Privacy Policy · Neurons Tech

1. Introduction

This Privacy Policy explains how Neurons Tech E.E. ("Neurons Tech", "we", "us", or "our") collects, uses, stores, and protects personal data when you visit our website at neurons.tech (the "Website") or interact with us.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR, Regulation EU 2016/679), Greek data protection law (Ν. 4624/2019), the California Consumer Privacy Act (CCPA) where applicable, and other applicable data protection laws.

Data Controller: Neurons Tech E.E. Agiou Georgiou 63, Nea Ionia, 14234 Athens, Greece Email: [email protected] (or [email protected]) Phone: +30 210 300 1025

2. What information we collect

2.1 Information you provide directly

When you contact us through forms, email, or other communication channels, we collect:

Name (first and last)
Email address
Company name
Phone number (optional)
Message content and any additional information you choose to share

2.2 Information collected automatically

When you visit the Website, we automatically collect certain technical information:

IP address and approximate geographic location (country/city level)
Browser type and version
Operating system
Device type (desktop, mobile, tablet)
Pages visited, time spent on pages, and navigation paths
Referring website (how you arrived at our Website)
Date and time of your visit
Cookies and similar tracking technologies (see Section 5)

2.3 Information from third parties

We may receive limited information about you from:

Analytics providers (aggregated and anonymized usage statistics)
Marketing platforms (campaign performance metrics)
LinkedIn or other social platforms if you interact with our content there
Public business directories (for B2B research purposes)

3. How we use your information

We use your personal data for the following purposes:

3.1 Responding to inquiries

Replying to your messages and questions
Providing information about our services
Following up on conversations and demonstrations
Sending requested materials (whitepapers, guides, proposals)

3.2 Operating and improving the Website

Maintaining Website security and preventing fraud or abuse
Analyzing usage patterns to improve content and functionality
Personalizing your experience where applicable
Conducting research and analytics

3.3 Marketing and communications

Sending occasional updates about our services, content, and offerings (only with your consent or where permitted by law)
Inviting you to events, webinars, or roundtables
Sharing relevant case studies, articles, or insights

You can opt out of marketing communications at any time (see Section 9).

3.4 Legal and compliance

Complying with legal obligations
Defending or asserting legal claims
Responding to lawful requests from authorities

4. Legal basis for processing (GDPR)

We process your personal data based on the following legal grounds under the GDPR:

Consent (Article 6(1)(a)) — for marketing communications, non-essential cookies, and optional data collection

Contract performance or pre-contractual measures (Article 6(1)(b)) — when responding to inquiries about our services or in the course of providing services

Legitimate interests (Article 6(1)(f)) — for Website security, fraud prevention, analytics, and B2B outreach where appropriate

Legal obligations (Article 6(1)(c)) — for compliance with applicable laws

Our legitimate interests include operating and improving our business, communicating with prospects and clients, ensuring security, and conducting business research.

5. Cookies and tracking technologies

5.1 What are cookies

Cookies are small text files stored on your device when you visit websites. We use cookies and similar technologies (web beacons, pixel tags, local storage) to operate and improve the Website.

5.2 Types of cookies we use

Strictly necessary cookies — Required for the Website to function (e.g., session management, security). These cannot be disabled.

Analytics cookies — Help us understand how visitors use the Website (e.g., Google Analytics or similar tools). These help us improve content and user experience.

Marketing and tracking cookies — Allow us and our partners to deliver relevant advertising and measure campaign effectiveness across platforms.

Functional cookies — Remember your preferences and settings for a better experience.

5.3 Cookie consent

When you first visit the Website, you will be presented with a cookie banner allowing you to accept, reject, or customize your cookie preferences. You can change your preferences at any time through the cookie settings link in the Website footer.

Strictly necessary cookies do not require consent. All other categories require your explicit consent before activation.

5.4 Third-party cookies

Some cookies are set by third-party services we use (such as analytics platforms, video players, or social media widgets). These third parties have their own privacy policies governing their data practices.

6. Sharing of personal data

We do not sell your personal data. We may share your information with:

6.1 Service providers and processors

We work with carefully selected third-party service providers who help us operate our business. These may include:

Cloud hosting and infrastructure providers (for Website operation and data storage)
Email and communication platforms (for managing correspondence)
Analytics services (for understanding Website usage)
Marketing automation platforms (for managing communications, with your consent)
Customer relationship management (CRM) systems (for tracking interactions)
AI processing services (for assisting with content generation, analysis, document processing, or operational workflows in our internal delivery operations)

All processors are bound by contractual obligations to protect your data and use it only as instructed by us.

