDPR, you have a right to information. Specifically, this means you have the right to request confirmation from the data controller as to whether we process personal data pertaining to you. If this is the case, you also have the right to obtain information about these personal data, and about the information set forth in Art. 15 (1) GDPR. This includes, for instance, information about the purposes for processing, about the categories of personal data processed, and about the recipients or categories of recipients to whom the personal data have been or will be disclosed (Art. 15 (1) lit. a), b) and c) GDPR).

 

Right of rectification

According to Art. 16 GDPR, you have a right to rectification. What this means specifically is that you have the right to request immediate rectification of incorrect personal data about you as well as completion of incomplete personal data.

Right of erasure (“right to be forgotten”)

Art. 17 GDPR grants you a right to erasure of data about you (also known as the “right to be forgotten”). In other words, you have the right to request that we erase personal data relating to you immediately, and we have an obligation to erase personal data at once if one of the reasons set forth in Art. 17 (1) GDPR applies. This may be the case, for example, if personal data are no longer needed to fulfil the purposes for which they were collected or were otherwise processed (Art. 17 (1) lit. a) GDPR).

 

If we have made the personal data public and are obliged to erase them, we are also under an obligation, taking account of available technology and the cost of implementation, to take reasonable steps, including technical ones, to inform other controllers responsible for processing these personal data that a data subject has requested that they erase all links to these personal data, together with any copies or replications thereof (Art. 17 (2) GDPR).

 

By way of exception, the right to erasure (“right to be forgotten”) does not apply if processing of the data in question is required for the reasons set forth in Art. 17 (3) GDPR. This may be the case, for example, insofar as processing is required to meet a legal obligation, or to establish, exercise or defend legal claims (Art. 17 (3) lit. a) and e) GDPR).

 

Right to demand processing restrictions

Under certain conditions, Art. 18 GDPR also guarantees your right to restriction of processing of these data. This means that you have the right to request that we restrict processing if one of the conditions listed in Art. 18 (1) GDPR is met. This may be the case, for example, if you dispute the accuracy of personal data about you. In this case, processing is restricted for a period sufficient to permit us to review the personal data for accuracy (Art. 18 (1) lit. a) GDPR). Restriction involves the marking of stored personal data with the goal of restricting their future processing (Art. 4 No. 3 GDPR).

 

Right to data portability

As a data subject, you also have a right to data portability in accordance with Art. 20 GDPR. This means that you generally have the right to receive the personal data about you that you have provided to us, presented in a structured, commonly used and machine-readable format, and that you have the right to transmit these data to another data controller unimpeded by us, provided that the processing is based on consent issued pursuant to Art. 6 (1) lit. a) or Art. 9 (2) lit. a) GDPR, or on a contract pursuant to Art. 6 (1) lit. b) GDPR, and provided that such processing is carried out with the aid of automated procedures (Art. 20 (1) GDPR).

In exercising your right to data portability, you always have the right to take steps to see to it that your personal data are transmitted directly by us to another data controller, provided that this is technically feasible (Art. 20 (2) GDPR).

Right to object

Art. 21 GDPR guarantees your right to object. We expressly inform you, as a data subject, of your right to object not later than upon our first communication with you.

Please find more detailed information below:

Right to object on grounds resulting from the situation specific to the data subject

As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you on the basis of Art. 6 (1) lit e) or f) GDPR, including profiling based on those provisions.

 

In the case of an objection for reasons stemming from your particular situation, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing and these grounds override your interests, rights and freedoms, or the processing is in service of establishment, exercise or defence of legal claims.

 

The right to object to direct marketing

If personal data is processed to engage in direct advertising, you have the right to at any time object to the processing of your affected personal data for the purposes of such advertising. This also applies to profiling to the extent that it is affiliated with such direct advertising.

In the event that you object to processing for direct marketing purposes, we will no longer process the personal data concerned for these purposes

 

Right to revoke consent

If the processing is based on consent pursuant to Art. 6 (1) lit. a) or Art. 9 (2) lit. a) GDPR, you as a data subject have the right to revoke your consent at any time pursuant to Art. 7 (3) GDPR. Revocation of consent will not affect the legality of processing undertaken on the basis of this consent prior to its revocation. We will bring this to your attention before you grant your consent.

 

Right to lodge a complaint with a supervisory authority

As a data subject, you have the right to lodge a complaint with a supervisory authority subject to the conditions as set forth in Art. 77 GDPR.

 

The supervisory authority responsible for us is the State Officer for Data Protection and Freedom of Information of the German state of Baden-Württemberg.

You can find contact data here: https://www.baden-wuerttemberg.datenschutz.de/kontakt/

bottom of page