Responsible for our privacy policy, i.e. the EU GDPR, is Viktor Jirsa (Institut de Neurosciences des Systèmes).

Rights of the persons affected

Using the contact details of our privacy officer (specified at the end of this document), you can exercise the following rights at any time:

• disclosure about the data we have stored about you and how we handle it
• amendment of inaccurate personal data
• deletion of your stored data
• restriction of data handling when we’re not allowed to delete your data due to statutory duties
• objection against processing your data as well as data transmission, in case you agreed to data handling or concluded a contract with us

If you gave us approval, you have the right to revoke said approval at any time and affecting our future usage of your data.

You are entitled to file a complaint at your responsible regulatory authority. Which regulatory authority is appropriate for receiving your complaint depends on the state of your registered residence, your workplace or the presumed breach. You can find a list of regulatory authorities (concerning the non-public section) with corresponding addresses here.

Purposes of data processing through the controller and third parties

We are processing your personally identifiable data only for purposes outlined in this privacy policy. A transfer of your personal data to third parties concerning other purposes will not occur. We will only transfer your personal data to third parties if:

• you gave us explicit consent
• handling is necessary for the purpose of transacting a contract with you
• handling is necessary for the purpose of fulfilling legal duties
• handling is necessary for the purpose of adhering legitimate interests and there is reason to assume that you have a predominant interest in objecting the transmission of data.

Deletion or blocking of data

We are following the principles of data reduction and data economy. Therefore, we are only storing your data as long as it is necessary for attaining stated reasons or as long as storage periods are stipulated by law. After cessation of respective purposes or expiration of the time stated in these storage periods, respective data will be deleted or blocked routinely and following legal requirements.

Collection of general information

When you are accessing our website, some general information will be collected automatically. This information (server logs) include things like the kind of web browser, used operating software, domain name of your internet service provider and the like. This information is in no way sufficent to make you as a person identifiable. This information is necessary for technical reasons as it helps deliver the contents you requested from the website and is compelling when using the internet. We are statistically evaluating anonymous information of said kind for improving our website and the underlying technology.

SSL encryption

To protect your data during transmission, we are using state-of-the-art encryption technology (SSL/HTTPS).

Usage of Adobe TypeKit fonts

We are using fonts from Adobe to design our website. Adobe Systems Software Ireland Companies (4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland; cited as „Adobe“) is a provider offering us access to their typeface library. In order to track how we are using their fonts, we are contractually stipulated to connect to servers of Adobe to update counters for our user account. By this connection, Adobe obtains the information that our website was viewed from your IP address. You can find more information about Adobe's privacy policy here.

Your rights regarding disclosure, correction, blockage, deletion and objection

At any time, you are entitled to demand disclosure about the data that we have stored about you. Furthermore, you are entitled to demand correction, blockage or – apart from the stipulated storage period to conduct business with you – deletion of your personally identifiable data. In this case please contact our privacy officer. You will find the contact details at the end of this document. In order to consider a blockage of data at any time, this data has to be kept available in a blockage file for control purposes.

You can also demand deletion of your data as long as there is no legal obligation to archive this data. In case there is such an obligation, we will block your data as you wish. You can undertake changes or revocation of a consent through a respective message to us with effect regarding the future.

Change of data protection regulations

We reserve the right to adapt this privacy policy from time to time, so it always complies to current legal requirements or to implement changes regarding our services within our privacy policy, e.g. when introducing new services. The new privacy policy will then become effective with your next visit.

Questions for our privacy officer

If you have questions regarding privacy and data protection, please send us an email to vjirsa@thevirtualbrain.org.