GDPR Data processing modelSupplier File Management – Accounts Payable & Vendor Records
Purposes (5)
A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable
Data categories (2)
Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)
Billing and settlement data
Data details
Data conservation rules
Active base:
Active database: duration of contract + current financial year.
Intermediate archiving:
Intermediate archive: 6 years after financial year-end
in line with Companies Act 2006 and Limitation Act 1980 (UK retention rules).
Destruction
Supplier identification data
Data details
Data conservation rules
Active base:
Active database: for the duration of the supplier relationship.
Intermediate archiving:
Intermediate archive: 6 years post-contract termination for audit and compliance.
Destruction
Data subject (1)
A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process
- External Suppliers
Attribution / Pas d'utilisation commerciale
CC-BY-NC
