Neurova AI · Legal
What we collect, why we collect it, and what you can ask us to do about it.
Neurova AI is a sole proprietorship (eenmanszaak) registered in the Netherlands. For the purposes of the GDPR, the data controller is:
We have not appointed a Data Protection Officer; we are not required to. Questions about this statement go to the email address above.
When you use the contact form. We receive your first name, last name, email address, the service you selected and your message. We use this only to answer you and, if it goes further, to prepare a quote. The legal basis is Article 6(1)(b) GDPR (steps taken at your request before entering a contract), and Article 6(1)(f) (our legitimate interest in responding to business enquiries) where no contract follows.
When you subscribe to the mailing list. We receive your email address, the page you subscribed from and the date. The legal basis is your consent, Article 6(1)(a) GDPR. You can withdraw it at any time by emailing us, and every mailing carries an unsubscribe option.
When you book a call. Booking runs through Google Calendar appointment scheduling. Google receives the name, email address and any details you enter on the booking form. The legal basis is Article 6(1)(b) GDPR.
When you allow analytics cookies. We use Google Analytics 4 to count visits and see which pages get read. This only happens if you accept analytics cookies; if you decline, no Google Analytics script is loaded at all. The legal basis is your consent, Article 6(1)(a) GDPR and Article 11.7a of the Dutch Telecommunications Act. Details are in our cookie policy.
Simply by visiting. The site is hosted on GitHub Pages. Like any web server, GitHub processes your IP address and technical request data in order to deliver the page and to protect the service against abuse. The legal basis is Article 6(1)(f) GDPR.
Nothing else. This site makes no third-party requests at all before you consent. Webfonts are served from our own domain rather than Google Fonts, and there is no icon CDN, no tag manager, no embedded video, no social widget, no chat widget and no advertising or remarketing pixel. Loading a page therefore discloses your IP address to nobody but our host.
We do not buy personal data, we do not build advertising profiles, and we do not run any automated decision-making or profiling that produces legal or similarly significant effects.
We keep the number of third parties small. The ones we use are:
Some of these providers are established in the United States or may process data there. Where that happens, the transfer relies on the European Commission's adequacy decision for the EU–US Data Privacy Framework and/or on Standard Contractual Clauses. You can ask us for details of the safeguards that apply.
A note on our own infrastructure. We build client systems with EEA-only data residency where the data calls for it. This marketing website is a different matter: it is a public brochure carrying no client or patient data, and it runs on ordinary US-backed hosting. We have removed every other third party we reasonably could (fonts are self-hosted and there is no icon CDN), so that simply reading the site discloses nothing to anyone else. We would rather state the remaining limitation plainly than imply more than is true.
Under the GDPR you can ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it, or hand it over in a portable format. You can object to processing based on legitimate interest, and you can withdraw consent at any time without affecting anything we did before you withdrew it.
Email andreas.chitos@neurova-ai.com and we will respond within one month. There is no charge.
If you think we have handled your data badly, please tell us first, but you also have the right to complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens.
We use TLS on all connections to this site, keep third-party integrations to a minimum, and apply least-privilege access to the accounts that hold enquiry and subscription data.
If we change how we handle personal data we will update this page and change the date at the top. Where the change is material and relies on your consent, we will ask you again.