Dear user of this app, the protection of your personal data is not only important to you, but also to us, the persons jointly responsible for the app "dermanostic" (hereinafter "we", "us"). We appreciate your trust that we will handle your personal data conscientiously and in accordance with the law. Your data will be treated confidentially by us.
With this data protection notice, we would like not only to comply with our legal obligations under Art. 13 and 14 DS GVO, but also to describe to you in an understandable way what personal data is processed when you use this app and how we handle it. Dermanostic GmbH processes and uses personal data that is processed during the installation and use of the app in compliance with the data protection regulations applicable in the Federal Republic of Germany.
The persons responsible for the processing pursuant to Article 24 of the GDPR are the joint controllers pursuant to Article 26 of the GDPR.
Dermanostic GmbH Merowingerplatz 1 40225 Düsseldorf
and
Practice Dr. Lang - Specialist for Dermatology Merowingerplatz 1 40225 Düsseldorf
You can contact either party at any time with your concerns using the contact details above or contact the data protection officer of the joint controllers by email at datenschutz@dermanostic.com.
In our Notes on joint responsibility, we explain the division of responsibilities between the jointly responsible parties and who fulfils which data protection obligations.
You can contact the data protection officer of the jointly responsible party of the app "dermanostic" by e-mail to datenschutz@dermanostic.com.
In this section, we inform you which of your data we use in the context of the registration in the dermanostic app and the management of your user account.
This processing serves the following purpose: Security of processing (user administration).
We process the following categories of data that can be related to you: user account data (e-mail address), session data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is Art. 6 (1) UAbs. 1 lit. f GDPR. Our legitimate interest is the security of processing.
The legal basis of Dr. Lang's practice for this processing of the above mentioned data relating to you is Article 6 (1) UAbs. 1 lit. f GDPR.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
In accordance with Article 21 GDPR, you have the right to object to the processing of the data relating to you described above if there are reasons arising from your particular situation or if your objection is directed against direct marketing.
You can exercise your right of objection at any time by sending an e-mail to [datenschutz@dermanostic.com] (mailto: datenschutz@dermanostic.com).
In the following section, you can find out which personal data we process when you request treatment from one of our dermatologists
This processing is used to achieve the following purpose: Teledermatological treatment.
We process the following categories of data that can be related to you: patient master data, treatment data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with consent to the processing of health data in accordance with Article 9 (2) (a) GDPR.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with Article 9 (2) lit. h Var. 3 (medical diagnosis) and Var. 6 (treatment contract with the Dr. Lang practice) GDPR in conjunction with Article 9 (3) GDPR.
The processing of the above-mentioned data relating to you is necessary for your teledermatological treatment. The “dermanostic” app requires access to the camera on your device to create images of your skin changes. If you upload pictures of your skin change from your photo gallery. If you do not provide us with the above data relating to you, we will not be able to process your request.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is ten years after the treatment has been completed.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to [datenschutz@dermanostic.com] (mailto: datenschutz@dermanostic.com).
You can withdraw your consent to this processing activity at any time in your account settings by deleting your user account.
This processing is used to achieve the following purpose: patient support.
We process the following categories of data that can be related to you: patient master data and treatment data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is an order processing contract in accordance with Article 28 GDPR between Dr. Lang's practice and Dermanostic GmbH as its processor.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Art. 6 (1) UAbs. 1 lit. b GDPR in conjunction with Art. 9 para. 2 lit. h Var. 3 (medical diagnosis) and Var. 6 (treatment contract with the Dr. Lang practice) GDPR in conjunction with Art. 9 (3) GDPR and § 22 para.. 1 lit. b BDSG.
The processing of the above mentioned data relating to you is necessary to process your request. If you do not provide us with the above data relating to you, we will not be able to process your request.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is ten years after the treatment has been completed. The attending physician is required by law to document the treatment in accordance with Section 630f Paragraph 1 S. 1 BGB.
The above-mentioned data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn and DeepL, Maarweg 165, 50825 Cologne.
You can withdraw your consent to this processing activity at any time in your account settings by deleting your user account.
This processing serves the following purpose: Prescription delivery by post home to the stored patient address.
We process the following categories of data that can be related to you: Your master data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with consent to the processing of health data in accordance with Article 9 (2) (a) GDPR.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with Article 9 (2) lit. h Var. 3 (medical diagnosis) and Var. 6 (treatment contract with the Dr. Lang practice) GDPR in conjunction with Article 9 (3) GDPR.
The processing of the above data relating to you is necessary to send your prescription by post to the address you have provided. If you do not provide us with the above information relating to you, we will not be able to send your prescription by post to the address you have provided.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is ten years after completion of the treatment.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is ten years after the treatment has been completed.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to [datenschutz@dermanostic.com] (mailto: datenschutz@dermanostic.com).
