Health data is a special category under article 9 of the GDPR. In practice this means your club needs explicit legal basis, strict minimisation and functional separation between who records the clinical data and who takes sporting decisions. SAITO implements this out of the box.
Two layers, one reality
- Healthcare layer: sports-health record, follow-up and evolution under professional supervision. Only visible to authorised healthcare staff.
- Operational layer: fit, restricted, out, estimated return date. Visible to coaches.
- Athlete and family: see their own complete file, with their consent.
Traceability and data residency
Every access to the clinical layer is logged: who, when, from where and for what. SAITO is designed for EU data residency, with encryption at rest and in transit. When an athlete leaves the club, their clinical file is anonymised following the applicable legal period.
What SAITO asks you to do
We support you with consent templates, a sport-adapted privacy policy and a records-of-processing register. The club remains the controller; SAITO acts as processor and signs the corresponding contract.
Compliance isn't improvised on inspection day. It's designed from the first click.
Want to see how it applies to your club?
Explore the product or join our Early Adopters to get new resources.
