Dear user of this app,
The protection of your personal data is not only important to you, but also to us, the persons jointly responsible for the "dermanostic" app (hereinafter "we", "us"). We appreciate your trust that we will handle your personal data conscientiously and in accordance with the law. Your data will be treated confidentially by us.
With this data protection notice, we would like not only to comply with our legal obligations under Art. 13 and 14 DS GVO, but also to describe to you in an understandable way what personal data is processed when you use this app and how we handle it. Dermanostic GmbH processes and uses personal data that is processed during the installation and use of the app in compliance with the data protection regulations applicable in the Federal Republic of Germany.
The persons responsible for the processing pursuant to Article 24 of the GDPR are the joint controllers pursuant to Article 26 of the GDPR.
Dermanostic GmbH Merowingerplatz 1 40225 Düsseldorf
and
Practice Dr. Lang - Specialist for Dermatology Merowingerplatz 1 40225 Düsseldorf
You can contact either party with your concerns at any time using the contact details above or by email to datenschutz@dermanostic.com.
In our Notes on joint responsibility we explain the division of tasks between the jointly responsible parties and who fulfils which data protection obligations.
You can contact the data protection officer of the jointly responsible party of the app "dermanostic" by e-mail to datenschutzbeauftragter@dermanostic.com.
In this section, we inform you which of your data we process as part of the installation of our app on your smartphone and each time you open the dermanostic app. We explain which of your information is used for your login to the dermanostic app and the management of your user account. In addition, we explain which of your data we process in the event of error messages arising when using the app, in order to rectify them immediately.
This processing serves the following purpose: Ensuring the smooth operation of the app.
We process the following categories of data that can be related to you: Connection data (access data and device data).
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is Art. 6 (1) UAbs. 1 lit. f GDPR. Our legitimate interest is to ensure the smooth operation of the app.
The legal basis of Dr. Lang's practice for this processing of the above mentioned data relating to you is Article 6 (1) UAbs. 1 lit. f GDPR.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is 30 days.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is 30 days.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
In accordance with Article 21 GDPR, you have the right to object to the processing of data relating to you described above if there are reasons arising from your particular situation or if your objection is directed against direct marketing.
You can exercise your right to object by sending an email to datenschutz@dermanostic.com (datenschutz@dermanostic.com).
This processing serves the following purpose: Ensuring the smooth operation of the app.
We process the following categories of data that can be related to you: connection data, installed version of the app, system information.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is Art. 6 (1) UAbs. 1 lit. f GDPR. Our legitimate interest is to ensure the smooth operation of the app.
The legal basis of Dr. Lang's practice for this processing of the above mentioned data relating to you is Article 6 (1) UAbs. 1 lit. f GDPR.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is two months.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is two months.
The above data relating to you will be transmitted to Google Ireland Ltd., Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, and Google LLC, 1600 Amphitheatre Pkwy., Mtn. View, CA 94043, USA and Adjust GmbH, Saarbrücker Str. 37a, 10405 Berlin.
Your data will be transferred to the following third countries without an appropriateness decision: USA. The legal basis for transferring your data to the above-mentioned third countries without an appropriateness decision is standard contractual clauses in accordance with Article 46 GDPR. The company offers appropriate data protection guarantees, which can be < https://firebase.google.com/terms/crashlytics-app-distribution-data-processing-terms/ > viewed at.
In accordance with Article 21 GDPR, you have the right to object to the processing of the data relating to you described above if there are reasons arising from your particular situation or if your objection is directed against direct marketing.
You can exercise your right of objection at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
This processing serves the following purpose: Security of processing (user administration).
We process the following categories of data that can be related to you: Login data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is Art. 6 (1) UAbs. 1 lit. f GDPR. Our legitimate interest is the security of processing.
The legal basis of Dr. Lang's practice for this processing of the above mentioned data relating to you is Article 6 (1) UAbs. 1 lit. f GDPR.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is 24 hours or until you log out of the app or until you enter the PIN incorrectly three times, reset your PIN or delete your user account.
