Legal & Platform Policies.Νομικά & Πολιτικές Πλατφόρμας.

The following information is published pursuant to Article 47 of Greek Law 4072/2012 on corporate transparency.Τα ακόλουθα στοιχεία δημοσιεύονται σύμφωνα με το άρθρο 47 του Ν. 4072/2012 περί εταιρικής διαφάνειας.

The company's annual financial statements will be published on this page as required by law.Οι ετήσιες οικονομικές καταστάσεις της εταιρείας θα αναρτώνται στην παρούσα σελίδα σύμφωνα με τον νόμο.

Welcome to OmniDerma. These Terms of Service (“Terms”) govern access to and use of the OmniDerma platform, including its web application, AI-assisted systems, clinical workflow tools, reporting features, and related services (collectively, the “Platform”).

By accessing or using OmniDerma, you agree to these Terms. If you do not agree, you must not use the Platform.

1. About OmniDerma

OmniDerma is a physician-led digital platform designed to support clinical organization, structured review, educational analysis, and clinician-facing reasoning workflows in dermatology and related medical contexts.

The Platform may include tools for case organization, image review, clinical note structuring, differential-diagnosis support, AI-assisted reasoning, probability-aware outputs, follow-up organization, and related workflow features.

OmniDerma is intended for use by qualified healthcare professionals and authorized professional users only.

2. Regulatory Status

OmniDerma is currently not CE-marked as a medical device under Regulation (EU) 2017/745.

Unless and until OmniDerma receives applicable regulatory clearance or certification for a specific intended medical purpose, the Platform is provided for professional educational, research, documentation-support, workflow-support, and non-autonomous review purposes only.

OmniDerma must not be used as a substitute for professional medical judgment. It must not be used as an autonomous diagnostic system, treatment decision system, emergency triage system, or patient-management system.

3. Eligibility and Access

Use of OmniDerma is restricted to:

• licensed healthcare professionals;
• healthcare trainees under appropriate supervision;
• authorized clinical or research collaborators;
• other professional users explicitly approved by OmniDerma administrators.

Access is controlled through an approval-based account system.

You agree that all registration information is accurate, that you will maintain account security, that you will not share access with unauthorized individuals, and that you will promptly report suspected unauthorized access or misuse.

Authentication may be provided through third-party services, including Google Accounts.

OmniDerma may approve, deny, suspend, restrict, or revoke access where appropriate, including in cases involving misuse, security concerns, policy violations, or inappropriate clinical use.

4. Professional Responsibility

OmniDerma is intended to support, not replace, physician judgment, clinical evaluation, histopathology, established clinical guidelines, or independent medical decision-making.

All outputs generated by the Platform require interpretation, validation, and independent professional judgment by a qualified healthcare professional.

The licensed healthcare professional using the Platform remains solely responsible for clinical interpretation, diagnosis, treatment decisions, patient communication, record keeping, follow-up, escalation, and compliance with applicable laws, professional duties, and clinical standards.

5. No Autonomous Decision-Making

OmniDerma outputs must not be treated as final clinical decisions.

The Platform may assist with organizing information, generating structured reasoning, identifying possible considerations, and supporting review, but it does not independently diagnose, treat, prescribe, triage, or manage patients.

OmniDerma does not provide medical advice directly to patients. Patients must not rely on OmniDerma outputs for diagnosis, treatment, or emergency decisions.

In a medical emergency, users must contact the appropriate emergency medical services immediately.

6. User Content and Patient Data

Users may upload or enter clinical images, dermoscopic images, text notes, case metadata, follow-up information, and other relevant material (“User Content”).

You retain ownership of your User Content. By uploading content to OmniDerma, you grant OmniDerma a limited license to store, process, analyze, display, and use such content solely as necessary to operate the Platform, provide requested outputs, maintain system functionality and security, support review and quality workflows, and improve platform performance using de-identified or aggregated data where appropriate.

