Neural.
Privacy notice for the VR questionnaire
Updated:
Voluntary survey about access to VR headsets. Answers and optional contact details are separate. Both are retained for seven days.
1. Who is responsible?
The controller is Dennis Louis Lemon, trading as Dennis Louis Lemon Software Development. The address and privacy contact are listed below. Please send privacy questions and requests to this contact.
Dennis Louis Lemon · Dennis Louis Lemon Software DevelopmentMaybachstr. 9 · 45133 Essen · Deutschland
questionnaire@roboterschlafennicht.de
2. Purpose, data and legal basis
We assess practical access to VR headsets and interest in possible future activities. We collect adulthood, country, recent wellbeing-app use, headset access, purchase/borrowing interest, preferred format, willingness to travel to Gelsenkirchen or Barcelona, and future interest. Stored records also contain language, questionnaire and privacy-notice versions, consent, a random receipt, submission/expiry times and a recruitment-source field (currently “unknown”). A separate optional record contains your email, selected information requests and consent to that contact. Each purpose relies on your separate consent under Article 6(1)(a) GDPR. This is not clinical research enrolment, a medical assessment or consent to advertising.
3. Storage and recipients
Responses and contacts are encrypted in separate databases with separate keys on our TransIP B.V. VPS in Amsterdam, Netherlands. Authorised Neural staff administer the survey and process only the data needed for their task; TransIP provides the hosting infrastructure. Contacts are not linked to responses. The survey does not use Firebase or send individual records to Google Drive, LinkedIn, DigiCare or laboratories. Any later laboratory participation requires separate arrangements. No provider snapshots or survey database backups are enabled. Data is not deliberately transferred outside the EEA; hosting and permitted support processing are governed by the agreement with TransIP.
4. How long data remains
Responses and contact requests expire seven days after submission, or are deleted earlier when you withdraw. Expired data is immediately excluded from processing; automated physical cleanup runs every minute. An outage can delay physical cleanup until service resumes. Private exports, if made, expire no later than their earliest included record. No survey backups are made. Closing the browser clears unsent information but does not delete submitted data. A contact request is deleted at its deadline even if no appointment or future study has been arranged.
5. Website access and browser storage
Page delivery requires connection data such as the IP address. We use it for secure and reliable operation and short-lived abuse controls, based on Article 6(1)(f) GDPR. Survey-page and survey-API access logs are disabled. Requests for other public site resources follow the general app notice: reduced operational logs rotate weekly with 12 rotations retained; masked network prefixes are not assumed anonymous. The questionnaire has no advertising trackers, loads no personal account and does not save answers in cookies or localStorage. An existing display preference may be read. Fonts are served by this site.
6. Your rights and withdrawal
You can request access, correction, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests for reasons relating to your situation. Withdraw consent at any time using the delete button next to your receipt or by emailing/posting your receipt to the controller below. Withdrawal does not affect earlier lawful processing. Keep receipts private: anyone holding one can delete that record. Responses cannot be located by email because they are not linked to contacts. We normally respond to rights requests within one month and explain any permitted extension within that month. If we cannot identify a record, we assess additional information you supply rather than collecting unnecessary identity data. Contact consent can also be withdrawn using the contact email address.
7. Voluntary participation
Participation and contact details are voluntary, with no statutory or contractual obligation. You may leave, skip the contact step or choose a non-disclosure option where offered, without losing access to Neural. Without answer consent we cannot include a response; without contact consent we will not send information. Do not provide diagnoses, symptoms, medical records or information about other people.
8. Screening and automated decisions
Screening determines only whether you meet the survey’s eligibility criteria. There are no automated decisions with legal or similarly significant effects, advertising profiles or medical assessments.
9. Complaints
You may complain to a data protection supervisory authority, in particular where you live, work or believe an infringement occurred. For the operator in Essen, the relevant authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany; poststelle@ldi.nrw.de.
LDI NRW