GDPR Data processing modelTicketing system of transport organizing authorities
By: Ludwig KarnethPurposes (5)
A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable
Data categories (5)
Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)
Data for managing overdue payments
Data details
Definition
person's date of birth
Data conservation rules
Active base:
Information relating to the management of unpaid invoices is immediately removed from the opposition list as soon as the amounts due have been settled; failing settlement, it will be kept for a maximum of 2 years from registration.
Validation data
Data details
Data conservation rules
Active base:
All customer data is kept for the duration of the contractual relationship, and at the end of this for two years for commercial and statistical purposes for customers and prospects. This anonymization is achieved either by completely deleting the card number, or by deleting the date, time and place of use, or by applying a strong public cryptographic 'hash' algorithm to the card number. However, validation data containing information about people's movements, associated with the card or subscriber number, which indirectly refers to a user's identity, may be kept for a maximum of 48 hours, and solely for the purpose of combating technological fraud. To enable post-payment claims management, the information required for billing (including validation data, with the exception of location), may be kept for a period of four months from the date of the events. As soon as the validation data is centralized in the system, it must be sorted so that only the data of those who have opted for post-payment is retained for this period
Payment data
Data details
Data conservation rules
Active base:
All customer data is kept for the duration of the contractual relationship, and at the end of this for two years for commercial and statistical purposes for customers and prospects.
Management data for free or reduced fare transport tickets
Data details
Data conservation rules
Active base:
All customer data is kept for the duration of the contractual relationship, and at the end of it for two years for commercial and statistical purposes for customers and prospects.
Traveler identification data
Data details
Definition
Photograph including the person's face
Data conservation rules
Active base:
All customer data is kept for the duration of the contractual relationship, and at the end of this for two years for commercial and statistical purposes for customers and prospects.
Data subject (1)
A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process
- Customers
Attribution / Pas d'utilisation commerciale
CC-BY-NC
