Javascript is required
logo-dastralogo-dastra

GDPR Data processing modelManagement of digital and telecom resources and means

PrivateIT and telecoms
This processing covers the provision, monitoring, and maintenance of corporate digital and telecommunications systems, including allocation of devices, usage monitoring, compliance oversight, and resolution of technical or security incidents.

Purposes (2)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

1
Provision, monitoring and maintenance of digital and telecom resources
Legitimate interest
Legitimate interests (UK GDPR Art. 6(1)(f)) — necessary for the functioning and security of company infrastructure; proportionate and with minimal privacy impact, per ICO security guidance.
2
Supervision of IT Charter compliance, incident management, performance analysis, and licence checks
Supervision of compliance with the IT Resources Usage Charter, incident prevention/management, performance analysis, and licence compliance
Legitimate interest
Legitimate interests — necessary to ensure contractual and regulatory compliance, investigate incidents, and protect company assets and data integrity

Data categories (6)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Connection data recorded to ensure the security and smooth operation of computer applications and networks

Data details


Logout date and timerequired
Date and time of connectionrequired
Identifierrequired

Data conservation rules

Active base:

12 months (security audit purposes).

Intermediate archiving:

Not applicable.

Destruction

Internal application/Internet connection logs

Data details


URLs accessed or automatically filteredrequired
connection timestamprequired
Resource Typeoptional
Identification of the workstation and user concernedrequired

Data conservation rules

Active base:

3 months rolling.

Intermediate archiving:

Retained longer only if subject to legal hold.

Destruction

Volumetric statistics

Data details


Volumetric statistics for the prevention or resolution of security incidentsrequired
Volumetric statistics for resolving technical malfunctionsrequired
Global and individualized volumetric statistics to verify compliance with the charterrequired

Data conservation rules

Active base:

3 months max; individualised data only for duration needed to resolve issues or confirm compliance.

Destruction

Resource allocation directories

Data details


Authentication datarequired
Identification of the beneficiary of the resources concernedrequired

Data conservation rules

Active base:

3 months post-resource return.

Destruction

Equipment loans

E.g. computer and telephone.

Data details


Loan reason and characteristicsrequired
Hardware identificationrequired
Beneficiary identificationrequired

Data conservation rules

Active base:

3 months post-return.

Destruction

Professional mobile fleet data

Data details


Track applications on phonerequired
billing datarequired
Call durationrequired
Timestamprequired
Numbers calledrequired
Identification of the telephone concerned and of the beneficiaryrequired

Data conservation rules

Active base:

3 months current.

Destruction

Data subject (3)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

  • Contractors
  • Employees
  • Other

Created at:07/08/2023

Updated on:07/10/2025

License: © Creative commons :
Attribution / Pas d'utilisation commerciale
CC-BY-NC AttributionPas d'utilisation commerciale

Nb using:0


Access the full processing template

Try Dastra now to access all of our data processing templates that you can customize for your organization.It's free and there's no obligation for the first 30 days (no credit card required)

Add to my data processings record
Subscribe to our newsletter

We'll send you occasional emails to keep you informed about our latest news and updates to our solution

* You can unsubscribe at any time using the link provided in each newsletter.