GDPR Data processing modelWorkplace access control, with biometric templates stored in database
By: Ludwig KarnethPurposes (2)
A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable
Data categories (3)
Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)
Employee travel data
Data details
Data conservation rules
Active base:
Items relating to people's movements must not be kept for more than 3 months
Data on employees' working lives
Data details
Data conservation rules
Active base:
Duration of employment contract
Employee identification data
Data details
Data conservation rules
Active base:
The biometric template may only be kept for the duration of the person's access authorization, and must be deleted when the person leaves.The categories of data relating to identity, professional life and parking management may, at most, be kept for five years after the departure of the person with long-term access authorization, and 3 months after the departure of persons with one-off access authorization.
Data subject (1)
A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process
- Employees
Attribution / Pas d'utilisation commerciale
CC-BY-NC
