Privacy Policy

Brief Information

The purpose of the privacy policy is to provide maximum transparency regarding the information that the site collects and how it uses it.

In compliance with the obligations deriving from national legislation (Legislative Decree June 30, 2003 no. 196, Code regarding the protection of personal data, and subsequent amendments) and European legislation (European Regulation for the protection of personal data no. 679/2016, GDPR), this site respects and protects the privacy of visitors and users, making every possible and proportionate effort not to violate users' rights.

This site does not publish advertisements, does not use data for sending advertising, but makes use of third-party services in order to improve the use of the site, third parties that could collect user data and then use it to send personalized advertisements on other sites. However, this site makes every possible effort to protect user privacy and minimize the collection of personal data.

For more information on the processing of personal data, you can read the complete information below.

Complete Information

Data Processing Subjects

The data controller pursuant to applicable laws is the site administrator, Lancet Commission on Brain Health, contactable at the following email info@lancetbrainhealth.org and at the following address: , ().

Legal Basis for Processing

This site processes data mainly based on user consent. Consent is given through the banner placed at the bottom of the page, or through the use or consultation of the site, as conclusive behavior. By using or consulting the site, visitors and users approve this privacy policy and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary for the provision of a service. Through communication forms or service request forms, additional consents are collected relating to the specific purpose of the service.

The provision of data and therefore consent to the collection and processing of data is optional, the User may refuse consent, and may revoke previously given consent at any time (through the banner placed at the bottom of the page or browser settings for cookies, or the Contacts link). However, refusing consent may result in the impossibility of providing some services and the browsing experience on the site would be compromised.

Data for site security and for prevention of abuse and SPAM, as well as data for site traffic analysis (statistics) in aggregate form, are processed based on the legitimate interest of the Data Controller in protecting the site and users themselves. In such cases, the user always has the right to object to data processing (see User Rights section).

Data provided for consultations or professional assignments are processed based on the performance of a contract and compliance with a legal obligation. In such cases, specific information is provided.

Purpose of Processing

The processing of data collected by the site, in addition to the related, instrumental and necessary purposes for providing the service, is aimed at the following purposes:

• Statistics (analysis): Collection of data and information in exclusively aggregate and anonymous form in order to verify the correct functioning of the site. None of this information is related to the physical person-User of the site, and does not allow their identification in any way. Consent is not required.
• Security: Collection of data and information in order to protect the security of the site (anti-spam filters, firewall, virus detection) and Users and to prevent or expose fraud or abuse against the website. Data is recorded automatically and may also include personal data (IP address) that could be used, in accordance with applicable laws, in order to block attempts to damage the site or harm other users, or otherwise harmful or criminal activities. Such data is never used for User identification or profiling and is deleted periodically. Consent is not required.
• Ancillary activities: Communicate data to third parties that perform necessary or instrumental functions for the operation of the service (e.g. comment boxes), and to allow third parties to carry out technical, logistical and other activities on our behalf. Suppliers have access only to personal data that is necessary to perform their tasks, and undertake not to use the data for other purposes, and are required to process personal data in accordance with current regulations.
• Consultations and professional assignments: In case of spontaneous sending of data in order to request professional advice or for a professional assignment, the data will be used solely for the purpose of evaluating the assignment and for any fulfillment thereof. In such cases, specific information will be provided.

Data Collected

This site collects user data in two ways.

• Data collected in an automated manner:
  During User navigation, the following information may be collected and stored in the site server (hosting) log files:
  - internet protocol (IP) address;
  - browser type;
  - device parameters used to connect to the site;
  - internet service provider (ISP) name;
  - date and time of visit;
  - visitor's referring (referral) and exit web page;
  - possibly the number of clicks.
  
  This data is used for statistical and analysis purposes, in exclusively aggregate form. The IP address is used exclusively for security purposes and is not crossed with any other data.
• Data provided voluntarily:
  The site may collect other data in case of voluntary use of services by users, such as comment services, communication (contact forms, comment boxes), and will be used exclusively for providing the requested service:
  - name;
  - email address;
  - any additional data sent spontaneously by the user.

Place of Processing

Data is processed at the headquarters of Lancet Commission on Brain Health and at the web Hosting datacenter. The provider is located in the European Economic Area and acts in accordance with European regulations.

Data Retention Period

Data collected by the site during its operation is kept for the time strictly necessary to carry out the specified activities. Upon expiration, the data will be deleted or anonymized, unless there are additional purposes for their retention.

Data (IP address) used for site security purposes (blocking attempts to damage the site) is kept for 180 days. Data for analytics (statistics) purposes is kept in aggregate form for 24 months.

Transfer of Collected Data to Third Parties

Data collected by the site is generally not provided to third parties, except in specific cases: legitimate request by the judicial authority and only in cases provided by law; when necessary for the provision of a specific service requested by the User; for the execution of security checks or site optimization.