Users are responsible for ensuring that they have the lawful basis, authority, consent, or professional justification required to upload or process any material through the Platform.

Users should avoid uploading directly identifiable patient information unless strictly necessary and lawful.

7. Acceptable Use

Users must not use OmniDerma:

• for unlawful, fraudulent, or unprofessional purposes;
• to provide direct-to-patient automated diagnosis or treatment;
• as an emergency decision-making system;
• to upload material they are not authorized to process;
• to attempt unauthorized access to systems or accounts;
• to reverse engineer, disrupt, scrape, overload, or misuse the Platform;
• to misrepresent OmniDerma as CE-marked or certified for clinical use where such certification has not been granted;
• to present AI-generated outputs as definitive medical conclusions without professional review.

8. Platform Updates and Changes

OmniDerma may update, maintain, improve, suspend, modify, or discontinue platform features as part of ongoing development, maintenance, security, compliance, regulatory preparation, or operational needs.

9. Security

OmniDerma implements reasonable technical and organizational measures intended to protect platform data and system integrity.

However, no digital platform or internet-based service can guarantee absolute security.

Users are responsible for maintaining device security, protecting account credentials, using appropriate clinical environments, and avoiding unauthorized disclosure of sensitive information.

10. Limitation of Liability

To the maximum extent permitted by applicable law, OmniDerma and its operators, developers, affiliates, contributors, and licensors shall not be liable for clinical decisions made by users, diagnostic or treatment outcomes, reliance on AI-generated outputs, documentation errors, professional actions taken by users, or indirect, incidental, consequential, special, or punitive damages.

The Platform is provided without warranties of diagnostic accuracy, clinical completeness, suitability for a specific clinical outcome, or fitness for a particular purpose.

Nothing in these Terms excludes liability that cannot legally be excluded under applicable law.

11. Suspension and Termination

OmniDerma may suspend, restrict, or terminate access to the Platform where these Terms are violated, misuse is suspected, security concerns arise, access is no longer appropriate, or administrative approval is withdrawn.

Users may discontinue use of the Platform at any time. Certain provisions of these Terms, including liability limitations and data-related provisions, shall survive termination where applicable.

12. Intellectual Property

The OmniDerma Platform, including its software, branding, interface design, workflows, text, graphics, naming, and proprietary systems, is protected by applicable intellectual property laws and is owned by OMNIDERMA ΜΟΝΟΠΡΟΣΩΠΗ Ι.Κ.Ε. / OMNIDERMA SINGLE MEMBER P.C. or its licensors.

Except as expressly permitted, users may not reproduce, distribute, modify, reverse engineer, or commercially exploit Platform materials without written authorization.

User-uploaded clinical content remains the property of the respective user or rights holder.

13. Privacy

Use of the Platform is also governed by the OmniDerma Privacy Policy. Users should review it carefully to understand how information is collected, processed, stored, and protected.

14. Changes to These Terms

OmniDerma may update these Terms periodically to reflect changes in the Platform, legal requirements, regulatory planning, infrastructure, or business operations.

Updated versions will be posted through the Platform or associated websites. Continued use of the Platform after updates become effective constitutes acceptance of the revised Terms, where legally permitted.

15. Governing Law

These Terms shall be governed by and interpreted in accordance with the laws applicable in Greece and, where applicable, relevant European Union regulations.

16. Contact Information

For questions regarding these Terms or the OmniDerma Platform, contact: info@omniderma.health.

This Privacy Policy explains how OmniDerma collects, uses, stores, and protects information through the OmniDerma platform and related services (the “Platform”).

OmniDerma is a physician-led AI-assisted platform intended for use by approved healthcare professionals and authorized professional users.

By using the Platform, you acknowledge the practices described in this Privacy Policy.

1. Scope of This Policy

This Privacy Policy applies to information processed through OmniDerma, including user account information, uploaded clinical and dermoscopic images, patient-related metadata, AI-generated outputs and reports, technical and usage information, and communications related to platform administration or security.

