LegalPrivacy policy
Last updated:
This policy explains how Point Cloud Productions, S.L. processes personal data collected through https://neurovicevr.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and the guarantee of digital rights (LOPDGDD).
1. Data controller
| Controller | Point Cloud Productions, S.L. |
|---|---|
| Tax ID | B26614685 |
| Address | Calle Hermosilla, 48 - 1.º Dcha., 28001 Madrid, España |
| Privacy contact | privacy@neurovicevr.com |
2. What data we process, why, and on what legal basis
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Newsletter | Email address, subscription date, IP address and timestamp of consent, confirmation status | To send you our newsletter about releases and technical notes, and to prove that consent was given | Consent — art. 6.1.a GDPR (and art. 21 LSSI-CE for commercial communications). Proof of consent: legitimate interest, art. 6.1.f | Until you withdraw consent; consent records kept for up to 3 years after withdrawal as evidence |
| Enquiries by email | Name, email address and whatever you include in your message | To answer your enquiry | Consent / pre-contractual measures — art. 6.1.a and 6.1.b GDPR | 1 year from the last communication, unless a commercial relationship begins |
| Server logs and security | IP address, timestamp, user agent, URL requested | To operate the site, prevent abuse and maintain security | Legitimate interest — art. 6.1.f GDPR | Maximum 12 months |
| Age confirmation and language | A value stored in your own browser (local storage). It never reaches our servers | To avoid asking you the same question on every visit | Strictly necessary storage requested by the user — art. 22.2 LSSI-CE | Stored locally until you clear your browser storage |
Providing your data is voluntary. If you do not provide an email address we cannot send you the newsletter, which is the only consequence.
3. We do not process special categories of data
Although this Website relates to adult content, we do not ask for and do not want data revealing sexual orientation, sex life, health, beliefs or any other special category under article 9 GDPR. Please do not include such information in your messages.
4. Recipients and processors
We do not sell or rent personal data. We share it only with providers acting as processors under a contract compliant with article 28 GDPR:
- Brevo (Sendinblue SAS) — 106 boulevard Haussmann, 75008 París, Francia. Email marketing platform used to manage newsletter subscriptions and send emails. Brevo privacy policy.
- Cloudflare, Inc. (United States, served from a global edge network) — hosting and delivery of the Website.
Data may also be disclosed to public authorities, courts or law enforcement where required by law.
5. International transfers
Brevo (Sendinblue SAS) processes data within the European Union. Where a provider processes data outside the European Economic Area, the transfer is protected by an adequacy decision of the European Commission or by Standard Contractual Clauses adopted under article 46 GDPR, together with any additional measures required. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, and additionally covers transfers with the European Commission's Standard Contractual Clauses.
6. Your rights
You may exercise the following rights at any time, free of charge, by writing to privacy@neurovicevr.com, indicating which right you wish to exercise and attaching a copy of an identity document if we cannot otherwise verify your identity:
- Access — to know what data we hold about you.
- Rectification — to correct inaccurate data.
- Erasure — to have your data deleted when it is no longer needed.
- Restriction — to limit processing in the cases foreseen by law.
- Objection — to object to processing based on legitimate interest.
- Portability — to receive your data in a structured, commonly used, machine-readable format.
- Withdrawal of consent — at any time, without affecting the lawfulness of processing carried out beforehand. Every newsletter email includes a one-click unsubscribe link.
We will respond within one month, extendable by two further months where the request is complex. If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).
7. Security
We apply technical and organisational measures appropriate to the risk, in accordance with article 32 GDPR: encryption in transit (HTTPS), access control on a need-to-know basis, and periodic review of our providers. No system is completely secure, but we work to keep the risk proportionate to the limited data we hold.
8. Minors
The Website is not directed at persons under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, write to privacy@neurovicevr.com and we will delete it without delay.
9. Automated decisions
We do not carry out automated decision-making or profiling producing legal effects or similarly significantly affecting you.
10. Changes to this policy
We may update this policy to reflect legal or operational changes. The version in force is always the one published here, with its last-updated date. Substantial changes affecting newsletter subscribers will be communicated by email.