Privacy Notice

Matthew Camilleri, a sole trader in Malta trading as Sistemi Umani(“we”, “us”, “our”), is the data controller for the personal data described here.

For any question about this notice or your data, contact us at privacy@sistemiumani.com.

We collect only what a service genuinely needs (data minimisation):

Identity & contact details

• Name, date of birth, gender, phone number, and address.
• Account credentials — your email and a securely hashed password, managed by our authentication provider. We never see your password in plain text.

Health data (special-category data)

• Clinical records created during your care: appointment history, practitioner session notes, measurements and assessments, treatment goals, and any documents you or your practitioner upload (e.g. scans or referral letters).
• In a later phase, and only with your separate explicit consent: biometric signals from connected wearable devices (e.g. heart-rate variability).

Booking & technical data

• Your appointments and the practitioner involved in your care.
• Standard information needed to operate and secure the service (e.g. a session cookie that keeps you logged in).

• Directly from you — when you register, book, or provide information.
• From your practitioner — clinical notes and assessments recorded during the care we provide to you.
• From a device you choose to connect — biometric readings, in a later phase, under separate explicit consent.

We rely on the following lawful bases. Because health data is special-category data, we identify both a general basis (Article 6) and an additional condition that permits special-category processing (Article 9):

Your clinical record is processed for the provision of health care under Article 9(2)(h) GDPR, by or under the responsibility of a practitioner subject to an obligation of professional secrecy (Article 9(3)). This reflects Maltese law — the Health Act (Cap. 528), the Professional Secrecy Act (Cap. 377) and the Medical and Kindred Professions Act (Cap. 31). We do not rely on your consent to hold your clinical record, so that record is not lost if you later withdraw an optional consent.

Where we do rely on consent (optional emails, and future wearable data), it is explicit, unbundled and recorded, and you can withdraw it at any time (see section 9). Withdrawal does not affect processing already carried out.

• Your care team — our practitioners and authorised clinical staff, who work as one team. Access is technically enforced (role-based access control and row-level security), and every access to and change of a clinical record is recorded in an audit log.
• We do not sell your data and do not share it for third-party marketing.
• Your practitioner’s own calendar.A practitioner may connect their Google Calendar so that their Sistemi Umani appointments appear alongside the rest of their working day. Where they have, we write your appointment’s date, time and location — and your name, unless they have switched that off — into a separate calendar named “Sistemi Umani” inside their Google account. Nothing clinical is ever written there: no notes, no history, no reason for the appointment. In the other direction we receive only busy and free time from their calendar, so that you are not offered an hour they are already committed elsewhere — we cannot see what those commitments are.
• We share data with the service providers that operate the platform on our behalf (section 7), only as needed to run the service and under a written data-processing agreement.
• We may disclose data where the law requires it (e.g. a valid legal request).

Your data is hosted within the European Union (our database and file storage are EU-region hosted). It is encrypted in transit (HTTPS) and at rest. Where a provider processes data outside the EEA, that transfer is covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

We use a small number of carefully selected providers to deliver the platform, each under a data-processing agreement. We will update this list before introducing a new provider (for example, a payment processor):

The Google Calendar connection is switched on by an individual practitioner, for their own account, and can be disconnected by them at any time. When it is disconnected we delete the connection and everything we had mirrored from it.

We keep personal data only as long as necessary for the purposes above and to meet our legal and professional obligations.

• Clinical records are kept for 10 years from your last clinical encounter (or 10 years after death, where known). This mirrors the standard applied across the Maltese public health service and the GDPR storage-limitation principle (Art. 5(1)(e)).
• For minors, the retention period runs from the date the patient reaches the age of majority.
• Account and booking data not forming part of the clinical record is kept for the life of your account and a reasonable period afterwards.

Because we are legally required to retain medical records, they cannot simply be deleted on request — but they can be closed and hidden from active use. After the retention period, data is securely deleted or anonymised.

Under the GDPR you have the right to:

• Access a copy of your data;
• Rectify inaccurate data;
• Eraseyour data (“right to be forgotten”), subject to the medical-record retention obligations above;
• Restrict or object to certain processing;
• Data portability — receive your data in a portable format;
• Withdraw consent at any time, where processing is based on consent;
• Complain to the supervisory authority.

To exercise any of these, contact us at privacy@sistemiumani.com. We will respond within the time required by law (generally one month).

You also have the right to lodge a complaint with Malta’s supervisory authority, the Information and Data Protection Commissioner (IDPC):

Level 2, Airways House, High Street, Sliema SLM 1549, Malta
idpc.info@gov.mt · +356 2328 7100 · idpc.org.mt

A cookie is a small file the site stores in your browser. We use three kinds.

Essential cookies need no consent, because the site cannot work without them. Analytics and advertising cookies are set only after you choose Accept in the banner, and you can withdraw either at any time from the Cookies link in the footer. The data is aggregated statistics about visits to the public pages. Nothing from your clinical record, your appointments or your account is sent to Google.

In Malta, the age of digital consent is 16. Where we provide care to someone under 16, a parent or guardian gives and manages consent on their behalf, and we use age-appropriate safeguards.

We may update this notice as the platform evolves. We will post the updated version here and update the effective date. Where a change materially affects how we use your data, we will tell you and, where required, ask for your consent again.

Matthew Camilleri, trading as Sistemi Umani
privacy@sistemiumani.com

See also our Terms of Service.