This Policy should be read together with the OmniDerma Terms of Service and Medical Disclaimer.

2. Data Controller

For account administration, platform access, billing or subscription administration, security, communication, and general platform operation, the data controller is OMNIDERMA ΜΟΝΟΠΡΟΣΩΠΗ Ι.Κ.Ε. / OMNIDERMA SINGLE MEMBER P.C.

Contact for privacy requests: info@omniderma.health.

For clinical material uploaded by professional users relating to their own patients, the professional user, clinic, hospital, institution, or organization may remain the primary controller of that data, while OmniDerma may act as a processor or service provider for the purpose of providing platform functionality.

Where required, the exact controller/processor relationship should be governed by a separate agreement between OmniDerma and the professional user or organization.

3. Information We May Process

Depending on how the Platform is used, OmniDerma may process:

• account information, such as name, email address, login method, user role, and access permissions;
• authentication data, including Google login identifiers where applicable;
• technical data, such as IP address, browser/device information, timestamps, security logs, and usage logs;
• platform activity data, such as uploaded cases, prompts, outputs, feedback, and workflow interactions;
• clinical material uploaded by users, including images, dermoscopic images, clinical notes, metadata, case descriptions, follow-up information, and AI-generated outputs;
• communication data, such as emails or support requests sent to OmniDerma.

Uploaded clinical material may include health-related data and may therefore constitute special category personal data under GDPR where it identifies, or can reasonably be linked to, an individual.

4. Purposes of Processing

OmniDerma may process data to provide access to the Platform, authenticate users, manage accounts, deliver platform functionality, generate requested outputs, store user-entered case information where required by a feature, maintain security, prevent misuse, investigate technical issues, improve platform reliability and usability, communicate with users, comply with legal or regulatory obligations, and support research, development, validation, quality improvement, safety monitoring, and regulatory preparation where lawful and appropriate.

5. Legal Bases

Depending on the processing activity, OmniDerma may rely on one or more of the following legal bases:

• performance of a contract or pre-contractual steps;
• legitimate interests, including platform security, service improvement, fraud prevention, and professional user support;
• compliance with legal obligations;
• consent, where specifically requested and required;
• for special category health-related data, an applicable GDPR Article 9 condition where required, such as explicit consent, healthcare/professional obligations, research purposes, or another lawful basis determined by the professional controller or applicable agreement.

Professional users are responsible for ensuring that they have an appropriate legal basis for uploading or processing patient-related material through OmniDerma.

6. Data Minimization and Patient Privacy

Users should avoid entering directly identifiable patient information unless necessary for a lawful, professional, and documented purpose.

Where possible, users should pseudonymize or minimize patient-related information before uploading it to the Platform.

Users should avoid uploading patient names, dates of birth, identification numbers, contact information, identifiable documents, or unnecessary identifying features where avoidable.

7. AI Processing and Automated Systems

OmniDerma uses artificial intelligence and algorithmic systems to assist with workflow support, educational review, structured reasoning, and clinical analysis.

Uploaded data may be processed by AI systems in order to generate risk estimations, differential considerations, analytical summaries, clinical support outputs, reports, and workflow suggestions.

AI-generated outputs may be inaccurate or incomplete and do not replace physician judgment. All outputs require independent clinical interpretation and validation.

8. Data Sharing and Subprocessors

OmniDerma may use trusted infrastructure and service providers to operate the Platform, including hosting, database, authentication, security, monitoring, email, and AI infrastructure providers.

These providers may process data only as necessary to provide their services to OmniDerma.

OmniDerma does not sell personal information or uploaded clinical data.

A current list of key subprocessors may be published on this page or made available upon request.

9. International Transfers

Some providers used by OmniDerma may process data outside the European Economic Area.

Where such transfers occur, OmniDerma aims to rely on appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses, data-processing agreements, provider security commitments, and other safeguards required by applicable data-protection law.

