Versions Compared

Version Old Version 5 New Version 6
Changes made by

Gergely Szikszay-Molnár

Andras Bencsik

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Dermus Limited Liability Company
Effective from: 24 May 20232 January 2024

When using our SkinScanner Capture and/or SkinAid Catalog web application(s), it is necessary for us to process certain personal data of
yours. We will inform You on the details of such processing and the rights that You may exercise in
connection therewith in this Privacy Policy.

...

  • You have the right to object against our data processing any time in case such processing is based
    on “legitimate interest,” as indicated below.

  • Definitions not specified in this Privacy Policy shall have the meaning as set out in the Agreement
    or the SkinAid Dermus T&C. Please make sure that You are familiar with such definitions.

  • Please contact us first if you have any concern regarding our data processing.

...

b. No processing of patient personal data: Dermus will only process your personal data if such processing has a specific purpose and an appropriate legal basis as set out in this Privacy Policy. Dermus does not process personal data of the Captured Data’s subject (the “patient”). Only non-identifiable patient data may be uploaded to the SkinAid Catalogue Catalog (e.g., year of birth, sex, other associated metadata). Customer shall be solely responsible for any data processing which is the result of linking non-identifiable patient data recorded in the SkinAid Catalogue Catalog with other patient data recorded separately by Customer/User or a third party, resulting in the (potential) identification of an actual patient.

...

d. Transfer of personal data: Dermus is entitled to transfer your personal data to (i) its trusted data processors (acting on behalf of Dermus); and to (ii) its legal representatives (acting as a sole data controllers) if pursuing legal claims. The data storage and hosting service providers, indicated in the SkinAid Dermus T&C, act as sole data controllers in accordance with their own privacy policies.

...

III. Purposes of processing

a. Registration (creating an account Account either in the SkinScanner Capture or in the SkinAid Catalog web application):

Purpose:

creating an Account for general use of the SkinScanner Capture and/or SkinAid Catalog web application(s) and the Service

Legal basis:

  • performance of contract (in case You are the Customer);

  • legitimate interest of Dermus (in case You act on behalf of Customer)

Storage period:

until the deletion of Account

Categories of personal data:

  • prefix, surname, first name;

  • specialization;

  • company/institute;

  • city/town, country;

b. Providing the Service:

Purpose:

providing customer service and technical support during the use of the Service

Legal basis:

  • performance of contract (in case You are the Customer);

  • legitimate interest of Dermus (in case You act on behalf of Customer)

Storage period:

until the deletion of Account

Categories of personal data:

  • name, 

  • e-mail address, 

  • user/usage analytics of the SkinScanner Capture and/or SkinAid Catalog web application(s) in connection with the reported error

c. Processing metadata concerning the User:

Purpose:

mandatory retainment of metadata which is being generated when using encrypted communication in order to transfer such metadata upon the request of the competent authority

Legal basis:

compliance with a legal obligation (i.e., Section § 13/B of Hungary’s Act CVIII of 2001 on Electronic Commerce and on Information Society Services; the “E-commerce Act”)

Storage period:

1 year starting from the generation of metadata [pursuant to subsection (1) of § 13/B of the E-commerce Act]

Categories of personal data:

  • classification of the SkinScanner Capture and/or SkinAid Catalog web application(s),

  • basic identification data of the User and User ID, 

  • starting and ending dates of using the Service,

  • IP address and port number used for Registration and accessing the Service

d. Enforcement of legal claims:

Purpose:

pursuing legal claims by Dermus if the Agreement, the

SkinAid

Dermus T&C or provisions regarding the Intended Use have been breached by the User

Legal basis:

legitimate interest of Dermus

Storage period:

in relation to that specific legal dispute:

  • until the legal claims of Dermus can no longer be pursued by virtue of law or

  • until that specific legal dispute is closed with a decision which is not subject to appeal or other form or remedy

whichever happens first

Categories of personal data:

  • any of the above-mentioned categories of personal data and,

  • all relevant personal data of the User

which are necessary to process for Dermus in order to pursue legal claims, seek judicial remedy or otherwise enforce its legal claims.

IV. Your rights relating of our data processing

You can exercise the following rights anytime by sending an e-mail to privacy@dermusvision.com. Dermus has the right to ask for further information to duly identify the requesting party, or to charge fee for unfounded or excessive requests.Dermus strive strives to fulfil your request within 30 days, although Dermus may prolong this by an extra 2 months maximum in case of extensive requests. Dermus will notify You if your request cannot be fulfilled for any reason.

...

b. Right to rectification: You may instruct us to correct or amend your personal data in case it is recorded incorrectly or incompletely.

c. Right to be forgotten: You may request the erasure of certain or all of your personal data. Dermus will erase your personal data automatically if the legal basis or the storage period of the personal data in question has been terminated.

...