[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fartnr-ccvC2SIV1epc8u_z-eGaw7dyGCKP9sk5M3smY":3},{"assets":4,"attachments":5,"tags":6,"dataRetentionRules":16,"creatorUser":20,"creatorUserId":20,"updatedBy":20,"updatedById":20,"publishedBy":20,"publishedById":20,"areaOwnerId":20,"owners":76,"customFields":77,"area":78,"entity":82,"mergedFrom":20,"workflowStep":97,"accountables":103,"responsibles":104,"informedOwners":105,"securityMeasures":106,"personCategories":140,"id":24,"source":41,"label":25,"state":102,"versionDescription":20,"processingType":31,"parentId":20,"areaId":30,"mergeType":20,"readonly":21,"editable":45,"workflowStepId":98,"dateDeployment":20,"dateCreation":29,"dateArchived":20,"datePublication":28,"archived":21,"dateUpdate":28,"reviewDate":151,"nextReviewDate":20,"ref":20,"processingState":20,"description":26,"descriptionHtml":152,"subjectRightProcessDescription":20,"rightOfInformation":20,"rightOfAccess":20,"rightOfRectification":20,"rightOfErasure":20,"rightOfRestriction":20,"rightOfOpposition":20,"rightOfDataPortability":20,"advanceDirectives":20,"advanceDirectivesDescription":20,"rightOfInformationDescription":20,"rightOfAccessDescription":20,"rightOfRectificationDescription":20,"rightOfErasureDescription":20,"rightOfRestrictionDescription":20,"rightOfOppositionDescription":20,"rightOfDataPortabilityDescription":20,"stakeHolders":153,"assessmentScoring":20,"automaticDecision":20,"systematicMonitoring":20,"specialCategoryData":20,"largeScaleCollection":20,"crossReferencing":20,"vulnerablePeople":20,"isDPIARequired":20,"dpiaDate":20,"dpiaExemption":21,"dpiaExemptionJustification":20,"innovativeUse":20,"exclusionBenefitRightContract":20,"recipients":154,"dataControllers":163,"purposes":164,"progression":195,"quality":196,"sensitivity":197,"visible":45,"workspaceId":27,"nbReferences":197,"referenceId":20},[],[],[7,12],{"id":8,"label":9,"type":10,"color":11},"40c19fa3-a18b-42af-b672-092b0d6305a6","Private","DataProcessing","#ffc107",{"id":13,"label":14,"type":10,"color":15},"f059b781-8ffe-479d-a9f7-1a0af03a0109","Orders and Payments","#888919",[17],{"customFields":18,"tags":19,"creator":20,"readonly":21,"purposes":20,"dataProcessings":22,"dataFields":32,"asset":20,"subjectCategories":63,"id":64,"ref":20,"externalId":20,"externalLastSyncDate":20,"externalSource":20,"label":65,"description":20,"dateCreation":66,"dateUpdate":67,"baseActiveOverride":21,"intermediateArchivingOverride":21,"destructionOverride":21,"baseActiveDescription":68,"baseActiveLegalBasis":69,"baseActiveRetentionDuration":20,"baseActiveMinMax":20,"intermediateArchivingLegalBasis":70,"intermediateArchivingDescription":71,"intermediateArchivingRetentionDuration":20,"intermediateArchivingMinMax":20,"destructionDescription":72,"destructionLegalBasis":73,"dataSetSource":74,"sourceDescription":75,"assetId":20,"source":41},{},[],null,false,[23],{"id":24,"label":25,"ref":20,"description":26,"workspaceId":27,"archived":21,"dateUpdate":28,"dateCreation":29,"areaId":30,"processingType":31},"4a495d2d-0204-4f33-9ee5-978e912e15b9","Use of a payment card number in connection with the sale of goods or the provision of services at a distance","This processing model relates to the use of payment card numbers in the sale of goods or the provision of remote services, including subscriptions taken out online or goods reservations",71,"2025-07-14T13:51:01.5916191","2023-08-08T12:05:22.6077584",116,"Default",[33,42,50,57],{"id":34,"customFields":35,"ref":20,"archivingPolicy":20,"required":21,"label":36,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":37,"personalDataCategory":20,"dataType":20,"dateCreation":38,"dateUpdate":39,"creator":20,"workflowStepId":40,"workflowStep":20,"source":41},"f415a89b-3509-406d-bf32-9808abc6d430",{},"Cardholder identity","Current","2023-08-08T12:05:22.9694967","2023-11-29T11:46:12.349559",83447,"Intern",{"id":43,"customFields":44,"ref":20,"archivingPolicy":20,"required":45,"label":46,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":37,"personalDataCategory":47,"dataType":20,"dateCreation":48,"dateUpdate":49,"creator":20,"workflowStepId":40,"workflowStep":20,"source":41},"7b840737-962e-46a7-961a-e52d54e00cb6",{},true,"Visual