1 • INTRODUCTION

At Dermconcept we care about your privacy. We are fully committed to protecting and safeguarding the personal data you share with us when you use our service. In this Privacy Policy, we explain what kind of data we use, and how we use it. If you have any questions, do not hesitate to contact us via the contact details listed at the end of this Policy. For further information about our use of cookies, we refer to our Cookie Policy. We might amend this Privacy Policy from time to time. Visit this page regularly in order to understand what we do. If we make changes which are relevant to your consent and underlying information, we will always notify you before you use our service. If you do not agree with our processing of personal data as described in this Privacy Policy, you cannot continue the use of our Services. If you agree with our Privacy Policy, we hereby welcome you to our service. Below you can find summaries of the information in this Privacy Policy.

1.1. • THE PERSONAL DATA DERMCONCEPT COLLECTS

You can sign up for our service on our website using your email address. We collect information about the device you use to access our website. The type of information we collect can, for example, include the type of your device, the software you use, location, device language and your IP address.

1.2. • WHY DERMCONCEPT COLLECTS YOUR DATA

We use your data to assist you in the best possible way. We may also use your data for research purposes to improve our service. Furthermore, your information may be used for customer service, marketing, communications, and for legal purposes.​

1.3 • DERMCONCEPT AND THIRD PARTIES

DermConcept has third party service providers that help us provide or improve our service, this includes service providers, payment providers and financial institutions.

1.4 • PRIVACY, DATA SECURITY, AND DATA RETENTION

DermConcept has implemented various measures and procedures to safeguard your personal data, as stipulated by European and UK data protection law. 1.5. Personal data of children. Our service can only be used when you have reached the age of eighteen (18) years and above.

1.5 • PERSONAL DATA OF CHILDREN

Our service can only be used when you have reached the age of eighteen (18) years and above.

1.6 • YOUR RIGHTS – ACCESS TO YOUR INFORMATION

At any time you can make a request to review, correct, delete and obtain your data. You are also entitled to withdraw consent for the processing of the personal data we hold of you. You can do this by mail or email, using the addresses listed below.

1.7 • RESPONSIBLE PARTY FOR THE PROCESSING

DermConcept Ltd., located in London, UK, is the owner and operator of the service and is the controller of personal data processed via the Website. Please find the full explanation on how we process your data below.

2 • THE PERSONAL DATA DermConcept COLLECTS

DermConcept Ltd., located in London, UK, is the owner and operator of the service and is the controller of personal data processed via the Website and the App. Please find the full explanation on how we process your data below.

2.1 • PERSONAL DATA YOU PROVIDE TO US

The data you provide to us is collected and used (“processed”) by us to provide you with our best service. The minimum information you are asked to provide us is your first and/or last name and email address to register with our service.

When you use our website, we also collect data that identifies your mobile device and your use of the platform. We also collect information when you give us feedback.

2.2 • PERSONAL INFORMATION YOU PROVIDE US REGARDING THE HEALTH OF OTHERS

Our service is exclusively meant for your personal use. If you want to share your information with others on social media, you may do so but you personally resume responsibility for your data sharing. We at DermConcept cannot be held responsible for any breach of data confidentiality that may arise from your action of sharing your personal information on social media.

2.3 • AUTOMATICALLY COLLECTED PERSONAL DATA

During your visit to our Website we automatically collect certain information about you, your visit of the service and the device you are using. This data includes data on the hardware, software, operating system, internet browser, IP address, language and application. We also collect data about when and how you used the service, including interaction with the elements on it and which pages you visited on the Website.

3 • WHY DERMCONCEPT COLLECTS YOUR DATA

We use the data you provide us to manage our Website and business and to improve our services continuously.

3.1 • Customer Service

Our customer service is here to help you and we use your data to do so. This includes email replies to your emails when and if you need further assistance with your products and orders. Marketing: To keep you informed, we may send you communications relating to our business, by email or other contact details you provided us.

3.2 • Communications

We will send you communication regarding your account and orders with us. If you opt-in for our mailing list, we may send you non-commercial communications, including our newsletter. When you use our services, we may send you a questionnaire or invite you to provide a review of your experiences with our service. We also may get in touch with you regarding feedback, inquiries, and complaints you made regarding our Website.

3.3 • Legal purposes

In certain cases, we may need to use your information to handle and resolve legal disputes, for regulatory investigations and compliance, or to enforce the terms of use of the service as reasonably expected. We collect and process your data based on the following legal grounds: Contractual necessity: In order to fulfill the contract you enter into with us when you use our Services, we have to process some essential information. When you wish to use one of our paid services we may need to process your email address and payment information. Legitimate interests: We are committed to improving and growing our service. Some of your data can help us to improve and promote our Service and Website, other data we may need for administrative, legal purposes or anti-fraud activities. Legal obligations: We have to comply with certain laws and (country specific) regulations. Consent: For certain promotional and marketing activities, we may ask additional consent. When you wish to withdraw your consent, please contact us on info@dermconcept.com.

4 • DERMCONCEPT AND THIRD PARTIES

For some specific reasons, Dermconcept may share your personal data with carefully selected third parties.

5 • DERMCONCEPT AND SOCIAL MEDIA

DermConcept uses social media for various reasons. On our Website, we integrate social media like and share buttons (Facebook, Instagram, Twitter, LinkedIn), which allows you to share the content you like directly with your network. The social media plugins may process your personal data when you choose to share or like any content of our Website with your network. DermConcept does not control and is not responsible for the processing of personal data by these networks.