Rules:

brush-line2

Terms and Conditions

1. About Us

Our vision is to inspire change in the health system by providing personalized skin healthcare. To ensure the highest quality of medical care, our licensed dermatologists and software proactively monitor the health of our users. All health-related data will be stored in your health record. Our approach is based on the GDPR (Article 6(1.b) and Article 9(1.h)), specifically that processing is necessary for the purposes of preventive healthcare, medical diagnosis, the provision of healthcare services, treatment, or the management of healthcare systems and services.

By using our platform, you agree and acknowledge that your personal data and health data related to the service will be processed to provide you with the highest quality dermatology services, and that all data related to your use may be stored in your health record.

Our doctors follow all General Medical Council guidelines on remote prescribing and the Essential Standards for Quality and Safety developed by the Care Quality Commission, as well as the requirements of their country of practice.

2. Company Information and Contact Details

iDerma SIA, a licensed dermatology clinic, registered at Blaumaņa iela 30. Contact: [email protected] or +371 2600 5287.

3. Privacy Policy and Cookie Policy

You can read our Privacy and Cookie Policies in the relevant sections. These policies provide details on how personal data collected by us or received from you is handled and information about the cookies used on our platform.

4. Registration

To receive a consultation with a Dermatologist, you must register for a consultation on the iDerma.lv website and submit a consultation request with your personal information.

5. Age Restrictions

Our platform is designed for patients aged 18 and over. We have the right to ask you to prove your age before confirming your right to use our platform. An adult with an account on the iDerma platform may represent another patient, provided that the right of representation is confirmed by the necessary authorizations (e.g., a Notary Public’s letter of attorney or a power of attorney through the e-Health platform) and other documents (e.g., a child’s birth certificate if the consultation is booked for the child).

When representing another person under a duly authorized mandate, the data collected on persons under the age of 18 shall be deemed to have been lawfully collected, and the person providing the information shall be responsible for ensuring that he/she has all the necessary authority to complete the consultation for the other person.

6. Our Commitment to You

We provide you with a professional, high-quality dermatology consultation service. Our doctors and engineers constantly develop new software features to provide the highest and best quality service possible based on your query information, using the latest technology.

**Commitments Made by Each of Our Doctors:**

**a) Professional Liability:** Full professional responsibility for every patient using telemedicine services, as it does for patients treated in the doctor’s usual professional environment.

**b) Compliance:** Providing a professional and transparent service in full compliance with General Medical Council guidelines on remote prescribing and in accordance with the Essential Standards for Quality and Safety, Good Medical Practice, and Guidelines issued by the Care Quality Commission.

**c) Identification:** Stating their name and Doctor’s license number when prescribing medicines.

**d) Prescribing Medicines in the Best Interests of the Patient:** Prescribing medicines only if this is the most appropriate solution for the patient and refusing to prescribe medicines if the doctor does not think such a prescription is advisable without a contact consultation.

**e) Privacy:** Taking reasonable steps to protect personal data or other information provided by the patient as set out in our Privacy and Cookie Policies.

7. Your Obligations When Using Our Services and Making Orders

**Your Responsibilities as a Patient:**

**a) Precise Information:** Provide correct and accurate answers to all questions.

**b) Registration in the Name of Another Person:** Never register or fill in a form on behalf of another person unless you are authorized to do so.

**c) Compliance with Instructions:** Read the consultation and treatment recommendations carefully before starting the treatment recommended and prescribed by our doctor; follow the instructions for taking the medication and any other instructions received from your iDerma doctor; read the package leaflet and never take any other medication without first consulting your doctor or pharmacist. If you have any questions about the prescribed medicines, please contact us and do not take the medicines until you have received the correct information from us and understand the applicable instructions.

**d) Decisions:** Accept the clinical judgment of iDerma doctors if they decide that medication is not recommended for you and that you should see a doctor. The decision of the iDerma doctor is final and no further correspondence will be answered.

**e) Notifying Your GP:** It is your responsibility to tell your GP about the medicines prescribed to you by your iDerma doctor and you should keep details of your treatment. Please note that in certain essential cases (e.g., when your health is at risk due to possible side effects of medicines, etc.) we may need to contact your GP or medical services without your consent.

