Privacy

Terms last modified: September 7th 2025

In this Privacy Policy, we, Corsano Health B.V. (also “CORSANO”) explain how we process your personal data as a controller under the General Data Protection Regulation (EU) 2016/679 (“GDPR”). These terms are effective as of the Effective Date (as defined above) and replace any previously applicable data processing and security terms.

Where Corsano has entered into a specific Data Processing Agreement (“DPA”) with a hospital, healthcare institution or distributor, such DPA shall take precedence over these general Terms in respect of the processing of personal data.

Patients should refer to the applicable hospital’s or healthcare provider’s privacy notice and data protection policies for information on how their personal data is processed and protected in accordance with GDPR.

How do we collect your personal data, for what purposes and on what legal grounds?

We can collect your personal data in different ways:

1. Personal data that is processed when you create a CORSANO account:

When you create a CORSANO account, we ask you to provide your email address and your name. You can choose to provide only your first name or a nickname instead of your full name if you wish.

Purposes and Legal Ground:

CORSANO needs your email address so that you can use your email address and your password to sign in to your account. The legal ground for processing your email address for this purpose is based on CORSANO’s legitimate interest in protecting the security of your account.

CORSANO also processes your email address for the purpose of sending you important information about your CORSANO products, apps or account, such as important safety information or material changes to this Privacy Policy. The legal ground for processing your email address and name for these purposes is CORSANO’s legitimate interest in providing you important safety or other information about your CORSANO products, apps or account or material changes to this Privacy Policy.

If you provide your opt-in consent to receiving marketing information from CORSANO or one of our partners, CORSANO will also process your email address for the purpose of sending you marketing information about CORSANO products and apps or those of our partners. The legal ground for processing your email address for this purpose is your consent. You may withdraw your consent at any time by changing your preferences in your CORSANO account or through the unsubscribe link at the bottom of our marketing emails.

2. Additional personal data that is processed if you choose to provide it when you create a CORSANO account:

You can add additional information to your profile, such as your gender, birthdate, height and weight.

Purposes and Legal Ground:

This information is used to calculate the calories you burn during an activity and to enable you to show the types of activities you participate in if you wish. The legal ground for processing this information for these purposes is your consent. You can withdraw your consent by deleting this information from your account profile.

3. Personal data that is processed when you choose to upload your workouts, activity data to CORSANO:

You can choose to upload workouts, activity data (e.g., steps, distance, activity time, calories burned, heart rate, sleep, location, temperature, barometer, altitude, UV index etc) from your device to your CORSANO account.

Purposes and Legal Ground:

CORSANO processes this data to enable you to analyze your activity data, see your location on your activity workout and segment maps, see your heart rate related metrics, sleep data, altitude, temperature, barometer, UV index etc.

If you choose to upload the activity data (such as steps, distance, activity time, calories burned, heart rate, sleep, etc.) from your CORSANO device to your CORSANO account and you choose to participate in Insights, then you will be presented with an Insights section in your CORSANO account in which you will be provided with recommendations and motivational messages, information and links to articles that may be of interest to you based upon your activity data, and a comparison of your activity data with anonymous aggregated activity data of others in the CORSANO community.

The legal ground for processing this information for these purposes is your consent. You can withdraw your consent by deleting this information from your account profile.

4. Personal data that is processed when you sync your CORSANO device (e.g. bracelet, watch):

When you sync your device through one of our CORSANO applications we may upload information concerning the device, such as brand name, manufacturer, serial number, model, battery level, the sync time and date, crash/diagnostic logs.

Purposes and Legal Ground:

We process this information to help identify and resolve errors or syncing issues. The legal ground for processing this information for this purpose is CORSANO’s legitimate interest in resolving errors or syncing issues and providing quality product support.

5. Personal data that is processed when you pay for our products or services:

When you pay for our products or services we process payment data such as your bank account number, payment amount, information on the invoice. 

Purposes and Legal Ground:

We process this information to process your payment and for (tax) administration purposes.

The legal ground for processing this information for this purpose is the performance of the agreement with you, CORSANO’s legitimate interest in running our business activities and complying with legal obligations.

6. Personal data that is processed in the context of a business relationship with us:

When you or the organization you work for has a business relationship with us (e.g. as a customer, supplier, service provider), we process your personal data in the context of that relationship. Some of your personal data are needed for us to comply with our legal obligations, namely financial/tax obligations or to conclude an agreement with you, for example if you provide services to us.

Purposes and Legal Ground:

We process this information to be able to communicate with you in the context of the business relationship, for the performance of the agreement with you or the organization you work for, for (tax) administration purposes, for maintaining a relationship with you or the organization you work for.

The legal ground for processing this information for this purpose is CORSANO’s legitimate interest in running our business activities, performance of the agreement with you and complying with legal obligations.

If you receive an evaluation product from us – in order for you to evaluate whether you or the organization you work for wishes to purchase CORSANO products, sections 1-4 apply to personal data you share when using the evaluation product.

If you provide your opt-in consent to receiving marketing information from CORSANO or one of our partners, CORSANO will also process your email address for the purpose of sending you marketing information about CORSANO products and apps or those of our partners. The legal ground for processing your email address for this purpose is your consent. You may withdraw your consent at any time by contacting us about this or through the unsubscribe link at the bottom of our marketing emails.

7. Cookies and Similar Technologies

We collect information through our website using cookies and similar technologies.

