GDPR Data processing modelCustomer and Prospect Management

By: Jérôme de Mercey

PrivateMarketing

This processing model is related to the management and follow-up of customers and prospects

Purposes (14)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

Management of accounting and tax obligations

Legal obligation

Article L. 123-12 of the Commercial Code

Prospecting for goods and services similar to the contract.

Legitimate interest

Legitimate interest to communicate with prospects subject to allowing individuals to object beforehand and at any time.

Prospecting for professionals when the subject of the message is related to the professional's activity.

Legitimate interest

Legitimate interest to communicate with prospects subject to allowing individuals to object beforehand and at any time.

Keeping the credit card number to facilitate future purchases (excluding cryptogram)

Legitimate interest

For customers who opt for a premium subscription in order to benefit, free of charge or not, from additional services aimed at facilitating their purchases (fast delivery, private sales, access to additional content, etc.)

Opposition list management

Legitimate interest

Legitimate interest in ensuring compliance with the opposition of individuals

Prospecting by mail or human intervention

Legitimate interest

Legitimate interest to communicate with prospects subject to allowing individuals to object beforehand and at any time.

Canvassing by electronic means (for the purpose of sending email, SMS, automated voice mail, etc.)

Consent

Legal obligation via article L. 34-5 of the code of posts and electronic communications

pre-litigation and litigation management

Legitimate interest

Legitimate interest in the context of establishing proof of a right or contract.

tracking / tracing people's navigation

Legitimate interest

According to the rules established by the CNIL guidelines

Organization of contests

Organization of lottery contests or any promotional operation excluding online gambling subject to the approval of the National Gaming Authority

Consent

Transfer, lease or exchange of customer files and prospect files

Consent

Management of people's opinions on products, services or content

Legitimate interest

Communication about products, services or content

Keeping the credit card number to facilitate future purchases (excluding cryptogram)

Consent

Until the withdrawal of consent or expiration date of the bank card.

order management, deliveries, after sales service

Contract

Data categories (7)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Business Relationship Monitoring

Simplified standard n° NS-048 of the CNIL

Data details

Documentation requestsrequired

Test Requestsrequired

Items, purchased productsrequired

subscribed services or subscriptionsrequired

Services ordered and invoicedrequired

Quantity, amount, periodicity, date and amount of order and invoicerequired

invoice due daterequired

Delivery terms and addressrequired

Purchase and Service Historyrequired

product returnrequired

Sale origin (seller, representative, partner, affiliate)required

Customer Correspondence and Serviceoptional

Customer and prospect exchanges and feedbackrequired

Person(s) in charge of customer relationsrequired

Data conservation rules

Active base:

Data necessary for the performance of a contract is retained for the duration of the contractual relationship, after the execution of the contract, in intermediate archiving, if the data controller has a legal obligation to do so (for example, to meet accounting or tax obligations) or if he wishes to establish proof in the event of litigation and within the limit of the applicable prescription period

Intermediate archiving:

5 years

prospect or customer identity

Simplified standard n° NS-048 of the CNIL

Data details

Date of birth

optional

Civilityoptional

Name or company nameoptional

First Namesoptional

Address (including headquarters, billing location)optional

phone numberoptional

Fax numberoptional

Email addressoptional

Internal processing code for customer identificationoptional

Accounting identification codeoptional

SIREN numberoptional

Data conservation rules

Active base:

personal situation

Simplified standard n° NS-048 of the CNIL

Data details

Marital Lifeoptional

Number of persons in householdoptional

Number and age of child(ren) in the householdoptional

Professionoptional

Business Areaoptional

socio-professional categoryoptional

presence of petsoptional

Data conservation rules

Active base:

Information stored on the terminal equipment

Cookies and other tracers in compliance with deliberation No. 2019-093 of July 4, 2019 adopting guidelines on the application of Article 82 of the amended Act of January 6, 1978 to read or write operations in a user's terminal, simplified standard No. NS-048 of the CNIL

Data details

Cookiesrequired

Data conservation rules

Active base:

Until withdrawal or renewal of consent where applicable (6 months). \13 months for audience measurement cookies.

Settlement / Payment

Simplified standard n° NS-048 of the CNIL

Data details

Paymentoptional

Payment terms and conditions (e.g., discounts, down payments, rebates)optional

RIP/RIBoptional

check numberoptional

Credit card numberoptional

Credit card expiration dateoptional

Visual cryptogramoptional

credit terms and conditionsoptional

Balances and credits taken out (amount and duration, name of the lending institution) in case of financing the order by creditoptional

Data conservation rules

Active base:

Data necessary for the performance of a contract is retained for the duration of the contractual relationship. It may also be retained: - for a period of 3 years from the last contact the individuals to whom it relates had with the organization (e.g., after the execution of the contract, in intermediate archiving, if the data controller has a legal obligation to do so (for example, to meet accounting or tax obligations) or if he wishes to establish proof in the event of litigation and within the limit of the applicable prescription period

Intermediate archiving:

5 years

Transaction

Simplified standard n° NS-048 of the CNIL

Data details

transaction numberrequired

Details of the purchase, subscription, good or service subscribed tooptional

Data conservation rules

Active base:

Intermediate archiving:

5 years

Notice

Data relating to the contributions of persons who submit reviews of products, services or services, including their pseudonym. Simplified Standard No. NS-048 of the CNIL

Data details

Pseudonymrequired

Data conservation rules

Active base:

Until the notice is deleted if it is public. \Data necessary for the performance of a contract is retained for the duration of the contractual relationship.

Data subject (3)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

Clients
Former Customers
Prospects

Author:

Jérôme de Mercey

Created at:04/11/2023

Updated on:00/01/1970

Nb using:23

GDPR Data processing modelCustomer and Prospect Management

Purposes (14)

Data categories (7)

Business Relationship Monitoring

prospect or customer identity

personal situation

Information stored on the terminal equipment

Settlement / Payment

Transaction

Notice

Data subject (3)

Access the full processing template