**f) Medicines Protection:** Ensure that only you can access prescriptions for medicines prescribed by iDerma doctors.

**g) Expiry Date:** Ensure that you do not take prescribed medicines if they have expired.

**h) Side Effect Notification:** Inform iDerma via the consultation form if you experience any side effects from the medicine you are taking or if you think that the medicine prescribed by your iDerma doctor is not working.

8. Information and Advice

The information and advice provided by iDerma doctors are based on the information you have given us. You are responsible for the accuracy and completeness of the information you provide and acknowledge that failure to provide accurate and complete information (whether intentional or not) may adversely affect the information and advice provided to you and the prescriptions you receive, which may have consequences for which we will not be responsible.

We aim to respond to all requests for information and advice within 24 hours, Monday to Friday, excluding weekends and public holidays. In such cases, we may take up to 48 hours.

9. Decision to Prescribe Medicines

Our doctors can only make the best decision in your best interests about the use of specific medicines if they have all the information requested. Sometimes it may be necessary to ask for additional information to supplement the answers given on the medical form. For this purpose, the doctor may contact you by (mobile) phone, email, or post.

10. Prices and Payments

The currency of payment will depend on the country from which the consultation request is being made and will be the local currency. The price of the services (inclusive of taxes, unless otherwise stated) is the price shown on the order form at the time you accept the transaction for the service or product.

We make every effort to ensure that the prices on our platform are accurate, but sometimes errors can occur. If you spot an error and an overcharge is made, we will ensure that customers who have paid too much are reimbursed the difference.

11. Procedure for iDerma Telemedicine Services and Partner Services

We provide our consultations (telemedicine services) using software. The software helps us perform an initial check of the medical diagnosis data you provide as soon as you provide us with the requested data. This means that our doctors may make decisions based on automated processing of personal data for this purpose and on the assessment of certain factors relating to your health or behavior (profiling).

We will assess whether the information in the medical form or data from other data sources (e.g., similar cases of other patients, recent scientific publications, etc.) and/or your previous consultations with us are a clear reason not to provide you with specific medical advice and/or not to prescribe a medicine that is a priority for you as a consumer. Therefore, we and our partners may assess your case as a high-risk medical consultation and refuse to provide advice or prescribe medication. This is the case, for example, if the information you have provided completely prevents the prescription of a particular treatment or medicine, or if there are reasons to believe that the medical information may not be reliable. We do this to take the best possible care of your health. Our procedures and software are continuously evaluated and improved based on current healthcare regulations and scientific discoveries.

Despite this assessment, if you receive an automatic refusal of medical advice, you have the right to disagree with the decision and to express your position on the matter by contacting us. Your case will then be reassessed.

To ensure the high quality of our telemedicine services and to guarantee your convenience and the security of your data, we will allow you to use the following features and services:

**Health Account:** A health account allows direct and confidential contact with you and will be used to store information about your health, your medical consultations, prescribed medicines, and medical recommendations. The data shall be collected in such a way as to ensure their confidentiality.

**Keeping and Disclosing Your Medical History and Records:** We collect information from all your medical consultations, including the medical forms you submit, correspondence with you, information about your health, your medical records, and any comments and recommendations your doctor sends to you, so that we can provide you with the best possible health services. We also store the progress and outcome of consultation services in your health record.

**Prescription Delivery Service:** If you are given a prescription, you can order it to be delivered to you. In this case, you will have to pay not only for the medical advice but also for the prescription delivery service.

12. Your Right to Cancel the Service and Make a Complaint

**12.1.** In accordance with the provisions of sub-paragraphs 12.1 and

12.2 of these terms and conditions, you may change your mind and cancel your consultation request or ordered product and receive a refund (with certain exceptions). This right is referred to as a “right to withdraw” under the Consumer Rights Act 2015 and the Regulations on the Protection of Consumer Rights.

**12.2.** You do not have the right to cancel services that have already been provided or products that have been delivered unless we inform you otherwise. If you have used our services (e.g., consultation with a dermatologist) and have received the results or the medication prescribed by your doctor, you cannot cancel the service or the product provided or request a refund.

**12.3.** The cancellation period for the right to withdraw services shall be 14 days from the date you booked the consultation.

**12.4.** If you wish to cancel the service and receive a refund, you must inform us by sending an email to [email protected].

