Last updated: 15 October 2026
1. Controller
Dr. Arkadii Grygorian (Brainautics)
Sophiengutstr. 18, 4020 Linz, Austria
Email: a•••@brainautics.com
Phone: +43 ••• •••
2. What data we process and why
Visiting the website. When you open a page, our hosting provider processes technical data such as your IP address, browser type, the page requested and the time of the request. We need this to deliver the website and keep it secure (Art. 6(1)(f) GDPR). Server logs are deleted after a short period unless they are needed to investigate an attack.
Cookies. We use only technically necessary cookies: a session cookie and a security token that protect the forms. We do not use analytics or advertising cookies.
Contact and application forms. If you contact us or apply for early access, we process the data you enter: name, email address, phone number, country, job title, organisation and your message. We use it to answer you and to prepare a possible cooperation or order (Art. 6(1)(b) GDPR) and for our legitimate interest in replying to enquiries (Art. 6(1)(f) GDPR).
Newsletter. If you subscribe, we use your email address to send you news about Brainautics, based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time.
Head scans and MRI data. To make an interface we need a head scan or an MRI-based head model. Please send data that is pseudonymised and does not show the person's name. When a research institution or clinic sends us such data, it remains the controller and we process the data on its behalf under a data processing agreement (Art. 28 GDPR). If you send us data about your own health or your child's health directly, we process it only with your explicit consent (Art. 9(2)(a) GDPR).
Anonymous statistics. We count page views and clicks, for example when someone opens a contact detail or the application form. For each event we store only the page, the referring website and the browser language. We do not store IP addresses, do not set cookies for this and do not build user profiles. Our e-mail address and phone number are shown only after a click on “Show”, to protect them from spam bots.
3. Third-party services
Our pages load fonts from Google Fonts (Google Ireland Ltd.) and scripts from the content delivery networks jsDelivr, cdnjs (Cloudflare) and the jQuery CDN. Your browser connects to these servers, which then see your IP address. Some of these providers may process data outside the EU; where they do, transfers are based on the EU–US Data Privacy Framework or standard contractual clauses. We use these services for our legitimate interest in a fast, consistent website (Art. 6(1)(f) GDPR).
4. How long we keep data
Enquiries are kept for as long as needed to handle them and for up to three years afterwards, unless a contract follows. Contract and accounting records are kept for the periods required by Austrian law (generally seven years). Head scans and CAD models are kept for the duration of the order and as agreed with the ordering institution.
5. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. You can withdraw consent at any time with effect for the future. To exercise these rights, write to a•••@brainautics.com .
You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
6. Changes
We will update this policy when our services or the law change. The current version is always available on this page.