GDPR Data processing modelManagement of electrical diagnostic requests (teleworking in the private sector)

PrivateHuman resources

This processing model relates to the collection of information enabling the diagnosis to be carried out, the follow-up of requests and the management of estimates and invoicing in the context of teleworking in the private sector

Purposes (3)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

Collection of information for diagnosis

Legitimate interest

Under Art. 6(1)(f) UK GDPR, legitimate interest applies where processing is necessary for the purposes of a controller's or third party’s legitimate interests, provided that such interests are not overridden by the rights of data subjects. In this case, the employer has a legitimate interest in ensuring the suitability and safety of employees’ teleworking environments via diagnostic reports. A Legitimate Interests Assessment (LIA) should be carried out.

Follow-up requests

Legitimate interest

Following up on service requests is necessary to provide continuity of support and is directly connected to the initial diagnostic service. This supports the efficient management of employer obligations and employee needs under legitimate interest.

Quotation and Invoicing Management

Legitimate interest

This purpose relates to the financial and administrative processing of services already requested by the employee. It is reasonable and expected by data subjects, thus can be justified under legitimate interest, with limited impact on privacy. Financial processing is often accepted as a legitimate interest in employment and service contexts.

Data categories (1)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Electrical diagnosis request

Data details

Billing itemsrequired

Date of completion and electrical diagnosis reportrequired

Quoterequired

Professional contact detailsrequired

Personal data

required

Applicant identificationrequired

Data conservation rules

Active base:

The data is deleted on December 31st of the year in question.

Allows operational and financial processing within a calendar year.

Intermediate archiving:

Up to 3 additional years (limited access)

Defence of legal claims (e.g., negligence, breach of contract).

Destruction

Data subject (2)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

External Suppliers
Employees

Created at:07/08/2023

Updated on:06/21/2025

Nb using:3

GDPR Data processing modelManagement of electrical diagnostic requests (teleworking in the private sector)

Purposes (3)

Data categories (1)

Electrical diagnosis request

Data subject (2)

Access the full processing template