**12.5.** To make a complaint about our services, you can email [email protected], and we will respond within 48 hours. If the issue remains unresolved, you can escalate it to the Latvian Consumer Rights Protection Centre.

13. Intellectual Property

**13.1.** All content on the iDerma platform, including text, graphics, logos, images, audio clips, digital downloads, and software, is the property of iDerma or its content suppliers and protected by international copyright laws.

**13.2.** You may not extract and/or reuse parts of the content of the platform without the express written consent of iDerma.

14. Limitation of Liability

**14.1.** We will not be liable for any loss or damage caused by us in circumstances where there is no breach of a legal duty of care owed to you by us, such loss or damage is not a reasonably foreseeable result of any such breach, or any increase in loss or damage results from a breach by you of these terms and conditions.

**14.2.** Nothing in these terms and conditions excludes or limits our liability for death or personal injury arising from our negligence, fraud, or any other liability that cannot be excluded or limited by law.

15. Governing Law and Jurisdiction

These terms and conditions are governed by the laws of Latvia. Any disputes arising from the use of our services shall be subject to the exclusive jurisdiction of the courts of Latvia.

By using the iDerma platform, you agree to these terms and conditions. If you do not agree, please do not use our services.

For any questions or concerns, please contact us at [email protected] or +371 2600 5287.

These terms ensure a clear understanding of the services provided, the obligations of both parties, and the legal framework governing your interactions with iDerma SIA.

Privacy Policy

PLEASE READ ME

Our commitment

We are committed to using your personal data in a way that helps you with your dermatovenerology problems, to improve your skin health. We will always keep your personal data secure and will never pass it on to third parties. We will tell you clearly and openly why we collect your personal data and how we use it. In cases where you have choices or rights, we will explain them to you and respect your wishes. We have written this privacy statement in plain language to explain to you how and why we use your personal data. We hope you find it clear and simple, but if you have any doubts or questions, please do not hesitate to contact us.

ABOUT US

Company
We are iDerma SIA, the controller of the personal data we collect about you. We are registered in Latvia, company code 40203566923 and our registered address is the same as our postal address.
We provide an online clinic, consultation, treatment and prescription services for a limited number of medical problems.

Our licence
We operate under a valid licence granted by the State Service for Accreditation of Health Care Activities.

CONTACT US
Each of our clinics has designated Data Protection Officers, so if you have any questions about this privacy notice or data protection in general, or if you wish to exercise your rights, please contact us:
Email : [email protected]
Phone: +371 2600 5287

Personal data we collect about you
We may collect and use different types of personal data about you based on our relationship with you. The personal data we collect or may collect in the course of providing services to you may include special categories of data that are of a sensitive nature.

 

 

Table of personal data we collect

Personal data Where the data comes from

Identity and contact details, for example:

  • your contact details, such as your email. postal address and telephone number;
  • your identity data, such as your name and referrer;
  • the country where you live;
  • Gender;
  • consultation information;
  • family medical history;
  • health data;
  • registration details;
  • Date of birth;
  • information about any contact you have had with us, such as complaints or incidents;
  • information about how you use our products and services.
From youwhen you contact us, schedule a consultation, reply to our messages, ask for our help, communicate with us via email, or contact us on our website. email or share additional information about yourself when you use our services, subscribe to our services or register to receive them. We may collect certain data that can be used to identify you, to contact you, to ensure that we book you in for a consultation of the right type and duration, or that we need for administrative purposes and for the performance of our contract with you.

User data, including for example:

  • Information about you, such as your login information and email address, which is encrypted, as well as information about your purchases and preferences, which (information) we collect during your session on our platform
  • the resources you use, including the pages on our website that you view, information about your visit, including the links you click on our website, or the location from which you log in to your account.
From you when you use our website and when you connect to our services and applications – we may collect information about how you connect to them.

Device data, for example:

  • IP address;
  • login information;
  • browser type and version;
  • time zone provisions;
  • Types and versions of browser plug-ins;
  • operating system and platform;
  • traffic;
  • location data;
  • data, logs, text, sound, images;
  • unique device identifier (e.g. UDID, IMEI address).
From you when you use our website and when you connect to our services and applications – we may collect information about how you connect to them.