The storage period of Praxis Dr. Lang for this processing of the above-mentioned data relating to you is 24 hours or until you log out of the app or until you enter the PIN incorrectly three times or until you reset the PIN or until your user account is deleted.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
In accordance with Article 21 GDPR, you have the right to object to the processing of the data relating to you described above if there are reasons arising from your particular situation or if your objection is directed against direct marketing.
You can exercise your right of objection at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
This processing serves the following purpose: Confidentiality of processing.
We process the following categories of data that can be related to you: Access data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is Art. 6 (1) UAbs. 1 lit. f GDPR. Our legitimate interest is the security of processing.
The legal basis of Dr. Lang's practice for this processing of the above mentioned data relating to you is Article 6 (1) UAbs. 1 lit. f GDPR.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is three years.
The above data relating to you will be transmitted to Dermanostic GmbH.
In accordance with Article 21 GDPR, you have the right to object to the processing of the data relating to you described above if there are reasons arising from your particular situation or if your objection is directed against direct marketing.
You can exercise your right of objection at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
This processing serves the following purpose: Security of processing (user administration).
We process the following categories of data that can be related to you: user account data (e-mail address), session data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is Art. 6 (1) UAbs. 1 lit. f GDPR. Our legitimate interest is the security of processing.
The legal basis of Dr. Lang's practice for this processing of the above mentioned data relating to you is Article 6 (1) UAbs. 1 lit. f GDPR.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
In accordance with Article 21 GDPR, you have the right to object to the processing of the data relating to you described above if there are reasons arising from your particular situation or if your objection is directed against direct marketing.
You can exercise your right of objection at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
In the following section, you can find out which of your personal data we process when you seek treatment from one of our dermatologists. We will also tell you which data we transfer to which people in case you would like to have your prescription sent to a pharmacy near you or your medication to your home. We will inform you which of your data is used to pay for your treatment and when the costs are covered by your health insurance company. Here you can find out which of your data we use to find out how successful your treatment by us was after around 6-8 weeks. Last but not least, information about evaluation requests is included here.
This processing is used to achieve the following purpose: Teledermatological treatment.
We process the following categories of data that can be related to you: patient master data, treatment data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with consent to the processing of health data in accordance with Article 9 (2) (a) GDPR.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with Article 9 (2) lit. h Var. 3 (medical diagnosis) and Var. 6 (treatment contract with the Dr. Lang practice) GDPR in conjunction with Article 9 (3) GDPR.
The processing of the above-mentioned data relating to you is necessary for your teledermatological treatment. The “dermanostic” app requires access to the camera on your device to create images of your skin changes. If you want to upload pictures of your skin changes from your photo gallery, the “dermanostic” app requires access to your memory. If you do not provide us with the above data relating to you, we will not be able to process your request.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is ten years after the treatment has been completed.
The above-mentioned data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn and DeepL, Maarweg 165, 50825 Cologne.
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can withdraw your consent to this processing activity at any time in your account settings by deleting your user account.
This processing is intended to achieve the following purposes: Information about relevant events in the context of teledermatological treatment (completion of the diagnosis of an inquiry submitted by you, the possibility of receiving a prescription, reminders of outstanding payments, inquiries from the doctor treating you).
We process the following categories of data relating to you: user identification number, content of push notifications.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with consent to the processing of health data in accordance with Article 9 (2) (a) GDPR.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with Article 9 (2) lit. h Var. 3 (medical diagnosis) and Var. 6 (treatment contract with the Dr. Lang practice) GDPR in conjunction with Article 9 (3) GDPR.
The processing of the above-mentioned data relating to you is necessary for your teledermatological treatment. If you do not provide us with the above data relating to you, we will not be able to process your request.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The above-mentioned data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn, Apple Inc., 1 Apple Park Way, Cupertino, CA, USA and Google LLC, 1600 Amphitheatre Pkwy. Mtn. View, CA 94043, USA.
