Privacy Policy
Last Updated: August 12th, 2025
We comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable privacy laws.
1. Who We Are
MindSpeller BCI
Company Number: BE 0749.699.835
Address: Duigemhofstraat 101, 3020 Herent, Belgium
Email: contact@mindspellerbci.com
We are a medical device company commercialising EEG-based neurometrics applications for communication assistance and dementia diagnostics.
2. What Data We Collect
We may collect and process the following categories of personal data:
a. Website Visitors
-
- Contact details (name, email, phone number) when submitted via our contact form.
- Technical data (IP address, browser type, operating system, referring URLs).
- Usage data (pages visited, time spent, navigation paths).
b. Patients / Research Participants
-
- EEG recordings and neurometric data.
- Demographic data (age, gender).
- Medical and health-related data (if relevant to diagnostic or communication assistance functions).
- Consent records.
c. Business Partners & Suppliers
-
- Contact details (name, email, phone number, business address).
- Contractual and transaction data.
3. How We Collect Data
We collect personal data:
-
- Directly from you (e.g., when you fill in forms, sign up for updates, use our devices).
- Automatically through cookies and similar technologies.
- From authorised partners (e.g., healthcare providers, research institutions) with your consent.
4. Legal Basis for Processing
We process personal data under the following legal grounds (per Article 6 GDPR):
-
- Consent – when you explicitly agree to the processing (e.g., for research participation).
- Contract – when processing is necessary to fulfil a contract with you.
- Legal obligation – for compliance with regulatory requirements.
- Legitimate interests – to improve services, ensure security, and communicate with you.
For special category health data (per Article 9 GDPR), we rely on:
-
- Explicit consent, or
- Scientific/medical research purposes with appropriate safeguards.
5. How We Use Your Data
-
- Provide and improve our EEG-based neurometrics applications.
- Assist in medical diagnosis and communication support.
- Conduct scientific and clinical research.
- Respond to inquiries and customer support requests.
- Comply with legal and regulatory obligations.
- Maintain website security and analytics.
6. Data Sharing & Transfers
We may share your personal data with:
-
- Healthcare professionals involved in your care (with your consent).
- Research partners (in pseudonymised or anonymised form).
- Service providers (e.g., IT hosting, analytics).
- Regulatory authorities where required by law.
Data may be transferred outside the European Economic Area (EEA) only where adequate safeguards are in place (e.g., EU Standard Contractual Clauses).
7. Data Retention
We retain your personal data only as long as necessary for the purposes collected, or as required by law and medical device regulations. EEG and health data are stored securely and may be anonymised for long-term research purposes.
8. Your GDPR Rights
You have the right to:
-
- Access your personal data.
- Rectify inaccurate data.
- Erase your data (“right to be forgotten”) where applicable.
- Restrict processing.
- Data portability.
- Object to processing.
- Withdraw consent at any time.
To exercise your rights, contact us at: contact@mindspellerbci.com
9. Cookies & Tracking
Our website uses cookies for functionality, analytics, and security. You can manage cookie preferences through your browser settings. For more details, see our Cookie Policy.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. These include encryption, secure servers, and access controls.
11. Children’s Data
Our services are not intended for children under 16 unless supervised by a parent, guardian, or healthcare professional. We do not knowingly collect personal data from minors without proper consent.
12. Changes to This Privacy Policy
We may update this policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.
13. Contact
If you have questions or concerns about this Privacy Policy or our data practices, please contact:
Data Protection Officer
MindSpeller BCI
Duigemhofstraat 101, 3020 Herent, Belgium
Email: contact@mindspellerbci.com
You also have the right to lodge a complaint with the Belgian Data Protection Authority: https://www.gegevensbeschermingsautoriteit.be/
