Javascript is required
logo-dastralogo-dastra

GDPR Data processing modelCollection of reports of influence peddling or corruption

By: Ludwig Karneth
Legal ServicesPrivate
The purpose of this processing is to collect reports from employees of the organization concerned concerning the existence of conduct or situations that are contrary to the company's code of conduct and likely to constitute corruption or influence peddling.

Purposes (1)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

1
Collection of reports from employees of the organization concerned
Enable the collection of reports from employees of the organization concerned concerning the existence of conduct or situations contrary to the company's code of conduct and likely to constitute corruption or influence peddling
Legal obligation

Data categories (4)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Persons involved in the collection or processing of the alert

Data details


Functions and coordinatesrequired
Identityrequired

Data conservation rules

Active base:

In accordance with Article 5-1-e) of the RGPD, personal data must be kept in a form which permits identification of individuals only for as long as is strictly necessary for the purposes for which it is to be used.Data relating to an alert considered by the data controller as not falling within the scope of the system shall be destroyed without delay or anonymized. The anonymization procedures used must comply with the recommendations of opinion 05/2014 on anonymization techniques issued by the European Data Protection Committee (EDPS). If no action is taken on an alert falling within the scope of the system, the data relating to this alert is destroyed or anonymized by the organization responsible for alert management, within two months of the end of the verification operations. When disciplinary or litigation proceedings are initiated against a person implicated or the author of an abusive alert, the data relating to the alert may be kept by the organization responsible for alert management until the end of the proceedings or the limitation period for appeals against the decision

Alert data

Data details


Alert follow-uprequiredsensitive data
Reports of verification operationsrequiredsensitive data
Eléments recueillis dans le cadre de la vérification des faits signalésrequiredsensitive data
Faits signalésrequiredsensitive data

Data conservation rules

Active base:

In accordance with Article 5-1-e) of the RGPD, personal data must be kept in a form which permits identification of individuals only for as long as is strictly necessary for the purposes for which it is to be used.Data relating to an alert considered by the data controller as not falling within the scope of the system shall be destroyed without delay or anonymized. The anonymization procedures used must comply with the recommendations of opinion 05/2014 on anonymization techniques issued by the European Data Protection Committee (EDPS). If no action is taken on an alert falling within the scope of the system, the data relating to this alert is destroyed or anonymized by the organization responsible for alert management, within two months of the end of the verification operations. When disciplinary or litigation proceedings are initiated against a person implicated or the author of an abusive alert, the data relating to the alert may be kept by the organization responsible for alert management until the end of the proceedings or the limitation period for appeals against the decision

People subject to alert

Data details


Functions and coordinatesrequired
Identityrequired

Data conservation rules

Active base:

In accordance with Article 5-1-e) of the RGPD, personal data must be kept in a form which permits identification of individuals only for as long as is strictly necessary for the purposes for which it is to be used.Data relating to an alert considered by the data controller not to fall within the scope of the system shall be destroyed without delay or anonymized. The anonymization procedures used must comply with the recommendations of opinion 05/2014 on anonymization techniques issued by the European Data Protection Committee (EDPS). If no action is taken on an alert falling within the scope of the system, the data relating to this alert is destroyed or anonymized by the organization responsible for alert management, within two months of the end of the verification operations. When disciplinary or litigation proceedings are initiated against a person implicated or the author of an abusive alert, the data relating to the alert may be kept by the organization responsible for alert management until the end of the proceedings or the limitation period for appeals against the decision

Alert sender

Data details


Functions and coordinatesrequired
Identityrequired

Data conservation rules

Active base:

In accordance with Article 5-1-e) of the RGPD, personal data must be kept in a form which permits identification of individuals only for as long as is strictly necessary for the purposes for which it is to be used.Data relating to an alert considered by the data controller not to fall within the scope of the system shall be destroyed without delay or anonymized. The anonymization procedures used must comply with the recommendations of opinion 05/2014 on anonymization techniques issued by the European Data Protection Committee (EDPS). If no action is taken on an alert falling within the scope of the system, the data relating to this alert is destroyed or anonymized by the organization responsible for alert management, within two months of the end of the verification operations. When disciplinary or litigation proceedings are initiated against a person implicated or the author of an abusive alert, the data relating to the alert may be kept by the organization responsible for alert management until the end of the proceedings or the limitation period for appeals against the decision

Data subject (2)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

  • Employees
  • other

Author:
Ludwig Karneth
Ludwig Karneth

Created at:07/08/2023

Updated on:00/01/1970

License: © Creative commons :
Attribution / Pas d'utilisation commerciale
CC-BY-NC AttributionPas d'utilisation commerciale

Nb using:4


Access the full processing template

Try Dastra now to access all of our data processing templates that you can customize for your organization.It's free and there's no obligation for the first 30 days (no credit card required)

Add to my data processings record
Subscribe to our newsletter

We'll send you occasional emails to keep you informed about our latest news and updates to our solution

* You can unsubscribe at any time using the link provided in each newsletter.