Lawfulness of data processing Table of legal basis for the processing of personal data

Transcription

1 Lawfulness of data processing Table of legal basis for the processing of personal data Any processing of personal data must have a legal basis to be lawful. Each type and activity of personal data processing conducted by any Milliken entity should be assigned to one of the following main legal bases under the GDPR: Contract: The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; : The processing is necessary for the purposes of the legitimate interests pursued by Milliken or by a third party (e.g., preventing fraud, ensuring network and information security), except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (in particular, where the data subject is a child); Vital Interests: The processing is necessary in order to protect the vital interests of the data subject or of another natural person; Legal obligation: The processing is necessary for compliance with a legal obligation to which Milliken is subject; or : The data subject has given consent to the processing of his or her personal data for one or more specific purposes. of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. CUSTOMER RELATED DATA Administer and manage Customer Relation (e.g., Order Fulfillment, Payment & Invoicing for Goods & Services, Contacting Customer, Review Creditworthiness, IT Support, responding to technical and regulatory requests) s Contract Customer Name & Initials, Gender, Age, Address, Date of Birth, Photograph, Phone Number, Address, Nationality, Family information including spouse name, allergies, Occupation/Title/Job Description, Business Telephone Number, Business Facsimile Number, Business Address, Business Cellular/Mobile/Wireless Number, Financial Account Information (only if a sole trader or sole partnership and a bank e.g., VAT numbers and bank details), Language Preference, and Credit Report Information including directorships, prior employment. Customer Name & Initials, Gender, Age, Address, Date of Birth, Photograph, Phone Number, Address, Nationality, Occupation/Title/Job Description, Business

2 Telephone Number, Business Facsimile Number, Business Address, Business Cellular/Mobile/Wireless Number, Financial Account Information (only if a sole trader or sole partnership and a bank e.g., VAT numbers and bank details), and Language Preference. Fraud Detection & Prevention Customer Name & Initials, Gender, Age, Address, Date of Birth, Photograph, Phone Number, Address, Nationality, Occupation/Title/Job Description, Business Telephone Number, Business Facsimile Number, Business Address, Business Cellular/Mobile/Wireless Number, and Financial Account Information (only if a sole trader or sole partnership and a bank e.g., VAT numbers and bank details). Security Access Control and Video Surveillance (e.g., security access badge) Customer Photograph, video surveillance footage Direct Marketing and promotional activities Customer Name, Address, postal address, telephone number, cellular phone number VENDOR/SUPPLIER RELATED DATA Security video surveillance Security Access Control Security Emergency Mass Notification Security Travel Risk Management Administer Vendor/Supplier Relation (e.g., Payment & Invoicing for Goods & Services, Contacting Vendor/Supplier) s, Legal, Legal, opt-in, opt-in Contract Photographs, video imagery. Photograph, Name & Initials, Gender, Age, Address, Date of Birth, Phone Number, Address, Nationality, Occupation/Title/Job Description, Company Name, Business Phone Number, Business Address, Contractor Start Date/Termination Date, Passport number, Driver s License Number, Vehicle Registration Number. Contractor Name & Initials, Business Unit/Sector, Segment, Business Phone Number, Business Address, Personal Address, Personal Phone Number, Contractor Name & Initials, Business Unit/Sector, Segment, Business Phone Number, Business Address, Personal Address, Personal Phone number, Home Address, Emergency contact name, address, address, and phone number. Vendor/Supplier Name & Initials, Address, Photograph, Phone Number, Address, Business Unit/Sector/Segment, Business Postal Address, Business Telephone Number, Business Facsimile Number, Business Address, Business Cellular/Mobile, Wireless Number, and VAT Numbers and Bank Information. Vendor/Supplier Name & Initials, Address, Photograph, Phone Number, Address, Business Unit/Sector/Segment, Business Postal Address, Business Telephone Number, Business Facsimile Number, Business Address, Business Cellular/Mobile, Wireless Number, and VAT Numbers and Bank Information.

