E.U. Privacy Notice

Corin EMEA Privacy Notice

Introduction

Corin International Limited,provide this Privacy Notice to explain how we collect, use, disclose and otherwise process protect your personal data, and the rights you have in relation to it ("Privacy Notice").

We are committed to protecting the privacy and security of your personal data. This Privacy Notice is intended to comply with the General Data Protection Regulation, the UK-GDPR, the Swiss Datenschutzgesetz (DSG) and all other applicable privacy laws in the EMEA region.

Further details, including the categories of personal data processed, purposes, and legal bases may also be provided in the specific privacy notices at the point of data collection.

1. Data Controller

The specific Corin company that you interact with is the data controller responsible for processing your personal data.  To exercise your privacy rights or raise any questions or concerns about the processing of your personal data, you can contact Corin at:  Corin International Limited, The Corinium Centre, Cirencester, Gloucestershire, United Kingdom, Email: DPO@coringroup.com

2. Categories of Personal Data

We may collect and process the following categories of personal data:

• Web browsing data (e.g., website visits, IP address, device information, browser type, logs, language preferences)
• Contact and professional information collected through web forms, telephone, sales channels or email (e,g,, name, email address, employer, phone number, billing address,  field of expertise)
• Marketing preferences and feedback (e.g., survey results)

3. Purposes and Legal Basis for Processing

We may process your personal data to:

• Provide and maintain our products or services as agreed upon
• Process payments and fulfil orders
• Communicate with you, respond to inquiries, and provide support
• Personalize and improve our products, services, and user experience
• Send marketing communications with your consent
• Comply with legal obligations
• Prevent fraud and ensure network and information security

The legal basis for processing your personal data may include the performance of a contract, compliance with legal obligations, your consent, and the legitimate interests pursued by Corin.

Corin’s legitimate interests may include managing business operations, managing security, preventing fraud, ensuring compliance, administering IT systems, facilitating internal group operations such as central coordination and internal data transfers.

Corin generally does not make decisions based solely on automated processing. If automated decision making is used in individual cases, Corin will inform you separately, in accordance with legal requirements.

4. Recipients of Personal Data

We may share your personal data with the following recipients:

• Corin Group affiliates and subsidiaries,
• Service providers acting as data processors contracted by Corin,

• Third-party service providers that help deliver our products or services (eg payment processors, shipping companies),
• Government authorities or law enforcement agencies where required by law.

We only share personal data with service providers that have appropriate data protection measures in place and are contractually required to protect its confidentiality and security.

5. International Data Transfers

In certain cases, we may transfer your personal data to countries outside the United Kingdom or the European Economic Area (EEA). When such transfers occur, we use appropriate safeguards such as standard contractual clauses or other approved transfer mechanisms, in addition to technical and organizational measures to protect your personal data, in accordance to applicable law.

As Corin is part of an international group, your personal data may be transferred within the Corin group on a need-to-know basis.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to meet any contractual, legal, accounting, or reporting requirements. Retention periods depend on the nature of the data and the purposes of processing.When your personal data is no longer required, we will delete or anonymize it.

7. Your Rights

You may have the following privacy rights, subject to applicable law:

• Access your personal data and related processing information (categories of personal data processed, purposes of the processing, recipients of personal data, retention period, etc).;
• Correction of inaccurate or incomplete personal data;
• Request deletion of personal data, provided that:

• it is no longer required for the intended purpose
• consent is withdrawn, where processing is based on consent
• it has been unlawfully processed, or
• it has to be erased for compliance with a legal obligation
• Object to the processing of your personal data based on legitimate interest, where there are no overriding legitimate interests for the processing,
• Request restriction of data processing where deletion is not possible or disputed.
• Port your data
• Not be the subject of automated decisions.
• Lodge a complaint directly to us.
• Lodge a complaint with a data protection supervisory authority in your jurisdiction or where Corin is established. A list of the supervisory authorities in EEA can be found here and for Switzerland here.

Last updated: July 2026