GDPR Data processing modelWorkplace Access & Attendance Management
Purposes (4)
A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable
Data categories (3)
Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)
Meal payment data
Data details
Definition
in the exclusive form: hors d'oeuvres, dish, dessert, drink
Data conservation rules
Active base:
Active: 3 months for transaction reconciliation.
Intermediate archiving:
Intermediate: 5 years if linked to payroll deduction
Companies Act 2006 – accounting records
Destruction
Visitor data
Data details
Data conservation rules
Active base:
Active: 3 months
ICO best practice: visitor logs should be kept no longer than necessary for security purposes.
Destruction
Employee movement logs
Data details
Data conservation rules
Active base:
Active: 3 months maximum (proportionality and necessity test).
Destruction
Data subject (2)
A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process
- Employees
- Visitors
Attribution / Pas d'utilisation commerciale
CC-BY-NC