3 EMPLOYEE (CURRENT & FORMER) & PROSPECTIVE EMPLOYEE RELATED DATA Administer Employment (e.g., payment processing, employee communications, payroll, compensation, benefits, expense reimbursement, booking employee business travel) Administer Employment (e.g., staffing, global workforce and organizational planning/management, budget planning and administration, education and training, emergency contact, security, business travel, provide leased cars, safety, expense reimbursement, problem resolution, auditing, employee communications) Contract Employee Name & Initials, Gender, Age, Address, Date of Birth, Birth Certificate Number, Phone Number, Address, Nationality, Spouse s Name/Address/Date of Birth, Number of Children, Children s Dates of Birth, next of kin, Dependent s Name/Relationship to Employee/Date of Birth/Gender, Marital/Family Status, Occupation/Title/Job Description, Business Unit/Sector, Segment, Business Phone Number, Business Address, Income/Salary/Service Fees/Other Compensation information, Employee ID Number, Employee Leave Information (e.g., leave type, leave reason, dates of leave), Employee Start Date/Hire Date/Termination Date/ Discharge Date/ Retirement Date/Years of Service/ Hours Worked, Employee s or Employer Taxpayer Identification Number, Employee Benefits and Allowances (e.g., health benefits), Passport, Employee Work Permit/Authorization type/id number/issue and expiration dates, Employee Digitized or Electronic Signatures, Driving license, travel itinerary, Employee Communications, Employee Banking Details & Direct Deposit Information (e.g., bank name, bank branch, account number), Employee Payment Information (e.g., credit card number, expiration date, service code), and Employee Social Security Number. Employee Name & Initials, Gender, Age, Address, Date of Birth, Photograph, Phone Number, Address, Nationality, Spouse s Name/Address/Date of Birth, Number of Children, Children s Dates of Birth, Dependent s Name/Relationship to Employee/Date of Birth/Gender, Other Emergency Contact Information, Leisure & Interests, CCTV Images, Occupation/Title/Job Description, Business Unit/Sector, Segment, Business Phone Number, Business Address, Income/Salary/Service Fees/Other Compensation information, Employee ID Number, User Account Credentials, Employment History/Evaluations/Disciplinary Actions, Employee Leave Information (e.g., leave type, leave reason, dates of leave), Employee Start Date/Hire Date/Termination Date/ Discharge Date/ Retirement Date/Years of Service/ Hours Worked, Employee Status (fulltime/part time), Employee Travel Information (e.g., frequent flyer number, hotel reservation information, special handling needs), Passport, Manager/Supervisor Information, Employee Benefits and Allowances (e.g., health benefits), Educational History/Resume/CV, Internet Browsing Data, Employee Communications, Employee Racial or Ethnic Origin, Employee Driver s License Number, travel itinerary, Employee Banking Details & Direct Deposit Information (e.g., bank name, bank branch, account number), Employee Payment Information (e.g., credit card number, expiration date, service code) and Employee Passport Numbers.

