Health data is a special category under article 9 of the GDPR. In practice this means your club needs explicit legal basis, strict minimisation and functional separation between who records the clinical data and who takes sporting decisions. SAITO implements this out of the box.
Two layers, one reality
- Zdravstveni sloj: sportsko-zdravstveni karton, praćenje i razvoj pod stručnim nadzorom. Vidljivo samo ovlašćenom zdravstvenom osoblju.
- Operativni sloj: spreman, ograničen, van stroja, procenjen datum povratka. Vidljivo trenerima.
- Sportista i porodica: vide sopstveni kompletan karton, uz saglasnost.
Traceability and data residency
Every access to the clinical layer is logged: who, when, from where and for what. SAITO is designed for EU data residency, with encryption at rest and in transit. When an athlete leaves the club, their clinical file is anonymised following the applicable legal period.
What SAITO asks you to do
We support you with consent templates, a sport-adapted privacy policy and a records-of-processing register. The club remains the controller; SAITO acts as processor and signs the corresponding contract.
Compliance isn't improvised on inspection day. It's designed from the first click.
Želiš da vidiš kako se primjenjuje u tvom klubu?
Pogledaj proizvod ili postani Early Adopter za nove resurse.
