Privacy
How we handle data
Controller
Dr Dimitris Messinis, Neuchâtel (Neurofeedback Market). Contact: info [at] neurofeedback-market [dot] ch
What we collect
When you send us an enquiry via the contact form, or place an order via the cart, we process the data you provide (name, practice, email, phone, message content; for orders also the shipping address). We store contact and quote enquiries together with how you reached the site to handle them and measure enquiry sources.
Payments (Stripe)
Card payments are processed by Stripe Payments Europe Ltd. (Ireland). At checkout you are redirected to a Stripe page; Stripe processes your card and billing data directly. Stripe may transfer data to Stripe, Inc. in the USA and provides contractual safeguards for it. We do not store any card data ourselves. Stripe sets its own cookies during the checkout flow for fraud prevention. Stripe privacy notice: https://stripe.com/privacy
Hosting (Cloudflare)
The site is served via Cloudflare, Inc. (USA). Cloudflare processes connection data (IP address, user-agent, requested URL) short-term for delivery and abuse protection, and counts page views with Cloudflare Web Analytics, without cookies. On the contact page, a Cloudflare Turnstile check processes your IP address and signals from your browser to tell people from automated submissions. We analyse the server logs to see which pages lead to an order, and link them to that order for this purpose. Enquiries are also stored with Cloudflare. Cloudflare provides contractual safeguards for processing in the USA.
Email (Resend)
Contact form messages and order notifications are sent through Resend (Plus Five Five, Inc., USA), which receives the details entered in the form. Resend provides contractual safeguards for processing in the USA.
Product images
Product images are stored on this website and delivered through our hosting service.
Cookies and enquiry sources
The cookie banner lets you choose optional purposes. With marketing consent, a first-party cookie keeps your first source for up to 180 days: campaign parameters, advertising click identifiers, referring domain, landing page and date. Without that consent, these details stay only in the tab session or in memory. They accompany your enquiry. Your cookie choice stays in browser local storage until you clear it. You can change it through Cookies in the footer; withdrawing consent deletes the source cookie. We send no newsletter and do not sell your data.
Retention
Enquiries that don't lead to an order are deleted after a maximum of 24 months. Order, accounting, and tax-relevant documents are retained in accordance with the Swiss Code of Obligations (10 years).
Your rights
You may at any time request access, correction, or deletion of the data we hold about you (Swiss Federal Act on Data Protection / FADP, and GDPR where applicable). Requests: info [at] neurofeedback-market [dot] ch. You may also lodge a complaint with a data protection authority, in Switzerland the FDPIC. Where the GDPR applies, we process enquiry and order data to perform the contract or answer your enquiry (art. 6(1)(b)), and on our legitimate interest (art. 6(1)(f)) we analyse the server logs and protect the contact form with Turnstile. Persistent source storage is based on your revocable consent (art. 6(1)(a)); analysis of enquiry sources on our legitimate interest (art. 6(1)(f)).