Your data will be transferred to the following third countries without an appropriateness decision: USA. The legal basis for transferring your data to the above-mentioned third countries without an appropriateness decision is standard contractual clauses in accordance with Article 46 GDPR. The company offers appropriate data protection guarantees, which can be viewed upon request at datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can revoke your consent to this processing activity at any time on Apple devices under: Settings > dermanostic > Notifications; and for Android devices under: Settings > Applications or apps > dermanostic > by unchecking the “Notifications” box.
This processing is used to achieve the following purposes: Finding and selecting pharmacies to which prescriptions can be sent directly from the DERMANOstic app.
We process the following categories of data that can be related to you: the data you entered in the search field when making the search query, target pharmacy, postal address of the target pharmacy, fax number of the target pharmacy.
The legal basis of Dermanostic GmbH for this processing of the above mentioned data relating to you is consent to the transmission of prescriptions in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Art. 9 para. 2 Upara. 1 lit. a GDPR in conjunction with exemption of Dr. Lang's practice of confidentiality with regard to the recipient pharmacy.
The legal basis of Dr. Lang's practice for this processing of the above mentioned data relating to you is consent to the transmission of prescriptions in accordance with Art. 6 (1) UAbs. 1 lit. a GDPR in conjunction with Art. 9 (2) UAbs. 1 lit. a GDPR in conjunction with the exemption of Dr. Lang's practice of confidentiality with regard to the recipient pharmacy.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is ten years after completion of the treatment.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is ten years after the treatment has been completed.
The above data relating to you will be transmitted to Google Ireland Ltd., Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland as well as Google LLC, 1600 Amphitheatre Pkwy., Mtn. View, CA 94043, USA. Your prescription details will be sent to the pharmacy you have selected.
Your data will be transferred to the following third countries without an appropriateness decision: USA. The legal basis for transferring your data to the above-mentioned third countries without an appropriateness decision is standard contractual clauses in accordance with Article 46 GDPR. The company offers appropriate guarantees for data protection, which < https://business.safety.google/controllerterms > can be < https://business.safety.google/gdprcontrollerterms/sscs/eu-c2/ > viewed at: i.V.m.
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can withdraw your consent to this processing activity at any time in your account settings by deleting your user account.
This processing serves the following purpose: For the direct delivery of medicines by post to the patient.
We process the following categories of data that can be related to you: Your master data, prescription data and contact details of the prescriber.
The legal basis of Dermanostic GmbH for this processing of the above mentioned data relating to you is consent to the transmission of prescriptions in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Art. 9 para. 2 Upara. 1 lit. a GDPR in conjunction with exemption of Dr. Lang's practice of confidentiality with regard to the recipient pharmacy.
The legal basis of Dr. Lang's practice for this processing of the above mentioned data relating to you is consent to the transmission of prescriptions in accordance with Art. 6 (1) UAbs. 1 lit. a GDPR in conjunction with Art. 9 (2) UAbs. 1 lit. a GDPR in conjunction with the exemption of Dr. Lang's practice of confidentiality with regard to the recipient pharmacy.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is ten years after completion of the treatment.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is ten years after the treatment has been completed.
If you have selected “Delivery by Shop Pharmacies” to ship your medicines, the above-mentioned data relating to you will be transmitted to Shop-Apotheke B.V., Erik de Rodeweg 11-13, 5975 WD Sevenum, the Netherlands.
If you have selected “Delivery by apo.com (www.apo.com)” to ship your medicines, the above data will be sent to APO Pharmacy BV, Express 2, 6921 RB Duiven, the Netherlands.
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can withdraw your consent to this processing activity at any time in your account settings by deleting your user account.
This processing is intended to achieve the following purpose: Payment for teledermatological treatment.
We process the following categories of data that can be related to you: Payment data and, when paying via PayPal, PayPal user master data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with consent to the processing of health data in accordance with Article 9 (2) (a) GDPR.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with Article 9 (2) lit. h Var. 3 (medical diagnosis) and Var. 6 (treatment contract with the Dr. Lang practice) GDPR in conjunction with Article 9 (3) GDPR.
