Doctors login

Privacy Policy

Subject of the Privacy Policy

The website at (hereinafter "Website") is operated by Croma Aesthetics Canada (500 King Street West Suite 300, Toronto, Ontario M5V 1L9, Canada) (hereinafter “Croma”). 

The protection of your privacy when you use our Website is an important concern to us. This Policy provides information on which personal information (as defined below in the section Definition of Personal Information) will be collected by us during your visit to our Website and for what purpose, how we use the collected Personal Information, to whom we disclose the personal information and what your rights are regarding the collected Personal Information.

We have taken appropriate technical and organizational measures to ensure that thePersonal Information Protection and Electronic Documents Act(PIPEDA), as well as other applicable substantially similar data protection laws and standards are observed both by us as well as by third party service providers.

This Website is exclusively targeted to users who are older than 14 years of age. If you are under the age of 14, please do not use the Website, and if you are over the age of 14 but under the age of majority in the province in which you reside, you should use the Website with the involvement and permission of a parent or legal guardian. If you are a parent or guardian and believe we may have collected information about a child, please contact us as described in the "Contact Us" section, below. 

This Privacy Policy is limited to our Website and does not apply to websites of third-parties, including service providers, which can be called up via this Website. We have no influence on the personal information handling practices by such third-parties and do not provide any warranty nor accept liability in connection with such websites.

By using this Website, you declare your consent to the collection, use and disclosure of your Personal Information in accordance with this Privacy Policy.

Definition of Personal Information

When used in this Privacy Policy, and consistent with PIPEDA, Personal Information means “any information about an identifiable individual”. This may include, for example, your name, contact information, email-address. It may also include other types of more technical information such as IP addresses, browser history (pages accessed, date of access, location when accessed), but only when this information can identify you as an individual. Personal Information that is aggregated and cannot be associated with an identifiable individual is not considered to be Personal Information.

Collection and use of personal information 

You can generally use our Website without disclosing your Personal Information. Information on the operating system, browser, your IP address, the previous website called up by you (“referrer URL”) and the date of your visit to our Website are collected automatically by means of cookies during your visit for the exclusive purpose of statistical analysis of our online presentation. We collect this data solely for statistical purposes to be able to further optimize our Website. The collecting and temporary storage takes place exclusively in anonymized form without permitting any conclusions as to your identity in the course of this use.

In general, Personal Information will only be collected if you provide it, for example, in the course of a registration or by sending E-mails, and will only be used by us when needed to enable your use of our Website and, subject to your right to withdraw consent, to send you personalized promotions and special offers, and to inform you about our brands, products, events, or other promotional purposes. 

If you have applied for employment with Croma through the Website, the personal information submitted with your job application will be used for recruitment and other customary human resources purposes. For example, we may send you information about new job opportunities within Croma as well as other career development resources.

Google Analytics 

Our Website uses Google Analytics, an advertising analysis service of Google Inc. ("Google"). Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that enable an analysis of the website utilization by you. The information generated by the cookie about your utilization of this website is generally transmitted to and saved on a server of Google in the USA. However, because of the IP anonymization that is activated on this Website (“anonymizeIP”), your IP address will be truncated beforehand by Google (so-called IP masking). The complete IP address will only be transmitted in exceptional cases to a Google server in the USA and it will be truncated there before further processing. Croma requires that Google use this information in order to analyze your utilization of the website, compile reports about website activities, and perform additional services for Croma, which relate to the website utilization and internet use. The IP address transmitted from your browser in the context of Google Analytics will not be combined with other data of Google. You can prevent the storing of the cookies by a corresponding setting of your browser software; however, we point out that you might not be able to use all functions of this website to full extent in that case. In addition, you can prevent the collecting of the data that is generated by the cookie and relates to your utilization of the website that (incl. your IP address) from being transmitted to Google, as well as the processing of this data by Google by downloading and installing the browser plug-in from the following link (

Doctor’s Login

To view contents on our Website, which are intended exclusively for physicians, you have to register with us through the “Doctor’s Login” feature, by specifying your name and E-mail address and confirming that you are a practicing physician. This Personal Information will be stored in our database for the purpose of later processing on login and verification that your statement has been obtained and documented.

