Last updated: 8 August 2025
This privacy notice describes how the personal data of users of the Visita Smart mobile application, owned by Medical Cloud S.R.L., is managed and processed in accordance with Regulation (EU) 2016/679 (GDPR) and Italian personal data protection legislation.
⸻
1. Data controller
Medical Cloud S.R.L.
Centro Direzionale San Benedetto
Via Giovanni Paolo II, 92100 Agrigento – Italy
VAT number: 03015740842
Email: info@medicalcloud.it
The legal representative is Ivano Midulla.
⸻
2. Types of data collected
When you use Visita Smart, we may process:
• Identification and contact details: first name, surname, email address and telephone number.
• Technical data: device model, operating system and app usage logs.
• Health data (where provided by the user): information about appointments, reports, prescriptions, medical notes or other sensitive data.
• Communication data: messages or documents exchanged through the app's features.
Providing certain data may be mandatory in order to deliver the services.
⸻
3. Purposes of processing
Personal data is processed for:
1. Providing the app's services and managing appointments.
2. Compliance with legal obligations under national and EU legislation.
3. Administrative and contractual management of the relationship with the user.
4. Protecting the Controller's rights (e.g. debt recovery).
5. Commercial and informational purposes, only with the user's prior consent.
⸻
4. Legal basis for processing
Processing is based on:
• Performance of a contract (Article 6(1)(b) GDPR).
• Legal obligation (Article 6(1)(c) GDPR).
• Explicit consent for health data (Article 9(2)(a) GDPR).
• Legitimate interest in security and service improvement.
⸻
5. Processing methods and security
Data is processed manually and/or using electronic tools, in accordance with the principles of lawfulness, fairness, transparency and data minimisation.
Technical and organisational security measures are adopted to prevent unauthorised access, loss or improper disclosure.
⸻
6. Retention period
Data is retained:
• For the duration of the contractual relationship.
• Thereafter, for as long as required by legal obligations or to protect the Controller's rights.
• Health data is retained only for as long as strictly necessary for the purpose for which it was collected.
⸻
7. Disclosure of data
Data may be disclosed to:
• Authorised Medical Cloud S.R.L. personnel.
• Healthcare professionals involved in the service (with prior consent).
• Tax and administrative advisers.
• Competent authorities to comply with legal obligations.
⸻
8. User rights
Under Articles 13–14 and 15–22 GDPR, users may:
• Request access, rectification, erasure, restriction of processing or object to processing.
• Request data portability.
• Withdraw consent at any time.
• Lodge a complaint with the Italian Data Protection Authority.
To exercise your rights, write to: info@medicalcloud.it