Registration data, for example:

  • name, surname;
  • el. postal address;
  • postal address;
  • phone number;
  • user code;
  • IP address.
From you when you subscribe to our service or register to receive it – we may collect certain data which may be used to identify you, to contact you or which we need for administrative purposes or to perform a contract with you.

Consultation data, for example:

  • name and other identifying information
  • family medical history;
  • health data;
  • Gender;
  • Age;
  • contact with the person booking the visit.

Information provided by other persons on your behalf

If someone books a consultation on your behalf, we will ask that person for basic information about you, which may include certain health details such as whether you have a family history of diabetes or glaucoma. This is needed to schedule you for the right type and duration of consultation. When you come in for a consultation, we will check that the information you have given us is correct.

Financial or economic data, for example:

  • bank account;
  • the results of any credit history checks we carry out on you.

Information we collect when you make payments

Details of payments you make to us when you purchase our services.

Other data, for example:

  • Feedback;
  • Comments;
  • uploaded information and other content;
  • username.

The data you provide through our forum

The personal data you upload to the system will be visible to other users. We recommend that you protect your anonymity and information so that you do not allow others to identify you.

Application details

  • Identity and contact information;
  • CV;
  • information on past and present jobs;
  • recommenders;
  • nationality and immigration status, passport and other identification and immigration information, including copies of right-to-work documents.

Personal data you have provided to us

The data you provide when you apply for a job with us, register your interest in a job with us or apply for potential jobs.

Analytical data, for example:

information such as which website you visited before visiting our website and other statistics related to our products and services.

Our servers automatically collect certain information about the use of our website and our products and services.

Data received from third countries:

  • identity information;
  • contact details;
  • health data;
  • your areas of interest and preferences.

Information we collect about you

We may collect or receive data about you from service providers and other third parties, such as our customers, professional advisors, content providers, government authorities and public sources and archives.

We may collect or receive data about you from a family member or other person representing you.

We may collect or receive data about you from doctors, other clinic staff and healthcare professionals, hospitals, clinics and other healthcare providers.

We may collect or receive data about you from any service providers who work with us to provide products or services to you.

We may collect or receive data about you from organisations that carry out customer satisfaction surveys or market research on our behalf, or that provide us with statistics and other information (for example, about your interests, purchases and household type) to help us improve our products and services.

We may collect or receive data about you from fraud detection and credit bureaus and publicly available sources, such as the edited electoral register or social networks.

We can get information from advertising agencies.

Data that we receive through technology from entities such as Google.

Social networks

Your username and any other content you disclose in your comments; questions or feedback about us.

Information we collect about you

We may collect your social media username if you interact with us on those channels so that we can better respond to your comments, questions and feedback.

Your behaviour, choices and interests

Information we collect about you

We also collect data about your interactions with us over the phone, online and when you use our websites and apps.

Health data, for example:

  • information about your illnesses, medical problems, medical purchases and prescribed medicines;
  • information about your physical and mental health, including genetic information and biometric information (we may obtain this information from your completed application forms, notes and reports about your health and any treatment or care you have received or need, and it may also be retained as details of any contact we have with you, such as information about complaints or incidents, and reports of medical services you have received);
  • information about your race, ethnicity and religion (we may get this information from your medical preferences so we can provide more tailored care).
This information may come from you, your career, your GP or medical records that you have provided to us through our services.

Details noted during your consultation

This could be:

  • data from any visits to your GP;
  • details of any scans, X-rays and pathology tests;
  • details of any diagnoses and treatments given;
  • details of any long-term health problems and complaints;
  • data about your health, treatment and care, and other relevant information from health professionals, care providers or relatives who care for you;
  • information on any allergies;
  • correspondence with other health and social care professionals who provide services to you.
You provide this data to your doctor during your visit, when a detailed analysis of your condition is carried out to help your doctor determine whether and which medicines to prescribe that you can safely take.

HEALTH DATA

Before prescribing medicines, we will ask you some questions about your health to check that the medicines we prescribe are suitable for you. We understand that your health data is sensitive and we will only use it to provide you with our services and, if you choose to use them, those of our partners.

SERVICE-RELATED CONTACTS

We can contact you by email. by post or telephone in relation to our services, so please ensure that you are happy with the information you have provided to us in your email. the security and privacy of your email account.
You can manage your communication preferences in your user account.

