GDPR Data processing modelTraining

By: Dastro Naute

Human resources Private Public

This processing model is related to the management of training requests and training periods carried out and the organization of training sessions and evaluation of knowledge and training

Purposes (2)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

Management of training requests and completed training periods.

Contract

Organization of training sessions and evaluation of knowledge and training.

Legitimate interest

Response to training requests and follow-up by the employer.

Data categories (2)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Employee training

Data details

evaluation of knowledge and training required

organization of training sessions required

follow-up of vocational training requests and training periods completed required

foreign languages spoken required

certificates and attestations required

diplomas required

Data conservation rules

Active base:

Duration of the employment relationship

Intermediate archiving:

5 years after the employee leaves the organization

Employee's identity

Model taken from the CNIL's HR reference framework (deliberation no. 2019-160 of November 21, 2019 adopting a reference framework relating to the processing of personal data implemented for personnel management purposes)

Data details

Type of driver's license

required

Dependent children required

Marital status required

Family situation

required

Passport number required

Personal contact information

optional

Professional contact information

required

Nationality required

Photography (optional) optional

Date and place of birth required

Gender required

First name required

Last name

required

Data conservation rules

Active base:

The data necessary for personnel management are kept, in principle, for the duration of the employment relationship, unless otherwise provided by law or regulation.

Intermediate archiving:

5 years after the employee leaves the organization.

Destruction:

Manual removal

Data subject (1)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process