International Transfers of Personal Data

International Transfers of Personal Data

As a global organization, Corin may transfer, store, access, or otherwise process personal data outside the country where it was originally collected. This may include the United Kingdom, the European Economic Area (EEA), the United States, Australia, Japan, and other jurisdictions where Corin, its affiliates, service providers, or business partners operate.

When personal data is transferred internationally, Corin takes appropriate steps to ensure the transfer complies with applicable data protection laws and that the data remains protected to standards substantially equivalent to those in the country of origin.

Where required by law, Corin uses recognized transfer mechanisms and safeguards, including:

• Adequacy decisions issued by competent regulatory authorities;
• The European Commission's Standard Contractual Clauses (SCCs);
• The UK International Data Transfer Agreement (IDTA) or UK International Data Transfer Addendum;
• Other legally recognized transfer mechanisms permitted under applicable data protection laws.
• For transfers to the United States, Corin may also rely on the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, or the Swiss-U.S. Data Privacy Framework, where the recipient organization is certified under the applicable framework and the mechanism is available under applicable law.

In addition to contractual and legal safeguards, Corin applies appropriate technical and organizational measures to protect personal data during international transfers and subsequent processing. These may include encryption, access controls, authentication, data minimization, monitoring and logging, and access restrictions based on legitimate business need.

Where appropriate, Corin assesses international transfers through transfer impact assessments (TIAs) to determine whether additional safeguards are needed, considering the nature of the personal data, the processing purpose, the countries involved, and the applicable legal and regulatory environment.

If you would like further information regarding Corin's international data transfer practices or the safeguards applied to your personal data, please contact:

Corin International Limited
The Corinium Centre
Cirencester, Gloucestershire
United Kingdom

Email: DPO@coringroup.com