[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0HtutdO-1eZaJ_1D_ELy7g-8W2QJ8gYH4u-_Mo_5f8U":3},{"assets":4,"attachments":5,"tags":6,"dataRetentionRules":24,"creatorUser":28,"creatorUserId":28,"updatedBy":28,"updatedById":28,"publishedBy":28,"publishedById":28,"areaOwnerId":28,"owners":154,"customFields":155,"area":156,"entity":160,"mergedFrom":28,"workflowStep":175,"accountables":181,"responsibles":182,"informedOwners":183,"securityMeasures":184,"personCategories":218,"id":32,"source":50,"label":33,"state":180,"versionDescription":28,"processingType":39,"parentId":28,"areaId":38,"mergeType":28,"readonly":29,"editable":44,"workflowStepId":176,"dateDeployment":28,"dateCreation":37,"dateArchived":28,"datePublication":230,"archived":29,"dateUpdate":36,"reviewDate":231,"nextReviewDate":28,"ref":28,"processingState":28,"description":34,"descriptionHtml":28,"subjectRightProcessDescription":28,"rightOfInformation":28,"rightOfAccess":28,"rightOfRectification":28,"rightOfErasure":28,"rightOfRestriction":28,"rightOfOpposition":28,"rightOfDataPortability":28,"advanceDirectives":28,"advanceDirectivesDescription":28,"rightOfInformationDescription":28,"rightOfAccessDescription":28,"rightOfRectificationDescription":28,"rightOfErasureDescription":28,"rightOfRestrictionDescription":28,"rightOfOppositionDescription":28,"rightOfDataPortabilityDescription":28,"stakeHolders":232,"assessmentScoring":28,"automaticDecision":28,"systematicMonitoring":28,"specialCategoryData":28,"largeScaleCollection":28,"crossReferencing":28,"vulnerablePeople":28,"isDPIARequired":29,"dpiaDate":28,"dpiaExemption":44,"dpiaExemptionJustification":233,"innovativeUse":28,"exclusionBenefitRightContract":28,"recipients":234,"dataControllers":256,"purposes":257,"progression":270,"quality":271,"sensitivity":272,"visible":44,"workspaceId":35,"nbReferences":272,"referenceId":28},[],[],[7,12,16,20],{"id":8,"label":9,"type":10,"color":11},"40c19fa3-a18b-42af-b672-092b0d6305a6","Private","DataProcessing","#ffc107",{"id":13,"label":14,"type":10,"color":15},"aa12baff-27b3-4bea-9130-9f5b909a521b","Human resources","#1e8ee1",{"id":17,"label":18,"type":10,"color":19},"797b56ce-434d-4873-9321-a3b0895269ec","Public","#17a2b8",{"id":21,"label":22,"type":10,"color":23},"92af3d3e-f506-4e02-9cad-66a8a0bcfeee","Most common processing activities","#51EB02",[25,73,121],{"customFields":26,"tags":27,"creator":28,"readonly":29,"purposes":28,"dataProcessings":30,"dataFields":40,"asset":28,"subjectCategories":62,"id":63,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":64,"description":28,"dateCreation":65,"dateUpdate":66,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":67,"baseActiveLegalBasis":68,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":69,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":70,"destructionLegalBasis":28,"dataSetSource":71,"sourceDescription":72,"assetId":28,"source":50},{},[],null,false,[31],{"id":32,"label":33,"ref":28,"description":34,"workspaceId":35,"archived":29,"dateUpdate":36,"dateCreation":37,"areaId":38,"processingType":39},"dce280ce-1b33-4309-8694-a308374aecb3","Business Expense Tracking and Reimbursement Management","Processing of employee personal and financial data for the purpose of recording, verifying, and reimbursing business expenses in line with contractual obligations and tax/accounting requirements.\n\nEmployers are required to maintain accurate expense and payroll records under:\n- Employment Rights Act 1996 (payment of wages and expense entitlements).\n- Income Tax (PAYE) Regulations 2003 and Corporation Tax Act 2009 (tax treatment of expenses).",71,"2025-09-01T16:35:43.8913261","2023-08-08T12:03:56.6032638",116,"Default",[41,51,57],{"id":42,"customFields":43,"ref":28,"archivingPolicy":28,"required":44,"label":45,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":46,"personalDataCategory":47,"dataType":28,"dateCreation":48,"dateUpdate":28,"creator":28,"workflowStepId":49,"workflowStep":28,"source":50},"1efd8f80-d849-48ab-ae6a-39bf52f05dd3",{},true,"Justification of expenses","Current","EconomicFinancialData","2023-08-08T12:03:58.3585676",83447,"Intern",{"id":52,"customFields":53,"ref":28,"archivingPolicy":28,"required":44,"label":54,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":46,"personalDataCategory":55,"dataType":28,"dateCreation":56,"dateUpdate":28,"creator":28,"workflowStepId":49,"workflowStep":28,"source":50},"f39f1422-1846-4bf1-9945-4002d2d6a026",{},"Employee's