Privacy Policy
1. INFORMATION WE COLLECT
1.1. Information We Collect. The information we gather on our Site falls into three categories: (1) information you supply when you register; (2) information, contributions, “Annotations” or "Images" (as the terms are defined in the Terms of Use) which you upload to the Site; and (3) tracking and analytics information we may collect as you navigate through our Site. If you do not want the Site to collect your personal information, you should not use, register for, provide user feedback to, or make submissions or contributions to the Site.
1.2. Registration Information. To use certain features on our Site, we ask you to register. When you register, we collect personal information about you, which may include your name, organization name, mailing address, email address, a password, time of registration / most recent login and User name. We may also ask for some additional, optional information, but you're free to register without providing this optional information if you prefer. In addition, at various other points on our Site, we may ask you for personally identifying information, including when you: complete a survey or report a problem with our Site. We use this information to tailor our Site to your interests and to make it more useful to you, and to help improve our Site generally.
1.3. Tracking Information (Cookies). To help us serve your needs better, we use "cookies" to store and sometimes to track User information. A cookie is a small amount of data that is sent to your browser from a Web server and stored on your electronic device's hard drive. A cookie contains a unique number that allows our Site to identify your electronic device. For example, cookies allow us to personalize the Site, restrict access to authorized Users, attribute contributions to the User that made them, and keep track of your User name and password (if you are a registered User) so you don't have to re-enter that information each time you visit our Site. In the event that a User is not logged into the Site, we may still store a cookie to track whether the User has accepted the Terms of Use Agreement dialog (which the User must do before visiting any pages with actual data). Finally, the Site makes use of Google Analytics, which may use cookies as specified at https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage. Google Analytics allows us to determine important metrics about the usage of our Site.
1.4. Tracking Information (IP Address). We may also collect information about your access time, the page or data requested, and your device configuration, including the type and version of browser software you use, the operating system that you're running, the resolution of your monitor and your Internet Protocol address ("IP address"). Your IP address is a numerical label assigned to each device (e.g., computer, printer) connected to the Internet, which identifies your computer or device so that data (such as the web pages you view) can be accessed by you. Your IP address does not tell us who you are. Like the IP address, none of the other information described in this paragraph identifies you personally, although it may indicate your location. In the event of a Site malfunction, we may associate IP addresses with internal logs that contain account information for the limited purpose of correcting the malfunction. Otherwise, we only collect this information for purposes of aggregated reporting on Site activity that we, and our contractors, if any, may use. For example, we may want to know how long the average User spends on our Site, which pages or features get the most attention, and the like. The aggregated information helps to understand our audience. We may share such aggregated, de-personalized data with third parties.
Since the Site makes use of Google Analytics, that service may also be collecting IP addresses under their own terms. The “Help” function button on most browsers contains information on how to set your browser to notify you before accepting cookies or to disable cookies entirely. However, if you don't accept cookies, you may not be able to take advantage of various features on our Site that are available to other Users.
2. INFORMATION SHARING AND DISCLOSURE
Any personal information, uploaded images, and other submissions and contributions that Users make to this Site may be used by affiliates of MSKCC and members of the International Skin Imaging Collaboration ("ISIC") and of the International Society for Digital Imaging of the Skin ("ISDIS") to promote the purposes of ISIC, ISDIS, and the Site. Personal information may be used by MSKCC and shared with MSKCC affiliates and ISIC members to communicate MSKCC activities and news, provide access to particular interactive processes, obtain User feedback, improve the content of the Site, customize content, and notify Users regarding matters related to the Site. MSKCC may communicate with Users via email exchange. MSKCC may use email to provide you with newsletters and announcements. If you do not wish to receive these kinds of communications, you can opt out by checking the "unsubscribe" option in such newsletter or announcement.
2.1. Service Providers. We engage certain trusted third parties to perform functions and provide services to us, including, without limitation, hosting and maintenance of the Site, User relationships, database storage and management, and direct outreach campaigns. We will share your personal information with these third parties only to the extent necessary to perform these functions and provide such services.
