GDPR Data processing modelInternal Employee Communication Management

PrivateMost common processing activitiesHuman resourcesPublic

This processing covers the management of internal employee communications, including internal newsletters, reminders of internal policies, and invitations to internal events.

Purposes (1)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

Management of internal communications

Newsletters, policy reminders, event invitations

Legitimate interest

Necessary for organisational management and employee engagement (Art. 6(1)(f) UK GDPR). Communications are proportionate, limited to employees, and directly linked to employment relationship.

Data categories (1)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Employee contact details

Data details

Emailrequired

First and last name of workerrequired

Job titlerequired

business phonerequired

Data conservation rules

Active base:

For the duration of employment.

Intermediate archiving:

Up to 2 years after employee departure

Aligned with ICO guidance on data minimisation and proportionality.

Destruction

Data subject (1)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

Employees

Created at:07/08/2023

Updated on:07/25/2025

Nb using:31

GDPR Data processing modelInternal Employee Communication Management

Purposes (1)

Data categories (1)

Employee contact details

Data subject (1)

Access the full processing template