Privacy statement
Declaration on data protection
Since the protection of patient data is crucial, Hyge AI encrypts all data transmissions with SSL/TLS. To ensure the highest level of security, Hyge AI uses two-factor authentication, as used in e-banking. With this additional layer of security, Hyge AI ensures that only you can access your Skin Check Report. The following privacy policy describes in detail how we handle your personal data.

General
We, Hyge AI, take the protection of the personal data of our customers as well as those interested in our offers very seriously. For this reason, it is our duty to protect the data of users who are entrusted to us when visiting our website. It is important to us to protect the privacy of the users of our website at all times. If and to the extent that users voluntarily provide personal data, this data will be collected and stored in accordance with the data protection provisions of the General Data Protection Regulation (GDPR). All data will be treated confidentially. With the following data protection information, we would like to explain to you in more detail what data is collected, what happens to this data, and what security precautions we have taken to protect this data from misuse... With this transparent and understandable information about our privacy policy, we want to ensure that visitors and customers are well and sufficiently informed about the collection, processing, and use of personal data.

Responsible body
The responsible body for the collection, processing, and use of your personal data is:
Warden AI Lab SIA, Rīga, Gustava Zemgala gatve 78 - 1, LV-1039, support@hyge.app

Personal data
Personal data is any data that relates to an identified or identifiable person. This includes the following categories of personal data:
Inventory data (e.g. name, function, organizational affiliation). Contact data (e.g. address, e-mail address, telephone/fax number) Content data (e.g. text entries) Usage data (e.g. access data, IP address, date, and time of access).
In general, the collection, processing, and use of personal data for the use of our website is limited to the necessary scope and data. Your personal data will not be disclosed to third parties when using our website or when contacting us by e-mail or via the contact form for purposes other than those listed below.

Data transfer and recipients
Your personal data will not be disclosed to third parties unless we have expressly indicated this in the description of the respective data processing and you have given your express consent, or the disclosure is necessary for the assertion, exercise, or defense of legal claims or is in our legitimate interest for other reasons and there is no reason to believe that you have an overriding legitimate interest in not having your data disclosed, or there is a legal obligation to disclose your data or this disclosure is necessary for the performance of contractual relationships with you.
In addition, we use external service providers, which we carefully select and commission, to provide our services and process our services. These are bound by our instructions and are regularly monitored by us. In addition, we have concluded contracts with them, where necessary, for order processing. The service providers are responsible for web hosting, sending e-mails, maintaining and servicing our IT systems, and processing payments.
In addition, we may share your personal data with third parties if contracts or similar services are offered by us together with partners. You will receive more information about this when you provide your personal data or in the description of the respective service used.
If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance and about the guarantees we provide to protect your personal data in the description of the respective offer used.

Processing of personal data collected when visiting our website (personal data concerned and purpose of processing)
If you use our website www.hyge.app for information purposes only, we only collect the personal data that your browser transmits to our server. If you wish to access our website, we collect the following data, which is technically necessary for us to be able to display our website to you and to ensure its stability and security:

IP address Date and time of the request Time zone difference from Greenwich Mean Time (GMT) Content of the request (specific page) Access status/HTTP status code Amount of data transmitted in each case Website from which the request came Browser Operating system and its interface Language and version of the browser software.
We process the aforementioned data for the following purposes:

Ensuring a smooth connection setup of the website, ensuring comfortable use of our website, evaluating system security and stability, and for other administrative purposes.
Under no circumstances do we use the collected data to draw conclusions about your person. In addition, the data may be processed in anonymous form for statistical purposes. This data is never stored together with other personal data of the user, matched with other data, or passed on to third parties.

In addition, we use cookies and analytics services when you visit our website. You can find more detailed explanations of this in the following privacy policy.

Processing of personal data in the context of contacting us (categories of personal data concerned and purpose of the processing)
You can contact Hyge AI by e-mail using the e-mail address published on our website or the contact form provided.

If you use one of the aforementioned contact channels, the personal data you provide (e.g. last name, first name, address), but at least the e-mail address, as well as the information contained in the e-mail or contact form will be stored for the purpose of contacting you and processing your request. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.

