Privacy Notice

Last updated: 9 August 2026

This Privacy Notice explains how personal data is processed when you visit the NEURIXA website or contact us through the website contact form.

1. Data controller

The data controller is:

IT Business Consulting Magyarország Tanácsadó, Szolgáltató és Kereskedelmi Korlátolt Felelősségű Társaság
Short name: IT Business Consulting Magyarország Kft.
Registered office: 2093 Budajenő, Pacsirta utca 15., Hungary
Company registration number: 13-09-208346
Tax number: 13324395-2-13
Email: info@neurixa.eu
Website: https://www.neurixa.eu/

Please contact us at info@neurixa.eu if you have questions about this Notice or wish to exercise your data protection rights.

2. Personal data we process

When you use the contact form, we may process the following data:

your name;
email address;
organisation and role;
the NEURIXA capability or topic selected by you;
the content of your message;
your privacy acknowledgement;
technical information required to deliver and protect the submission, such as the date and time of submission, IP address, browser information and anti-spam signals.

Please do not include special-category personal data, confidential third-party information, passwords, access credentials or unnecessary sensitive information in the message field.

When you visit the website, limited technical access and security data may also be processed to operate, secure and diagnose the website.

3. Purposes and legal bases

We process contact-form data in order to:

receive, review and respond to your enquiry;
understand the operational area or use case relevant to you;
take steps at your request before entering into a possible business relationship;
protect the form and website from spam, abuse and security threats;
document and manage business correspondence where necessary.

Depending on the nature of the enquiry, the legal basis is:

your consent under Article 6(1)(a) GDPR, expressed when you submit the form after acknowledging this Notice;
taking steps at your request before entering into a contract under Article 6(1)(b) GDPR;
our legitimate interest under Article 6(1)(f) GDPR in operating a secure website, responding to genuine business enquiries and maintaining necessary business records.

You may withdraw consent at any time by contacting info@neurixa.eu. Withdrawal does not affect processing carried out lawfully before withdrawal. Other legal bases may continue to apply where appropriate.

4. Recipients and service providers

Personal data may be accessible only to authorised personnel and service providers that need it for the purposes described above. These may include:

Formspree, Inc., which receives, filters and forwards contact-form submissions;
Ghost Foundation Ltd, which provides the Ghost(Pro) website hosting platform;
DomDom, which provides the neurixa.eu domain-related email hosting and delivery service;
infrastructure, security, legal or professional advisers where access is necessary and appropriately protected;
public authorities where disclosure is required by law.

These service providers process data under their own contractual and data-protection obligations.

5. International data transfers

Ghost(Pro) states that its hosted servers are located in Amsterdam, the Netherlands. Formspree operates infrastructure in the United States and states that it relies on Standard Contractual Clauses as a processor for relevant international transfers. Where personal data is transferred outside the European Economic Area, we require an applicable lawful transfer mechanism and appropriate safeguards.

More information is available in the providers' published privacy, security and data-processing documentation.

6. Retention

Formspree submission records under the currently used service plan are retained in the Formspree dashboard for a limited period. Copies forwarded to the NEURIXA mailbox and related business correspondence are retained only for as long as reasonably necessary to respond to and follow up the enquiry.

As a general rule, enquiries that do not lead to a contractual relationship are deleted or anonymised no later than 24 months after the last meaningful communication, unless a shorter period is appropriate or a longer period is required to establish, exercise or defend legal claims or to comply with a legal obligation.

If an enquiry leads to a contract or formal business relationship, relevant data may be retained for the periods required by applicable accounting, tax, contractual and limitation rules.

7. Data security

We use organisational and technical measures appropriate to the nature of the data and the associated risks. These include encrypted network connections, access controls, spam filtering, service-provider security controls and limiting access to authorised persons. No internet transmission or storage system can be guaranteed to be completely secure.

8. Your rights

Subject to the conditions of the GDPR, you may request:

access to your personal data;
correction of inaccurate or incomplete data;
erasure of your data;
restriction of processing;
data portability where applicable;
objection to processing based on legitimate interests;
withdrawal of consent at any time;
information about applicable safeguards for international transfers.

You also have the right to lodge a complaint with a competent supervisory authority. In Hungary, this is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): https://www.naih.hu/.

9. Automated decision-making

We do not use contact-form data to make decisions that produce legal effects or similarly significant effects through solely automated processing. Automated spam and security screening may be used to protect the form, but genuine enquiries can be reviewed by a person.

10. Cookies and external services

The website may use strictly necessary technologies required for security and operation. If optional analytics, membership, embedded media or marketing technologies are enabled in the future, this Notice and any required cookie controls will be updated before those technologies are used.

11. Changes to this Notice

We may update this Privacy Notice when our website, service providers or legal obligations change. The current version and its effective date will always be published on this page.