cryptogram","EconomicFinancialData","2023-08-08T12:05:23.1476605","2023-11-29T11:45:17.2451245",{"id":51,"customFields":52,"ref":20,"archivingPolicy":20,"required":45,"label":53,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":37,"personalDataCategory":54,"dataType":20,"dateCreation":55,"dateUpdate":56,"creator":20,"workflowStepId":40,"workflowStep":20,"source":41},"7831f6f7-f89e-433b-93af-dfcaef99bca3",{},"expiration date","PersonalLife","2023-08-08T12:05:23.3446096","2025-06-24T22:12:56.5017175",{"id":58,"customFields":59,"ref":20,"archivingPolicy":20,"required":45,"label":60,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":37,"personalDataCategory":47,"dataType":20,"dateCreation":61,"dateUpdate":62,"creator":20,"workflowStepId":40,"workflowStep":20,"source":41},"92323df3-6af3-4595-8d7c-98ca39ad80bd",{},"Credit card number","2023-08-08T12:01:51.4472129","2023-11-29T11:46:53.9337499",[],"49a4d450-042b-470a-b68a-48e246eb6ac6","Data required to carry out a remote payment card transaction","2023-08-08T12:05:22.8198046","2025-07-14T13:50:04.5167486","Until transaction is completed and reconciled (typically up to 13 months)","To process payment, handle immediate disputes, and comply with card scheme rules (e.g. Mastercard, Visa); supported by UK GDPR Article 6(1)(b) – performance of a contract","For accounting records and potential contractual claims; aligns with the Limitation Act 1980 (6 years for most civil claims) and Companies Act 2006 for record-keeping","Up to 6 years (after transaction date, but without storing full PAN or CVV)","Full deletion or irreversible anonymisation after 6 years unless required for legal proceedings","To comply with UK GDPR Article 5(1)(e) – storage limitation, and PCI DSS v4.0: payment card data (especially sensitive authentication data) must not be retained post-authorization","Direct","",[],{},{"dpo":20,"referent":20,"owner":20,"representative":20,"dataProtectionAuthority":20,"id":30,"type":79,"parentId":80,"ref":20,"label":81,"description":20,"logoUrl":20,"address":20,"zipCode":20,"city":20,"region":20,"countryCode":20,"immatriculationNumber":20,"phoneNumber":20,"mailAddress":20,"dpoId":20,"referentId":20,"ownerId":20,"representativeId":20,"dataProtectionAuthorityId":20},"Area",357,"Template (english)",{"dpo":20,"referent":20,"owner":20,"representative":20,"dataProtectionAuthority":83,"id":80,"type":94,"parentId":20,"ref":20,"label":95,"description":20,"logoUrl":20,"address":20,"zipCode":20,"city":20,"region":20,"countryCode":96,"immatriculationNumber":20,"phoneNumber":20,"mailAddress":20,"dpoId":20,"referentId":20,"ownerId":20,"representativeId":20,"dataProtectionAuthorityId":84},{"id":84,"label":85,"siteURL":86,"phoneNumber":87,"email":88,"countryCode":89,"address":90,"city":91,"zipCode":92,"declarationViolationUrl":93},34,"ICO - Information Commissioner's Office","https://ico.org.uk/","0303 123 1113","casework@ico.org.uk","UKI","Wycliffe House Water Lane Wilmslow","Cheshire","SK9 5AF","https://ico.org.uk/make-a-complaint/","Entity","Regulatory Reference – English","GB",{"id":98,"label":99,"color":100,"order":101,"itemLimit":20,"type":10,"finalStep":45,"initialStep":21,"authorizedRole":20,"authorizedRoleId":20,"descriptionHtml":20,"mappedState":102},1062,"Done","#42c478",3,"Active",[],[],[],[107,120,131],{"date":108,"state":109,"descriptionHtml":20,"readonly":21,"purposes":110,"customFields":111,"id":112,"ref":20,"label":113,"type":114,"description":115,"relatedRisk":20,"moreDetailsUrl":75,"dateCreation":116,"dateUpdate":20,"tags":117,"attachments":118,"creatorUser":20,"workflowStepId":119,"workflowStep":20},"2026-04-21T19:03:16.1935163Z","None",[],{},"d9669fc5-f2c8-4906-a787-0d52551fc455","Management of authorizations","Organizational","Limit access to only the data a user