Privacy Policy

PRIVACY POLICY Dermoscopy UK Limited (company number 05213637) (“Dermoscopy”/ “we” / “our” / “us”) takes your privacy very seriously and understands the importance of protecting your privacy. If you wish to contact us regarding this privacy policy, please contact us using the contact details set out here. Dermoscopy is the data controller and our registered office is Claremont House, 1 Market Square, Bicester, Oxfordshire, OX26 6AA. This privacy policy (together with the terms of use, which you can find here) sets out the basis on which any personal data we collect from you, that you provide to us through your use of our website http://www.dermoscopy.co.uk/) (the “Website”), that you provide to us during the booking process for a dermoscopy course for physicians presented by us (“Dermoscopy Course”), through your attendance at and interactions with us during a Dermoscopy Course, will be processed by us. This privacy policy does not apply to websites that you may be able to access via links on the Website and/or activities offered by third parties. Dermoscopy is not responsible for the collection or use of your personal data from these third party websites (excluding http://mydermatologist.co.uk/, which is one of our websites) or by the venues in which the Dermoscopy Courses are held (for example, the venue may use CCTV or a visitor’s log). Please ensure you review any relevant policies. TOPICS COVERED: • DATA WE COLLECT FROM YOU OR ABOUT YOU AND OUR SOURCES OF THAT DATA • PURPOSE AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA • DISCLOSURE OF YOUR PERSONAL DATA • WHERE WE STORE YOUR PERSONAL DATA • SECURITY • RETAINING PERSONAL DATA • YOUR LEGAL RIGHTS • PERSONAL DATA NOT COVERED BY THIS POLICY • CHANGES TO OUR PRIVACY POLICY • HOW TO CONTACT US Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. DATA WE COLLECT FROM YOU OR ABOUT YOU AND OUR SOURCES OF THAT DATA We will collect the following data about you: • Data you give us. You may give us data about you: o when you contact us (by email, phone, via the Website or otherwise) to book a Dermoscopy Course, make a general enquiry or when you contact us for any other reason; o when you attend a Dermoscopy Course in person; o information obtained from calls we receive or make which have been recorded; o when you complete a form before, at or after any of the Dermoscopy Courses; o when you make a complaint or report an incident regarding any of the Dermoscopy Courses; o when you provide feedback on any of the Dermoscopy Courses; or o when you or the organisation you represent provide products or services to us. • Data we collect about you. During the course of booking you onto a course and delivering the Dermoscopy Course, we will collect: o your name, address, job title and contact details; o details of your organisation (if applicable); o dietary information and allergies we or the venue need to be aware of (for example, if you are gluten intolerant); and o payment details to process Dermoscopy Course fees due (if applicable). • Data we collect from or are provided by third parties. We may be given personal data about you when your organisation or any other third party books you onto a Dermoscopy Course on your behalf. PURPOSE AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA We will use the personal data held about you for the purposes stated below: Purpose of Processing Type of personal data Legal basis for processing To enable us to process an initial enquiry made by you. Your name, title, address, telephone number, mobile phone number, email address, organisation details (if applicable) and details of the enquiry. Legitimate interests – to enable us to respond to your enquiry. To enable us to process your booking request and book you onto a Dermoscopy Course. Your name, title, address, telephone number, mobile phone number, email address, organisation details (if applicable) and details of the enquiry (including any relevant medical information or dietary requirements). Performance of a contract and consent in respect of any relevant medical information. To enable us to process a request from a third party (for example, your organisation) to book you onto a Dermoscopy Course. Your name, title, address, telephone number, mobile phone number, email address, organisation details (if applicable) and details of the enquiry (including any relevant medical information or dietary requirements). Legitimate interest – to allow us to perform our contract with the third party making the booking and consent in respect of any relevant medical information. To email you booking confirmations and Dermoscopy Course reminders. Your name, title address, email address, details of the Dermoscopy Course and the date and time of the Dermoscopy Course itself Consent. To provide you with refreshments during a Dermoscopy Course. Your name, details of the Dermoscopy Course and any relevant dietary requirements (for example, request for gluten free refreshments) and information about relevant allergies. Consent. To process payments for the provision of courses. Bank, credit or debit card details. Performance of a contract if you pay for attending the Dermoscopy Course or legitimate interest (i.e. to allow us to perform our contract with your organisation) if your organisation is paying for the Dermoscopy Course. To deal with any complaints or concerns you have raised or to process any feedback received. Your name, title, address, telephone number, mobile phone number, email address, organisation details (if applicable) and details of the complaint raised or feedback received. Legitimate interests – to enable us to improve our Dermoscopy Courses. To allow you or the organisation that you represent to provide products or services to us. Your name, contact details (for example, email address, phone number or address) and information about the organisation that you represent (if applicable). Performance of our contract with you (if you are providing the products or services as an individual) or legitimate interest – to enable us and the organisation you represent to perform our contract. Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to book you onto a Dermoscopy Course). In this case, we may have to cancel your course booking, but we will notify you if this is the case at the time. Where we have a legal basis to use your personal data without consent (as we have described above), this policy fulfils our duty to process personal data fairly and lawfully and in a manner that you would expect given the nature of our relationship with you, by giving you appropriate notice and explanation of the way in which your personal data will be used. Where consent is required for our use of your personal data, by ticking the appropriate consent box or otherwise communicating your consent (such as via an opt-in form), you consent to our use of that personal data for the purposes covered by the specific consent that you have given. We would like to reassure you that sensitive personal data (including any medical information and dietary requirements) we receive or collect about you will only be processed in connection with the provision of Dermoscopy Courses and in accordance with this policy unless the data has been truly anonymised. We do not process personal data for marketing purposes and we will not provide your personal data to other businesses or third parties for marketing purposes. DISCLOSURE OF YOUR PERSONAL DATA We may share your personal data (including sensitive personal data, i.e. your medical information) with selected third parties in accordance with this policy, including: • as mentioned above, to your referring organisation or third party who booked the Dermoscopy course on your behalf; • to the venues in which the Dermoscopy Courses are to be held; • to any other Dermoscopy Course conveners; • to any Regulators to detail and evidence your professional development; • government or other law enforcement agencies, in connection with the investigation of unlawful activities or for other legal reasons (this may include your location information); • we or substantially all of our assets are acquired by a third party, in which case personal data held by us, including your personal data, will be one of the transferred assets (however, we will let you know before this happens); • our service providers (for example, IT services), suppliers and sub-contractors, who may access your personal data (including sensitive personal data); and • if we are under a duty to disclose or share your personal data in order to comply with any legal obligation but only if such legal obligation takes precedence over our duty of confidentiality owed to you. WHERE WE STORE YOUR PERSONAL DATA The personal data that we collect from you may be transferred to, processed and stored at, destinations outside the European Economic Area (EEA) such as the US. There is no adequacy decision by the European Commission in respect of the US, which means the US is not deemed to provide an adequate level of protection to your personal data. However, to ensure that your personal data receives an adequate level of protection we have put in place the following measures to ensure that your personal data is treated by those third parties in a way that is consistent with EU and UK laws on data protection: - EU-US Privacy Shield; and - EU standard contractual clauses. If you would like to find out more about this, please contact us using the contact details set out here. SECURITY We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. RETAINING PERSONAL DATA We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. Even if you request that we erase your data, we may still need to keep it (please see below) or may keep it in a form that doesn’t identify you. YOUR LEGAL RIGHTS You have the following rights with regard to your personal data: • Access. You have the right to access data we hold about you. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. • Rectification or erasure. You have the right to request that we rectify or delete any personal data that we hold about you (unless we have the legal right to retain it). If you request that we erase any personal data that we require in order to provide services to you, you may no longer be able to attend one of our Dermoscopy Courses. This right does not extend to non-personal data. Please note that your rights to request erasure may be limited by applicable law. • Restriction. You also have the right to restrict us from processing your personal data if the data is inaccurate, the processing is unlawful or we no longer need to your personal data for the purposes for which we hold it. • Data portability. You have the right to obtain personal data we hold about you, in a structured, electronic format, and to transmit such data to another data controller if the legal basis for processing such personal data is consent or performance of a contract. • Object /change of preferences. You have a right to request that we stop processing your personal data where we are relying on a legitimate interest (or those of a third party). Please note, if you submit a request for us to stop processing your personal data in a certain way and this type of processing is required in order to facilitate your attendance to one of our Dermoscopy Courses, you will no longer be able to attend the relevant Dermoscopy Course following your request for us to stop the relevant processing. • Complaints. If for any reason you are not happy with the way that we have handled your personal data, please contact us. If you are still not happy, you have the right to make a complaint to the Information Commissioner’s Office. Please note that the rights mentioned above do not extend to non-personal data. If you would like to exercise any of the rights mentioned above, please contact us using the contact details set out here. PERSONAL DATA NOT COVERED BY THIS POLICY We ask that you do not send us any personal data which is not requested as a result of your visit to the Website or as part of the provision of Dermoscopy Courses by us. For example, we do not accept any CVs or speculative applications. CHANGES TO OUR PRIVACY POLICY Any changes we make to our privacy policy in the future will be posted on this page, where appropriate, or notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy. Continued use of the Website will signify that you agree to such changes. HOW TO CONTACT US Questions, comments and requests regarding our privacy policy are welcomed and should be addressed to Dermoscopy UK Limited at Claremont House, 1 Market Square, Bicester, Oxfordshire, OX26 6AA, by email to course@dermoscopy.co.uk or by phone on 01865 861577. Please also contact us if you would like to know more about our data processing activities, to update or amend any of your personal data which you have provided to us or if you believe our records relating to your personal data are incorrect. Our privacy policy was last updated on 29th June 2020