first and last name","CivilStatus","2023-08-08T12:02:16.5368564",{"id":58,"customFields":59,"ref":28,"archivingPolicy":28,"required":44,"label":60,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":46,"personalDataCategory":47,"dataType":28,"dateCreation":61,"dateUpdate":28,"creator":28,"workflowStepId":49,"workflowStep":28,"source":50},"c0ed56b1-1652-434e-9ee1-fb2af7a06b50",{},"Receipts","2023-08-08T12:05:13.4507684",[],"2b6853a7-7319-4c54-a592-00833741a99d","Expense tracking and management","2023-08-08T12:03:58.2147449","2025-09-01T16:33:57.5986122","Active: during processing and reimbursement cycle.","Retention justified under storage limitation (Art. 5(1)(e) UK GDPR) and HMRC rules.","Intermediate: 6 years (HMRC record-keeping obligations and Limitation Act 1980 for contract/tax claims).","Purge: secure deletion/anonymisation after 6 years, unless required for legal proceedings.","Direct","",{"customFields":74,"tags":75,"creator":28,"readonly":29,"purposes":28,"dataProcessings":76,"dataFields":78,"asset":28,"subjectCategories":112,"id":113,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":114,"description":28,"dateCreation":115,"dateUpdate":116,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":117,"baseActiveLegalBasis":28,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":118,"intermediateArchivingDescription":119,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":120,"destructionLegalBasis":28,"dataSetSource":71,"sourceDescription":72,"assetId":28,"source":50},{},[],[77],{"id":32,"label":33,"ref":28,"description":34,"workspaceId":35,"archived":29,"dateUpdate":36,"dateCreation":37,"areaId":38,"processingType":39},[79,85,91,96,101,106],{"id":80,"customFields":81,"ref":28,"archivingPolicy":28,"required":44,"label":82,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":46,"personalDataCategory":55,"dataType":28,"dateCreation":83,"dateUpdate":84,"creator":28,"workflowStepId":49,"workflowStep":28,"source":50},"190b4692-e597-4fbe-8cad-2b2485af0f09",{},"Last name and first name of business bank card holder","2023-08-08T12:02:27.926881","2025-09-01T16:34:16.1962543",{"id":86,"customFields":87,"ref":28,"archivingPolicy":28,"required":44,"label":88,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":46,"personalDataCategory":89,"dataType":28,"dateCreation":90,"dateUpdate":28,"creator":28,"workflowStepId":49,"workflowStep":28,"source":50},"e737d8dc-8160-4b45-90a9-c74c9b142957",{},"Travel","ProfessionalLife","2023-08-08T12:03:57.0416035",{"id":92,"customFields":93,"ref":28,"archivingPolicy":28,"required":44,"label":94,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":46,"personalDataCategory":89,"dataType":28,"dateCreation":95,"dateUpdate":28,"creator":28,"workflowStepId":49,"workflowStep":28,"source":50},"cdbd41b8-9acb-47eb-8551-b92c267247f8",{},"Information about the banking transaction performed","2023-08-08T12:03:57.1961049",{"id":97,"customFields":98,"ref":28,"archivingPolicy":28,"required":44,"label":99,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":46,"personalDataCategory":89,"dataType":28,"dateCreation":100,"dateUpdate":28,"creator":28,"workflowStepId":49,"workflowStep":28,"source":50},"d9399d5d-011c-4e78-9182-3fcc65c1c20f",{},"Information about trip characteristics","2023-08-08T12:02:28.4723061",{"id":102,"customFields":103,"ref":28,"archivingPolicy":28,"required":44,"label":104,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":46,"personalDataCategory":89,"dataType":28,"dateCreation":105,"dateUpdate":28,"creator":28,"workflowStepId":49,"workflowStep":28,"source":50},"142c5cba-30c3-46a5-b0b9-717e9ce3eeca",{},"Professional Planning","2023-08-08T12:03:57.4269775",{"id":107,"customFields":108,"ref":28,"archivingPolicy":28,"required":44,"label":109,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":46,"personalDataCategory":55,"dataType":28,"dateCreation":110,"dateUpdate":111,"creator":28,"workflowStepId":49,"workflowStep":28,"source":50},"296c2904-a540-4f8b-caa4-08dadc4a0166",{},"Name and surname","2022-12-13T09:58:12.9804907","2025-09-01T21:49:35.432236",[],"3c20560d-74a6-4c71-8a46-c99e35898114","Working