WHAT HAPPENS IF YOU DO NOT PROVIDE US WITH YOUR PERSONAL DATA

Where we need your personal data to provide our services to you and you are unable or unwilling to provide it to us, we are unlikely to be able to provide those services to you.

HOW AND WHY WE USE YOUR PERSONAL DATA

We need to use your personal data to provide our services to you. If we need to use your personal data for an unrelated purpose, we will notify you of this and explain the legal basis that allows us to do so.

We must have a reason (lawful basis) for processing your personal data.

A summary of the legal grounds on which we rely is set out in our ‘Legitimate Grounds’ table.

 

Table of lawful basis for processing

Legal basis Description Example
Contract Enforcement of the Treaty. We use your personal data on the basis that it is necessary for us to provide our services and products to you.

When you register with us, our service contract comes into force.

As part of our service to you, we administer your account and accept payment.

To process your consultation requests.

When we process any transaction, we respond to your queries, refund requests and complaints. The processing of the information you provide to us allows us to respond to you efficiently. We may also keep an archive of these requests to inform any future communications between us and to show how we have been communicating with you over time.

To fulfil card payment requests.

Delivering the products and services you buy from us in physical or electronic form.

Legitimate interests

We protect personal data for our legitimate business interests. It’s about managing our business so that we can provide you with the best services or products and the safest experience.

Where we rely on this point as a legal reason for using your data, we will assess the legitimate interests to ensure that any potential impact on you (both positive and negative) and your rights under data protection law are considered and balanced.

Our legitimate business interests do not automatically override your interests – we will not use your personal data if it affects you unless we have your consent or are legally able to do so.

We process your data to protect you from fraud when you make transactions on our website and to ensure that our websites and systems are secure.

To manage our relationship with you, our business and third parties who provide products or services to us.

When we respond to your queries and complaints.

In order to provide you with the best possible online experience, we collect technical information about your computer or device, your internet access and browser, as well as the country where your computer or device is located, your IP address, the web pages you viewed before visiting our website, the advertisements you clicked on, any search keywords you entered on our website, and other information about your visit and your use of our website.

When we store your product feedback – for example, when you buy goods or services from us and we ask you about your experience to help us measure customer satisfaction.

To ensure that our marketing is tailored to your interests, to keep your data up-to-date and to provide you with a marketing experience as permitted by law,

When we measure the effectiveness of our ads, conversions and other social media campaigns to optimise them on platforms such as Facebook, Instagram, Messenger and WhatsApp.

For statistical research and analysis to monitor and improve our products, services, websites and applications or to develop new ones.

Contacting you about our market research.

In enforcing or adapting our website terms of use, our policies and terms and conditions or other agreements.

Exercising our rights, defending ourselves against lawsuits and complying with the laws and regulations that apply to us and the third parties we work with.

When you place an order on our website, we carry out identity and anti-money laundering checks by validating the personal data you have provided to us against relevant third party databases. This includes sharing your personal data with organisations that, for example, check such information and transactions and investigate cases that may indicate illegal activity. This may in some cases include disclosing data to a credit bureau, which will store such data and may pass it on to the police.

Legal obligations We may use your personal data to comply with the law (for example, if we have to cooperate with a police investigation because we are ordered to do so by a court order).

To prevent or detect fraud or criminal activity, we may share data with authorities such as the police. This is done in a safe way. You may not be notified.

For accounting and tax purposes. We provide clinical and healthcare services, so we need to share a certain amount of personal data in order to comply with requirements and legal obligations.

Enforcing applicable laws, for example, by responding to a request from a court or a regulatory authority, where such requests are made in accordance with the law.

Consent

We may ask for your consent for the use of personal data, for example for the collection and use of sensitive data, or if we want to provide you with direct marketing content from us or other entities via email. by post, letter or phone/SMS message.

Where we process your personal data on this basis, you have the right to withdraw your consent at any time by contacting us.

General marketing of our products and services.

Collection of sensitive data.

When we get your consent to share information about your treatment with your GP and/or healthcare team.

Additional lawful basis required for health data

YOUR HEALTH DATA
Your health data is personal data that needs more protection because it is sensitive data, so in addition to the legal grounds set out in the table of lawful grounds for processing above, we must also have an additional lawful reason for processing your health data, which we set out below.
Processing is necessary for the provision of health care or treatment

We help people with disabilities or medical problems.

