Privacy Policy

1. Introduction

NeurAnova (“we,” “us,” or “our”) is committed to protecting the privacy and personal data of all visitors to our website, conference attendees, and users of our patient concierge services. This Privacy Policy explains how we collect, use, store, and share your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Serbian Law on Personal Data Protection.

By accessing our website or registering for the NeurAnova 2026 Conference on Autism & Neurodevelopment, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for the processing of your personal data is:

3. Information We Collect

We may collect the following categories of personal information depending on how you interact with us:

3.1 Registration Information

When you register for the conference, we collect:

• Full name, professional title, and credentials
• Email address and phone number
• Institution, clinic, or organization
• Country of residence
• Registration type (healthcare professional, researcher, parent/caregiver, student, industry partner)
• Dietary requirements and accessibility needs
• Invoice and billing details (if applicable)

3.2 Website Usage Data

When you visit our website, we may automatically collect:

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages visited, time spent, and referring URLs
• Cookies and similar tracking technologies (see Section 7)

3.3 Patient Concierge Data

If you use our patient concierge services, we may collect additional health-related or family-related information necessary to coordinate consultations, diagnostics, or treatment pathways. Such data is handled with heightened care and confidentiality.

4. How We Use Your Information

We process your personal data for the following purposes:

• Conference administration — processing registrations, issuing confirmations and certificates, managing attendance, and accommodating dietary or accessibility needs
• Communication — sending conference updates, schedule changes, logistical details, and post-event follow-up communications
• Patient concierge coordination — facilitating consultations, referrals, and treatment coordination on your behalf
• Website improvement — analyzing usage patterns to improve our website experience and content
• Legal compliance — fulfilling legal, regulatory, or contractual obligations

5. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent — where you have given explicit consent (e.g., opting in to receive conference updates or marketing communications)
• Contractual necessity — where processing is necessary to fulfill a registration or service agreement
• Legitimate interest — where we have a legitimate business interest (e.g., improving our services), provided it does not override your rights
• Legal obligation — where processing is required to comply with applicable laws

6. Data Sharing and Third Parties

We do not sell your personal data. We may share your information only in the following circumstances:

• Service providers — trusted third-party vendors who assist us with registration processing (e.g., Zoho Forms), email communications, website hosting, and event logistics. These providers are contractually bound to protect your data.
• Medical professionals — if you use our patient concierge services, relevant information may be shared with healthcare providers to facilitate your care, only with your explicit consent.
• Legal requirements — if required by law, court order, or governmental authority.

7. Cookies and Tracking

Our website may use cookies and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us understand how visitors use our site.

We may use the following types of cookies:

• Essential cookies — necessary for basic website functionality (e.g., navigation, form submissions)
• Analytics cookies — help us understand visitor behavior and improve our site (e.g., Google Analytics)

You can manage or disable cookies through your browser settings. Please note that disabling cookies may affect certain features of the website.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

• Conference registration data is retained for up to 3 years after the event for follow-up, CME certification, and future event communications.
• Website usage data is retained in anonymized form for analytics purposes.
• Patient concierge data is retained in accordance with applicable healthcare data retention requirements.

You may request deletion of your data at any time (see Section 9).

9. Your Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data (“right to be forgotten”)
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to withdraw consent — withdraw consent at any time where processing is based on consent
• Right to object — object to processing based on legitimate interests or for direct marketing

To exercise any of these rights, please contact us at info@neuranova.eu. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, alteration, or destruction. These measures include encrypted data transmission, secure server infrastructure, access controls, and regular security assessments.

While we strive to protect your data, no method of electronic transmission or storage is completely secure. We encourage you to contact us promptly if you believe your information may have been compromised.

11. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including countries within and outside the European Economic Area (EEA). Where such transfers occur, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in accordance with applicable laws.

12. Children’s Privacy

Our website and registration services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal information, please contact us and we will take steps to delete such data promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Any updates will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

You also have the right to lodge a complaint with the relevant data protection supervisory authority in your country of residence.