Newsletter and information about events

Additionally, you can also tell us if you would like to receive a newsletter and if you wish to receive information about future events.

If you sign up for our newsletter with your E-mail address, we will use this E-mail address for our own advertising purposes until you unsubscribe from the newsletter, in compliance with Canada’s Anti-Spam Legislation (also known as CASL). Unsubscribing from the newsletter is possible at any time by clicking the corresponding link in the respective newsletter or by sending an E-mail to stating the accordant wish.


When using our Website and registering as physician, data will be stored automatically in our logfiles, which we receive from your browser during the visit (a browser is, for example, Internet Explorer, Firefox, Safari, etc.) This means that we know the IP address and that a cookie will be created automatically on your computer. These small files are pure information carriers that serve to recognize your browser, and optimize and simplify the use of our online offer. No viruses are produced, the computer will not be attacked and you will not be identified personally or be phished.

This cookie enables us to store your E-mail address, so that you will be recognized and logged in automatically on your next visit.

Of course, you can also view our Website without cookies. If you do not want that we recognize your computer, you can prevent the storing of cookies on your hard drive by deactivating the storing of cookies in your browser settings. To find out how this works exactly, please refer to the instructions of your browser manufacturer. If you do not accept any cookies, however, this can result in functional limitations of our offers.

Social plug-ins 

Our Website can use so-called social plug-ins ("Plugins") of social networks, such as Facebook and Instagram, operated by third parties ("Providers"). 

When you call up a website that contains Plug-ins, your browser will establish a direct connection to the servers of the respective Provider. The content of the Plug-in is transferred by the respective Provider directly to your browser and integrated by it in the Website. By embedding the Plug-in, the corresponding Provider receives information that your browser has called up our Website. This takes place regardless of whether you have a profile with the relevant Social Network or are currently logging in.

If you are logged into the respective Social Network, it is able to attribute the visit of our website to your profile on the respective Social Network. If you interact with the Plug-in, for example, with the “Like” button of Facebook or if you enter a comment, the corresponding information will be transmitted from your browser directly to the relevant Provider where it will be stored.

You can find information in the respective Provider’s data privacy policies regarding the purpose and scope of the Personal Information collection, the further processing, and use of the data by the respective Provider, as well as your rights in this regard and optional settings for the protection of your privacy.

Croma for Creators

If you register to our customer loyalty program Croma For Creators (, you consent to Croma processing your Personal Information deriving from the registration (name, birthdate, sex, title, address, email-address, phone number, fax number, website) for the purposes of conduction of the program, customer service and Croma’s marketing, to the extent permitted by law. 

Google Maps

For the map display on our Website, we use Google Maps (controller: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Through the use of Google Maps, information about the use of this Website including your IP address can be transmitted to Google.  

When you call up a sub-page of our internet appearance that contains Google Maps, your browser will establish a direct connection to the servers of Google. The content of the map is transferred by the Google directly to your browser, which integrates it in the Website. We therefore have no influence on the scope of the data collected by Google this way. 

You can find details on the purpose and scope of the data collecting, the further processing, and use of the data by Google, as well as your rights in this regard and optional settings for the protection of your data privacy in Google’s data privacy policies at:

Disclosure of personal information to third parties

Your data, including Personal Information will be stored on the servers of Croma, and be exchanged and used within the limits of the described purposes and applicable law by the companies affiliated in the Croma Group (these include: Croma-Pharma GmbH (Austria), Croma-Pharma GmbH, Croma GmbH, Croma Australia Pty Ltd, Croma Deutschland GmbH, Croma Pharma Produtos Medicos Ltda, Croma Aesthetics Canada Ltd., Croma Schweiz GmbH, Laboratorios Croma Estetica, SL, Croma France SASU, Croma Nederland B.V:, Croma-Pharma Sp. Z o.o., Croma Pharma Romania SRL, Croma USA Inc.), provided that these undertake to process the data in accordance with this Privacy Policy and the applicable data protection law, and thereby guarantee an equivalent protection of your Personal Information. 