When you book a consultation with our doctors so they can examine and treat you.

When we prescribe medicines and/or other medical products for you.

It is essential that the public is protected from dishonesty, medical malpractice or other grossly inappropriate behaviour. For example, investigations based on safety concerns raised or on instructions from the regulator (for example, if the Care Quality Commission reports a problem to us).
Public interest This is done in the public interest, in accordance with any applicable laws.
Express consent

As a matter of good practice, we will only ask for your permission to process your personal data if we have no other legal reason to process it.

If we have to ask for your permission, we will make it clear that we are asking for it and ask you to confirm your choice to give us this permission.

If we cannot provide a product or service without your permission (for example, we cannot carry out iDerma’s activities without your health data), we will make this clear by asking for your permission. If you subsequently withdraw your authorisation, we will no longer be able to provide you with the products or services that require your authorisation.

CHILD DATA

We do not want to collect personal data from persons under the age of 18 and allow them to provide us with their personal data without the consent of a parent or guardian. If we become aware that we have collected personal data from a person under the age of 18 and we do not have the consent of a parent or guardian, we will delete that data as soon as possible.

SHARING PERSONAL DATA

Do you share my personal data?

Sometimes we share your personal data to get help to run our business, deliver medicines, administer programmes or services, or when we are legally obliged to share information.

We require all organisations with whom we share your personal data to respect the security of your personal data and to process it in accordance with the law.

We will not sell, rent or lease your personal data to any third party.

Who we share personal data with:

– with our staff
– with the courts, government and regulators;
– with third parties from whom we purchase certain services, such as couriers, IT system or software providers, IT support service providers and document and data storage providers;
– with third-party service providers that help us perform customer insight analytics, such as Google Analytics and Facebook;
– other service providers who help us optimise our social media campaigns on Facebook, Instagram, Messenger and WhatsApp;
– with third-party service providers who help us to collect customer feedback about our platform
– with other organisations for protection against fraud or criminal activity and investigations;
– with anyone else, if we have your permission.

Do you share my personal data abroad?

Your data may be transferred to and stored in locations outside the European Economic Area (EEA), including countries that may not have the same level of personal data protection requirements.

In doing so, we will ensure that an appropriate level of protection is maintained and that the transfer is carried out in compliance with data protection laws. Often, this protection is specified in the contract with the organisation that receives the data. For more information on this protection, please contact us.

HOW YOU STORE MY PERSONAL DATA

We use different ways to keep your data safe, for example:

– encryption of data transmissions using SSL protocols;
– database encryption;
– internal data access procedures, restricted to authorised personnel only;
– anti-virus software.

Staff

We require our employees and anyone else who carries out any work on our behalf to adhere to appropriate compliance standards, including obligations to protect any data, and to have appropriate measures in place for the use and transfer of data.

Procedures

We have established procedures in case of any suspected data breach. We will notify a suspected data breach if we are legally required to do so.

The frontier of our information infrastructure

However, we have no control over what happens between your device and the boundary of our information infrastructure. You need to be aware of the many information security risks that exist and take appropriate steps to protect your data.

MARKETING

We may use your personal data for marketing

We may use your data to provide you with information about our products and services and those of our partners and other relevant third parties. We may send you marketing messages, such as emails. by post.

If you do not wish to receive marketing information

You can change your mind about how you want to receive marketing messages at any time, or choose to stop receiving them. To make such a change, please email us. by email describing your preferences, or use the “unsubscribe” function in the emails we send you. in letters.

 

DATA SUBJECT RIGHTS

Under data protection laws, you have a number of rights which depend on our reason for processing your data.

 

Table of your rights as a data subject

YOUR RIGHTS AS A DATA SUBJECT
Right to be informed. We are legally obliged to provide you with concise, transparent, understandable and easily accessible information about your personal data and how we use it. We have written this notice for that purpose, but if you have any questions or would like more specific information, you can contact us.
Right of access. You have the right to ask us for copies of your personal data. This right always applies. There are some exceptions, which means that in some cases you may not get all the information. In most cases, this service will be free of charge, but we may apply an administrative fee in certain exceptional circumstances, such as repeated requests for additional copies. Please contact us if you wish to exercise your right to access.
Right to rectification. You have the right to ask us to correct your data if you believe it is inaccurate. You also have the right to ask us to complete your data if you think it is incomplete. This right always applies. Contact us.