The processing of the above-mentioned data relating to you is necessary for payment processing as part of the contract you have concluded with us for the use of our app. If you do not provide us with the above-mentioned data relating to you, your user contract with us cannot be carried out.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is three years.
The above data relating to you will be transmitted to Stripe (payment by credit card or ApplePay), Riverty (payment via SEPA or invoice) or PayPal, depending on the payment method selected.
Your data will be transferred to the following third countries without an appropriateness decision: USA. The legal basis for transferring your data to the above-mentioned third countries without an appropriateness decision is standard contractual clauses in accordance with Article 46 GDPR. The company offers appropriate data protection guarantees, which can be viewed upon request at datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can withdraw your consent to this processing activity at any time in your account settings by deleting your user account.
This processing serves the following purpose: Payment processing by Dermanostic GmbH.
We process the following categories of data relating to you: billing data, consent data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is the consent of the patient user to the app usage agreement in accordance with Art. 6 para. 1 lit. b GDPR in conjunction with consent to the processing of health data in accordance with Art. 9 para. 2 lit. a GDPR.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with Article 9 (2) lit. h Var. 3 (medical diagnosis) and Var. 6 (treatment contract with the Dr. Lang practice) GDPR in conjunction with Article 9 (3) GDPR.
It is necessary to process the above-mentioned data relating to you because documenting the consent status is required by law. If you do not provide us with the above-mentioned data relating to you, we will not be able to carry out the above-mentioned processing.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is six years.
The above data relating to you will be transmitted to Dermanostic GmbH.
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can withdraw your consent to this processing activity at any time in your account settings by deleting your user account or in the respective patient profile by deleting the insurance and insurance number details.
This processing serves the following purpose: Payment via Riverty.
We process the following categories of data relating to you: billing data, consent data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is consent to the transfer of billing data to Riverty in accordance with Article 6 (1) UAbs. 1 lit. a GDPR in conjunction with Article 9 (2) UAbs. 1 lit. a GDPR.
It is necessary to process the above-mentioned data relating to you because documenting the status of consent is required by law. If you do not provide us with the above-mentioned data relating to you, we will not be able to carry out the above-mentioned processing.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is six years.
The above-mentioned data relating to you will be transmitted to Arvato Payment Solutions GmbH, Gütersloher Str. 123, 33415 Verl, Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can withdraw your consent to this processing activity at any time in your account settings by deleting your user account.
This processing serves the following purpose: Payment processing via statutory health insurance.
In doing so, we process the following categories of data that can be related to you: Insured master data and treatment data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with consent to the processing of health data in accordance with Article 9 (2) (a) GDPR.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to the app usage contract by the patient user in accordance with Art. 6 para. 1 UAbs. 1 lit. b GDPR in conjunction with Art. 9 para. 2 lit. h Var. 3 (medical diagnostics) and Var. 6 (treatment contract with the Dr. Lang practice) GDPR in conjunction with Art. 9 para. 3 GDPR and consent in accordance with art. Section 140a (5) SGB V
The processing of the above-mentioned data relating to you is necessary for your teledermatological treatment. If you do not provide us with the above data relating to you, we will not be able to process your request.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is ten years after the treatment has been completed. The attending physician is required by law to document the treatment in accordance with Section 630f Paragraph 1 S. 1 BGB.
The above data relating to you will be transmitted to Dermanostic GmbH, as the billing service provider for the Dr. Lang practice, and the statutory health insurance company with which you are insured.
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can withdraw your consent to this processing activity at any time in your account settings by deleting your user account or in the respective patient profile by deleting the insurance and insurance number details.
This processing is used to achieve the following purpose: patient aftercare.
We process the following categories of data that can be related to you: patient master data and treatment data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is an order processing contract in accordance with Article 28 GDPR between Dr. Lang's practice and Dermanostic GmbH as its processor.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with Article 9 (2) lit. h Var. 3 (medical diagnosis) and Var. 6 (treatment contract with the Dr. Lang practice) GDPR in conjunction with Article 9 (3) GDPR.
