Javascript is required
logo-dastralogo-dastra

GDPR Data processing modelGDPR and Data Protection Compliance Management with Dastra

PrivatePublicMost common processing activitiesCompliance
Processing of personal data necessary for the management of records of processing activities, compliance tasks, stakeholder directories, rights requests, breaches, audits, and cookie consents using the Dastra platform.

Purposes (10)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

1
Register of processing activities
Legal obligation
Art. 6(1)(c) UK GDPR – legal obligation
2
Categories of processing register
Legal obligation
Art. 6(1)(c) UK GDPR – legal obligation
3
Compliance task management
Legitimate interest
Art. 6(1)(f) UK GDPR – legitimate interests
4
Stakeholder directory management
Legitimate interest
Art. 6(1)(f) UK GDPR – legitimate interests
5
People rights management
Legal obligation
Art. 6(1)(c) UK GDPR – legal obligation
6
Data breach monitoring
Legal obligation
Art. 6(1)(c) UK GDPR – legal obligation
7
Documentation management
Legitimate interest
Art. 6(1)(f) UK GDPR – legitimate interests
8
Audit management
Legitimate interest
Art. 6(1)(f) UK GDPR – legitimate interests
9
Cookie consent evidence management
Legitimate interest
Art. 6(1)(f) UK GDPR – legitimate interests
10
Application activity and security monitoring
Connection history and authorization management
Legitimate interest
Art. 6(1)(f) UK GDPR – legitimate interests

Data categories (6)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Rights data (DSARs)

Data details


Postal Addressrequired
Email addressrequired
Follow-up requestrequired
Request Detailrequired
Requester's first and last namerequired

Data conservation rules

Active base:

Duration of request + 1 year.

Intermediate archiving:

3 years

For accountability and ICO inspection.

Destruction

Cookie data

Data details


Cookies consentrequired

Data conservation rules

Active base:

Retained for duration of consent.

Destruction

EU Representative / DPO / Data controller contact details

Data details


Professional contact detailsrequired
Name and surname of EU representativerequired
Name and surname of the data protection officerrequired
Name and surname of legal representativerequired

Data conservation rules

Active base:

While acting in role.

Intermediate archiving:

6 years after end of mandate

Limitation Act 1980.

Destruction

Activity data

Data details


Auditsrequired
Comments on the platformrequired
Internal commentsrequired
Activity Historyrequired

Data conservation rules

Active base:

While account active.

Intermediate archiving:

5 years after closure (audit/accountability)

Destruction

Identification data

Data details


Profile photograph or avataroptional
business physical addressoptional
Companyrequired
Job function optional
phone numberoptional
Email addressrequired
FirstName

Definition

First name of employee, intern and internship tutor

required
name

Definition

Name of the person

required

Data conservation rules

Active base:

While account active.

Intermediate archiving:

5 years after closure (audit/accountability).

In the event of justification to the supervisory authority

Destruction

Connection logs

Data details


Logout date and timerequired
Date and time of connectionrequired
Identifierrequired

Data conservation rules

Active base:

Log data of connections and actions are kept for one year (security audits)

Destruction

Data subject (3)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

  • Individuals exercising their rights (DSARs)
  • Other
  • Customers

Created at:07/08/2023

Updated on:08/01/2025

License: © Creative commons :
Attribution / Pas d'utilisation commerciale
CC-BY-NC AttributionPas d'utilisation commerciale

Nb using:0


Access the full processing template

Try Dastra now to access all of our data processing templates that you can customize for your organization.It's free and there's no obligation for the first 30 days (no credit card required)

Add to my data processings record
Subscribe to our newsletter

We'll send you occasional emails to keep you informed about our latest news and updates to our solution

* You can unsubscribe at any time using the link provided in each newsletter.