GDPR Data processing modelGeolocation and Monitoring of Employee-Assigned Vehicles
Purposes (4)
A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable
Data categories (3)
Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)
Employee travel data
Data details
Data conservation rules
Active base:
Active use ≤ 3 months
proportionate under accountability principle; ICO employment data retention guidance.
Intermediate archiving:
For legal claims/security incidents: ≤ 6 months.
proportionate under accountability principle; ICO employment data retention guidance.
Destruction
Additional vehicle use data
Data details
Data conservation rules
Active base:
Active use ≤ 2 months. Normally 2 months. They may be kept for longer than two months : - if a specific regulation so provides - if such conservation is made necessary for purposes of proof of the performance of a service, when it is not possible to provide such proof by any other means. In this case, the retention period is set at one year, which does not preclude a longer retention period in the event of a dispute over the services provided - if the retention is carried out to keep a record of journeys for the purpose of optimizing tours, for a maximum period of one year. As part of the monitoring of working hours, only data relating to hours worked may be kept for a period of five years
Intermediate archiving:
Intermediate storage for service proof/disputes ≤ 1 year. Working time data (hours worked) may be retained up to 6 years for statutory records
Limitation Act 1980, HMRC requirements
Destruction
Employee identification data
Data details
Data conservation rules
Active base:
Active use ≤ 2 months. They may be kept for longer than two months : - if a specific regulation so provides - if such conservation is made necessary for purposes of proof of the performance of a service, when it is not possible to provide such proof by any other means. In this case, the retention period is set at one year, which does not preclude a longer retention period in the event of a dispute over the services provided - if the retention is carried out to keep a record of journeys for the purpose of optimizing tours, for a maximum period of one year. As part of the monitoring of working hours, only data relating to hours worked may be kept for a period of five years
Intermediate archiving:
Intermediate storage ≤ 1 year for disputes. Contact/ID data related to employment kept according to statutory employment record retention (up to 6 years post-employment)
Destruction
Data subject (1)
A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process
- Employees
Attribution / Pas d'utilisation commerciale
CC-BY-NC
