Information on the Processing of Personal Data
For customers/prospects who use the service AI Skin Analyzer
Data Controller
Dermaself S.r.l.
VAT number: 10236321211
Via Valassina, 29 – 20159 Milan (MI)
e-mail: hello@dermaself.it
(“Company”).
Data Protection Officer (DPO)
The DPO can be contacted at hello@dermaself.it.
Categories of Personal Data Processed
- Image.
Source of Personal Data
- Personal data is provided by you when using the AI Skin Analyzer services.
Purpose, Legal Basis and Data Retention
| Purpose of Processing | Legal Basis for Processing | Data Retention |
|---|---|---|
| Using the AI Skin Analyzer Service. | Execution of a request by the data subject to provide the requested service. | Personal data collected using electronic devices/Smart Objects will be retained for as long as necessary to provide the Service. |
| If necessary, to ascertain, exercise, or defend the rights of the Data Controller in court. | Legitimate interest of the Data Controller to exercise or defend its rights in court. | In the event of a complaint or dispute for the entire duration of the complaint and/or out-of-court and/or court proceedings, until the expiry of the terms for seeking judicial protection and/or appeal. |
Once the above retention periods have expired, the data will be destroyed, deleted, or anonymized, in accordance with technical deletion and backup procedures.
Provision of Data
The provision of data is necessary to provide you with the Services you have requested.
Categories of Data Recipients
Personal Data may be disclosed to parties acting as independent Data Controllers, such as public authorities, or processed on behalf of the Company by parties providing services functional to the pursuit of the above purposes, designated as data processors.
Persons Authorized to Process Data
The data may be processed by employees of the company departments responsible for pursuing the purposes indicated above, who have been expressly authorized to process the data and have received adequate operating instructions.
Transfer of Personal Data to Countries Outside the European Union
No personal data is transferred to countries outside the European Union.
Rights of the Data Subject – Complaint to the Supervisory Authority
By contacting us via email at hello@dermaself.it, interested parties, where applicable, may:
- request the data controller to access their personal data, delete it, correct any errors, supplement incomplete data, and restrict its processing;
- object to processing in cases of legitimate interest of the data controller for reasons related to the particular situation.
Data subjects also have the right to lodge a complaint with the competent supervisory authority.