Privacy Policy

Who Is Responsible

The controller of personal data collected through this website is Neuropathic System, ul. Wąska 6, 05-430 Celestynów, Poland, NIP 532-187-80-39.

For privacy matters, including requests to exercise your rights, write to security@neuropathicsystem.com. We answer within one month and will tell you if a request needs longer.

What This Policy Covers

This policy applies to the public website and to the enquiry form on it.

It does not cover data processed inside a client engagement. Where we process operational data on behalf of a client, that processing is governed by the agreement with that client, and the client remains the controller of it.

Information We Collect

When you send an enquiry, we receive your selected topic, email address and a short description of your company’s needs. These details are required. A phone number is optional and only reaches us if you provide it.

We also record the page the enquiry was sent from, the language version you used, and the time it arrived, so that a reply has context.

Serving the website produces standard technical records, including an IP address, which are used to keep the site available and to stop automated abuse of the form. We do not build visitor profiles and we do not run advertising on this site. If you consent to analytics, Google Analytics 4 records how the site is used; see “Analytics” below.

• Required: enquiry topic, email address and short description of your needs
• Optional: phone number
• Context: originating page, language version, time of submission
• Technical: records needed for availability and abuse prevention
• With your consent: site-usage statistics (Google Analytics 4)

Why We Process It

We use enquiry data to read your message, assess how we can help, and reply. This is processing at your request, taken before any agreement is entered into.

We use technical records to keep the site running, to protect the form against automated abuse, and to investigate security incidents. Our interest in operating a secure and available service is the basis for this, and it is balanced against your interests.

Where the law requires us to keep or disclose something, for example in tax or accounting matters or in response to a lawful request, we do so on that basis.

Analytics

If you turn on the Analytics category in the cookie panel, we use Google Analytics 4 to measure how the site is used: visits, pages viewed, approximate location derived from the connection, device and browser type, and how you arrived. These statistics show us which content is useful and help us improve the site. Without your consent the Google tag does not load.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with the “Cookies and privacy” button in the footer; withdrawal does not affect processing that took place before it.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which processes the data on our behalf under Google’s data processing terms. Data may be transferred to Google LLC in the United States, which participates in the EU–U.S. Data Privacy Framework. Advertising features and Google signals are switched off.

Analytics data is kept for the retention period set in Google Analytics, no longer than 14 months, and is then deleted.

Required and Optional Information

Selecting a topic and providing an email address and a short description of your needs is necessary to send an enquiry. Without these details we cannot receive or answer it.

A phone number is optional. If you leave it blank, we will contact you by email.

Who Else Sees It

We do not sell personal data and we do not share it for anyone else's marketing.

We use a small number of service providers to run the site: infrastructure and hosting providers that deliver the website and store enquiries, and a security provider that verifies the form is not being submitted by an automated system. They act on our instructions, under contracts that restrict what they may do with the data. A current list of these providers is available on request.

We use Zoho Mail to handle enquiries and correspondence. The enquiry content and contact details you provide are also sent to our mailbox.

If you consent to analytics, Google receives site-usage data as described under “Analytics”.

We may also disclose information where the law requires it, or where it is necessary to establish, exercise or defend a legal claim.

Processing Outside the European Economic Area

Some of our providers operate infrastructure outside the European Economic Area, so your data may be processed there.

Where that happens, it takes place under the safeguards that data protection law requires for such transfers, most commonly the standard contractual clauses adopted by the European Commission. You can ask us which providers are involved and on what basis, at security@neuropathicsystem.com.

How Long We Keep It

We keep enquiry data for twelve months from our last contact with you on the matter, then delete it. If an enquiry leads to an engagement, the data moves under that engagement's own terms and retention.

We keep the data longer only where a legal obligation requires it, or where it is needed for a legal claim that is already underway.

Technical records kept for availability and abuse prevention are held for a short operational period and then expire.

Security

Access to enquiry data is limited to the people who need it to answer you. Data is encrypted in transit, and the form is protected against automated submission.

No system is completely secure. We do not claim otherwise, and we would tell you if a breach affected your data and the law required us to.

Your Rights

You can ask us for a copy of the data we hold about you, correct it, delete it, restrict what we do with it, or receive it in a portable form. You can also object to processing that we base on our own legitimate interest, including at any time.

To exercise any of these, write to security@neuropathicsystem.com. We may need to confirm who you are before we act, so that we do not disclose data to the wrong person.

If you think we have handled your data badly, you can complain to the supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa. You can do that regardless of whether you raise it with us first.

Automated Decisions

We do not make decisions about you by automated means alone, and we do not profile you. Enquiries are read and answered by people.

Cookies and Local Storage

We store your cookie choices. Analytics cookies (Google Analytics 4) are set only if you consent; we do not use advertising cookies.

The Cookie Policy sets out what is stored, why, and how to remove it.

Links to Other Sites

This site links to services we do not run. We are not responsible for how they handle your data.

Read their own policies before submitting anything to them.

Children

This site is aimed at organisations, not children, and we do not knowingly collect data from them.

If you believe a child has sent us personal data, write to security@neuropathicsystem.com and we will remove it.

Changes to This Policy

If we change this policy, the revised version takes effect when it appears on this page, with a new date at the top.

If a change materially affects how we handle your data, we will make that visible rather than rely on the date alone.