Privacy policy

1. Controller

Neurofactor, part of Axon Group and based in the Netherlands, is the controller for data processed through this website and in our own operations.

For privacy questions, access requests or complaints: contact@neurofactor.nl.

2. Data we process

• Contact details you enter in a form: name, email address, phone number, organisation and the content of your message.
• Newsletter data: first name, email address and the moment of subscription.
• Research or event signup data: name, email address and the preferences or answers you provide.
• Download data: name, email address and organisation when requesting a media kit or report.
• Technical data: IP address, browser type, pages visited and timestamps, in limited form, for security and troubleshooting.
• Research data when you take part in a study: EEG, eye tracking, fNIRS or behavioural data, plus background characteristics relevant to the analysis.

3. Purposes and legal bases

• Answering your question or request - performance of, or steps prior to, a contract.
• Sending the newsletter - consent, which you can withdraw in every email.
• Running research with participants - explicit consent, recorded before measurement starts.
• Delivering client assignments - performance of the contract.
• Security, abuse prevention and improving the website - legitimate interest.
• Meeting legal obligations such as accounting and tax retention - legal obligation.

4. Research data and special care

Brain data and eye movement data are sensitive. We process them only with explicit, informed consent and solely for the research purpose explained in advance.

Research data is pseudonymised as early as possible. Reports and presentations to clients contain only aggregated results that cannot be traced to an individual, unless a participant has separately and demonstrably consented, for example for imagery.

We never sell research data and never use it to profile or target individuals.

5. Retention

• Contact and form submissions: up to two years after the last contact.
• Newsletter data: until you unsubscribe, then up to six months for unsubscribe administration.
• Pseudonymised research data: up to five years, for verification and scientific reproducibility.
• Participant consent forms: as long as the related research data.
• Administrative and tax records: seven years, as required by law.

6. Sharing with others

We share data only with parties that support delivery, such as hosting, email services, form processing and analytics. We conclude data processing agreements with these parties.

Data is never sold. Transfers outside the European Economic Area take place only with appropriate safeguards, such as the European Commission's standard contractual clauses.

7. Cookies and measurement

This website uses functional cookies and local storage needed to make the site work, for example for language choice and remembering that you have seen a notice.

Analytics data is collected as privacy-friendly as possible and is not used for advertising or for tracking individuals across other websites.

8. Security

We apply appropriate technical and organisational measures: encrypted connections, role-based access, minimal data storage and separation between identifying details and research data.

9. Your rights

Send your request to contact@neurofactor.nl. We respond within four weeks. If you disagree with the outcome, you can file a complaint with the Dutch Data Protection Authority.

• Access to the data we hold about you.
• Correction of inaccurate data.
• Erasure of your data, insofar as no legal retention obligation applies.
• Restriction of, or objection to, the processing.
• Portability of the data you provided yourself.
• Withdrawal of consent at any time, without affecting processing before withdrawal.

10. Changes

We may update this policy when our services, technology or legislation require it. The date at the top indicates the latest version.