Privacy Policy

1. Who does this Privacy Policy apply to?

By visiting or consulting the www.corusdental.com website (hereinafter, the “Website”) and using the services offered therein, the user (clinics and dental health professionals, mainly) accepts the treatment of their personal data, in accordance with the terms established in this document (hereinafter, the "Privacy Policy").

This Privacy Policy and the way to process your data will be regulated by the General Data Protection Regulation, or Regulation [EU] 2016/679 ("GDPR").

2. Who is the data controller?

This is the relevant information of the Data Controller of the personal data that is processed and provided by users:

Identity	CORUS DENTAL INSTITUTE, S.L. (hereinafter, “CORUS”)
Address	Av. Ragull, 50 1º 1ª -08173- Sant Cugat del Vallès Barcelona Spain
Email	info@corusdental.com / gdpr@corusdental.com

3. What is the legitimacy for the data processing?

The legal base for the processing of personal data is:

The execution of the forms on the CORUS Website, these forms (paragraph 4.a), are completed by data subject or share certain information and thus gives its full consent to the processing of personal data.

4. What information do we process?

The information that we receive from users or that they share, and that will be treated with the utmost confidentiality, is processed, and managed as explained below.

a) Information that users provide us directly: CORUS collects and stores certain information that the user enters on the Website through the following sections/forms.

“I want to receive the Newsletter”	The information that the user provides us when completing this form, that is, email.	Identifying data.
“Contact Form” “Dentist/clinician Form” “Nobrux Form” “Right Form” “Instant Form” “Skyn Form” “Summa Implant Form” “Corus Link Form” “Corus Smart Pack Form” “Corus Consulting Form”	The information that the user provides us when completing the forms, that is, full name, telephone or email, city of residence.	Identifying data. Academic and professional data.
“Prosthetist/technician Form”	The information that the user provides us when they share their CV on the Website, that is, full name, telephone number, email address and CV. Important: CORUS cannot control the content of the information that the user shares through his curriculum, so we request that the data be strictly necessary and relevant for the purpose sought.	Identifying data. Academic and professional data.

b) Information that users provide us indirectly:

Own- and third-party cookies

CORUSE uses its own and third-party cookies to distinguish it from other users of our Website. To do this, without being exhaustive, it collects the following information, the type of search engine, the operating system, including the content it consults and the time of day it does it, as well as the online identifier (that is, the IP assigned to your device).

Identifying data derived from cookies.
Data derived from navigation.

4.1. Data quality: The user must guarantee, both against CORUS and against third parties, the quality of the information and personal data provided through the Website. This implies that all personal data and information provided must be real, truthful, updated and belong to the user and not to third parties. In the event that they belong to third parties, we understand that it is through their consent, and we request that said third party be invited to know our legal texts as soon as possible.

4.2. Modification of data: The user must notify CORUS of any modification that occurs in the personal data provided, responding in any case to the veracity and accuracy of the data provided at all times.

5. For what purpose do we process the data?

Resolution of doubts, queries, and general information	These forms are created so that users can contact CORUS and briefly report their doubts or needs so that we can communicate with them.
Selection processes	For those processes or information that the user shares through the Prosthetic/technical form on the Website, granting their express consent for the processing of their personal data.
Provision of services	CORUS may use the personal data that the user provides: • To carry out communications via email or telephone to inform about its products and services and to comply with internal procedures.
Communication of data to third parties (exceptions)	• In the event that it is strictly necessary for the requested services, in the event that CORUS collaborates with third parties. • When CORUS has express and unequivocal authorization from the user. • When requested by the competent authority in the exercise of its functions (to investigate, prevent or take actions related to illegal actions). • If required by regulations.
Promotional messages with cancellation option.	With the consent of the user, CORUS may use the personal data that we obtain to send information, news and advertising about our services and other similar ones. In any case, the sending of new informative e-mails can be avoided by requesting it at the e-mail address company info@corusdental.com or through the link that appears in the body of each of the e-mails that we send and consequently, CORUS will cease sending the aforementioned information.
Own- and third-party cookies	With the user's consent, cookies may be installed to calculate the number of people who enter the Website, as well as store information on the behaviour of users obtained through continuous observation of their browsing habits (analytics and behavioural). Most browsers admit the use of cookies automatically, but you can configure your browser to be warned on your computer screen about the receipt of cookies and, in this way, prevent their installation on your hard drive. For detailed information on the cookies, we use and the purposes for which we use them, see our Cookie Policy.

6. How long will we keep the data?

CORUS will keep the user's personal data for as long as it is reasonably necessary to: comply with any of the objectives mentioned in this Privacy Policy and comply with current legislation, regulatory requirements and pertinent orders from competent courts, or in any case, while that we send you information or communications and the interested party does not request its deletion or opposition.