2.2. Compliance with Laws and Law Enforcement. MSKCC cooperates with government and law enforcement officials or private parties to enforce and comply with the law. MSKCC reserves the right at all times to monitor, review, retain, and/or disclose any information, including IP addresses, as necessary to satisfy any applicable law, regulation, legal process, or government request, or to cooperate with law enforcement and other authorities in investigating a claim of illegal activity. We may disclose any personal information, including IP addresses, to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims; legal process (including subpoenas); to protect the property and rights of MSKCC, or a third party, or the safety of the public or any person; to prevent or stop any illegal, unethical, or legally actionable activity; or, to comply with the law.
2.3. Business Transfers. MSKCC may transfer, or otherwise share some or all of the information obtained from the Site, in connection with a merger, acquisition, reorganization, or other business transaction. You will have the opportunity to opt out of any such transfer if the new entity's planned processing of your information differs materially from that set forth in this Privacy Policy.
2.4. Security. MSKCC will take reasonable and appropriate measures to protect the personal information you share with us from unauthorized access or disclosure. We will make any legally-required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored personal data to you via email or conspicuous posting on this Site without unreasonable delay, consistent with (i) the legitimate needs of law enforcement or (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system. Notwithstanding the above, we cannot guarantee the security of our database, nor can we guarantee that information you supply won't be intercepted while being transmitted to us over the Internet. From time to time, we review our security procedures in order to consider appropriate new technology and methods. Please be aware that no security measures are perfect or impenetrable and no software or server is 100% secure. Any information you upload to our Site is available to anyone with Internet access.
2.5 Links to Other Sites. Our Site may contain links to other Sites. The fact that we link to a Site is not an endorsement, authorization or representation of our affiliation with that third party. We do not exercise control over third party Sites. These other Sites may place their own cookies or other files on your computer, collect data or solicit personal information from you. Other sites follow different rules regarding the use or disclosure of the personal information you submit to them. We encourage you to read the privacy policies or statements of the other Sites you visit.
3. OUR POLICY TOWARDS CHILDREN
The Site is not directed to persons under 13 and we do not knowingly collect personal information from children under 13. MSKCC complies with the Children’s Online Privacy Protection Act and all other applicable laws and regulations concerning children and the Internet. If a parent or guardian becomes aware that his or her child has provided us with personal information without their consent, or is the subject of any Image to which they have not provided consent, he or she should contact the email address set out in the “Contacts” section of the Site and be sure to include in the message the name of the minor and identification of the information and/or Image. If we become aware that a child under 13 has provided us with personally identifiable Information, or if the subject of an Image is a minor, and the parent or guardian of such minor notifies us that such minor has submitted his or her Personal Information (as defined under the Terms of Use), or is the subject of an Image submitted, without the parent or guardian’s permission or consent, MSKCC will take reasonable steps to remove that information and Image from the Site.
4. YOUR CHOICES REGARDING YOUR PERSONAL INFORMATION
4.1 Submitting Your Personal Information and Unsubscribing. MSKCC respects your choices about how your personal information is used when you register with us or that you provide us for other purposes. If you choose not to provide any personal information when requested, you can still use features of our Site. However, you may be unable to access certain areas and services that require our interaction with you. You can opt-out of receiving communications from MSKCC at any time by following the unsubscribe instructions at the bottom of any e-mail communication you receive. However, we may still send you updates to our legal notices or Privacy Policy, or correspondence regarding any account you have created with us. As discussed above, MSKCC and our third-party partners collect certain information about you when you use our Site through technology such as cookies and similar tracking tools for internal and analytic purposes. You may be able to "opt out" of the collection of information through cookies or other tracking technology by actively managing the settings on your browser or electronic device. Please refer to your browser's or device's technical information for instructions on how to delete and disable cookies, and other tracking/recording tools. We are not able to respond to "Do Not Track" signals set by a browser at this time.
4.2. Changing or Deleting Information. If you are a registered User of the Site, you may access and update or correct the information you provided to us by e-mailing us at the contact address set out in the “Contacts” section of the Site. You may request a correction or removal of your personal information, or request that MSKCC no longer solicit you by email or any other means, at any time, by emailing a request to us at the contact address set out in the “Contacts” section of the Site. To ensure that your request is handled in an effective manner, please provide your exact e-mail address, name, address and/or telephone number(s).