Processing of personal data in the context of teledermatology consulting services (categories of personal data concerned and purpose of processing)
In addition to the purely informational use of our website, we offer various specialist consultation services (hereinafter "teledermatological consultation services") via the dermatologists registered with us, which you can use if you are interested. For this, you usually have to provide further personal data (e.g. health data, payment data), which we and the dermatologist use to provide the respective service.

Hyge AI and the respective dermatologist are jointly responsible for the personal data transmitted in connection with the teledermatological consultation service. For this reason, Hyge AI and the dermatologist have reached an agreement on the respective obligations in the context of joint data processing.

Health data are processed for the teledermatological consultation service. These belong to the special category of personal data. We will only process this special category of personal data with your explicit consent.

If you decide to make use of the teledermatological consultation service via our website, the following personal data will be processed by us and forwarded to the respectively appointed dermatologist in order to respond to your request.

Data Security
Within the website, we use the widely used SSL (Secure-Socket Layer) process in conjunction with the highest level of encryption supported by your web browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed display of the key or lock icon in the lower status bar of your browser.
In addition, we use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Duration of storage of personal data
The duration of the storage of personal data is determined by the respective statutory retention obligations.
After the expiry of the respective period, the corresponding data is routinely deleted. If the data is required for the fulfillment or initiation of a contract, or if we have a legitimate interest in the continued storage, the data will be deleted when it is no longer required for these purposes or you have exercised your right of revocation or objection.

Use of cookies
In addition to the above data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive depending on the browser you are using and that provide certain information to the party setting the cookie (in this case, us). Cookies cannot run programs or transmit viruses to your computer. They are used to make the website more user-friendly and effective overall.
This website uses the following types of cookies, the scope, and functioning of which are explained below:
Transient cookies, i.e. cookies that are automatically deleted when you close the browser. These include, in particular, session cookies. This store is a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser. Permanent cookies, i.e. cookies that you can configure in your browser settings according to your wishes. Here you can, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the features of this website.
We use cookies to identify you on subsequent visits if you have an account with us. Otherwise, you would have to log in again each time you visit. The Flash cookies used are not collected by your browser, but by your Flash plugin.
In some cases, the cookies are used to simplify website processes by storing settings (for example, providing options that have already been selected). If personal data is also processed by individual cookies used by us, the processing is carried out either to implement the contract or to protect our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective site visit.
You can set your browser so that you are informed about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, as well as activate the automatic deletion of cookies when closing the browser.
The cookie settings can be managed under the following links for the respective browsers:
Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

You can also individually manage the cookies of many companies and features used for advertising. To manage these, use the appropriate user tools found at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices. We also use HTML5 storage objects that are stored on your terminal device. These objects store the required data regardless of the browser you use and have no automatic expiration date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, such as "Delete Flash Cookies" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/clear-flash-cookies) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 memory objects by setting your browser to private mode. We also recommend that you manually delete your cookies and browsing history on a regular basis.

Web analytics and advertising tracking Google
We use some services and technologies provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google uses so-called cookies. The information generated by cookies about your use of this website is usually transferred to a Google server in the USA and stored there. Personal data will only be transferred to the USA in compliance with appropriate data protection guarantees.

Google Analytics
Google Analytics uses cookies to analyze and improve your use of our website.

We use Google Analytics only with IP anonymization enabled. In this case, the IP address of the user is shortened by Google within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area, so that it can no longer be traced back to a person.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website. This is used to compile reports on website activity and to provide the website operator with other services relating to website usage and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. The terms of use of Google Analytics and information on data protection can be accessed via the following links:

http://www.google.com/analytics/terms/de.html

https://www.google.de/intl/de/policies/

You can prevent cookies from being stored by setting your browser software accordingly. However, we would like to point out that in this case, you may not be able to use all the functions of this website in full. You can also prevent the collection of data generated by the cookies and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at URL http://tools.google.com/dlpage/gaoptout?hl=de.

