Javascript is required
logo-dastralogo-dastra

Modelo de tratamiento de datos RGPDTicketing system of transport organizing authorities

Por: Ludwig Karneth
PublicLocal AuthoritiesTransportation
This processing model relates to the ticketing system of transport organizing authorities

Finalidades (5)

La finalidad de un tratamiento es el objetivo principal del uso de los datos personales. Estos datos deben ser recopilados para un propósito bien determinado y legítimo y no deben ser tratados posteriormente de manera incompatible con este objetivo inicial.

1
Measuring the quality of system operation
Analysis of technical problems related to the card, technical problems related to the validators, detection of functional anomalies in the information system
Intereses legítimos del responsable o de un tercero - art.6.1 f)
2
Statistical analysis of network usage
Traffic, type of tickets issued, clientele, usage by type of ticket
Intereses legítimos del responsable o de un tercero - art.6.1 f)
3
Management and monitoring of commercial relations
Management of commercial offers (for example: sending of offers by commercial partners) / Management of loyalty programs.
Intereses legítimos del responsable o de un tercero - art.6.1 f)
4
Management, issue and use of transport tickets
Management of season tickets and issue of full-fare, reduced-fare or even free tickets / Management of after-sales service operations and customer complaints.
Medidas contractuales o precontractuales - art. 6-1 b)
5
Fraud Management
Detection of counterfeiting and technological fraud / Processing of technological fraud cases / Management of invalidated cards following loss or theft / Management of invalidated cards following detection of misuse (for example: detection of several dozen swipes with the same pass) / Management of invalidated cards following a payment incident.
Intereses legítimos del responsable o de un tercero - art.6.1 f)

Datos (5)

El artículo 30 del RGPD exige el registro de las categorías de datos tratados. Se trata aquí de definir las categorías de datos tratados. Estas pueden ser consideradas comunes o sensibles.

Data for managing overdue payments

Detalles de los datos


Commentsrequerido
Data relating to the settlement of sums duerequerido
Date and reason for rejectionrequerido
Credit card numberrequerido
bankrequerido
Amount unpaidrequerido
subscriber account numberrequerido
Date of birth

Definición

person's date of birth

requerido
first and last namerequerido

Reglas de conservación

Base activa:

Information relating to the management of unpaid invoices is immediately removed from the opposition list as soon as the amounts due have been settled; failing settlement, it will be kept for a maximum of 2 years from registration.

Validation data

Detalles de los datos


Reason for exclusion from the validation listrequerido
Date, time and place of validationrequerido

Reglas de conservación

Base activa:

All customer data is kept for the duration of the contractual relationship, and at the end of this for two years for commercial and statistical purposes for customers and prospects. This anonymization is achieved either by completely deleting the card number, or by deleting the date, time and place of use, or by applying a strong public cryptographic 'hash' algorithm to the card number. However, validation data containing information about people's movements, associated with the card or subscriber number, which indirectly refers to a user's identity, may be kept for a maximum of 48 hours, and solely for the purpose of combating technological fraud. To enable post-payment claims management, the information required for billing (including validation data, with the exception of location), may be kept for a period of four months from the date of the events. As soon as the validation data is centralized in the system, it must be sorted so that only the data of those who have opted for post-payment is retained for this period

Payment data

Detalles de los datos


Date de début et de fin de validité de la carte requerido
Credit card numberrequerido
RIP/RIBrequerido
Customer numberrequerido
Subscription Typerequerido
Customer Historyrequerido
Name of school or universityrequerido
Situation socioprofessionnellerequerido
Payment methodrequerido
Identity and address of payer if different from subscriberrequerido

Reglas de conservación

Base activa:

All customer data is kept for the duration of the contractual relationship, and at the end of this for two years for commercial and statistical purposes for customers and prospects.

Management data for free or reduced fare transport tickets

Detalles de los datos


Transport operating agent statusrequerido
Large family statusrequerido
Revenusrequerido
Social benefitsrequerido
Agerequerido
Disabilityrequeridodatos sensibles
schoolingrequerido

Reglas de conservación

Base activa:

All customer data is kept for the duration of the contractual relationship, and at the end of it for two years for commercial and statistical purposes for customers and prospects.

Traveler identification data

Detalles de los datos


Justificatif de domicileopcional
Copy of IDopcional
Photography

Definición

Photograph including the person's face

requerido
Email addressrequerido
Telephone numberrequerido
Postal Addressrequerido
Date and place of birthrequerido
Name and surnamerequerido
Sexerequerido
Civilityrequerido

Reglas de conservación

Base activa:

All customer data is kept for the duration of the contractual relationship, and at the end of this for two years for commercial and statistical purposes for customers and prospects.

Personas afectadas (1)

Una persona interesada es toda persona cuyos datos son recopilados, retenidos o tratados por el tratamiento de datos en cuestión. Ej: En el marco de un tratamiento de gestión de reclutamiento, cualquier candidato para el puesto en cuestión constituye una persona interesada.

  • Customers

Autor:
Ludwig Karneth
Ludwig Karneth

Creado el:07/08/2023

Actualizado el:07/22/2023

Licencia: © Creative commons :
Attribution / Pas d'utilisation commerciale
CC-BY-NC AttributionPas d'utilisation commerciale

Número de usos:3


Acceda al modelo completo

Pruebe Dastra ahora mismo para acceder a la totalidad de nuestros modelos de tratamiento de datos que podrá adaptar a su organización. Es gratuito y sin compromiso durante los primeros 30 días (no se requiere tarjeta de crédito).

Añadir a mi registro de tratamientos
Suscríbase a nuestro boletín

Le enviaremos algunos correos electrónicos para mantenerlo informado sobre nuestras novedades y las actualizaciones de nuestra solución.

* Siempre podrá darse de baja en cada boletín.