General Data Protection Regulation (GDPR) – EU reform on user data protection

General Data Protection Regulation (GDPR)

The new regulatory framework consists of two legal acts, but most central is the General Data Protection Regulation (GDPR), which applies to the processing of personal data in general. In addition, the EU has adopted a directive on the processing of personal data by law enforcement, unlike a directive, it does not require national governments to pass any enabling legislation, therefore it is directly binding and applicable.

The European Commission has implemented the new regulation on privacy and electronic communications applicable to telecom and Internet operators and replacing the current Directive 2002/58/EC, and has been implemented by all EU countries.

Since the data protection is more robust than any other international regulation, the user data protection also effects all First Derm® users.

What does this mean to you

The internet user owns their data and by this new law have the rights to see what happens with this data and have the power to ask their data to be deleted by the internet service. This also means that you will have to accept our explicit terms of use and privacy policy outlined by First Derm®. The First Derm® service asks for limited information in order for us to be able to offer the best user experience and service.

What information do we collect?

 

First Derm® on-demand-online dermatology service (human analysis)

iOS and Android apps

• Two images – the meta data is deleted – we only collect the size and color of the images
• The text you fill in
  • Sex
  • Age
  • Duration
  • City
  • Country
  • Free description of your concern
  • Case number
  • iOS and Android “push” code associated with your phone. This code is un-identifiable and sent to us by Apple and Google
  • Analytics – we use Google analytics and only anonymize data is shared with us

 

Web widget

• Two images – the meta data is deleted – we only collect the size and color of the images
• The text you fill in
  • Sex
  • Age
  • Duration
  • City
  • Country
  • Free description of your concern
  • E-mail – the email is temporarily stored on our servers until you receive an answer. The e-mail is then deleted from our servers and logs.
  • Case number
  • Analytics – we use Google analytics and only anonymize data is shared with us

We advice not to take pictures of your face or recognizable tattoos. In cases where the images have an identifiable face, we mark these images (manually) to anonymize them with a black banner over the eyes at a later date.

 

First Derm® Skin Image Search™ – artificial intelligence (AI) analysis (computer vision)

• Two images – the meta data is deleted – we only collect the size and color of the images
• Analytics – we use Google analytics and only anonymized data is shared with us

 

Payment

We use PayPal and Braintree to process credit cards. This information is stored on respective third parties, our servers only receives a “token” that your case has been paid. In the PayPal portal we can see your e-mail associated with the 8 digit number. In the Braintree portal we only see your last 4 digits of your credit card number associated with the 8 digit case number.

 

What do we do with the information?

The data we collect we analyze, make reports, work on scientific research and make the user experience and also the service bette for the end user. We also use the data for machine learning, building service that can automate the use of the service. In the future, machine learning can will help us give better and more accurate answers, with the potential that we do not need a dermatologist to look at the images submitted. It can all be done by AI.

We use some of the information to write blog posts on diseases or for our skin guide. This information is all anonymized. We potentially also license the data to third parties for the development of their machine learning tools. Third parties are prohibited from licensing our data or publish our data online. We take great steps to control that with legal licensing agreements.

We do not do anything with any payment information.

 

Can I delete my information from your server?

Yes, you have the right that we delete your information. In the event that data will be completely deleted and we recommend that you take a copy of this information. In order for us to delete the information you need to ask us by sending an e-mail to [email protected] and we do all we can with our resources to delete all information associated with First Derm®. In regards to your payment information on PayPal and Braintreee, you will need to contact them.

Here you can read our Terms and Conditions and Privacy Policy. Also under FAQ you can read a summary.