``
This processing serves the following purpose: Information about relevant events in the context of the teledermatological treatment of your patients: Conclusion of an inquiry submitted by you, inquiries from the treating dermatologist.
We process the following categories of data relating to you: user identification number, content of push notifications.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with consent to the processing of health data in accordance with Article 9 (2) (a) GDPR.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with Article 9 (2) lit. h Var. 3 (medical diagnosis) and Var. 6 (treatment contract with the Dr. Lang practice) GDPR in conjunction with Article 9 (3) GDPR.
The processing of the above-mentioned data relating to you is necessary for the execution of the contract with your company.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn, Apple Inc., 1 Apple Park Way, Cupertino, CA, USA, Google LLC, 1600 Amphitheatre Pkwy. Mtn. View, CA 94043, USA, Google LLC, 1600 Amphitheatre Pkwy., Mtn. View, CA 94043, USA.
Your data will be transferred to the following third countries without an appropriateness decision: USA. The legal basis for transferring your data to the above-mentioned third countries without an appropriateness decision is standard contractual clauses in accordance with Article 46 GDPR. The company offers appropriate data protection guarantees, which can be viewed upon request at [datenschutz@dermanostic.com] (mailto: datenschutz@dermanostic.com).
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to [datenschutz@dermanostic.com] (mailto: datenschutz@dermanostic.com).
You can withdraw your consent to this processing activity at any time in your account settings by deactivating push notifications.
This processing is used to achieve the following purpose: patient aftercare.
We process the following categories of data that can be related to you: patient master data and treatment data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is an order processing contract in accordance with Article 28 GDPR between Dr. Lang's practice and Dermanostic GmbH as its processor.
The legal basis of Dr. Lang's practice for this processing of the above-mentioned data relating to you is consent to the app usage agreement by the patient user in accordance with Article 6 (1) UAbs. 1 lit. b GDPR in conjunction with Article 9 (2) lit. h Var. 3 (medical diagnosis) and Var. 6 (treatment contract with the Dr. Lang practice) GDPR in conjunction with Article 9 (3) GDPR.
The processing of the above-mentioned data relating to you is necessary for your teledermatological treatment. If you do not provide us with the above data relating to you, we will not be able to process your request.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is ten years after the treatment has been completed. The attending physician is required by law to document the treatment in accordance with Section 630f Paragraph 1 S. 1 BGB.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
In this chapter, you will learn which of your data we process for the further development and improvement of our service. In order to be able to detect skin diseases even faster and thereby help future patients even better, we are researching artificial intelligence to support online dermatological diagnosis. We thank you for your support and trust if you consent to this processing. The processing of this data is carried out under strict confidentiality and the highest security requirements.
This processing serves the following purpose: Development of an AI-based teledermatological report for faster and more effective diagnosis.
We process the following categories of data that can be related to you: Photographs uploaded by you and medical history data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is consent to “product development” in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Art. 9 para. 2 Upara. 1 lit. a GDPR.
The legal basis of Praxis Dr. Lang for this processing of the above mentioned data relating to you is identical to the legal basis of Dermanostic GmbH.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is until you withdraw your consent. We keep a deletion log for three years.
The above data relating to you will be transmitted to Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn.
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent until the withdrawal.
You can revoke your consent to this processing activity at any time by sending an e-mail to [datenschutz@dermanostic.com] (mailto: datenschutz@dermanostic.com).
You can withdraw your consent to this processing activity at any time in your account settings under “Product Development.”
Data protection gives you, as a data subject, rights over the handling of data relating to you. We guarantee that you will implement your existing data subject rights vis-à-vis us. You can find out more about this in this section.
This processing is intended to achieve the following purpose: handling the rights of data subjects in accordance with data protection regulations (right to information, access, correction, deletion, restriction of processing, data portability).
We process the following categories of data that can be related to you: All categories of data.
The legal basis of Dermanostic GmbH for this processing of the above-mentioned data relating to you is Art. 6 (1) UAbs. 1 lit. c GDPR.
The processing of the above-mentioned data relating to you is necessary to fulfill our legal obligations. If you do not provide us with the above data relating to you, we will not be able to process your request.
The storage period for Dermanostic GmbH to process the above-mentioned data relating to you is three years.
The storage period of Dr. Lang's practice for this processing of the above-mentioned data relating to you is three years.
The above data relating to you will be transmitted to our external data protection officer Dr. Werner Schäfke-Zell, Caladan GmbH, [datenschutzbeauftragter@dermanostic.de] (mailto: datenschutzbeauftragter@dermanostic.de).
This data protection declaration is valid and has the status December 2022. As we always strive to keep up with technical progress, we continue to develop our app and its offers as well as the technical and organisational measures to protect the data relating to you. In this context, it may be necessary to adapt the data protection declaration accordingly. You can call up and print out the current data protection declaration at any time at https://www.dermanostic.com/datenschutz-app.