4 Administer Employment & s Administer Employment (e.g., emergency contact, security) Administer occupation health services s (e.g., audits and legal claims) Vital Interests Employee Trade Union Membership. Employee Name & Initials, Address, Mother s Maiden Name, Photograph, Phone Number, Address, next of kin and Other Emergency Contact Information. Medical and health information Employee Name & Initials, Gender, Age, Address, Date of Birth, Employee Birth Certificate Number, Phone Number, Address, Nationality, Spouse s Name/Address/Date of Birth, Number of Children, Children s Dates of Birth, Dependent s Name/Relationship to Employee/Date of Birth/Gender, Marital/Family Status, Occupation/Title/Job Description, Business Unit/Sector, Segment, Business Phone Number, Business Address, Income/Salary/Service Fees/Other Compensation information, Employee ID Number, Employment History/Evaluations/Disciplinary Actions, Employee Leave Information (e.g., leave type, leave reason, dates of leave), Employee Start Date/Hire Date/Termination Date/ Discharge Date/ Retirement Date/Years of Service/ Hours Worked, Employee Status (fulltime/part time), Employee s or Employer Taxpayer Identification Number, Employee Benefits and Allowances (e.g., health benefits), Employee Work Permit/Authorization type/id number/issue and expiration dates, Employee Racial or Ethnic Origin, Employee Social Security Number. Administer Employment Applicant Process (e.g., recruiting employee applicants, communicating with applicant, processing application) Prospective Employee Application-Related Information (Name, Initials, Gender, Age, Date of Birth, Phone Number, Address, Occupation/Title/Job Description, Business Telephone Number, Business Address, Business Fax Number, Business Cell Number, Income/Salary/Other Compensation, Educational History, Resume/CV, Communications with Prospective Employee), Health information in order to make adjustments. Communications information Legitimate interests IP address, network log-in details, user account ID, internet logs and computer system usage s Regarding Employee Applicant Process (regarding prospective employee application-related information) Security Video Surveillance Security Access Control, Legal, Legal Prospective Employee Application-Related Information (Name, Initials, Gender, Age, Date of Birth, Phone Number, Address, Occupation/Title/Job Description, Business Telephone Number, Business Address, Business Fax Number, Business Cell Number, Income/Salary/Other Compensation, Educational History, Resume/CV, Communications with Prospective Employee) Health information in order to make adjustments. Photographs, video imagery. Photograph, Employee Name & Initials, Gender, Age, Address, Date of Birth, Phone Number, Address, Nationality, Occupation/Title/Job Description, Business Unit/Sector, Segment, Business Phone Number, Business Address, Employee ID Number, Employee Start Date/Hire Date/Termination Date/ Discharge Date/ Retirement Date/Years

5 Security Emergency Mass Notification Security Travel Risk Management, Opt-in of Service/ Employee Status (fulltime/part time), Passport number, Driver s License Number, Vehicle Registration Number. Employee Name & Initials,, Business Unit/Sector, Segment, Business Phone Number, Business Address, Personal Address, Personal Phone Number. Employee Name & Initials, Business Unit/Sector, Segment, Passport, Driving License, Business Phone Number, Business Address, Personal Address, Personal Phone number, Employee ID Number, Home Address, Emergency Contact Name, Address, Address, and Phone Number. OTHER MARKETING DATA Sending Marketing s (to lists that have been purchased where users have opted in to receive 3rd party marketing messages) ON-SITE VISITOR DATA Authorize Access Requests Visitor Name, Time In/Out, Date of Visit, Company Name, Host s Name, and Government Issued Identification (presented upon arrival). Safety & Security (e.g., security access badge) Visitor Name, Time In/Out, Date of Visit, Company Name, Host s Name, Government Issued Identification (presented upon arrival), and video surveillance Images. WEBSITES Responding to Contact Us Forms & Customer Support Marketing (Non- Targeted Advertising) Processing Sales (e.g., customer orders) & Administering Customer Relations Targeted Advertising (based on information collected during user s visit to website) Contract (e.g., customer orders) Name, title, Company, Address, Phone Number, Fax Number, , Industry, Hazard, Classification (end user, direct customer, distributor, etc.), Comments/Questions, Fabric Interests, Estimated Number of Wearers in Company, How They Purchase FR Clothing (rent, buy, lease, etc.). Name, Company, Address, Phone Number, , Language Preference, Marketing Region, Occupation, Product/Interests. Name, title, Company, Address, Phone Number, Fax Number, . Domain Name, IP address, Name, Address.

6 Website Analytics & Improve Website Performance Domain Name, IP address, Social Media Connectors, browsing data, browsing data, network information, hardware type, location, domain host, referring URL, OS, time spent on page, date and time of access. Information about your computer or device and internet connection, operating system, domain name, network information, and browser type. Store Visitor Preferences Domain Name, IP address, Language Preference, Website Registration Name, Company, Address, Phone Number, Fax Number, , Language Preference, Marketing Region, Occupation, Milliken ID, User name, number of employees, product preference and market.