From the NEUROMART SHOP team, we recommend that you read this complete Privacy Policy to clearly and thoroughly understand what personal data of yours we process, how we store it, with whom we share it, and ultimately how we manage it in accordance with current regulations, Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, which develops Organic Law 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights.

We are aware that this is a long and complex text, but the processing, management, and protection of personal data is also a delicate task and requires protection, security, and confidentiality. Therefore, we take clarity and transparency very seriously when detailing the management of this processing.

And that is why, below, we will briefly translate the most important points of this document called Privacy Policy for you.

1. Simply by browsing our website, you are accepting that we process your data, so we advise you to review the different processes of your personal data beforehand.

2. It may be that, to answer your queries, questions, or provide you with the requested service, we must make some of your personal data available to third parties, but don't worry, we have a policy that ensures the protection of your personal data and we will only provide them if it is absolutely necessary and, in most cases, anonymously.

3. We will keep your data for different periods depending on the purpose for which you provided it to us; for example, if you want us to stop contacting you by email, you simply have to let us know.

Before getting into the matter, it is important that you are clear about the following terms and concepts, as they will facilitate your understanding of the Privacy Policy:

• Personal data processing: refers to operations, technical procedures that are carried out automatically or non-automatically and that allow the collection, storage, modification, transfer, and other actions on personal data to be considered personal data processing.

Accessing and browsing websites and any other platforms and applications made available to users are included in personal data processing.

• Data subject or owner: a natural person whose personal data is subject to management and processing.

• Data controller: the natural or legal person who manages the collection and processing of the personal data of the data subjects.

1. WHAT DOES BROWSING THE NEUROMART SHOP WEBSITE ENTAIL?

Before any user or data subject browses the NEUROMART SHOP website, the interested user is obliged to read and accept this Privacy Policy. By reading it, they give their unequivocal, free, specific, and informed consent to the processing of their personal data for the purposes described in the Privacy Policy.

The NEUROMART SHOP website, through internal mechanisms, prevents personal data from being sent without express consent.

The aforementioned express consent implies authorization for the processing of your personal data by the NEUROMART SHOP website under the terms established in this Privacy Policy, as well as by the co-controllers and data processors with whom NEUROMART SHOP maintains an obligatory contractual and compliance control relationship.

2. WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

NEUROMART SHOP acts as the data controller for the collection, use, and sharing of personal data information that you provide us through the different forms you may find on the website.

• Data controller: Belen García Domínguez

• CIF (Tax Identification Number): 44592657-G

• Address: Calle Abogado Victoriano Frías 21, 1ºA. CP.: 29017, Málaga

• Email: hola@neuromartshop.com

• Phone: 627 658 515

This Privacy Policy, together with our Terms and Conditions and any other referenced documents and the Cookies Policy, constitute the legal texts that determine how we process the personal data we collect and that you provide to us.

NEUROMART SHOP guarantees the confidentiality and privacy of the personal data collected and states that it has adopted the relevant security measures to prevent alteration, loss, unauthorized processing or access, and to guarantee the integrity and security of personal data in accordance with the provisions of Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, which develops Organic Law 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights. Likewise, it guarantees that it has implemented the necessary technical means to prevent any alteration, loss, unauthorized access, or misuse of the processed data, in accordance with the nature of the data, the state of technology, and the risks to which they are exposed.

3. WHAT INFORMATION OR DATA OF YOURS DO WE COLLECT?

As a result of your navigation through our website neuromart.shop, we may access certain information and personal data of yours.

Among the different personal data to which we may have access, we provide a list below so that you can easily and clearly identify them:

• Basic personal information

• Contact information

• Banking information

• Data generated from website use and browsing

In the next section, we will determine and specify in more detail the purpose of using your previously referenced personal data.

4. FOR WHAT PURPOSE WILL MY PERSONAL DATA BE USED? WHAT IS THE PURPOSE AND LEGAL BASIS FOR USING MY PERSONAL DATA?

Below, we will specify the purposes for which your personal data will be used, as well as specify and identify the legal basis for each of these uses. That is, we will identify, within the applicable regulations, Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, which develops Organic Law 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights, the legal basis that enables such processing.

On the one hand, you will find the processing identified, followed by the legitimacy for that processing, thus facilitating a clear and simple understanding of the processing of your personal data.

Your personal data will essentially be used for:

• Processing 1: Responding to emails or phone calls for inquiries and/or requests for information through the website.

• Legitimacy for processing 1: the processing is based on the consent of the data subject themselves. As the data subject, by accepting the Privacy Policy and providing your contact details, you are consenting to us contacting you.

• Processing 2: Use of personal data for the sale and provision of products offered on the website.

• Legitimacy for processing 2: the processing is based on the execution of the sale of the products described in the general terms and conditions of use of the website, understanding them as a contract.