hours and activity data","2023-08-08T12:03:56.7819575","2025-09-01T16:34:41.4788622","Active: duration of employment contract.","Limitation Act 1980","Intermediate: 6 years after termination ","Purge: deletion/anonymisation after statutory period.",{"customFields":122,"tags":123,"creator":28,"readonly":29,"purposes":28,"dataProcessings":124,"dataFields":126,"asset":28,"subjectCategories":147,"id":148,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":149,"description":28,"dateCreation":150,"dateUpdate":151,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":117,"baseActiveLegalBasis":68,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":152,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":153,"destructionLegalBasis":28,"dataSetSource":71,"sourceDescription":72,"assetId":28,"source":50},{},[],[125],{"id":32,"label":33,"ref":28,"description":34,"workspaceId":35,"archived":29,"dateUpdate":36,"dateCreation":37,"areaId":38,"processingType":39},[127,133,139,145],{"id":128,"customFields":129,"ref":28,"archivingPolicy":28,"required":29,"label":130,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":46,"personalDataCategory":89,"dataType":28,"dateCreation":131,"dateUpdate":132,"creator":28,"workflowStepId":49,"workflowStep":28,"source":50},"b9caefd2-ce37-4586-bf39-90051b1f3ad2",{},"Attached unit","2023-08-08T12:03:57.7946804","2023-11-29T13:41:43.5989171",{"id":134,"customFields":135,"ref":28,"archivingPolicy":28,"required":44,"label":136,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":46,"personalDataCategory":89,"dataType":28,"dateCreation":137,"dateUpdate":138,"creator":28,"workflowStepId":49,"workflowStep":28,"source":50},"4616df78-8ff6-4317-89f5-2a12ce47e7b9",{},"Position held","2023-08-08T12:03:57.9534304","2023-11-29T11:25:19.1923092",{"id":140,"customFields":141,"ref":28,"archivingPolicy":28,"required":29,"label":142,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":46,"personalDataCategory":28,"dataType":28,"dateCreation":143,"dateUpdate":144,"creator":28,"workflowStepId":49,"workflowStep":28,"source":50},"ce6a8c28-7cd6-4c2b-a223-1a318327179a",{},"Internal registration number","2023-08-08T12:02:13.510444","2023-11-29T13:41:51.656426",{"id":107,"customFields":146,"ref":28,"archivingPolicy":28,"required":44,"label":109,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":46,"personalDataCategory":55,"dataType":28,"dateCreation":110,"dateUpdate":111,"creator":28,"workflowStepId":49,"workflowStep":28,"source":50},{},[],"ca720d6c-99e3-40cb-999d-d01099f386f3","Personnel identification data","2023-08-08T12:03:57.6412592","2025-09-01T16:35:08.2313115","Intermediate: 6 years after termination.","Purge: secure deletion/anonymisation.",[],{},{"dpo":28,"referent":28,"owner":28,"representative":28,"dataProtectionAuthority":28,"id":38,"type":157,"parentId":158,"ref":28,"label":159,"description":28,"logoUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"countryCode":28,"immatriculationNumber":28,"phoneNumber":28,"mailAddress":28,"dpoId":28,"referentId":28,"ownerId":28,"representativeId":28,"dataProtectionAuthorityId":28},"Area",357,"Template (english)",{"dpo":28,"referent":28,"owner":28,"representative":28,"dataProtectionAuthority":161,"id":158,"type":172,"parentId":28,"ref":28,"label":173,"description":28,"logoUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"countryCode":174,"immatriculationNumber":28,"phoneNumber":28,"mailAddress":28,"dpoId":28,"referentId":28,"ownerId":28,"representativeId":28,"dataProtectionAuthorityId":162},{"id":162,"label":163,"siteURL":164,"phoneNumber":165,"email":166,"countryCode":167,"address":168,"city":169,"zipCode":170,"declarationViolationUrl":171},34,"ICO - Information Commissioner's Office","https://ico.org.uk/","0303 123 1113","casework@ico.org.uk","UKI","Wycliffe House Water Lane Wilmslow","Cheshire","SK9 5AF","https://ico.org.uk/make-a-complaint/","Entity","Regulatory Reference – English","GB",{"id":176,"label":177,"color":178,"order":179,"itemLimit":28,"type":10,"finalStep":44,"initialStep":29,"authorizedRole":28,"authorizedRoleId":28,"descriptionHtml":28,"mappedState":180},1062,"Done","#42c478",3,"Active",[],[],[],[185,198,207],{"date":186,"state":187,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":188,"id":189,"ref":28,"label":190,"type":191,"description":192,"relatedRisk":28,"moreDetailsUrl":72,"dateCreation":193,"dateUpdate":194,"tags":195,"attachments":196,"creatorUser":28,"workflowStepId":197,"workflowStep":28},"2026-04-05T19:27:57.817701Z","None",{},"d8029fc2-1a1b-4912-82a5-158644e945ea","Logical