10. Retention

OmniDerma retains personal data only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

Retention periods may vary depending on the type of data, the platform feature used, user account status, legal obligations, security needs, and applicable agreements.

Users may request deletion of account-related data, subject to legal, technical, contractual, security, and regulatory limitations.

11. Security

OmniDerma uses technical and organizational measures designed to protect data against unauthorized access, loss, misuse, alteration, or disclosure.

No digital platform can guarantee absolute security, and users remain responsible for using the Platform in a secure and professional manner.

12. User Rights

Subject to applicable law and limitations, users may have the right to access their personal data, request correction, request deletion, restrict processing, object to processing, request data portability, withdraw consent where processing is based on consent, and lodge a complaint with the competent data-protection authority.

In Greece, the competent supervisory authority is the Hellenic Data Protection Authority / Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα.

Requests may be sent to: info@omniderma.health.

13. Children and Minors

OmniDerma is intended solely for professional or authorized use and is not directed toward children or minors.

14. Policy Updates

OmniDerma may update this Privacy Policy from time to time to reflect changes in the Platform, legal requirements, regulatory status, infrastructure, or business operations.

The latest version will be published on this page with an updated date.

15. Contact Information

For questions regarding this Privacy Policy or data handling practices, contact: info@omniderma.health.

OmniDerma may use necessary cookies or similar technologies for login, authentication, session management, security, and platform functionality.

If OmniDerma uses analytics, marketing, tracking, or other non-essential cookies in the future, users will be provided with appropriate notice and, where required, consent options.

Users can control cookies through their browser settings, but disabling necessary cookies may affect platform functionality.

OmniDerma may rely on third-party providers for technical operation of the Platform. These may include providers for cloud hosting, database hosting, authentication, AI model infrastructure, email communication, monitoring, security, and error logging.

Current key providers may include:

• Render or equivalent hosting infrastructure;
• PostgreSQL database infrastructure;
• Google authentication services;
• AI model/API providers used to generate requested platform outputs;
• monitoring, security, or email providers used for platform operation.

This list may change as the Platform evolves. Updated subprocessor information may be provided on this page or upon request.

OmniDerma is a physician-led AI-assisted platform intended to support qualified healthcare professionals and authorized users through workflow support, analytical tools, structured reasoning, and educational assistance.

Regulatory Status

OmniDerma is currently not CE-marked as a medical device under Regulation (EU) 2017/745.

Unless and until applicable regulatory clearance or certification is completed for a specific intended medical purpose, OmniDerma is provided for professional educational, research, documentation-support, workflow-support, and non-autonomous review purposes only.

Not a Diagnostic Authority

OmniDerma does not provide definitive medical diagnoses and must not be used as an autonomous diagnostic system, treatment decision system, emergency triage system, or patient-management system.

The Platform does not replace physician judgment, clinical evaluation, histopathology, laboratory testing, imaging, specialist consultation, follow-up, escalation of care, or standard medical practice.

All outputs generated by OmniDerma require independent interpretation and validation by a qualified healthcare professional.

AI Limitations

OmniDerma incorporates artificial intelligence and algorithmic systems that may generate differential considerations, risk estimations, clinical summaries, probabilistic outputs, workflow-support suggestions, or educational explanations.

AI-generated outputs may be incorrect, incomplete, inconsistent, misleading, outdated, biased, or clinically inappropriate in certain contexts. False positives and false negatives may occur. The Platform may fail to detect clinically significant findings.

Human Oversight Is Required

Clinical decisions must not be based solely on AI-generated outputs.

The treating clinician remains solely responsible for clinical interpretation, diagnostic decisions, treatment planning, follow-up decisions, escalation of care, patient communication, and documentation.

Histopathology and Standard Care

Where clinically indicated, biopsy and histopathologic evaluation remain the appropriate diagnostic standards for neoplastic and other dermatologic conditions.

OmniDerma is not intended to replace histopathology, established clinical guidelines, or standard medical procedures.