4.3. Notice to California Residents - Your California Privacy Rights. Residents of the State of California, under the California Civil Code, have the right to request from companies conducting business in California a list of all third parties to which the Company has disclosed personal information during the preceding year for direct marketing purposes and a disclosure of the shared information. Alternatively, the law provides that if the company has a privacy policy that provides you with an “opt-out” choice for use of your personal information by third parties for marketing purposes, the Company may instead provide you with information on how to exercise your disclosure choice options.
This Site qualifies for the alternative option. In addition, MSKCC does not use your personal information for direct marketing purposes. Its privacy policy provides you with information on how you may opt-out from the use of your personal information by third parties for direct marketing purposes. Therefore, we are not required to maintain or disclose a list of the third parties that received your personal information during the preceding year for marketing purposes.
If you are a California resident and request information about how to exercise your third party disclosure choices, send a request in accordance with the Contacts section below.
5. DISCLAIMER - NO INDIVIDUALLY IDENTIFIABLE HEALTH INFORMATION OR PROTECTED PERSONAL INFORMATION
5.1. As described in the Terms of Use, MSKCC will not accept responsibility for any Images, Annotations, or other information uploaded in any manner inconsistent with section 3 of the Terms of Use.
5.2. In this Privacy Policy, “Personally Identifiable Information” means, information which can be used to distinguish or trace an individual's identity, (including without limitation, name, email and/or street address, zip code, biometric records), either alone, or when combined with other personal or identifying information which is linked or linkable to a specific individual (including without limitation date and place of birth, mother’s maiden name, financial transactions, medical history, criminal history or employment history), or that is subject to heightened security requirements as a result of internal policies or practices or bylaw regulation (examples include but are not limited to the Health Insurance Portability and Accountability Act (“HIPPA”), the Gramm-Leach-Bliley Act (“GLBA”), or the Family Rights and Privacy Act (“FERPA”). The intended purpose of the Site is not to accept or use Personally Identifiable Information, except when a patient or subject has provided consent for his or her Image to be used on the Site in accordance with a corresponding Creative Commons license. With the exception of this specific circumstance, you should retain control of any Personally Identifiable Information and not disclose it to MSKCC or upload it to the Site.
6. CONTACTS
To contact us or provide any written notification, submit your information to the following:
Joanna Halperin
646-227-2621
To ensure that your request is handled in an effective manner, please provide your exact e-mail address, name, physical address, and/or telephone number(s).
END OF PRIVACY POLICY
Last Revised: October 3, 2016
We, Memorial Sloan Kettering Cancer Center (“MSKCC”), provide this Privacy Policy to inform users of our policies and procedures regarding the collection, use, and disclosure of personal information received from users of this Site, located at https://isdis.net/isic-project/public-image-archive-of-skin-lesions/ (the "Site"). References to MSKCC include "MSKCC Protected Parties", which means MSKCC and its subsidiaries, affiliates, partners, directors, officers, employees, agents, contractors, successors, licensees, or assignees (both jointly and severally).
This Privacy Policy may be updated from time to time for any reason; each version will apply to information collected while it was in place. We will notify you of any material changes to our Privacy Policy by posting the new Privacy Policy on our Site. As a user or contributor (each a "User") of this Site, you are advised to consult this Privacy Policy regularly for any changes. This Privacy Policy is integrated with and is a part of our Terms of Use.
By using our Site and/or agreeing to our Terms of Use, you are consenting to our processing of your information as set out in the Privacy Policy, as may be amended from time to time. In this Privacy Policy, "Processing" means using cookies on an electronic device (such as a computer) or using or touching information in any way, including, but not limited to, collecting, storing, deleting, using, combining, and disclosing information, all of which activities will take place in the United States. If you reside outside the U.S., your personal information will be transferred to the U.S., and processed and stored there under U.S. privacy standards. By visiting our Site and providing information to us, you consent to such transfer to, and Processing of your information in, the U.S.