Privacy policy

MyDermaCare, operated by QHealth Lda., adopts the technical and organisational measures necessary to comply with EU and national rules on data protection, privacy and information security, in accordance with the General Data Protection Regulation (GDPR).

QHealth Lda., company number 518307905, with registered office at Rua 1º de Abril, 1, 2710-094 Sintra, is the entity responsible for processing all personal data provided for the delivery of services requested by users or their legal representatives.

MyDermaCare processes only the personal data strictly necessary to: - Provide information and services; - Administrative procedures related to its activities; - Promotion of initiatives and activities related to its services. Data are processed electronically, ensuring protection, privacy and security in accordance with applicable law.

All processing operations follow the fundamental principles of applicable legislation, including lawfulness, transparency, minimisation, storage limitation, accuracy, integrity and confidentiality. MyDermaCare commits to demonstrating accountability to data subjects and other stakeholders.

Processing of personal data is lawful only if and to the extent that one of the following applies: • Consent: consent given by the data subject must precede processing and result from a free, informed, specific, explicit and unambiguous indication of wishes. • Performance of a contract or pre-contractual steps: when processing is necessary for concluding, performing and managing a contract. • Compliance with a legal obligation: when processing is necessary to comply with a legal obligation to which MyDermaCare is subject. • Vital interests: when processing is necessary to protect vital and legitimate interests of the data subject, another natural person or MyDermaCare (always weighing the interests, rights and freedoms of the data subject).

Personal data are stored for the period necessary to fulfil the purposes of collection and processing, ensuring compliance with applicable archiving rules. Data submitted through the clinical consultation form that are not followed by payment are automatically deleted within a maximum of 48 hours, for data protection and minimisation reasons. This deletion is irreversible and prevents later recovery or clinical analysis of the submitted case.

MyDermaCare may use subcontracted third-party services to deliver its services, which may involve access to personal data. In these situations, QHealth Lda. ensures it only engages entities that provide sufficient guarantees of compliance with applicable rules and formalises those relationships by contract.

Except where legally required, personal data will not be shared with non-subcontracted third parties or used for purposes other than those described.

MyDermaCare implements technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or destruction. These measures include: - Use of up-to-date technologies to protect data; - Stronger access credentials for users; - Recommended security practices such as antivirus updates. Where subcontracting occurs, contracted entities must implement adequate security measures and prevent unauthorised access or misuse of data.

Where processing is based on consent, the user may withdraw consent at any time, without affecting processing carried out before withdrawal based on previously given consent. Requests should be addressed in writing to QHealth Lda. using the contacts below.

Without prejudice to any other administrative or judicial remedy, the user has the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) or another competent supervisory authority if they believe MyDermaCare’s processing violates applicable law.

MyDermaCare has appointed a Data Protection Officer (DPO) to monitor compliance with data protection rules. In the event of incidents compromising personal data, data subjects may contact our data protection department at: compliance(at)mydermacare.pt

MyDermaCare reserves the right to update this Privacy Policy periodically, ensuring public disclosure of any changes to maintain transparency and adequate information for users.