Right to erasure. In certain cases, you have the right to ask us to erase your personal data. We have the right to refuse your request for erasure if we process personal data for one of the following purposes:

  • exercising their right to freedom of expression and information;
  • to fulfil a legal obligation;
  • in the performance of a task carried out in the public interest or on the instructions of an official authority;
  • for archiving purposes in the public interest, scientific research, historical research or statistical purposes;
  • to enforce legal judgments or defend themselves against legal claims.

Right to restrict processing. You can ask us to stop processing your personal data by contacting us. We will keep the data, but will no longer process it. This right is an alternative to the right to erasure. You may exercise your right to restrict processing if one of the following conditions applies:

  • challenging the accuracy of personal data;
  • the processing of personal data is unlawful;
  • we no longer need the personal data to process them, but the personal data is necessary for part of the legal process;
  • the right to object has been exercised and processing is restricted pending a decision on the status of processing.
Right to object to processing/right to withdraw consent. In certain cases, you have the right to object to processing by contacting us. You can also object if the processing is carried out for a task carried out in the public interest, you have been given the right to do so by an official authority, or it is in your (or a third party’s) legitimate interests.
Right to data portability. This right only applies if we process the data on the basis of your consent or for the performance of a contract and the processing is carried out by automated means. Contact us.
The right of the data subject not to be the subject of a decision based solely on automated processing, including profiling, which produces legal effects concerning him/her or similarly significantly affects him/her. Contact us.

Exercising your rights

In most cases, you don’t have to pay to exercise your rights.

If you want to exercise your rights, or for more information on how to exercise them, please contact us and we will get back to you within one month. It would be helpful if you could provide us with sufficient information to establish your identity and the date to which your request relates, including any relevant details or dates.

HOW LONG WE KEEP PERSONAL DATA

We will keep your personal data for no longer than is necessary to fulfil the purposes for which we collect it, including to satisfy any legal, accounting or reporting requirements and within the time limits set by our criteria.

Our criteria

– How long you have been our customer, which of our products or services you use and when you will stop being our customer.
How long is it reasonable to keep the archives to prove that we have fulfilled our obligations to you and legal requirements?
– Any time limits for filing a complaint.
– Any retention periods established by law or recommended by regulatory authorities, professional bodies or associations.
– Any related legal proceedings that apply.

WE USE COOKIES

We collect certain data automatically and store it in log files. We sometimes collect data about the behaviour of our visitors during their visits to our website in order to provide better customer service, improve the quality of the experience on our website, or tailor advertising. For more information on what cookies we use and how we use them, please see our Cookie Notice.

HOW YOU CAN MAKE A COMPLAINT

We hope to be able to resolve any queries or concerns you may have about how we use your data. Therefore, please contact us first. All complaints will be handled confidentially and we will make every effort to resolve your problem.

You have the right to lodge a complaint with a supervisory authority in the EEA Member State where you work or habitually reside, or where any alleged data protection breach occurred. For details of other supervisory authorities, see https://edpb.europa.eu/about-edpb/board/members_en.

LINKS TO OTHER WEBSITES

Where we provide links to other organisations’ websites, this Privacy Notice does not determine how that organisation processes personal data. We do not control such third party websites and are not responsible for their content or privacy policies. We encourage you to read the privacy policy of each website you visit.

SOCIAL NETWORKS

Our app and websites contain social networking features and links, such as icons, that take you to your iDerma account on that particular network (for example, our Twitter profile). These features may collect your IP address and information about which page of our website you are visiting, and may also use a cookie to make the feature work properly. Social networking features and controls are published either by another company or directly on our website. Your interaction with these features is set out in the privacy notice of the company that provides them.

AMENDMENTS TO THIS DOCUMENT

We review this document regularly to make sure it is up-to-date and accurate. We encourage you to review this website regularly to be aware of any updates or changes to our privacy notice.

IF YOU NEED EXTRA HELP

If you would like to receive the privacy notice of this website in another format (e.g. audio, large print, Braille), please contact us.