1. Data Controller
The controller of personal data collected via the NeuroRozwój Plus platform is Fundacja NeuroRozwój Plus with its registered office in Kielce (ul. Karola Olszewskiego 6, 25-663 Kielce, Poland, KRS: 0001253490). Contact with Data Protection Officer: [email protected].
2. Categories of Collected Data
- Identification and contact details: name, surname, email address, phone number (in contact forms).
- Telemetry and clinical data: pre-assessment responses, preferred appointment slots, anonymized qEEG profiles (stored under AES-256 application-layer encryption).
- Technical data: pseudonymized IP hashes, browser type, operating system telemetry.
3. Purpose and Legal Basis of Processing
- Processing screening inquiries and consultation bookings (GDPR Art. 6(1)(a) & Art. 9(2)(a) - parental consent).
- Fulfilling statutory and legal compliance duties (GDPR Art. 6(1)(c)).
- Ensuring cyber-security and cryptographic audit trail integrity (GDPR Art. 6(1)(f) - legitimate interest).
4. Data Subject Rights
Every user has the right to access, rectify, erase ('right to be forgotten'), restrict processing, and transfer their data. To exercise your rights, contact [email protected].
5. Security and Zero-Trust Architecture
All sensitive data is encrypted using AES-256-GCM, telemedicine video calls are protected by DTLS 1.3 / SRTP, and clinical audit logs are linked by a SHA-256 hash chain compliant with FDA 21 CFR Part 11.