access control","Technical","To ensure that a user only accesses the data he/she needs, he/she must be given a unique identifier and must authenticate himself/herself before any use of the IT resources.","2023-05-11T16:19:47.2605656","2024-05-16T22:17:09.1656433",[],[],90381,{"date":199,"state":187,"descriptionHtml":28,"readonly":29,"purposes":200,"customFields":201,"id":202,"ref":28,"label":203,"type":191,"description":72,"relatedRisk":28,"moreDetailsUrl":72,"dateCreation":204,"dateUpdate":28,"tags":205,"attachments":206,"creatorUser":28,"workflowStepId":197,"workflowStep":28},"2026-04-05T19:27:57.8177046Z",[],{},"e855ce4c-6f7a-40dd-af97-ed01cb311372","Individual login and password","2022-12-13T10:01:04.3028922",[],[],{"date":208,"state":187,"descriptionHtml":28,"readonly":29,"purposes":209,"customFields":210,"id":211,"ref":28,"label":212,"type":213,"description":214,"relatedRisk":28,"moreDetailsUrl":72,"dateCreation":215,"dateUpdate":28,"tags":216,"attachments":217,"creatorUser":28,"workflowStepId":197,"workflowStep":28},"2026-04-05T19:27:57.817705Z",[],{},"d9669fc5-f2c8-4906-a787-0d52551fc455","Management of authorizations","Organizational","Limit access to only the data a user needs","2023-08-08T12:01:38.1567426",[],[],[219],{"subjectCategory":220,"displayName":222,"id":227,"subjectCategoryId":221,"comment":228,"dataSubjectVolumeMax":28,"readonly":29,"purposes":229},{"id":221,"label":222,"ref":28,"dateCreation":223,"dateUpdate":224,"creatorUserId":225,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":226,"workflowStep":28},"162790ee-5118-425d-2ab5-08dadc63aaa6","Employees","2022-12-13T09:59:13.7702414","2025-07-14T12:57:21.2499274",2986,97315,"04050f67-cfb0-4a38-9b54-9af09f15c4c8","Current and former.",[],"2025-09-01T16:35:43.891326","2023-10-09T12:33:22.8949926",[],"Processing, implemented solely for human resources purposes and under the conditions laid down by the applicable texts, for the sole purpose of managing the personnel of organizations employing fewer than 250 people, with the exception of the use of profiling.\nIf the controller has fewer than 250 employees, the processing is exempt because it is included in the list of processing not subject to PIA by the CNIL \n(https://www.cnil.fr/sites/default/files/atoms/files/liste-traitements-aipd-non-requise.pdf) ",[235,243,250],{"purposes":236,"dataRetentionRules":28,"parentId":28,"children":237,"displayName":238,"label":238,"transfers":239,"recipientType":240,"type":241,"jobTitle":28,"id":242,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"HMRC (for audit or tax enquiries), external auditors - if legally required",[],"ThirdParty","Recipient","6fa64ab8-4185-4ab4-d87c-08dde83dc8ab",{"purposes":244,"dataRetentionRules":28,"parentId":28,"children":245,"displayName":246,"label":246,"transfers":247,"recipientType":248,"type":241,"jobTitle":28,"id":249,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Human Resources Department",[],"InternalService","75ac6a98-c4a2-49ff-93b4-e074c14dd5bd",{"purposes":251,"dataRetentionRules":28,"parentId":28,"children":252,"displayName":253,"label":253,"transfers":254,"recipientType":248,"type":241,"jobTitle":28,"id":255,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Accounting department",[],"eeb03198-ee66-4d1a-970e-bbea7a79fec0",[],[258,264],{"id":259,"key":260,"label":64,"description":28,"legalBasis":261,"legalBasisText":262,"legalBasisDescription":263,"readonly":29},"2dbaf157-710c-48c3-b0d3-6182c853a926","b36b79ba-fe72-4823-b963-eaa5acd9921b","LegitimateInterest","Legitimate interest","Art. 6(1)(f)UK GDPR - legitimate interests (monitoring and audit of expenses).",{"id":265,"key":266,"label":267,"description":28,"legalBasis":268,"legalBasisText":268,"legalBasisDescription":269,"readonly":29},"eaf6c0cd-93ef-4045-97d3-f12cddda0d61","0a9d3349-fe19-48bd-b2be-074fa30fb114","Reimbursement of business expenses","Contract","Art. 6(1)(b) UK GDPR - contract (payment of expenses owed to employees).",100,67,0]