• Processing 3: Use of personal data for sending commercial information

• Legitimacy for processing 3: the processing is based on the consent of the data subject. You, as the data subject, have authorized us to send you commercial information using the contact details provided.

• Processing 4: Analysis of the data subject's behavior within the website.

• Legitimacy for processing 4: the processing is based on the data subject's own consent.

• Processing 5: Use of personal data for the purpose of fulfilling legal obligations

• Legitimacy for processing 5: the processing is based on the legal grounds enabled for this purpose in the GDPR and LOPDGDD regulations.

NEUROMART SHOP informs you that your personal data will not be used for any purpose not specified in this Privacy Policy, nor will we send unsolicited additional information without your express consent.

5. WHO ARE THE RECIPIENTS OF THE PERSONAL DATA WE COLLECT?

NEUROMART informs its users of its commitment not to transfer data to third parties without having obtained the express consent of the interested users. Unless it is necessary to comply with a legal requirement or is necessary at the express request of Courts, Tribunals or Public Administrations.

In the following section, we will specify in detail our policy regarding data processors, in order to be as transparent as possible in the management and processing of your personal data.

6. WHAT IS THE POLICY REGARDING DATA PROCESSORS?

Notwithstanding the foregoing, NEUROMART SHOP informs its users that those third parties acting as data processors for NEUROMART SHOP may have access to some of your personal information. Despite this, it is important for you to know that they will only access it according to the instructions given by NEUROMART SHOP and only based on the service they provide. However, it is important for you to know that, in most cases, what is shared with these third-party data processors is non-personal, anonymous, or statistical data.

When NEUROMART SHOP shares personal information, it does so in accordance with the previously informed data privacy and security requirements, in each case, and under the signing of the corresponding data processing agreement, thus ensuring that our providers comply with adequate security measures for complete data protection and legal compliance.

As a result, NEUROMART SHOP only uses and partners with providers that:

a) Are located within the territory of the European Union, in order to guarantee respect and application of the applicable data protection regulations, i.e., the GDPR.

b) Are located in a country or territory that has been declared to have an adequate level of protection by the European Commission, or

c) Offer standard contractual clauses that are sufficient to ensure that said third country can provide a level of protection and rights equivalent to that offered within the EEA.

7. HOW LONG CAN WE STORE YOUR DATA?

Personal data provided to NEUROMART SHOP will be deleted once the relevant period for exercising claims has passed.

Just as each of the different personal data processing operations carried out within our website and/or application has a specific legitimacy, the retention period for personal data will depend on these. Below, we provide a list where you can consult the retention periods depending on the type of data:

• Data provided with the consent of the data subject, until you, as the data subject, revoke that consent.

• Data provided for the provision and/or execution of the service, for the duration of the service provision.

8. LINKS TO OTHER WEBSITES AND SOCIAL NETWORKS

Our website may contain links to other partner or third-party websites not owned by us. Therefore, we inform you that each of the links to these third-party websites, access to them, and navigation will be governed by the Privacy Policy of each of them. NEUROMART SHOP is not responsible in any case for your use and/or navigation within them.

Therefore, we recommend that before accessing and browsing these pages, applications, and/or platforms, you ensure that you review their Privacy Policies in order to determine how they will process your personal data.

NEUROMART SHOP has profiles on social networks like Instagram with the purpose of publishing and disseminating information about the products offered through the website, interacting with different users, and serving as a channel for customer service and social interaction.

If you access our website by interacting through any of NEUROMART SHOP's social media profiles, you should be aware of and accept the authorization for that social network to provide us with some of your data.

9. WHAT RIGHTS CAN YOU EXERCISE REGARDING THE PROCESSING OF YOUR PERSONAL DATA?

• Right to information: the data subject must be informed in advance, expressly, precisely, and unequivocally, among other things, of the existence of a file, the possibility of exercising their rights, and the Data Controller.

• Right of access: allows the citizen to know and obtain free information about their personal data subject to processing.

• Right to rectification: it is characterized by allowing the correction of errors, modification of data that prove to be inaccurate or incomplete, and guaranteeing the accuracy of the information being processed.

• Right to erasure: allows the deletion of data that proves to be inadequate or excessive, without prejudice to the blocking duty set out in the LOPD.

• Right to object: is the right of the affected party to object to the processing of their personal data or to stop it.

• Right to restriction: the user has the right to decide which personal data they do not want to be processed again in the future when they have previously challenged the accuracy of these or when the processing is unlawful and, instead of exercising their right to erasure, they decide to restrict them for future processing.

In the event of processing restriction, the restriction may be lifted if the data subject consents, when there is a possibility that the processing may affect the protection of the rights of another natural or legal person, when a judicial procedure justifies it, and when there is a reason of public interest based on current legislation.