Transfer of Data to Non-EU Countries

This site may share some of the collected data with services located outside the European Union area. In particular with Google, Facebook and Microsoft through social contacts and the Google Analytics service. The transfer is authorized based on specific decisions of the European Union and the Data Protection Authority, in particular decision 1250/2016 (Privacy Shield), so no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.

Security Measures

We process visitor/user data lawfully and correctly, adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification or unauthorized destruction of data. We are committed to protecting the security of your personal data during transmission, using Secure Sockets Layer (SSL) software, which encrypts information in transit. Processing is carried out using computer and/or telematic tools, with organizational methods and logic strictly related to the indicated purposes. In addition to the Data Controller, in some cases, categories of persons in charge involved in the organization of the site or external subjects (such as third-party technical service providers, hosting providers) may have access to data.

Cookies

This site uses cookies, text files that are registered on the user's terminal or that allow access to information on the user's terminal. Cookies allow storing information about visitor preferences, are used to verify the correct functioning of the site and to improve its functionality by personalizing page content based on the type of browser used, or to simplify navigation by automating procedures (e.g. Login, site language), and finally for analyzing site use by visitors.

This site uses the following categories of cookies:

• technical cookies: used solely for the purpose of transmitting an electronic communication, to ensure proper site display and navigation within it. They also allow distinguishing between various connected users in order to provide the correct service to the right user (Login), and for site security reasons. Some of these cookies are deleted when the browser is closed (session cookies), others have a longer duration (such as the cookie necessary to store user consent regarding the use of cookies, which lasts 1 year). Consent is not required for these cookies;
• analytics cookies: used directly by the site manager to collect information, in aggregate form, on the number of users and how they visit the site. They are assimilated to technical cookies if the service is anonymized.
• profiling and marketing cookies: used exclusively by third parties other than the owner of this site to collect information on user behavior during browsing, and on interests and consumption habits, also for the purpose of providing personalized advertising.

Cookie Disabling

The user can refuse the use of cookies and at any time can revoke previously given consent. Since cookies are linked to the browser used, THEY CAN BE DISABLED DIRECTLY FROM THE BROWSER, thus refusing/revoking consent to the use of cookies, or through the banner placed at the bottom of the page.

COOKIE DISABLING MAY PREVENT THE CORRECT USE OF SOME SITE FUNCTIONS, in particular services provided by third parties may not be accessible, and therefore may not be viewable:
- YouTube videos or other video sharing services;
- social network social buttons;
- Google maps.

Third-Party Cookies

This site also acts as an intermediary for third-party cookies (such as social network buttons), used to provide additional services and functionality to visitors and to simplify the use of the site, or to provide personalized advertising. This site has no control over their cookies entirely managed by third parties and has no access to information collected through said cookies. Information on the use of said cookies and their purposes, as well as on the methods for possible disabling, are provided directly by third parties on the pages indicated below.

Please note that generally user tracking does not involve identification of the same, unless the User is already registered to the service and is also already logged in, in which case it is understood that the User has already given their consent directly to the third party at the time of registration to the relevant service (e.g. Facebook).

This site uses cookies from the following third parties.

• Google Ireland Ltd
  For information on data use and processing by Google Ireland ltd, we recommend viewing Google's privacy policy and How Google uses data when you use our partners' sites or apps.
• Google Analytics
  used to analyze site use by users, compile reports on site activities and user behavior, verify how often users visit the site, how the site is tracked and which pages are visited most frequently. The information is combined with information collected from other sites in order to create a comparative picture of site use compared to other sites in the same category.
  Data collected: browser identifier, date and time of interaction with the site, referring page, IP address.
  Place of data processing: European Union as service anonymization is active.
  The collected data does not allow personal identification of users, and is not crossed with other information relating to the same person. They are processed in aggregate and anonymized form (truncated to the last octet). Based on a specific agreement (DPA), Google Inc. (data processor) is prohibited from crossing such data with that obtained from other services.
  The user can selectively disable (opt-out) data collection by Google Analytics by installing the appropriate component provided by Google (opt out) on their browser.

User Rights

Pursuant to European Regulation 679/2016 (GDPR), the User may, according to the methods and limits provided by current legislation, exercise the following rights:

- object in whole or in part, for legitimate reasons, to the processing of personal data concerning them for the purpose of sending advertising material or direct sales or for conducting market research or commercial communication;
- request confirmation of the existence of personal data concerning them (right of access);
- know their origin;
- receive intelligible communication;
- have information about the logic, methods and purposes of processing;
- request their updating, rectification, integration, deletion, transformation into anonymous form, blocking of data processed in violation of law, including those no longer necessary for the purposes for which they were collected;
- in cases of processing based on consent, receive at the sole cost of any support, their data provided to the controller, in structured form and readable by a data processor and in a format commonly used by an electronic device;
- the right to lodge a complaint with the Supervisory Authority;
- as well as, more generally, exercise all the rights recognized to them by current legal provisions.

Requests should be addressed to the Data Controller.

Updates

This privacy policy is updated as of 06/02/2026.