PRIVACY POLICY

In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), NEOBAND TECHNOLOGIES, SOCIEDAD LIMITADA informs you about the processing of personal data of the users of the website www.neoband.es and the Neoband application.

1. DATA CONTROLLER

Company: NEOBAND TECHNOLOGIES, SOCIEDAD LIMITADA
Registered office: Calle Castillo de Malpice 120B, Villanueva de la Cañada, Madrid
Contact: contacto@neoband.es
Web: www.neoband.es

2. WHAT DATA WE COLLECT AND WHY


Data Purpose Legal Basis
Name and email address User account management Performance of a contract
(Art. 6(1)(b) GDPR)
Heart Rate, HRV, SpO2, sleep, steps
(health data — special category)
Service provision
and generation of personalized reports
Explicit consent
(Art. 9(2)(a) GDPR)
Device ID, firmware version Synchronization and technical support Legitimate interest
(Art. 6(1)(f) GDPR)
Website browsing data
(IP address, browser, visited pages)
Statistical analysis and
service improvement
Legitimate interest
(Art. 6(1)(f) GDPR)


3. DO WE SHARE YOUR DATA WITH THIRD PARTIES?

We do not disclose data to third parties unless legally required to do so. If the user activates the 'Share data' function within the application, specific and explicit authorisation will be requested at that moment, which can be revoked at any time.

4. HOW LONG DO WE KEEP YOUR DATA?

Data is retained as long as the account remains active. Following cancellation, it is deleted within a maximum period of 30 days. Historical health data may be anonymised after 3 years if the user expressly consents to it.

5. YOUR RIGHTS

The user can exercise their rights of access, rectification, erasure, portability, restriction and objection, as well as withdraw consent, at any time by writing to contacto@neoband.es. They can also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. SECURITY

We apply AES-256 encryption at rest and TLS 1.3 in transit. Health data is pseudonymised and access is restricted by internal roles.

7. CHANGES TO THIS POLICY

Any relevant changes will be communicated to the user in advance. The current version will always be available at www.neoband.es/privacidad.

8. APPLICABLE LAW

This policy is governed by the GDPR (EU) 2016/679 and Spanish law. Disputes are subject to the Courts and Tribunals of Madrid.