• Right to data portability: the user has the right to receive the personal data provided or to have NEUROMART SHOP transmit them to another controller in a structured, commonly used and machine-readable format, provided that the processing is carried out by automated means and is based on the consent that the user once gave for one or more specific purposes or for the execution of a contract to which they were a party. 

The right to data portability will not apply when transmission is technically impossible, when it may adversely affect the rights and freedoms of third parties, or when the processing has a mission of public interest based on current legislation.

• Right to lodge a complaint with the Supervisory Authority: allows you to lodge a complaint with the Spanish Data Protection Agency (the supervisory authority in Spain) via the following link www.aepd.es/derechos-y-deberes/ejerce-tus-derechos .

• Right to be forgotten: refers to the right of users to request the deletion of their personal data when it is no longer necessary for the purposes for which it was collected or when the processing of such data is unlawful, among other circumstances. Also, to request the suppression of personal information in search engines, if it is obsolete, inaccurate or harms the reputation of the affected person.

• Right not to be subject to automated individual decisions: refers to the right that aims to ensure that, as a user, you are not subject to a decision based solely on the processing of your data, including profiling, which produces legal effects concerning you or similarly significantly affects you.

HOW ARE THESE RIGHTS EXERCISED?

At any time, the user can withdraw their consent and exercise their rights of access, rectification, erasure, restriction, objection, and data portability provided for in Data Protection Regulation 679/2016 and Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights, by sending an email to: hola@neuromartshop.com or to the postal address: Calle Abogado Victoriano Frías 21, 1ºA. CP: 29017, Málaga

WHAT IS NEEDED TO VERIFY YOUR IDENTITY?

Regardless of the method you choose to exercise your rights, as an interested party exercising your right, you must include a copy of your national identity document, passport, or other valid identifying document.

IS THERE A FORM FOR EXERCISING RIGHTS?

You can request our form via email.

You can also use the models and forms that the Spanish Data Protection Agency makes available for the exercise of these rights on its portal at the following address: Exercise your rights | AEPD

10. MINOR'S PRIVACY

Following the instructions of the Spanish Data Protection Agency, minors under 14 years of age should not provide their personal data to NEUROMART SHOP without the prior consent of their parents or guardians.

In the event that NEUROMART SHOP detects users who may be under 16 years of age, it reserves the right to request a copy of their ID, or equivalent document, or, where applicable, the authorization of parents or guardians, resulting in their deregistration if this requirement is not met or in the absence of a response.

11. PROHIBITION FOR USERS TO TRANSFER THIRD-PARTY DATA AND TO PROVIDE NECESSARY AND UPDATED INFORMATION

NEUROMART SHOP expressly prohibits the user from sharing, providing or transferring third-party data that they may obtain as a result of contact, interaction or communication through the website, except if they can prove the express authorization of the user whose data they intend to transfer.

We remind you that images are considered protected data and therefore cannot be used without the express consent of the people who may appear in them.

As a user, you acknowledge and accept your responsibility to hold NEUROMART SHOP harmless against any possible claim, penalty, fine or sanction that it may be obliged to bear as a consequence of the user's non-compliance as described.

In the event that the user provides personal data of a third party other than themselves, they must do so with the express consent and authorization, having previously informed them of this Privacy and Data Protection Policy.

In any of the forms or fields enabled on the website, the user undertakes to provide accurate and truthful data.

Likewise, you undertake to notify NEUROMART SHOP of any error, update and/or modification that occurs regarding your personal data provided to NEUROMART SHOP.

For this purpose, NEUROMART SHOP provides the following email address: hola@neuromart.shop, and you can also write to the following postal address: Calle Abogado Victoriano Frías 21, 1ºA. CP: 29017, Malaga.

12. CONFIDENTIALITY AND SECURITY

At NEUROMART SHOP, we are committed to and make every effort to ensure and maintain confidentiality in the processing of your data within our website.

We therefore establish a series of security levels to protect your personal data against accidental loss and unauthorized access, in accordance with the threats to which they are exposed.

Despite this, we cannot assume any responsibility for your own use of that data outside our website.

13. COOKIES AND SIMILAR TECHNOLOGIES

To learn more about this section, you can visit our Cookie Policy.

14. APPLICABLE LAW AND JURISDICTION

This Privacy Policy is governed by Spanish law. In case of conflict over its interpretation or application, the parties will submit to the Courts and Tribunals of the competent jurisdiction based on the rules of jurisdiction recognized in our legal system.

15. MODIFICATIONS TO OUR POLICY

Any modification or update we make to this Privacy Policy will be published and updated on this page, so that you remain informed of the latest version.

Therefore, we recommend that you visit it frequently to find out about the latest valid update.

LAST MODIFICATION: 03/19/2026