Privacy Notice

Section 01

Who we are

This notice explains how Cogniflux Lab (“Cogniflux Lab”, “we”, “us”) handles your personal data when you book or take part in a Cogniflux Open Lab session (“Open Lab”) and when you join the Cogniflux Lab waitlist.

Data controller

Cogniflux Lab — Alessandro Venturi
Brussels, Belgium
studio@cognifluxlab.com

Cogniflux Lab offers evidence-informed brain-fitness training for healthy adults. Open Labs are pilot sessions used to test and refine the format and to understand how participants experience it.

Open Labs are intended for adults aged 18 and over. We do not knowingly collect personal data from children.

Open Labs are not a clinical or therapeutic service and do not provide diagnosis, treatment, or monitoring of any health condition.

Section 02

What this notice covers

This notice covers:

• information you give us when you book or register for an Open Lab;
• data generated while you complete exercises or any pre- or post-session tasks used in an Open Lab;
• your photo / video preference;
• information you provide when you join the Cogniflux Lab waitlist;
• how we use Open Lab data to run sessions, provide individual results, and analyse the Open Lab in aggregated or pseudonymised form; and
• how we use waitlist data to send occasional Cogniflux Lab updates by email.

Open Lab bookings and waitlist subscriptions are separate. Joining the waitlist does not book you into an Open Lab. Booking or attending an Open Lab does not automatically add you to the waitlist.

Section 03

Open Lab bookings and participation

3.1 What data we collect for Open Labs

We intentionally keep the data collected for Open Lab pilots limited.

We do not ask for detailed medical history or clinical diagnoses as part of these pilots.

The exercises used in Open Labs are not medical tests. They are designed only to provide general mental-performance feedback.

3.2 Why we use Open Lab data

We use Open Lab data for the following purposes:

• to manage your registration and participation, including confirming your place and selected time slot;
• to send essential practical information about the session, such as location details, what to bring, reminders, or last-minute changes;
• to generate your individual Open Lab dashboard or “session snapshot”, based on the performance metrics recorded during the session;
• to review results across participants so we can calibrate difficulty, refine scoring, improve timings, and learn what works best in the Open Lab format; and
• to share high-level, de-identified pilot insights with partners, collaborators, prospective clients, or on social media, without identifying individual participants.

Where possible, we analyse results in aggregated or pseudonymised form rather than by reference to your name.

3.3 Legal basis for Open Lab processing

Under the GDPR, we rely mainly on your consent for Open Lab pilot participation and the processing of the data generated during the session.

When you register and tick the relevant boxes, you consent to:

• taking part in the Open Lab;
• completing any pre- and post-session tasks used in the pilot;
• processing of your data to generate individual feedback and to analyse the pilot in aggregated or pseudonymised form; and
• the use of photos or video in line with the preference you indicate.

We also use basic registration details to administer the session you asked to attend and to send essential, non-marketing messages about that specific session. These messages are part of managing the Open Lab and are separate from waitlist updates.

You can withdraw your consent at any time. This will not affect processing already carried out before your withdrawal. If you withdraw consent for Open Lab participation, we may not be able to provide or continue providing an individual session snapshot.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

3.4 If you do not provide Open Lab data

To register and take part in an Open Lab, we need basic registration details and the performance data generated by the exercises you choose to complete.

If you do not provide the information needed for registration or participation, we may not be able to reserve a place, send essential session details, or provide your individual dashboard.

Your photo / video preference helps us respect how you would like to be included or excluded in event media.

Joining the waitlist is entirely optional and does not affect your ability to book or take part in an Open Lab.

3.5 Your individual results vs aggregated results

Your individual results, including task performance data and any self-ratings used in the session, may be used to generate your personal dashboard and to feed into broader analysis of the Open Lab.

Those individual results are not shared externally in a way that identifies you.

Aggregated results, such as averages, ranges, distributions, or general trends, may be shared externally but only in a non-identifying form.

3.6 Photos and video

During some Open Labs, we may take photos or short video clips to document the event and promote future sessions.

Your preference on the registration form guides how we include or exclude you in that material. Where helpful, we may also confirm this verbally on site.

If you later see an image or clip featuring you on a Cogniflux Lab channel and would like it removed, contact studio@cognifluxlab.com. We will review the request and, where reasonably possible, remove or replace the material.

Section 04

Cogniflux Lab waitlist and updates

You can choose to join the Cogniflux Lab waitlist to hear about future Open Lab session dates, pilot opportunities, research or project updates, early access invitations, corporate or team formats, and occasional general Cogniflux Lab news.

Joining the waitlist does not mean you have booked an Open Lab, agreed to participate in a session, joined a pilot, or taken part in research. Open Lab bookings and participation are handled separately. People who book or attend an Open Lab are not automatically added to the waitlist; they can choose to join it separately.

