PRIVACY & COOKIE POLICY
Last Updated: September 2026
This Privacy and Cookie Policy describes how BookingsMed.com (operated by M&M Servizi s.r.l.s., Via G. Marconi 2178/2, 45030 Pontecchio Polesine (RO), Italy, VAT No. 01663570297) collects, uses, stores, and protects personal and health-related data collected through its platform, and details the use of cookies.
PART I – PRIVACY POLICY
1. DATA CONTROLLER AND PROCESSORS
Data Controller: M&M Servizi s.r.l.s. ("BookingsMed") acts as the Data Controller for general platform management, account maintenance, and infrastructure operation.
Independent Data Controllers: The Medical Institutions, Clinics, Doctors, or Facilitators ("Providers") selected by the User act as independent Data Controllers for the medical, administrative, and clinical handling of the booking requests received.
2. TYPES OF DATA COLLECTED
We collect and process the following categories of data:
Personal & Contact Identification: Full name, email address, phone number, date of birth, country of residence.
Health & Special Category Data: Information provided voluntarily in booking forms or clinical requests regarding medical conditions, preferred treatments, or medical records.
Technical & Usage Data: IP address, device specifications, browser type, and navigation logs.
3. DATA SECURITY & ENCRYPTION
BookingsMed implements strict technical and organizational security measures to guarantee data confidentiality and integrity:
Encrypted Transmission: All platform communications, interactive web forms, and notification emails are secured using end-to-end industry-standard encryption protocols (TLS/SSL).
Access Isolation: Access to backend administration panels is restricted through encrypted credentials and strict multi-tiered authorization protocols.
4. DATA STORAGE, ACCESS & RETENTION PROCEDURES
To facilitate international bookings and patient assistance, data is managed under the following rules:
Backend Admin Panels:
Provider Access: Booking files and user-submitted request data are saved directly inside the designated Provider's (Clinic, Doctor, or Facilitator) secure backend admin panel to enable treatment management and patient care.
Master Admin Access: A copy of the booking request is simultaneously stored in the master administrative panel of BookingsMed for audit, platform management, and system optimization purposes.
Data Retention & Automated Deletion:
Booking Requests: Textual booking logs and request details remain archived in backend admin databases for historical record-keeping and service continuity.
Document & Attachment Deletion (30-Day Rule): All uploaded files, clinical attachments, medical records, or identity documents submitted during the booking process are permanently and automatically deleted from our servers after thirty (30) days from submission. Providers are responsible for downloading necessary records to their own compliant clinical software within this timeframe.
5. LEGAL BASIS FOR PROCESSING
Data processing is justified under the following legal bases pursuant to Article 6 and Article 9 of the GDPR:
Contractual Necessity (Art. 6.1.b): Processing is necessary to process booking requests and connect Users with Providers.
Explicit Consent (Art. 6.1.a & Art. 9.2.a): Processing of health-related special category data requires explicit consent granted by the User at the time of form submission.
Legal Obligation (Art. 6.1.c): Retaining accounting logs and compliance documentation where required by applicable Italian and EU law.
6. USER RIGHTS UNDER GDPR
Users have the following statutory rights regarding their personal data:
Access & Rectification: The right to request copies of personal data and correct inaccuracies.
Erasure ("Right to be Forgotten"): The right to request data deletion, subject to statutory retention limits.
Restriction & Objection: The right to limit or object to specific processing activities.
Data Portability: The right to receive personal data in a structured, commonly used format.
To exercise these rights, please contact our Data Protection Office at: info@bookingsmed.com.
PART II – COOKIE POLICY
1. WHAT ARE COOKIES?
Cookies are small text files placed on your device by websites you visit to improve navigation efficiency, remember preferences, and provide analytical data.
2. TYPES OF COOKIES WE USE
Strictly Necessary / Technical Cookies:
Essential for platform operation, routing secure forms, enabling encryption sessions, and managing login authentications. These do not require user consent.
Functional Cookies:
Allow the platform to remember user choices (e.g., language selection, search parameters) for an enhanced experience.
Analytical / Performance Cookies:
Collect aggregated, anonymized statistical information regarding website usage, page views, and navigation patterns to help improve platform functionality.
Third-Party Cookies:
Third-party services integrated into the platform (such as secure payment cloud gateways or embedded media) may set independent cookies according to their respective privacy policies.
3. MANAGING COOKIE PREFERENCES
Users can manage, block, or delete cookies at any time through their web browser settings. Disabling essential technical cookies may impair platform performance or prevent access to booking features.
CONTACT INFORMATION
For questions regarding this Privacy and Cookie Policy or data management practices, please reach out to:
M&M Servizi s.r.l.s.
Via G. Marconi 2178/2, 45030 Pontecchio Polesine (RO), Italy
Email: info@bookingsmed.com
Website: www.bookingsmed.com
