Depending on the laws of your country, you may have the following rights regarding your personal information:
Right to information:
You have the right to be provided with clear, transparent and easily understandable information about what personal information is gathered, who we obtained it from (if a third party), why and by whom it is processed. This is why we are providing you with the information in this Privacy Policy.
Right to access:
You have the right to obtain access to your personal information (if we are processing it), and certain other information (similar to that provided in this Privacy Policy).
Right to rectification:
You are entitled to have your information corrected if it is inaccurate or incomplete.
Right to erasure:
In certain circumstances you can request for your personal information to be erased from our records. This is not a general right to erasure; there are exceptions.
Right to restrict processing:
You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
Right to object to processing:
You have the right to object to certain types of processing, in certain circumstances. In particular, you have the right to object to the processing of your personal data based on legitimate interests grounds.
Right to object to and not be subject to automated individual decision-making:
Subject to some limited exceptions, you also have the right to object to automated processing, including profiling; and not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you.
Right to data portability:
You have the right to obtain and reuse your personal data in a structured, commonly used and machine readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party.
Right to withdraw consent:
If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful).
Automated decision making:
Where you have given your consent, we may make automated decisions that impact your access to healthcare (such as referring you directly to a skin cancer specialist without the need for a GP appointment) without any human clinician involvement. If you have consented to this, you have the right to request a human review of your case if you feel the decision made by our medical device DERM is incorrect. This should be lodged with us as soon as possible, and prior to attending any further assessment of your lesion(s), by contacting [email protected]. If you do this, a clinician will review DERM’s results, to confirm whether the device recommended the correct action for your case.