6.2 AI processing — specific notice

In the course of operating our business and delivering services, we use AI-powered tools (including third-party large language models, machine learning services, and other AI platforms) for purposes such as:

Generating, drafting, or analyzing content
Processing documents and structured data
Supporting internal research and analysis
Automating internal workflows

When AI services are used, we apply the following principles:

Personal data is shared with AI providers only when necessary and proportionate
We select AI providers that offer appropriate data protection commitments
Where possible, we use AI services that do not retain or train on submitted data
Sensitive personal information is not processed through third-party AI services without specific consent or legal basis

6.3 Legal and regulatory disclosures

We may disclose your information when required by law, court order, or governmental authority, or when necessary to protect our rights, property, or safety, or that of others.

6.4 Business transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and ensure your privacy rights are preserved.

7. International data transfers

Neurons Tech is based in Greece (European Union). Our service providers may operate in countries outside the European Economic Area (EEA), including the United States and others.

When personal data is transferred outside the EEA, we ensure adequate safeguards are in place, such as:

Adequacy decisions by the European Commission (for transfers to approved countries)

Standard Contractual Clauses (SCCs) approved by the European Commission

Supplementary measures where required to ensure equivalent protection

You can request information about specific data transfer mechanisms by contacting us.

8. Data retention

We retain your personal data only as long as necessary for the purposes described in this Privacy Policy, including:

Contact form submissions — retained for up to 3 years from last interaction, after which they may be archived or deleted unless an active business relationship continues
Analytics data — retained according to the policies of our analytics providers (typically 14-26 months for raw data, longer for aggregated metrics)
Marketing data — retained until you opt out or as long as relevant to maintain communication
Legal and compliance records — retained for the period required by applicable law (typically 5-10 years for tax and commercial records under Greek law)

When data is no longer needed, we securely delete or anonymize it.

9. Your rights

9.1 GDPR rights (for EU/EEA residents)

You have the following rights regarding your personal data:

Right of access — Request a copy of the personal data we hold about you
Right to rectification — Request correction of inaccurate or incomplete data
Right to erasure — Request deletion of your personal data (subject to legal exceptions)
Right to restriction — Request limitation of how we process your data
Right to data portability — Receive your data in a structured, machine-readable format
Right to object — Object to processing based on legitimate interests, including direct marketing
Right to withdraw consent — Where processing is based on consent, you can withdraw it at any time
Right not to be subject to automated decision-making — Including profiling that produces legal or similarly significant effects

9.2 CCPA rights (for California residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

Right to know what personal information we collect, use, and share
Right to delete personal information we have collected (subject to exceptions)
Right to opt out of the sale or sharing of personal information (we do not sell personal information)
Right to non-discrimination for exercising your privacy rights
Right to correct inaccurate personal information

9.3 How to exercise your rights

To exercise any of these rights, contact us at [email protected] (or [email protected]).

We will respond to your request within:

30 days for GDPR requests (extendable by 60 days for complex requests)
45 days for CCPA requests (extendable by 45 days)

We may need to verify your identity before processing your request to protect your information.

9.4 Right to lodge a complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority:

Greece: Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) — www.dpa.gr
Other EU countries: Your national data protection authority
California: California Privacy Protection Agency (cppa.ca.gov)
Other jurisdictions: Your local privacy regulator

10. Data security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption of data in transit (HTTPS/TLS) and where appropriate at rest

Access controls limiting personal data access to authorized personnel

Regular security reviews and updates of our systems

Vetted third-party processors with contractual data protection obligations

Incident response procedures for handling potential data breaches

Despite our efforts, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we work continuously to protect your information using current industry-standard practices.

In the event of a data breach affecting your personal data, we will notify you and the appropriate authorities as required by applicable law (within 72 hours under GDPR where feasible).

11. Children's privacy

The Website is intended for business users and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

12. Automated decision-making and profiling

We do not engage in automated decision-making (including profiling) that produces legal or similarly significant effects on you without your explicit consent or another legal basis.
Our use of analytics and marketing tools may involve limited profiling for purposes such as audience segmentation or content personalization, but this does not produce decisions with significant impact on you.

13. Third-party links

The Website may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before sharing personal information with them.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice (such as an email notification or a banner on the Website).
Continued use of the Website after changes constitutes acceptance of the updated Privacy Policy.

15. Contact us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Neurons Tech E.E. Agiou Georgiou 63, Nea Ionia 14234 Athens, Greece

Privacy email: [email protected] (or [email protected]) General contact: [email protected] Phone: +30 210 300 1025

We aim to respond to all privacy-related inquiries within 30 days.