We may share your personal information when authorized by law or as follows:

  • Third-party service providers.We may hire third-party service providers to perform services on our behalf. We provide them with a limited amount of information which is necessary in order for them to provide the services required. They are contractually prohibited from using the information for purposes other than to facilitate and carry out the services they have been engaged to provide, and are not permitted to disclose this information to others. These service providers must comply with this Privacy Policy and the applicable data protection law.
  • As permitted or required by law.We may disclose your information if we believe that the disclosure is necessary to enforce our agreements or policies, or if we believe that the disclosure will help us protect the rights, property, or safety of Croma or our customers, partners or another organization, or as otherwise permitted by applicable law. From time to time, Croma may also be compelled to disclose personal information in response to a law, regulation, court order, subpoena, valid demand, search warrant, government investigation or other legally valid request or enquiry. 
  • Business transaction.If we become involved with a merger or another situation involving the transfer of some or all of our business assets, we may share your information with business entities or people involved in the negotiation or transfer. However, in the event the transaction is completed, your personal information will remain protected by applicable privacy laws. In the event the transaction is not completed, we will require the other party not to use or disclose your personal information in any manner whatsoever and to completely delete such information.

Your Personal Information will not be disclosed to third parties beyond this, unless you have provided your consent beforehand. 


We store Personal Information only for as long as it is required to fulfil the purpose for which it has been collected, except as otherwise required or permitted by law, after which it is destroyed or made anonymous.

Access, correction of Personal Information and withdrawing your consent

You have the right, under certain circumstances, to access and correct Personal Information we hold about you. Any such access request must be in writing.

If the collection, use or disclosure of your Personal Information was based on your consent, you may withdraw your consent at any time. 

In order to access your Personal Information, request a correction of your Personal Information or withdraw your consent, please send an email to specifying “Change of customer data at homepage” in the subject line. 

Personal Information Outside of Canada

Your Personal Information may be stored on servers outside of Canada, such as the European Union / the European Economic Area and therefore may be available to government authorities under lawful orders and laws applicable there. 

Change of this Privacy Policy

The perpetual further technical development of the internet and any potential changes in the legal framework conditions may require adjustments to our Privacy Policy from time to time. We therefore reserve changing this Privacy Policy accordingly. Changes will apply from publication of the changed Privacy Policy on our Website. By continuing the use of this Website, you declare your agreement with the changes. We will notify you of any modifications to this Policy that might materially affect the way we use or disclose your personal information prior to the change becoming effective by means of a message on this Website.

Contact us

If you have questions, concerns or complaints regarding this Privacy Policy or the personal information that Croma has about you or that it may have disclosed to third parties, please contact:

Manny Kapur
Managing Director
Mobile. +1 416 271-7575



Contents of external websites to which we refer directly or indirectly in our web appearance (by means of “hyperlinks” or “deep links") are outside of our sphere of control and responsibility and they are not appropriated by us. However, we can declare that we presume at the time when the respective link is that no illegal contents are contained on the linked websites. We have no influence whatsoever on the current and future design or the contents of the linked pages and the copyrights authorization in this regard. For this reason, we expressly disclaim any contents of any linked pages that were changed after the link was set. This determination applies to all links and references contained in our online appearance. Solely the provider of the linked page is liable for illegal, false or incomplete contents and in particular, for any damages that arise from the use of the information presented on the linked website. If we take notice of any illegal, criminal or false contents on websites that we link to, we will remove the link to them.

Please note that both the English and French versions of this Privacy Policy have equal legal value.