The processing of the above-mentioned data relating to you is necessary for your teledermatological treatment. If you do not provide us with the above data relating to you, we will not be able to process your request.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is ten years after the treatment has been completed. The attending physician is required by law to document the treatment in accordance with Section 630f Paragraph 1 S. 1 BGB.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
This processing is used to achieve the following purpose: patient support.
We process the following categories of data that can be related to you: patient master data and treatment data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is an order processing contract in accordance with Article 28 GDPR between Dr. Lang's practice and Dermanostic GmbH as its processor.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Art. 6 (1) UAbs. 1 lit. b GDPR in conjunction with Art. 9 para. 2 lit. h Var. 3 (medical diagnosis) and Var. 6 (treatment contract with the Dr. Lang practice) GDPR in conjunction with Art. 9 (3) GDPR and § 22 para.. 1 lit. b BDSG.
The processing of the above mentioned data relating to you is necessary to process your request. If you do not provide us with the above data relating to you, we will not be able to process your request.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is ten years after the treatment has been completed. The attending physician is required by law to document the treatment in accordance with Section 630f Paragraph 1 S. 1 BGB.
The above-mentioned data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn and DeepL, Maarweg 165, 50825 Cologne.
You can withdraw your consent to this processing activity at any time in your account settings by deleting your user account.
This processing is used to achieve the following purpose: quality assurance.
We process the following categories of data that can be related to you: User account data (e-mail address).
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is Art. 6 (1) UAbs. 1 lit. f GDPR. Our legitimate interest is the quality assurance of our services.
The legal basis of Dr. Lang's practice for this processing of the above mentioned data relating to you is Article 6 (1) UAbs. 1 lit. f GDPR.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
In accordance with Article 21 GDPR, you have the right to object to the processing of the data relating to you described above if there are reasons arising from your particular situation or if your objection is directed against direct marketing.
You can exercise your right of objection at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
In this chapter, you will find out how you can contact us and which of your data we process when you contact us.
This processing serves the following purpose: Support for app and web app users.
We process the following categories of data relating to you: your user ID, the identification of your treatment request and the content of your request as well as any other information that you provide to us.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with consent to the processing of health data in accordance with Article 9 (2) (a) GDPR.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with Article 9 (2) lit. h Var. 3 (medical diagnosis) and Var. 6 (treatment contract with the Dr. Lang practice) GDPR in conjunction with Article 9 (3) GDPR.
The processing of the above mentioned data relating to you is necessary for you to contact us. If you do not provide us with the above-mentioned data relating to you, we will not be able to answer your request in this way.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until the request has been processed.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is ten years after the treatment has been completed.
The above-mentioned data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn and DeepL, Maarweg 165, 50825 Cologne.
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can withdraw your consent to this processing activity at any time in your account settings by deleting your user account.
This processing is used to achieve the following purpose: answering inquiries.
We process the following categories of data relating to you: Your contact details, the content of your request.
Dermanostic GmbH's legal basis for this processing of the above-mentioned data relating to you is the implementation of necessary pre-contractual measures and fulfilment of contracts in accordance with Article 6 (1) UAbs. 1 lit. b GDPR.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is the implementation of necessary pre-contractual measures and fulfilment of contracts in accordance with Article 6 (1) UAbs. 1 lit. b GDPR.
The processing of the above mentioned data relating to you is necessary to process your request. If you do not provide us with the above data relating to you, we will not be able to process your request.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is six months, unless a contract has been concluded. The contract-relevant data is then stored in accordance with the respective processing activity.
The storage period of Praxis Dr. Lang for this processing of the above-mentioned data relating to you is six months, unless a contract has been concluded. The contract-relevant data is then stored in accordance with the respective processing activity.
The above data relating to you will be transmitted to Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia, provided that your request is addressed to our sales department.
This processing serves the following purposes: customer acquisition; contract processing; press/data protection inquiries; user and patient support.
We process the following categories of data relating to you: contact details, content of the request.
