[Note: to choose a different table layout, click in the table, select the Design menu ribbon and choose a table style] [Note: to unprotect the worksheet, go to File then under Protect Workbook, click on the "Unprotect" link next to the worksheet you want to unlock. There is no password.]
Personal Data Analysis Form Date completed: dd/mm/yyyy Completed by: A.N. Other
Special category of personal data?
Obtained from data subject?
Project or business process
Personal data item
Description
1
Website sale
Customer name
No
2
Website sale
Customer email address
3
Website sale
Customer telephone number
The name of the customer; sometimes different to the name of the person receiving support Email address of the customer; usually a business email but often a gmail or hotmail account Phone number, usually business but could be personal
4
Website sale
Credit card details
5
Website sale
Customer address
6
Website sale
Customer IP address
7
Post-sale review requests
Project or business ...
Personal data item
Owner
Credit card details
Managing Director
Consent
Human Resources
Customer address
Product Manager
Contractual
LinkedIn Connections
Customer email address
Sales and Marketing Manager
UK law
Newsletter
Customer IP address
(blank)
(blank)
Post-sale review requests
Customer name
Post-sales support
Customer name and e...
Pre-Sales Enquiries
Customer name, comp... Automated decisionmaking?
Lawful basis of processing
If consent-based, how is consent obtained?
Sales records and ongoing support
Contractual
Not applicable
No
Accessed via portal
Sales and Marketing Manager
Sales records and ongoing support
Contractual
Not applicable
No
Accessed via portal
Sales and Marketing Manager Sales and Marketing Manager Sales and Marketing Manager Sales and Marketing Manager Sales and Marketing Manager
Backup contact if email Contractual doesn't work - do we need this? Sale - details are not kept by Contractual us.
Not applicable
No
None
Not applicable
No
None
Sales approval via credit card; Contractual tax records; VAT charging
Not applicable
No
Evidence of location for tax purposes
UK law
Not applicable
No
Can be amended Web server but not viewed via portal None Web server
Post-sales marketing of additional products
Consent
Not obtained
No
None
Reviews Website
Yes
Sales and Marketing Manager
Post-sales marketing of additional products
Consent
Customer explictly signs up for the newsletter
No
Unsubscribe available at any time
No
Yes
Contractual
Not applicable
No
No
Yes
Consent
Not obtained
No
Yes
Contractual
Product sample downloads
Customer name and email address Customer name and email address
No
Yes
13
LinkedIn Connections
Customer name, company and location
No
Yes
Product Manager Communication that an update is available Product Manager Post-sale and annual feedback survey - issues and improvements Product Manager Product support and questions Sales and Provide samples of products Marketing on request by customer Manager Sales and Send connection request in Marketing LinkedIn Manager
14
Pre-Sales Enquiries Customer name, company, email address and telephone number
No
Yes
Sales and Marketing Manager
Respond to customer enquiries
15
Human Resources
No
Yes
Managing Director
Ref
Retention period
Encryption level
Access controls
Third parties shared with
UK
7 years
None
2FA
None
UK
7 years
None
2FA
None
UK
7 years
None
2FA
None
Not Known
7 years
At rest
2FA
None
UK
7 years
None
2FA
None
UK
7 years
None
2FA
None
Not Known
7 years
Not Known
2FA
Reviews Website
Web server
UK
7 years
None
2FA
None
Web server
UK
7 years
None
2FA
None
No
Accessed via portal None
Mailing Website
Not Known
7 years
Not Known
2FA
Mailing Website
Not applicable
No
None
Not Known
7 years
At rest
2FA
None
Contractual
Not applicable
No
None
File Sharing Website Web server
UK
7 years
None
2FA
None
Consent
Customer explicitly accepts connection request
No
None
UK
7 years
None
2FA
None
Contractual
Not applicable
No
None
UK
7 years
None
2FA
None
Payroll, tax and employment Contractual records
Not applicable
No
None
Not Known
7 years
At rest (File Sharing Website)
2FA
Payroll Bureau
Owner
Processing purpose
Yes
Sales and Marketing Manager
No
Yes
No
Yes
Number, expiry and CVC of customer's credit card
No
Yes
Physical address including street, city, county, zip and country IP address of the purchaser at the time of purchase
No
Yes
No
Yes
Customer name and email Name and email address of the address customer; usually a business email but often a gmail or hotmail account Newsletter Customer name and email Name and email address of the address customer; usually a business email but often a gmail or hotmail account Provision of product Customer name and email May be different to the updates address purchaser Feedback survey Customer name and email requests address
No
Yes
No
11
Post-sales support
12
8
9 10
Employee name, address, Basic information required for NI number, salary and employment bank account details
Lawful basis of pro...
Feedback survey reque...
Level of data subject access
Location stored Web server Sales spreadsheet on File Sharing Website Web server Sales spreadsheet on File Sharing Website Web server
Payment Processor
LinkedIn; Sales spreadsheet on File Sharing Website Email; Sales spreadsheet on File Sharing Website File Sharing Website Payroll Bureau
Country stored in
Comments
May not be genuine IP address if proxy server is being used.