[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9Z7RONewUKrbCXKorw7dtl3jUPFPTs-SG5eiMpoun38":3},{"assets":4,"attachments":5,"tags":6,"dataRetentionRules":16,"creatorUser":20,"creatorUserId":20,"updatedBy":20,"updatedById":20,"publishedBy":20,"publishedById":20,"areaOwnerId":20,"owners":86,"customFields":87,"area":88,"entity":92,"mergedFrom":20,"workflowStep":107,"accountables":113,"responsibles":114,"informedOwners":115,"securityMeasures":116,"personCategories":146,"id":24,"source":46,"label":25,"state":112,"versionDescription":20,"processingType":31,"parentId":20,"areaId":30,"mergeType":20,"readonly":21,"editable":40,"workflowStepId":108,"dateDeployment":20,"dateCreation":29,"dateArchived":20,"datePublication":158,"archived":21,"dateUpdate":28,"reviewDate":159,"nextReviewDate":20,"ref":20,"processingState":20,"description":26,"descriptionHtml":20,"subjectRightProcessDescription":20,"rightOfInformation":160,"rightOfAccess":161,"rightOfRectification":161,"rightOfErasure":161,"rightOfRestriction":161,"rightOfOpposition":162,"rightOfDataPortability":162,"advanceDirectives":161,"advanceDirectivesDescription":20,"rightOfInformationDescription":163,"rightOfAccessDescription":20,"rightOfRectificationDescription":20,"rightOfErasureDescription":20,"rightOfRestrictionDescription":20,"rightOfOppositionDescription":20,"rightOfDataPortabilityDescription":20,"stakeHolders":164,"assessmentScoring":20,"automaticDecision":20,"systematicMonitoring":20,"specialCategoryData":40,"largeScaleCollection":20,"crossReferencing":20,"vulnerablePeople":20,"isDPIARequired":21,"dpiaDate":20,"dpiaExemption":21,"dpiaExemptionJustification":20,"innovativeUse":20,"exclusionBenefitRightContract":20,"recipients":165,"dataControllers":190,"purposes":191,"progression":199,"quality":200,"sensitivity":201,"visible":40,"workspaceId":27,"nbReferences":202,"referenceId":20},[],[],[7,12],{"id":8,"label":9,"type":10,"color":11},"40c19fa3-a18b-42af-b672-092b0d6305a6","Private","DataProcessing","#ffc107",{"id":13,"label":14,"type":10,"color":15},"aa12baff-27b3-4bea-9130-9f5b909a521b","Human resources","#1e8ee1",[17],{"customFields":18,"tags":19,"creator":20,"readonly":21,"purposes":20,"dataProcessings":22,"dataFields":32,"asset":20,"subjectCategories":75,"id":76,"ref":20,"externalId":20,"externalLastSyncDate":20,"externalSource":20,"label":77,"description":20,"dateCreation":78,"dateUpdate":79,"baseActiveOverride":21,"intermediateArchivingOverride":21,"destructionOverride":21,"baseActiveDescription":80,"baseActiveLegalBasis":20,"baseActiveRetentionDuration":20,"baseActiveMinMax":20,"intermediateArchivingLegalBasis":81,"intermediateArchivingDescription":82,"intermediateArchivingRetentionDuration":20,"intermediateArchivingMinMax":20,"destructionDescription":83,"destructionLegalBasis":20,"dataSetSource":84,"sourceDescription":85,"assetId":20,"source":46},{},[],null,false,[23],{"id":24,"label":25,"ref":20,"description":26,"workspaceId":27,"archived":21,"dateUpdate":28,"dateCreation":29,"areaId":30,"processingType":31},"bec32a95-8866-4273-b9b2-ec7342905c95","Management of Employee Private Health Insurance","Processing of personal data to manage mandatory employer-provided private health insurance, including enrolment, membership tracking, and liaison with insurers.",71,"2025-08-10T13:44:08.5101391","2023-08-08T12:03:38.6423401",116,"Default",[33,47,54,62,68],{"id":34,"customFields":35,"ref":36,"archivingPolicy":37,"required":21,"label":38,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":39,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":40,"sensitivityClassification":41,"personalDataCategory":42,"dataType":20,"dateCreation":43,"dateUpdate":44,"creator":20,"workflowStepId":45,"workflowStep":20,"source":46},"0f6be212-4287-4d78-bc07-cf18ec7b1dc5",{},"1","Art. 9(2)(b) — necessary for carrying out obligations in employment and social protection law.","National Insurance