Dermanostic GmbH's legal basis for this processing of the above-mentioned data relating to you is the implementation of necessary pre-contractual measures and fulfilment of contracts in accordance with Article 6 (1) UAbs. 1 lit. b GDPR.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is the implementation of necessary pre-contractual measures and fulfilment of contracts in accordance with Article 6 (1) UAbs. 1 lit. b GDPR.
The processing of the above mentioned data relating to you is necessary to process your request. If you do not provide us with the above data relating to you, we will not be able to process your request.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is six months, unless a contract has been concluded. The contract-relevant data is then stored in accordance with the respective processing activity.
The storage period of Praxis Dr. Lang for this processing of the above-mentioned data relating to you is six months, unless a contract has been concluded. The contract-relevant data is then stored in accordance with the respective processing activity.
The above-mentioned data relating to you will be transmitted to e-mail server hosts: Neue Medien Münnich GmbH, Hauptstr. 68, 02742 Friedersdorf, Germany.
In this chapter, you will learn which of your data we process for the further development and improvement of our service. In order to be able to detect skin diseases even faster and thereby help future patients even better, we are researching artificial intelligence to support online dermatological diagnosis. We thank you for your support and trust if you consent to this processing. The processing of this data is carried out under strict confidentiality and the highest security requirements.
This processing is used to achieve the following purpose: Development of an AI-based teledermatological treatment for faster and more effective diagnosis.
We process the following categories of data that can be related to you: Photographs uploaded by you and medical history data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is consent to “product development” in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Art. 9 para. 2 Upara. 1 lit. a GDPR.
The legal basis of Praxis Dr. Lang for this processing of the above mentioned data relating to you is identical to the legal basis of Dermanostic GmbH.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can withdraw your consent to this processing activity at any time in your account settings under “Product Development.”
Read in this section which of your data we use when you click on our advertisements and our dermanostic app is installed on your smartphone or tablet. The analysis of your user behaviour helps us to improve our advertisements and our offer as well as the app based on your user behaviour. If you have subscribed to our newsletter and click on links to our exciting articles, we explain which of your data is used in the process
This processing is used to achieve the following purpose: marketing.
We process the following categories of data that can be related to you: e-mail address, access data.
Dermanostic GmbH's legal basis for this processing of the above-mentioned data relating to you is consent to subscribe to the newsletter in accordance with Article 6 (1) UAbs. 1 lit. a GDPR.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to subscribe to the newsletter in accordance with Article 6 (1) UAbs. 1 lit. a GDPR.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time using the unsubscribe link at the end of each newsletter.
You can revoke your consent to this processing activity at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can revoke your consent to this processing activity at any time within the app, via the account settings (under Unsubscribe newsletter).
This processing is used to achieve the following purpose: User behavior analysis (marketing).
We process the following categories of data relating to you: email user behavior data, device data, connection data, consent data and the number of cases submitted in the app.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is Art. 6 (1) UAbs. 1 lit. f GDPR. Our legitimate interest is marketing analysis.
The legal basis of Dr. Lang's practice for this processing of the above mentioned data relating to you is Article 6 (1) UAbs. 1 lit. f GDPR.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
In accordance with Article 21 GDPR, you have the right to object to the processing of the data relating to you described above if there are reasons arising from your particular situation or if your objection is directed against direct marketing.
You can revoke your right of objection at any time using the unsubscribe link at the end of each newsletter.
You can exercise your right of objection at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can revoke your consent to this processing activity at any time within the app, via the account settings (under Unsubscribe newsletter).
This processing is used to achieve the following purpose: Direct marketing.
We process the following categories of data relating to you: email recipient behavior data, connection data, the number of your in-app purchases, your objection status.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is Art. 6 (1) UAbs. 1 lit. f GDPR. Our legitimate interest is direct advertising.
The legal basis of Dr. Lang's practice for this processing of the above mentioned data relating to you is Article 6 (1) UAbs. 1 lit. f GDPR.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you object. Your objection status will be saved until your user account is deleted.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is until you object. Your objection status will be saved until your user account is deleted.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
In accordance with Article 21 GDPR, you have the right to object to the processing of the data relating to you described above if there are reasons arising from your particular situation or if your objection is directed against direct marketing.
