Privacy policy

Draft: retention periods and processing arrangements remain subject to confirmation.

Version: 21 October 2026. Proposed policy for the configuration supplied in this package.

Controller and contact

Data, purposes and legal bases

• Professional enquiries: name, email, organization, project focus and description are used to respond and assess the request. The proposed basis is steps requested before entering a contract (GDPR Article 6(1)(b)); other professional enquiries are handled under the legitimate interest in responding to communications (Article 6(1)(f)).
• Bonillo questionnaire: name, institution, email and responses about applicability, resources and confidence are used to administer and analyse the questionnaire and acknowledge receipt by email. The basis is consent (Article 6(1)(a)), which may be withdrawn without affecting earlier processing. This does not authorize marketing.
• Appointments: information entered on the booking page is used to organize the requested meeting. Google Calendar provides its own processing information on that page.
• Technical operation: hosting providers may process IP addresses and technical logs to serve the site, prevent abuse and maintain security, under the legitimate interest in operating the service.

Do not submit identifiable patient information or health data. There are no automated decisions or profiling with legal effects.

Recipients and providers

Netlify hosts the website and handles forms. Google Workspace provides professional email and Google Calendar handles bookings. Authorized collaborators may access information as needed for the requested purpose, under the relevant obligations. Data is not intended for sale or marketing without separate authorization.

These providers may process data outside the European Economic Area. Their terms, processing agreements, locations and applicable safeguards must be checked before launch, including standard contractual clauses or adequacy decisions where relevant. This page does not establish that this review has been completed.

Proposed retention

Enquiries are retained while handled and for up to 12 months after the last communication if no contract starts. For questionnaires, the proposed period is deletion of identifiers 12 months after project closure, with only anonymous results retained subsequently. Information required for legal obligations or claims is kept for the applicable periods. The controller must confirm and implement these periods in Netlify and Google Workspace; the code does not delete records automatically.

Your rights

You may request access, rectification, erasure, restriction, objection and portability where applicable, or withdraw consent, by emailing info@atrium-science.com. Additional identity information is requested only when necessary. You may lodge a complaint with the Spanish Data Protection Agency.

Cookies and external resources

The supplied landing pages contain no advertising analytics or third-party video players; videos are served from the website. Booking opens Google Calendar only when the link is selected. External websites may apply their own policies. Demos may use browser storage for local functionality; this is separate from form submission.

Changes

This policy must be updated when providers, purposes, retention or access arrangements change.