Privacy policy

SARL NeuroLogic is committed to protecting personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act. This policy explains what data is processed, for what purposes, on what legal basis, with which recipients, for how long, and what your rights are.

1. Controller and roles

For professional Users’ data, billing, and use of the sites and platforms, the controller is:
SARL NeuroLogic — 18 avenue Jean Médecin, 06000 Nice — brendan@neurologic.academy.

For Patient data processed via the qEEG Platform (data entered or uploaded by a professional about their patient: identity, clinical data, qEEG recordings, questionnaire responses, reports), the professional User is the controller and NeuroLogic acts as processor (art. 28 GDPR). These processing activities are described in the qEEG Annex & Data Processing Agreement.

Data-protection contact: brendan@neurologic.academy.

2. Data processed and purposes (NeuroLogic as controller)

NeuroLogic makes no solely automated decisions producing legal effects on data subjects.

3. Health data (qEEG Platform)

qEEG recordings and psychometric questionnaire responses constitute health data (special-category data under art. 9 GDPR). For this data, NeuroLogic acts as processor on the professional’s behalf: it processes it only on the professional’s instructions, solely to provide the service (production and delivery of reports). Detailed terms — security, sub-processors, retention, exercise of rights, hosting — are set out in the qEEG Annex & Data Processing Agreement.

This policy does not claim certified health-data hosting (HDS, art. L1111-8 of the French Public Health Code).

4. Recipients and sub-processors

Your data is accessible to authorised NeuroLogic staff and to service providers (processors) acting on its behalf, under agreements compliant with art. 28 GDPR:

This list is kept up to date; its last revision date appears at the top of this document. Professional Users are informed of any change of sub-processor as set out in the qEEG Annex.

5. International transfers

Some sub-processors are located outside the European Union (notably in the USA). These transfers are governed by appropriate safeguards: European Commission standard contractual clauses, and/or EU-US Data Privacy Framework certification where applicable.

6. Retention periods

Once the applicable periods elapse, data is deleted or anonymised.

7. Aggregated and anonymised statistics (“cohort” dashboard)

The qEEG Platform provides an aggregated, anonymised statistics dashboard describing the population followed: distributions by age bracket, sex, handedness, language, recorded diagnoses and symptoms, severity by domain, medication on/off, completion rates, retest intervals and volumes over time.

These statistics are produced from data already held on the platform, with no additional collection, and are designed so that a Patient can never be re-identified:

• displayed as percentages (practitioner-facing views do not show counts);
• minimum cohort threshold: no data is shown to a practitioner for any group of fewer than ten (10) individuals;
• no cross-tabulation of dimensions: each distribution covers a single dimension at a time;
• age shown as brackets, never the date of birth;
• free-text fields excluded.

NeuroLogic’s internal analyses may cover finer cohorts, under the same strict non-re-identification principles.

8. Security

NeuroLogic implements appropriate technical and organisational measures: encryption in transit, access control and authentication, database-level data isolation (row-level security), logging, account approval, minimisation and pseudonymisation (anonymous display mode for patient names).

9. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, and to set post-mortem directives. For Patient data, these rights are exercised with the professional controller; NeuroLogic assists them accordingly.

To exercise your rights: brendan@neurologic.academy or by post to the registered office. You may lodge a complaint with the CNIL (3 place de Fontenoy, 75007 Paris — cnil.fr).

10. Cookies and similar technologies

This site uses a small number of cookies and equivalent browser storage. There are no advertising or profiling cookies, no data is sold, and nothing set here follows you to other websites. Everything outside the strictly necessary category stays switched off until you allow it, and you can change your mind at any time from 10.4 below.

10.1 What is stored, by category

Strictly necessary

Keeps the site working and remembers the choice you make here. Cannot be switched off.

Audience measurement

Counts visits and tells us which pages are read, so we know what is worth writing. Aggregated figures only — never used to identify you.

Nothing is stored in this category at the moment.

Third-party features

Powers optional features embedded from other companies, such as live chat, booking and video. Refusing means those features stay switched off.

Nothing is stored in this category at the moment.

10.2 Third-party services called by our pages

These services place no cookies on your device, but loading them transmits your IP address and browser details to their operator.

10.3 The other NeuroLogic properties

• pro.neurologic.academy (courses and community, operated on Podia) now carries this same banner, and a choice made there is recorded in the same way. One difference is worth stating plainly: Podia sends its own visitor cookie with the page itself, so refusing removes it immediately rather than preventing it from being set. The banner says so where it matters.
• qeeg.neurologic.academy (the qEEG platform) sets no cookies. It keeps your session token and display preferences in your browser’s local storage, which is strictly necessary to run the platform and is cleared when you sign out or clear your browser data.

10.4 Changing your mind

Cookie settings

You can also refuse or delete cookies at any time in your browser settings. Blocking the strictly necessary cookies listed above may stop parts of the site from working.

11. Changes

This policy may be updated. The applicable version is the one published on the site, dated at the top of the document.