The customer uses Skintrace in accordance with law, these terms and third-party rights. The customer must not introduce unlawful or malicious content, disrupt the service, conduct unauthorized security testing, extract data in bulk or resell access without written agreement.
The customer collects only data necessary for its activity, informs individuals and ensures a suitable legal basis, particularly for minors, photographs, signatures and consent records. Consent to a service is not automatically GDPR consent, permission to publish photographs or agreement to marketing.
Skintrace is not intended to collect or retain detailed medical information. Health information needed to assess a service must be communicated orally to the professional, without transcribing conditions, treatments, diagnoses, allergies or other medical details into notes, comments or free-text fields. Recorded follow-up must remain non-medical. Skintrace must not be used to diagnose a condition or manage a medical emergency. If special-category data is nevertheless processed, applicable legal conditions, including Article 9 GDPR, still apply.
The customer remains responsible for rules applicable to minors, parental authorizations, identity checks and any requirements for a legal representative’s presence. It prioritizes visual verification without a copy where sufficient. Retaining a copy of a supporting document must be necessary, legally justified and limited to useful information and access and an appropriate minimum period, subject to legal obligations.