Privacy Policy
Last updated: March 25, 2026
Who is responsible for processing?
The data controller is:
Lixsir EURL
2 rue Boyer-Barret, 75014 Paris, France
SIREN : 893 958 686
Contact email: [email protected]
Email support [email protected]
2. Scope of application
The purpose of this policy is to inform users of the NeuroMap website about the conditions under which their personal data may be collected and processed.
Processed data
Depending on the workflow used, NeuroMap can process the following data categories:
- Customer or prospect email address ;
- Age range of the person concerned by the questionnaire; ;
- first name, if optionally provided; ;
- answers provided to the questionnaire ;
- technical and navigation data necessary for the operation of the site; ;
- payment and transaction data, via the Stripe provider; ;
- data related to audience measurement, advertising, and marketing, according to the consents given.
NeuroMap is not intended to collect health data in the sense that it would be explicitly requested as such in forms.
The user agrees not to enter excessive or unnecessary information in any free-text fields, if such fields exist.
4. Purposes and Legal Bases
4.1 Provision of Service
Purposes
- make the questionnaire work ;
- Generating a results tease. ;
- Send the report after payment; ;
- Ensure the technical management of the service.
Legal basis: performance of pre-contractual measures and the contract.
4.2 Payment Management and Administrative Obligations
Purposes
- to collect payment; ;
- manage proof of transaction ;
- Comply with accounting, tax, and legal obligations.
Legal basis: contract performance and compliance with legal obligations.
4.3 Support and Security
Purposes
- respond to support requests; ;
- prevent, detect, and address technical or security incidents ;
- Protect the site, its systems, and its users.
Legal basis: Lixsir EURL's legitimate interest and, where applicable, performance of the contract.
4.4 Commercial email prospecting
Purposes
- send marketing, promotional, or follow-up emails to people who have consented or when the regulations allow; ;
- measure the performance of marketing campaigns.
Legal basis: consent, or where applicable, legitimate interest when permitted by regulation.
4.5 Audience Measurement and Advertising
Purposes
- measure site audience ;
- analyze navigation ;
- improve website performance ;
- measure the effectiveness of advertising campaigns.
Legal basis: consent when the tracers concerned require it.
5. Distinction between service, marketing, and cookies
The processing of data related to the provision of services, payment management, security, or sending emails strictly necessary for the execution of the service are separate:
- Marketing treatments ;
- audience measurement trackers ;
- advertising trackers.
Service communications (e.g., sending reports, technical information, order-related confirmations) do not constitute marketing communications.
6. Recipients of the data
Personal data is accessible, to the extent of their respective needs, to authorized Lixsir EURL personnel as well as to its service providers and subcontractors acting on its behalf.
Depending on the case, these recipients may fall into the following categories, among others:
- payment service provider ;
- hosting provider ;
- Email marketing and CRM provider ;
- audience measurement providers ;
- advertising providers ;
- technical or maintenance service providers.
As of the effective date of this policy, NeuroMap uses services provided by Stripe, Brevo, Google Analytics, Meta, and IONOS, among others.
7. Transfers outside the European Union
Certain service providers or their subsequent subcontractors may be located outside the European Union or may transfer certain data there.
When such transfers exist, Lixsir EURL ensures that they are governed in accordance with applicable regulations, particularly through adequacy decisions, standard contractual clauses, or any other recognized mechanism.
8. Shelf life
The data is kept for limited periods, appropriate to its purpose.
8.1 Questionnaire, teasing, and report
- Responses to the questionnaire: a maximum of 2 hours from the end of the route, except for occasional technical necessity or contrary legal obligation.
- Optional first name: up to a maximum of 2 hours within the scope of the course concerned.
- Age range: up to 2 hours maximum within the relevant route.
- Report or interim elements: maximum 2 hours within the framework of the technical provision of the result.
8.2 Prospects and follow-ups
- Brevo prospect data: up to 2 months from collection or last contact from the data subject.
- Follow-up emails for incomplete payments: up to 1 hour maximum depending on the scenario.
8.3 Purchase, Billing, and Proof Data
- Data required for transaction management, accounting, billing, and proof: duration required by applicable law, particularly when longer retention is imposed on Lixsir EURL.
Some data therefore cannot be immediately deleted when a legal obligation to retain it applies.
9. Cookies and other trackers
The site may use:
- Strictly necessary cookies for the functioning of the site or the requested service; ;
- audience measurement trackers ;
- advertising or marketing tracers; ;
- trackers linked to third-party services integrated into the site.
When required by regulation, non-essential tracers are only deposited after consent.
The user can manage their preferences through the cookie management tool provided on the site.
10. Minors or Third Party Individuals
NeuroMap is not intended for use by minors without adult supervision.
When a user fills out a questionnaire on behalf of another person or a minor, they declare that they are authorized to do so and to provide the necessary information within that scope.
Lixsir EURL limits data collection to what is strictly necessary for the service to function.
11. Security
Lixsir EURL implements appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
Despite these precautions, no system offers absolute security.
12. Your rights
According to the applicable regulations and subject to the conditions they provide, you may have the following rights:
- access rights ;
- right of rectification ;
- right to erasure ;
- Right to the restriction of processing ;
- right to object ;
- right to portability where this right applies; ;
- right to withdraw your consent at any time, for processing based on that consent.
You can exercise your rights by writing to: [email protected].
In case of reasonable doubt about your identity, proof of identity may be requested when necessary.
You also have the right to lodge a complaint with the competent supervisory authority, in France, with the CNIL.
13. Policy Modification
Lixsir EURL may amend this privacy policy at any time to reflect legal, regulatory, technical, or operational changes.
The applicable version is the one published on the website on the date of consultation.
14. Contact
For any questions regarding this privacy policy, you can write to: [email protected].