Modelo de tratamiento de datos RGPDAccess control by biometric authentication in the workplace
Por: Ludwig KarnethFinalidades (2)
La finalidad de un tratamiento es el objetivo principal del uso de los datos personales. Estos datos deben ser recopilados para un propósito bien determinado y legítimo y no deben ser tratados posteriormente de manera incompatible con este objetivo inicial.
Datos (3)
El artículo 30 del RGPD exige el registro de las categorías de datos tratados. Se trata aquí de definir las categorías de datos tratados. Estas pueden ser consideradas comunes o sensibles.
Data generated by the device: logging access to work tools
Detalles de los datos
Reglas de conservación
Base activa:
The access logging data produced by the biometric device cannot be stored in the active database for more than six months from the date of registration. This does not, however, prevent them from being kept in an intermediate archive separate from the active database, with restricted access, insofar as there are specific legislative or regulatory provisions, or if these data would be of interest in the event of litigation, justifying keeping them for the duration of the applicable prescription/forclusion rules.
Data generated by the device: premises access logging
Detalles de los datos
Reglas de conservación
Base activa:
The access logging data produced by the biometric device cannot be stored in the active database for more than six months from the date of registration. This does not, however, prevent them from being kept in an intermediate archive separate from the active database, with restricted access, insofar as there are specific legislative or regulatory provisions, or if these data would be of interest in the event of litigation, justifying keeping them for the duration of the applicable prescription/forclusion rules.
Data entered by the employer or its agents
Detalles de los datos
Definición
Photo, audio recording, etc.
Definición
Photograph including the person's face
Definición
Name of the person
Reglas de conservación
Base activa:
Raw recordings (photo, audio recording, etc.) of the biometric feature can only be processed for the time required to calculate the template(s): they cannot therefore be stored.derived biometric data can only be stored in the form of encrypted templates that do not allow the original biometric feature to be recalculated. They may only be kept for as long as the person concerned has been authorized, and must be deleted if authorizations are withdrawn or if the person concerned ceases to work for the employing organization
Orden final
Personas afectadas (1)
Una persona interesada es toda persona cuyos datos son recopilados, retenidos o tratados por el tratamiento de datos en cuestión. Ej: En el marco de un tratamiento de gestión de reclutamiento, cualquier candidato para el puesto en cuestión constituye una persona interesada.
- Employees
Attribution / Pas d'utilisation commerciale
CC-BY-NC