No Emergency or Autonomous Use

OmniDerma is not intended for emergency medical triage, autonomous diagnosis, autonomous treatment decisions, critical life-support decisions, or unsupervised patient-facing use.

In a medical emergency, users must contact the appropriate emergency medical services immediately.

Patient-Facing Use

OmniDerma does not provide medical advice directly to patients. Patients must not rely on OmniDerma outputs for diagnosis, treatment, or emergency decisions.

User Responsibility

Users are responsible for exercising independent clinical judgment, verifying outputs appropriately, obtaining patient consent where required, using the Platform lawfully and ethically, and complying with applicable professional and privacy obligations.

Welcome to OmniDerma. Before using the Platform, please review the following important points carefully.

OmniDerma Is Supportive, Not Autonomous

OmniDerma is designed to assist healthcare professionals through AI-assisted workflows, structured review, and analytical tools.

The Platform is intended to support — not replace — physician judgment, clinical evaluation, histopathology, or established medical standards of care.

Regulatory Status

OmniDerma is currently not CE-marked as a medical device. Until applicable regulatory clearance or certification is completed, it is provided for professional educational, research, documentation-support, workflow-support, and non-autonomous review purposes only.

AI Outputs May Be Incorrect

OmniDerma may generate risk estimations, differential considerations, analytical summaries, clinical support outputs, reports, and workflow suggestions.

AI-generated outputs may be incomplete, inaccurate, misleading, or clinically inappropriate. False positives and false negatives can occur.

All outputs require independent interpretation and validation by a qualified healthcare professional.

Clinical Responsibility Remains With the User

Use of OmniDerma does not transfer clinical responsibility to the Platform.

Users remain solely responsible for clinical decisions, diagnostic interpretation, treatment planning, patient communication, documentation, follow-up, and escalation decisions.

Biopsy, histopathology, laboratory evaluation, imaging, and specialist consultation remain appropriate where clinically indicated.

Avoid Uploading Identifiable Patient Information

Users should make reasonable efforts to avoid uploading directly identifiable patient information whenever possible.

Please avoid including patient names, dates of birth, identification numbers, contact information, identifiable documents, or unnecessary identifying features.

Users are responsible for obtaining appropriate patient consent and complying with applicable privacy laws and professional obligations.

Approved Use Only

OmniDerma is intended for approved users, including healthcare professionals and authorized collaborators.

Unauthorized access, misuse, credential sharing, or attempts to bypass security controls are prohibited.

Platform Evolution

OmniDerma is an evolving platform. Features, workflows, and AI systems may change over time as part of ongoing development, maintenance, security, compliance, and regulatory preparation.

Privacy and Security

OmniDerma implements reasonable safeguards intended to protect platform integrity and stored information.

However, no online system can guarantee absolute security. Users are responsible for maintaining secure devices, account credentials, and appropriate clinical environments.

Acceptance

By continuing to use OmniDerma, you acknowledge that you have read and understood the Terms of Service, Privacy Policy, Medical Disclaimer, and related platform policies, and agree to use the Platform responsibly and professionally.

OmniDerma is designed as a physician-oriented AI-assisted platform intended for responsible professional use.

This page outlines important security expectations and responsible-use principles for all users of OmniDerma.

1. Professional Use Expectations

OmniDerma is intended for healthcare professionals, authorized trainees, approved collaborators, and authorized educational or research use.

Users are expected to use the Platform professionally, ethically, and lawfully.

2. Account Security

Users are responsible for maintaining secure passwords and authentication methods, protecting account access, preventing unauthorized account use, logging out of shared or public devices, and reporting suspected security concerns promptly.

Credential sharing is prohibited.

3. Responsible Clinical Use

Users must independently verify AI-generated outputs, exercise professional judgment at all times, avoid relying exclusively on AI analysis, use appropriate clinical escalation when indicated, and continue following established medical standards of care.

