Privacy Policy
How NeuroLab handles personal data
Version 1.0 · effective 13 October 2026
reply within one month
specimens are coded
Western Europe region
www.dpa.gr
1. Who we are
The controller is ESP Event Management ΜΟΝΟΠΡΟΣΩΠΗ Ι.Κ.Ε., which operates NeuroLab (GEMI 183973709000, VAT EL802852335, registered office 27–29 Alipedou Street, 185 40 Piraeus), 7 Sevastoupoleos Street, 115 26 Athens, info@neurolab.edu.gr. We process personal data under the GDPR and Greek Law 4624/2019.
2. What we process and why
| Who / what | Data | Purpose | Legal basis |
|---|---|---|---|
| Course participants | Name, contact details, specialty, institution, professional status, registration and payment details | Registration, eligibility check, organisation of the course, certificates, invoices | Contract (6(1)(b)); legal obligation for invoicing (6(1)(c)) |
| Participants — safety information | Information you choose to give us (e.g. pregnancy, allergies, vaccination status) and records of exposure incidents | Your safety in the laboratory and follow-up of incidents | Explicit consent (9(2)(a)); vital interests (9(2)(c)); occupational safety obligations |
| Faculty | Name, CV, photo, travel and fee data | Programme, publication, payments | Contract; legal obligation |
| Hirers and industry partners | Business contact details | Proposals, bookings, invoicing | Contract; legitimate interest |
| Persons in recordings | Image and voice | Educational recordings and streaming | Legitimate interest (6(1)(f)) with the right to opt out; consent where required |
| Website visitors | IP address, browser data, necessary cookies | Operating the website and online registration | Legitimate interest |
3. Donors
We do not receive the identity of body donors; specimens are identified only by Science Care's code. The donor documentation remains with Science Care.
4. Recipients
Course organisers and accrediting bodies (for hired or accredited courses), hotels and travel agents where we arrange travel, our IT providers acting as processors: Microsoft (Microsoft Azure, which hosts our business platform and website, with data located in the Western Europe region; and Microsoft 365 for e-mail and documents), accountants, banks and AADE/myDATA. Transfers outside the EEA only with appropriate safeguards.
5. Retention
Registration and attendance records: 5 years after the course, or longer where an accrediting body requires. Safety information: deleted after the course; incident records: 5 years. Accounting records: as required by Greek tax law. Recordings: for as long as used for education.
6. Your rights
Access, rectification, erasure, restriction, objection, portability and withdrawal of consent (Articles 15–22 GDPR): write to info@neurolab.edu.gr; we reply within one month. Complaints: Hellenic Data Protection Authority, 1–3 Kifissias Avenue, 115 23 Athens, www.dpa.gr.
7. Cookies
Only cookies strictly necessary for the website and online registration. We do not use analytics, advertising or tracking cookies.