needs","2023-08-08T12:01:38.1567426",[],[],90381,{"date":121,"state":109,"descriptionHtml":20,"readonly":21,"purposes":20,"customFields":122,"id":123,"ref":20,"label":124,"type":125,"description":126,"relatedRisk":20,"moreDetailsUrl":75,"dateCreation":127,"dateUpdate":128,"tags":129,"attachments":130,"creatorUser":20,"workflowStepId":119,"workflowStep":20},"2026-04-21T19:03:16.1935227Z",{},"d8029fc2-1a1b-4912-82a5-158644e945ea","Logical access control","Technical","To ensure that a user only accesses the data he/she needs, he/she must be given a unique identifier and must authenticate himself/herself before any use of the IT resources.","2023-05-11T16:19:47.2605656","2024-05-16T22:17:09.1656433",[],[],{"date":132,"state":109,"descriptionHtml":20,"readonly":21,"purposes":133,"customFields":134,"id":135,"ref":20,"label":136,"type":125,"description":75,"relatedRisk":20,"moreDetailsUrl":75,"dateCreation":137,"dateUpdate":20,"tags":138,"attachments":139,"creatorUser":20,"workflowStepId":119,"workflowStep":20},"2026-04-21T19:03:16.1935232Z",[],{},"e855ce4c-6f7a-40dd-af97-ed01cb311372","Individual login and password","2022-12-13T10:01:04.3028922",[],[],[141],{"subjectCategory":142,"displayName":144,"id":148,"subjectCategoryId":143,"comment":149,"dataSubjectVolumeMax":20,"readonly":21,"purposes":150},{"id":143,"label":144,"ref":20,"dateCreation":145,"dateUpdate":20,"creatorUserId":146,"creatorUser":20,"description":20,"minorConcerned":21,"workflowStepId":147,"workflowStep":20},"197ab9db-6aef-4cb0-9400-a56a73d41c02","Other","2023-08-08T12:01:39.4433795",6931,97315,"d68859d0-851f-416e-b731-02355e2087b0","Natural or legal person carrying out a remote payment transaction",[],"2023-10-09T12:33:14.7774652","\u003Cp>\u003Ca href=\"https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000037481613?isAdvancedResult=&page=2&pageSize=10&query=bank&searchField=ALL&searchProximity=&searchType=ALL&sortValue=DATE_DECISION_DESC&tab_selection=cnil&timeInterval=&typePagination=DEFAULT\">Deliberation 2018-303 of September 6, 2018\u003C/a>\u003C/p>",[],[155],{"purposes":156,"dataRetentionRules":20,"parentId":20,"children":157,"displayName":158,"label":158,"transfers":159,"recipientType":160,"type":161,"jobTitle":20,"id":162,"actorId":20,"actor":20,"areaId":20,"area":20,"description":20,"readonly":21},[],[],"Agents and authorised services",[],"InternalService","Recipient","b51e427c-ddb0-4040-af57-79c31f5d6a5b",[],[165,171,176,181,187,191],{"id":166,"key":167,"label":168,"description":20,"legalBasis":169,"legalBasisText":170,"legalBasisDescription":20,"readonly":21},"c731e362-1631-42a7-9b7a-480b0f1c1610","8feab39e-912b-4db3-8bfe-3dd64a277230","Fight against fraud","LegalCommitment","Legal obligation",{"id":172,"key":173,"label":174,"description":20,"legalBasis":175,"legalBasisText":175,"legalBasisDescription":20,"readonly":21},"592fe2e1-9472-4e6d-ba4a-54352ae6aa8a","3c33d35f-6ea0-4daa-80e5-b5dd25305be7","Simplification of any subsequent purchases on the merchant's site","Consent",{"id":177,"key":178,"label":179,"description":20,"legalBasis":180,"legalBasisText":180,"legalBasisDescription":20,"readonly":21},"afcf5ff1-9908-4ce6-b01e-8333db6403e9","c72b81f1-765d-4f23-ab31-bda3615f16b6","Reservation of a good or service","Contract",{"id":182,"key":183,"label":184,"description":20,"legalBasis":185,"legalBasisText":186,"legalBasisDescription":20,"readonly":21},"7e48422f-dd38-400e-b7c7-959fb4c30122","39cc013a-ac42-4482-97f4-a5be1242b405","Offer of payment solutions dedicated to distance selling by payment service providers","LegitimateInterest","Legitimate interest",{"id":188,"key":189,"label":190,"description":20,"legalBasis":180,"legalBasisText":180,"legalBasisDescription":20,"readonly":21},"b1728d63-82a2-466d-bca4-c28b5144408b","5bb3d66e-6fb3-4994-b209-8c49b7ef61dd","Settlement of subscriptions taken out online involving defined and regular payments",{"id":192,"key":193,"label":194,"description":20,"legalBasis":180,"legalBasisText":180,"legalBasisDescription":20,"readonly":21},"782e8cba-6536-4635-8240-da0867659e45","56c382bc-2c82-4536-ae01-e630a746b611","Completion of a transaction for the delivery of a good or the provision of a service in return for payment",100,45,0]