OmniDerma is not intended to replace histopathology, physician judgment, specialist consultation, or standard medical procedures.

4. Patient Privacy and Data Minimization

Users should make reasonable efforts to avoid uploading directly identifiable patient information whenever possible.

Avoid uploading names, dates of birth, identification numbers, contact details, identifiable documents, or unnecessary identifying features.

Users remain responsible for obtaining appropriate patient consent and complying with applicable privacy obligations.

5. Platform Security

OmniDerma implements reasonable safeguards intended to support platform integrity and data protection, including measures related to access control, authentication, administrative restrictions, monitoring, logging, and infrastructure security.

However, no digital system can guarantee absolute security.

6. Prohibited Activities

Users must not attempt unauthorized access, circumvent platform restrictions, reverse engineer systems, upload malicious files or code, misuse AI-generated outputs, scrape or extract platform data without authorization, use the Platform for unlawful purposes, or share access with unauthorized individuals.

7. AI Transparency and Limitations

AI-generated outputs may be inaccurate, incomplete, outdated, biased, or clinically inappropriate in certain contexts. False positives and false negatives may occur.

All outputs require human oversight and independent clinical interpretation.

8. Reporting Concerns

Users are encouraged to report security concerns, suspected unauthorized access, technical vulnerabilities, platform misuse, or significant AI-output concerns. This helps improve platform reliability, safety, and integrity over time.

9. Evolving Security Practices

As OmniDerma evolves, security measures, workflows, and operational policies may continue to develop and improve over time.

This Data Retention Policy describes the general principles used by OmniDerma regarding storage and retention of platform-related information.

1. Purpose

OmniDerma retains certain information in order to operate platform functionality, maintain user accounts, support professional workflows, preserve system integrity and security, improve platform reliability, and comply with applicable legal obligations.

Retention practices may evolve as the Platform develops.

2. Categories of Stored Information

Information retained by OmniDerma may include user account information, authentication-related data, uploaded clinical and dermoscopic images, patient-related metadata, AI-generated outputs and reports, feedback and verification records, technical logs, and security events.

Uploaded clinical material may include health-related data and may therefore constitute special category personal data where it identifies, or can reasonably be linked to, an individual.

3. General Retention Principles

OmniDerma aims to retain information only for as long as reasonably necessary for operational, professional, security, legal, or regulatory-preparation purposes.

Retention duration may depend on active platform usage, security monitoring requirements, workflow continuity, system backup practices, legal obligations, regulatory planning, and applicable agreements.

4. User Accounts

Account-related information may remain stored while an account is active or administratively maintained.

Accounts that are inactive, revoked, or removed may continue to exist in backups or administrative records for a reasonable period where necessary for security, abuse prevention, auditability, system recovery, legal compliance, or administrative needs.

5. Uploaded Clinical Content

Uploaded images, metadata, reports, and related analysis data may be retained in order to preserve workflow continuity, maintain historical records where enabled, support verification systems, improve internal quality-control processes, and maintain platform functionality.

Users should avoid uploading directly identifiable patient information whenever possible.

6. AI Outputs and Verification Systems

AI-generated outputs, clinician feedback, and verification workflows may be retained for internal quality improvement, system validation, performance monitoring, case-review workflows, regulatory preparation, and educational or analytical purposes using minimized, pseudonymized, anonymized, or aggregated information where appropriate.

7. Security and Technical Logs

Technical logs, authentication logs, and security-related records may be retained for operational and security purposes, including detecting unauthorized access, investigating misuse, diagnosing technical problems, and preserving platform integrity.

8. Deletion Requests

Users may request deletion of account-related information, subject to security requirements, operational limitations, backup retention cycles, legal obligations, contractual limitations, regulatory considerations, and legitimate administrative needs.

Deletion from active systems may not immediately remove information from backups or archived systems.

9. Future Policy Updates

As OmniDerma evolves, more detailed retention schedules and operational policies may be introduced.

Updated versions of this Policy may be published periodically.