By clicking on the following link, the collection by Google Analytics is prevented by setting a so-called opt-out cookie: Deactivation of Google Analytics

Information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Google Optimize
The web analysis and optimization service "Google Optimize" is used on our website. We use the service Google Optimize to increase the attractiveness, content, and functionality of our website by offering new features and content to a portion of our users and statistically evaluating the change in usage. Google Optimize is a sub-service of Google Analytics (see section Google Analytics).
Google Optimize uses cookies that allow us to optimize and analyze your use of our website. The information generated by these cookies about your use of our website is usually transferred to a Google server in the USA and stored there. We use Google Optimize with IP anonymization enabled so that your IP address is truncated beforehand by Google within Switzerland, within the member states of the European Union, or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators, and providing other services relating to website activity and internet usage.
You can prevent the storage of cookies by setting your internet browser accordingly. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Further information on data collection and processing by Google can be found in Google's privacy policy, which can be viewed at http://www.google.com/policies/privacy.

Google Ads Conversion
We use the service Google Ads Conversion to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Ads). In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. In this way, we pursue the interest of showing you advertising that is interesting for you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.

These ads are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies that can be used to measure certain parameters for measuring success, such as the display of ads or user clicks. When you access our website via a Google ad, Google Ads stores a cookie on your terminal device. These cookies usually lose their validity after 30 days and are not intended to identify you personally.

The analytics values stored for this cookie are usually the unique cookie ID, the number of ad views per placement (frequency), the last impression (relevant for conversions after the ad view), and opt-out information (marking that the user no longer wishes to be contacted). These cookies allow Google to recognize your internet browser. When a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads on customers' websites.

We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to see which of the advertising measures used are particularly effective. We do not receive any other data through the use of the advertising tools; in particular, we cannot identify any users on the basis of this information. Through the marketing tools used, your browser automatically establishes a direct connection with the Google server.

We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our knowledge: Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us.

If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider receives and stores your IP address.

You can prevent participation in this tracking process in various ways:

(a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies prevents you from receiving third-party ads; (b) by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin; (c) by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices, which setting will be deleted when you delete your cookies; (d) by permanently disabling them in your Firefox, Internet Explorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin; and (e) by using the appropriate cookie setting. Please note that in this case you may not be able to use the full functionality of this website.

Google Ads Remarketing

We use the remarketing function within the Google Ads service. The remarketing function enables us to present users of our website with ads on other websites within the Google advertising network based on their interests. For this purpose, the interaction of users on our website is analyzed, e.g. which offers interested the user, in order to be able to display targeted ads on other websites to users even after they have visited our website.

For this purpose, Google stores cookies on the end devices of users who visit certain Google services or websites in the Google Display Network. These cookies are used to record the visits of these users. The cookies are used to uniquely identify a web browser on a particular end device and not to identify an individual.

Information on how Google Ads handles user data can be found in Google's privacy policy: www.google.de/intl/de/policies/technologies/ads.

Google Tag Manager

Our website uses the Google Tag Manager. The Tag Manager enables the management of tracking tools and website tags. This service does not use cookies and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in effect for all

Linking with social media

Social networks (e.g. Facebook or LinkedIn) are only embedded on our website in the form of a link to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. Only after you have been redirected will the user data be transmitted to the respective provider. Information on how your personal data is handled when using these websites can be found in the respective privacy policies of the providers you use.

Your rights

In general, you have the following rights:

To request information about your personal data that we process; to request that we correct inaccurate or incomplete personal data that we hold about you; to request that we delete your personal data that we hold about you; to request that we restrict processing or disclose to third parties or prohibit the processing of your personal data; under certain circumstances, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller; to revoke your consent to data processing, once given, at any time with effect for the future. In the event of a revocation, we will immediately delete the data in question, unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation; and depending on the applicable law, the right to lodge a complaint with a supervisory authority.
You may assert your rights against Hyge AI or the dermatologist concerned.

Changes to our privacy policy

We reserve the right to update this Privacy Policy as necessary in compliance with applicable data protection laws. In this way, we can adapt it to current legal requirements and take into account changes to our services, e.g. when introducing new services. The most current version applies to your visit.

Status of this privacy policy: April 15, 2022