Your personal data will be anonymized or deleted once it is no longer relevant for the purposes for which it was collected.

Conservation periods applied for selection processes (curriculum): one (1) year.

7. To which recipients is the data communicated?

The personal data that CORUS collects will be exclusively used to achieve the purpose defined on the Website. To achieve this objective and the correct provision of the service CORUS could share certain personal data of users:

Prior legal requirement, CORUS may share information with executive authority bodies and/or third parties regarding requests for information related to criminal investigations and alleged illegal activities.
With members of the Corus Group: CORUS is part of the Corus Group, which is made up of a strategic network of more than seventy laboratories. If you want to check the location of the laboratories, you can do so through this link.
External service providers: some companies subcontracted by CORUS may have access to your personal data and personal information, always under the exclusive control of CORUS when necessary to provide our services.
1. If the user expressly authorizes the sending of commercial information, we may collaborate with Intuit Inc. (MailChimp), a company registered in the United States that we use as a platform for sending mailings, always under the exclusive control of CORUS. The user can consult the Privacy Policy of this provider here.
With the consent of the user: apart from what is established above, the user will be informed in the event that any of his or her information is made known to the commercial partners of the Website, or to third parties, with a different nature than those purposes set out on the Website (for example: for commercial purposes), so that you have the opportunity to decide that your information is not shared. None of the above data communications will include selling, renting, sharing or otherwise revealing customer personal information for commercial purposes in a manner contrary to the commitments made in this Privacy Policy.

8. Can international data transfers be made?

In the event that we make transfers of your personal data to a third country, that is, a country outside the European Economic Area (the countries of the European Union plus Liechtenstein, Iceland and Norway), we will comply with all the laws applicable to such transfer, including the guarantee that your personal data is kept safe and the presence of safeguards to ensure that there is adequate protection. For this, CORUS will use standard data protection clauses adopted by the European Commission.

9. What rights does the user have in relation to the data they provide?

The user may exercise the following rights before CORUS:

Right to be informed: the user has the right to receive clear, transparent, and easily understandable information about the way in which we use their information and their rights. For this reason, we provide you with this information in this privacy policy.
Right of access: the user has the right to obtain access to their information (in case we are treating it), as well as other types of information (like that provided in this privacy policy), so that they are informed, and they can verify that we use their information in accordance with the legislation on data protection.
Right to rectification: the user has the right to have their information corrected (inaccurate data) if it is incorrect or incomplete.
Right to erasure: It is also known as the “right to be forgotten” and, ultimately, it allows the user to request the elimination or suppression of his or her information when the data is no longer necessary for the purposes for which it was collected. This does not constitute a general right of erasure; there are exceptions.
Right to restriction of processing: the user has rights that allow him to "block" or prevent the continued use of his or her information. When the processing is limited, we will only keep his or her information for the exercise or defence of claims. In addition, we maintain lists of users who have requested a “block” from their continued use of their information in order to ensure that the restriction is respected in the future.
Right to data portability: the user has rights that allow hi mor her to obtain and reuse his or her personal data for his or her own purposes in different services.
Right to object: the user has the right to object to certain types of treatment, including treatment for direct marketing purposes. Except for compelling legitimate reasons, or the exercise or defense of possible claims.

The exercise of the aforementioned rights is very personal, so it will be necessary for the user to prove their identity.

To exercise the aforementioned rights provided for in the legislation, the user can contact CORUS through the email info@corusdental.com or by writing to the address that appears in section 1 of this Privacy Policy. The communication will contain the following data and documents:

Name and surname of the data subject, attaching a photocopy of the DNI or other valid document that identifies him and, where appropriate, of the person who represents him; The use of electronic signature will exempt the presentation of these documents.
Indication of the domicile of the data subject and the request in which the request is specified (the right to be exercised).

The user will also have the right to file a claim with the corresponding Control Authority, when deemed appropriate.

10. How do we protect the data of our users?

CORUS informs the user that it has adopted the necessary technical and organizational measures required by current regulations on Data Protection to guarantee the security of their data, in order to avoid their alteration, loss, access or unauthorized treatment.

As mentioned, the personal data provided by users through the Website will not be transferred to other entities or companies to be used for their own purposes. However, some companies subcontracted by CORUS may have access to personal data and information, always under the exclusive control of CORUS with the sole purpose of providing a service necessary for the correct functioning of the Website.

11. Modifications

CORUS reserves the right to modify this Privacy Policy in accordance with the applicable legislation at all times. Therefore, it is recommended that the user periodically review this Privacy Policy in order to be informed of the processing and protection of personal data, as well as the rights that assist them.

12. Applicable legislation

This Privacy Policy will be governed and interpreted in accordance with Spanish legislation, as well as the resolution of any controversy or divergence related to this website. The use of the services of this website implies the express acceptance of the Spanish jurisdiction.

Date of last update: April 2023.