4.1 What data we collect for the waitlist

We do not collect phone numbers, health information, exercise background, or Open Lab performance data for the waitlist.

4.2 How we use waitlist data

We use waitlist data to send occasional Cogniflux Lab updates by email, including when relevant sessions, pilots, projects, or team opportunities open.

We may use the interests you provide, such as Open Labs, following the project, or corporate / team sessions, to make these updates more relevant.

We do not use the waitlist for phone, SMS, WhatsApp, or similar outreach unless we ask separately.

Simple preference-based segmentation may be used to decide which updates are most relevant. We do not use waitlist data for automated decision-making or profiling that produces legal or similarly significant effects.

4.3 Legal basis, unsubscribe, and retention

The legal basis for waitlist emails is your consent.

You can unsubscribe or withdraw your consent at any time using the unsubscribe link, where available, or by contacting studio@cognifluxlab.com.

Unsubscribing from the waitlist does not affect any Open Lab booking or participation.

We keep waitlist data until you unsubscribe or ask us to delete it. We may also remove inactive contacts during periodic list cleanups. Where needed, we may keep a minimal record to make sure we continue to respect an unsubscribe request.

Section 05

Where and how we store your data

Open Lab and waitlist data may be stored in files managed by Cogniflux Lab on Microsoft OneDrive, in local files used by Alessandro Venturi, and in systems used for online registration, surveys, pre- or post-session tasks, email communications, and related operations.

We take reasonable steps to protect personal data, including restricting access, using password-protected devices and files, and using reputable service providers with appropriate security measures.

Online registration, surveys, waitlist forms, email communications, and any pre- or post-session tasks may be handled through trusted third-party platforms or service providers. Where these providers process data on our behalf, they act as processors under appropriate data protection arrangements.

Some service providers may store or access data outside the EU or EEA. Where that happens, we rely on safeguards recognised under the GDPR, such as adequacy decisions or standard contractual clauses, as applicable.

Each provider also has its own privacy notice and security arrangements, which apply in addition to this notice.

Section 06

Who can access your data and when we share it

6.1 Open Lab individual-level data

Individual-level Open Lab data, such as your name, contact details, and raw results linked to you, is accessible only to Alessandro Venturi, founder of Cogniflux Lab, except where a service provider processes data on our behalf as described in section 5.

We do not share your identifiable results with employers, event partners, future clients, or other external third parties.

Your personal dashboard, if provided, is for you. We do not share it in a way that identifies you to others.

If we later involve trusted collaborators in running or analysing pilots, any access to individual-level data will be limited to what is strictly necessary and subject to appropriate confidentiality and data-protection obligations. If that changes materially, we will update this notice.

6.2 Waitlist data

Access to the waitlist is limited to people who help manage Cogniflux Lab communications, sessions, pilots, and related operations, together with trusted service providers who help us operate our website, forms, email communications, and related systems.

We do not sell the waitlist and do not share it with employers, clients, sponsors, or partners for their own marketing.

If a partner or collaborator is involved in a specific pilot or opportunity, we will handle that through the relevant invitation, booking, or participation information rather than by sharing the waitlist for their own use.

6.3 Aggregated or de-identified data

We may share aggregated or de-identified findings, such as average improvement trends or common participant feedback themes, with event or collaboration partners, prospective clients, or more widely through presentations, websites, or social media.

When we do this, the information is presented in a way that does not identify individual participants.

Section 07

How long we keep your data

We keep identifiable data only for as long as needed for the relevant purpose.

After the relevant retention period, we delete identifiable data or permanently de-identify it so it can only be used in aggregated analysis.

You can ask us to delete your identifiable data sooner. If data has already been irreversibly anonymised, it may no longer be possible to identify and remove it.

Section 08

Your rights

Under the GDPR, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• ask for deletion of your personal data, subject to applicable conditions;
• restrict how we use your data in certain circumstances;
• withdraw consent at any time where processing is based on consent;
• receive your data in a structured, commonly used format in certain cases; and
• object to certain processing in some circumstances, including direct marketing.

To exercise your rights or ask questions about this notice, contact studio@cognifluxlab.com.

We may ask for limited information to confirm your identity before responding, to protect your data against unauthorised access.

When you withdraw consent or ask us to delete your identifiable data, we will stop using it for the relevant purpose and delete or anonymise it unless we have a valid legal reason to keep it for longer.

Section 09

Questions or complaints

If you have concerns about how we handle your personal data, please contact us first at studio@cognifluxlab.com so we can try to resolve the issue.

You also have the right to lodge a complaint with your local supervisory authority. In Belgium, this is the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit).

Website: www.dataprotectionauthority.be