Last updated: 26 October 2026
This policy explains how we handle personal data on principlesfororalhealth.com, including the forms where you request the Principles for Oral Health Report or webinar, the “Join us” subscription form, and the sign-up forms in our LinkedIn and Meta (Facebook, Instagram) ads.
1. Who we are
The controller of your data is Fundación Española de Periodoncia e Implantes Dentales (SEPA Foundation), tax ID G86259363, C/ Antonio López Aguado 4, 28029 Madrid, Spain.
Contact for any privacy question: sepa@sepa.es.
Principles for Oral Health is a SEPA Foundation initiative sponsored by LISTERINE® (Kenvue). The sponsor does not receive your personal data.
2. What data we collect
- Details you give us in our forms: first name, last name, email address, country and professional profile (dentist, dental hygienist or other dental professional).
- Details we receive from LinkedIn or Meta: if you sign up through a form inside a LinkedIn or Meta ad, the platform sends us the same details you entered there.
- Your choices: whether you agreed to receive our emails, and when and where you did so, so we can prove your consent.
- Email activity: whether you open our emails and click their links.
- Browsing data: only if you accept cookies, data about your visit collected by the technologies described in our Cookie Policy.
We do not ask for health data or any other special category of data.
3. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Send you the report or webinar you requested | Your request (Art. 6(1)(b)) |
| Send you emails about SEPA courses, webinars and other activities, if you ticked the box | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Measure our campaigns and show you relevant ads on LinkedIn, Meta and Google | Your consent through the cookie banner (Art. 6(1)(a)) |
| Answer questions you send us | Your request (Art. 6(1)(b)) |
| Keep a record of your consent and meet our legal obligations | Legal obligation (Art. 6(1)(c)) |
If you do not tick the box, we only use your details to send you what you asked for.
4. Who receives your data
We do not sell your data, and we do not share it with the sponsor, Kenvue (LISTERINE®), or with any other company for its own purposes.
The following service providers process data on our behalf, under a data processing agreement and only following our instructions:
- NJ Logistic and Conference Services – Evomeet S.L. (Spain): manages our advertising campaigns and email sending.
- Mailchimp (Intuit Inc., USA): email delivery.
- Raiola Networks, S.L. (Spain): website hosting.
If you accept advertising cookies, Meta Platforms Ireland Ltd., LinkedIn Ireland Unlimited Company and Google Ireland Ltd. receive data about your visit and act as joint controllers with us for that collection. Their own privacy policies apply to how they use it afterwards.
We may also disclose data to public authorities or courts when the law requires it.
5. International transfers
Mailchimp, and the parent companies of Meta, LinkedIn and Google, are based in the United States. Transfers to them rely on the EU-US Data Privacy Framework, under which these companies are certified and, as a fallback, on the European Commission’s Standard Contractual Clauses. Transfers between the EU and the United Kingdom rely on the European Commission’s adequacy decision for the UK.
6. How long we keep your data
- If you only requested the report or webinar: 12 months after the campaign ends, then we delete it.
- If you agreed to receive our emails: until you unsubscribe or withdraw your consent.
- Proof of consent: for as long as we may need it to defend against a claim.
- Cookie data: for the period shown in our Cookie Policy.
7. Your rights
You can at any time:
- access your data and get a copy of it;
- correct inaccurate data;
- ask us to delete it;
- object to or ask us to restrict its use;
- receive it in a portable format;
- withdraw your consent, without affecting what we did before you withdrew it.
To exercise these rights, email sepa@sepa.es or write to the address in section 1. We will answer within one month. We will only ask for proof of identity if we have reasonable doubts about who is making the request.
If you are not satisfied with our answer, you can complain to the Spanish Data Protection Agency (www.aepd.es). If you live in the United Kingdom, you can also complain to the Information Commissioner’s Office (ico.org.uk). In other EU countries, you can contact your local data protection authority.
8. Unsubscribing
Every email we send includes an unsubscribe link. You can also email sepa@sepa.es with the word UNSUBSCRIBE. We process requests within 10 working days at most.
9. Cookies
We only use advertising and measurement technologies from LinkedIn, Meta and Google if you accept them in the cookie banner. You can change your choice at any time through the “Cookie settings” link at the bottom of every page. See our Cookie Policy for details.
10. Visitors from the United States
We do not sell your personal information. Advertising cookies are only used with your consent, which you can withdraw at any time through “Cookie settings”. The rights in section 7 are available to you whatever your country of residence.
11. Changes to this policy
We may update this policy when the law or our activities change. We will publish the new version on this page with its date, and will tell you by email about any significant change that affects how we use your data.