NeuroAds Data Protection Policy

Introduction NeuroAds is committed to providing a superior experience for all stakeholders including customers, affiliates, business contacts, and employees. Understanding that personal data is vital, we handle it with the utmost care and in compliance with data protection laws.

Purpose of This Policy This policy ensures that NeuroAds:

• Complies with data protection laws and follows industry best practices.

• Protects the rights of staff, customers, affiliates, and partners.

• Maintains transparency about data handling processes.

• Minimizes the risk of data breaches.

EU General Data Protection Regulation (GDPR) Compliance The GDPR mandates how organizations, including those operating outside the EU but dealing with EU residents, manage personal data. Our policies reflect these requirements, ensuring that personal data is:

• Processed lawfully, fairly, and transparently.

• Collected for specified, explicit, and legitimate purposes.

• Adequate, relevant, and limited to what is necessary.

• Accurate and up-to-date.

• Kept only as long as necessary.

• Processed in a manner that ensures security.

Policy Scope This policy applies to all personal data that NeuroAds processes, regardless of format. It covers data held on customers, prospects, employees, and partners.

Data Protection Principles NeuroAds adheres to the following principles for processing personal data:

1. Lawfulness, Fairness, and Transparency: Data is processed legally, fairly, and in a transparent manner.

2. Purpose Limitation: Data is collected for legitimate purposes specified explicitly to the data subject at the time of collection.

3. Data Minimization: Only data that is necessary for the purposes specified is processed.

4. Accuracy: Stored data is accurate and kept up-to-date.

5. Storage Limitation: Data is kept only as long as necessary for the purposes specified.

6. Integrity and Confidentiality: Data is processed in a manner that ensures security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Rights of the Individual Individuals whose data is processed by NeuroAds have the right to:

• Access their personal data.

• Request correction or erasure of their personal data.

• Restrict processing or object to processing.

• Data portability.

• Withdraw consent at any time, where relevant.

• Lodge a complaint with a supervisory authority.

Data Subject Access Request Individuals can make a request to access their personal data. NeuroAds will provide a response within one month, providing a copy of the data processed, the purposes of processing, and the recipients of the data.

Data Protection Officer (DPO) NeuroAds has appointed a Data Protection Officer to oversee compliance with this policy and data protection laws. The DPO can be contacted at ri@neuroads.agency for any issues related to data protection.

Reporting a Data Breach Any identified breach of personal data will be reported to the relevant supervisory authority within 72 hours of awareness, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals. Affected individuals will also be notified if the breach is likely to result in a high risk to their rights and freedoms.

Changes to the Policy This policy may be updated periodically to reflect changes in law or our data processing practices. Any significant changes will be communicated to data subjects through our website or through direct communication.

Contact Us If you have any questions or concerns about this Data Protection Policy or our data handling practices, please contact us at ri@neuroads.agency.