Purposes and Legal Ground:

To help analyze how you and other visitors navigate CORSANO websites, and compile aggregate statistics about site usage and response rates, we, with assistance from third-party analytics service providers, collect certain information when you visit our site. This information may include IP address, geographic location of the device, browser type, browser language, date and time of your request, time(s) of your visit(s), page views and page elements (e.g., links) that you click.

We may use cookies, pixel tags, web beacons, clear GIFs or other similar tools on our site or in our email messages to assist us in collecting and analyzing such information. We use this information to provide better, more relevant content on our site, to measure the effectiveness of advertisements, to identify and fix problems, and to improve your overall experience on our site. If you do not want information collected through the use of these technologies, there is a simple procedure in most browsers that allows you to automatically decline many of these technologies, or to be given the choice of declining or accepting them.

If you reside in the European Economic Area or other jurisdiction that requires us to obtain your consent to use cookies on our sites, then you will have an opportunity to give your consent and manage your cookie preferences on the sites; except that certain cookies are required to enable core site functionality, and you cannot choose to disable those cookies.

8. Analytics data from CORSANO Mobile apps

We also collect data from users about their usage of CORSANO mobile apps.

Purposes and Legal Ground:

The types of analytical information that are collected may include the date and time the app accesses our servers, app version, the location of the device, language setting, what information and files have been downloaded to the app, user behavior (e.g., features used, frequency of use), device state information, device model, hardware and operating system information, and information relating to how the app functions.

CORSANO uses this data to improve the quality and functionality of our mobile apps to develop and market products and features that best serve you and other users and to help identify and fix app stability issues and other usability problems as quickly as possible.

The legal ground for processing this analytical information is our legitimate interest in understanding how our customers interact with our products, apps and websites so we can enhance the user experience and functionality of our products, apps and websites.

Here are examples of third-party providers of analytics and similar services we currently use:

• Google Analytics is used to track site statistics and user demographics, interests and behavior on websites. We also use Google Search Console to help understand how our website visitors find our website and to improve our search engine optimization. Find out more information about how this analytics information may be used, how to control the use of your information, and how to opt-out of having your data used by Google Analytics.
• Crashlytics and Answers (Fabric) are used to help us better understand usage of the CORSANO Mobile applications to improve user experience and to identify and resolve the root causes of app crashes.

9. Social Networks

Purposes and Legal Ground:

Third-party social networks that provide interactive plug-ins or social networking features (e.g., to allow you to connect to Facebook, Google or Twitter to find friends to add as connections or to "Like" a page) on CORSANO websites or mobile apps, may use cookies or other methods (e.g., web beacons) to gather information regarding your use of our websites and apps.

The use of such information by a third party depends on the privacy policy available on that social network’s website, which we encourage you to carefully review. Such third parties may use these cookies or other tracking methods for their own purposes by relating information about your use of our site with any of your Personal Information that they may have. We may also obtain analytics information from social networks that help us measure the effectiveness of our content and advertisements on social networks (e.g., impressions and clicks).

If you reside in the European Union or other jurisdiction that requires us to obtain your consent to use cookies on our sites, then you will have an opportunity to give your consent and manage your cookie preferences on the sites; except that certain cookies are required to enable core site functionality, and you cannot choose to disable those cookies.

10. Children

We request individuals under 16 not provide personal data to CORSANO. If we learn that we have collected the personal data from a child under 16, we will take steps to delete the information as soon as possible.

With whom do we share your personal data?

We use IT service providers that process your personal data on our behalf.

We may be obliged to share your personal data with government authorities on the basis of a legal obligation.

Where do we store your personal data?

We store your personal data in the European Economic Area (EEA).

We may however also transfer your personal data to outside the EEA. If the country to which your personal data are transferred is not a country with an adequate level of personal data protection, we will ensure this is done pursuant to a transfer mechanism under the GDPR, including extra safeguards if applicable.

If you would like to receive documentation with respect to the transfer mechanism, please contact us using the contact details at the bottom of this privacy policy.

How long do we process your personal data?

We will retain your personal data as long as your CORSANO account is considered to be active. Other data will be retained as long as this is necessary for the relevant (business) relationship and after that for archiving purposes. Personal data in our financial administration is retained for a period of 7 years.

What are your rights?

If you reside in the EEA, you have the right under the GDPR (sometimes under certain conditions) to request from CORSANO access to and rectification or erasure of your personal data, data portability, restriction of processing of your personal data, the right to object to processing of your personal data, and the right to lodge a complaint with a supervisory authority.

If you have given consent for the processing of your personal data, you may withdraw your consent at any time.

If you reside outside of the EEA, you may have similar rights under your local laws.

How can you exercise your rights or contact us about your personal data?

To request access to or rectification, portability or erasure of your personal data, or to delete your CORSANO account, check your application under Settings/Consumer Rights Management.

If you live in the EEA and you wish to exercise your rights, contact our CORSANO Data Protection Officer at CORSANO HEALTH B.V. Waldorpstraat 5, 2521 CA, the Hague, the Netherlands or by email at privacy@corsano.com.

If you do not live in the EEA but you believe you have a right to restriction of processing or a right to object to processing under your local laws, please contact us using the address or email above.

Can we update this policy?

Yes, we may have to update this policy from time to time to reflect relevant changes with respect to the processing of your personal data.

The most recent version of this policy is from September 2025.