You can exercise your right to object at any time using the unsubscribe link at the end of every direct marketing email.
You can exercise your right of objection at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can exercise your right of objection at any time at
exercise.
This processing is used to achieve the following purpose: Direct marketing.
We process the following categories of data relating to you: user identification number, content of push notifications.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is Art. 6 (1) UAbs. 1 lit. f GDPR. Our legitimate interest is direct advertising.
The legal basis of Dr. Lang's practice for this processing of the above mentioned data relating to you is Article 6 (1) UAbs. 1 lit. f GDPR.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you object. Your objection status will be saved until your user account is deleted.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is until you object. Your objection status will be saved until your user account is deleted.
The above-mentioned data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn, Apple Inc., 1 Apple Park Way, Cupertino, California, USA and Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Your data will be transferred to the following third countries without an appropriateness decision: USA. The legal basis for transferring your data to the above-mentioned third countries without an appropriateness decision is standard contractual clauses in accordance with Article 46 GDPR. The company offers appropriate data protection guarantees, which can be viewed upon request at datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
In accordance with Article 21 GDPR, you have the right to object to the processing of the data relating to you described above if there are reasons arising from your particular situation or if your objection is directed against direct marketing.
You can exercise your right of objection at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can exercise your right of objection at any time at
exercise.
This processing is used to achieve the following purpose: User behavior analysis (marketing).
We process the following categories of data relating to you: Your last visual contact with our ad, the number of ads you viewed and clicked on per placement, connection data, demographic data, unique advertising identifiers, unique device identifier.
Dermanostic GmbH's legal basis for this processing of the above-mentioned data relating to you is consent to marketing analysis in accordance with Art. 6 para. 1 UAbs. 1 lit. a GDPR.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to marketing analysis in accordance with Article 6 (1) UAbs. 1 lit. a GDPR.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is 18 months.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is 18 months.
The above data relating to you will be transmitted to Apple, Inc., 1 Apple Park Way, Cupertino, CA 95014, USA, Google LLC, 1600 Amphitheatre Pkwy., Mtn. View, CA 94043, USA, TikTok Information Technologies UK, 125 Kingsway, London, WC2B 6NH, UK, TikTok Technology Ltd., 10 Earlsfort Terr., Dublin, D02 T380, Ireland.
Your data will be transferred to the following third countries with an appropriateness decision: UK.
Your data will be transferred to the following third countries without an appropriateness decision: USA. The legal basis for transferring your data to the above-mentioned third countries without an appropriateness decision is standard contractual clauses in accordance with Article 46 GDPR. The company offers appropriate data protection guarantees, which can be viewed upon request at datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to datenschutz@dermanostic.com (mailto: datenschutz@dermanostic.com).
You can withdraw your consent to this processing activity at any time in your account settings under the heading “Marketing Analysis”.
Data protection grants you, as a data subject, rights regarding the handling of data relating to you. We guarantee you the implementation of your existing data subject rights vis-à-vis us. You can find out more about this in this section.
This processing is intended to achieve the following purpose: handling the rights of data subjects in accordance with data protection regulations (right to information, access, correction, deletion, restriction of processing, data portability).
We process the following categories of data that can be related to you: All categories of data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is Art. 6 (1) UAbs. 1 lit. c GDPR.
The processing of the above-mentioned data relating to you is necessary to fulfill our legal obligations. If you do not provide us with the above data relating to you, we will not be able to process your request.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is three years.
The above data relating to you will be transmitted to our external data protection officer Dr. Werner Schäfke-Zell, Caladan GmbH, datenschutzbeauftragter@dermanostic.de (mailto: datenschutzbeauftragter@dermanostic.de).
This data protection declaration is valid and has the status December 2022. As we always strive to keep up with technical progress, we continue to develop our app and its offers as well as the technical and organisational measures to protect the data relating to you. In this context, it may be necessary to adapt the data protection declaration accordingly. You can call up and print out the current data protection declaration at any time at https://www.dermanostic.com/datenschutz-app.