Privacy Policy (GDPR)

1. Data Controller

The data controller within the meaning of data protection laws is:

Mohamed El Kherba

Mellenseestr. 16, 10319 Berlin, Germany

Email: kontakt@scanmyskin.beauty

2. Collection and Processing of Personal Data

We process the following data:

  • Email address and password upon registration
  • Uploaded images (portrait photos)
  • Usage data (analysis date, recommendations)
  • Server log data (e.g., IP address, timestamp)

3. Purpose of Processing

  • Provision and personalization of the skin analysis
  • Storage of analysis history for display to the user
  • Display of product recommendations (including affiliate links)

4. Image Processing

Uploaded images are stored for reuse in analyses. Users can delete their images at any time. After deletion, they are permanently removed.

5. Legal Basis for Processing

Art. 6 para. 1 (a) (consent), (b) (contract performance) and (f) (legitimate interest) GDPR.

6. Disclosure to Third Parties

No disclosure to third parties, except hosting/processing by contractually bound data processors.

7. Data Subject Rights

You have the right to:

  • Access information about stored data
  • Correction or deletion
  • Restriction of processing
  • Data portability
  • Object to processing

Contact us at kontakt@scanmyskin.beauty

8. Storage and Deletion

Users can delete their account and all stored data at any time.

9. Cookies and Tracking

This website uses cookies to improve the user experience. Tracking only occurs with user consent.

10. Hosting

Our application runs on Replit and potentially external hosting services. Data processing takes place in data centers with GDPR-compliant standards.