number","NecessaryPurpose",true,"Sensitive","NIR","2023-08-25T19:14:52.7257282","2025-08-10T13:40:07.5065885",83447,"Intern",{"id":48,"customFields":49,"ref":20,"archivingPolicy":20,"required":40,"label":50,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":51,"personalDataCategory":52,"dataType":20,"dateCreation":53,"dateUpdate":20,"creator":20,"workflowStepId":45,"workflowStep":20,"source":46},"f30a0b03-cfc3-4450-a220-e2540da47102",{},"Telephone number","Current","CivilStatus","2023-08-08T12:01:41.1881938",{"id":55,"customFields":56,"ref":20,"archivingPolicy":20,"required":40,"label":57,"definition":58,"technicalDefinition":59,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":51,"personalDataCategory":52,"dataType":20,"dateCreation":60,"dateUpdate":61,"creator":20,"workflowStepId":45,"workflowStep":20,"source":46},"13231240-2bcd-4c93-8f96-cfa038882b07",{},"Date of birth","person's date of birth","false","2023-08-08T12:01:49.9819437","2023-11-23T10:18:41.7122097",{"id":63,"customFields":64,"ref":20,"archivingPolicy":20,"required":40,"label":65,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":51,"personalDataCategory":52,"dataType":20,"dateCreation":66,"dateUpdate":67,"creator":20,"workflowStepId":45,"workflowStep":20,"source":46},"296c2904-a540-4f8b-caa4-08dadc4a0166",{},"Name and surname","2022-12-13T09:58:12.9804907","2025-09-01T21:49:35.432236",{"id":69,"customFields":70,"ref":20,"archivingPolicy":37,"required":40,"label":71,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":39,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":40,"sensitivityClassification":41,"personalDataCategory":72,"dataType":20,"dateCreation":73,"dateUpdate":20,"creator":20,"workflowStepId":74,"workflowStep":20,"source":46},"d64f6cbd-841e-4e00-c294-08ddd8135b26",{},"Coverage details with insurer","HealthData","2025-08-10T13:39:40.1609749",83446,[],"b3a3e067-aeb8-42bf-ace4-a94e901f6276","Employee membership tracking","2023-08-08T12:03:38.8613153","2025-08-10T13:40:51.9472713","While the employee is employed and covered.","Aligns with UK limitation periods for contractual/employment claims.","6 years after leaving.","Secure deletion/anonymisation after retention.","Direct","",[],{},{"dpo":20,"referent":20,"owner":20,"representative":20,"dataProtectionAuthority":20,"id":30,"type":89,"parentId":90,"ref":20,"label":91,"description":20,"logoUrl":20,"address":20,"zipCode":20,"city":20,"region":20,"countryCode":20,"immatriculationNumber":20,"phoneNumber":20,"mailAddress":20,"dpoId":20,"referentId":20,"ownerId":20,"representativeId":20,"dataProtectionAuthorityId":20},"Area",357,"Template (english)",{"dpo":20,"referent":20,"owner":20,"representative":20,"dataProtectionAuthority":93,"id":90,"type":104,"parentId":20,"ref":20,"label":105,"description":20,"logoUrl":20,"address":20,"zipCode":20,"city":20,"region":20,"countryCode":106,"immatriculationNumber":20,"phoneNumber":20,"mailAddress":20,"dpoId":20,"referentId":20,"ownerId":20,"representativeId":20,"dataProtectionAuthorityId":94},{"id":94,"label":95,"siteURL":96,"phoneNumber":97,"email":98,"countryCode":99,"address":100,"city":101,"zipCode":102,"declarationViolationUrl":103},34,"ICO - Information Commissioner's Office","https://ico.org.uk/","0303 123 1113","casework@ico.org.uk","UKI","Wycliffe House Water Lane Wilmslow","Cheshire","SK9 5AF","https://ico.org.uk/make-a-complaint/","Entity","Regulatory Reference – English","GB",{"id":108,"label":109,"color":110,"order":111,"itemLimit":20,"type":10,"finalStep":40,"initialStep":21,"authorizedRole":20,"authorizedRoleId":20,"descriptionHtml":20,"mappedState":112},1062,"Done","#42c478",3,"Active",[],[],[],[117,130,138],{"date":118,"state":119,"descriptionHtml":20,"readonly":21,"purposes":20,"customFields":120,"id":121,"ref":20,"label":122,"type":123,"description":124,"relatedRisk":85,"moreDetailsUrl":125,"dateCreation":126,"dateUpdate":20,"tags":127,"attachments":128,"creatorUser":20,"workflowStepId":129,"workflowStep":20},"2026-04-21T17:23:30.6043029Z","None",{},"b26b4db0-e5e5-49b9-879d-1b7707c52717","05.15. Access control","Organizational","Security measure recommended by ISO 27002","https://www.iso.org/fr/standard/75652.html","2023-08-08T12:03:38.6759554",[],[],90381,{"date":131,"state":119,"descriptionHtml":20,"readonly":21,"purposes":20,"customFields":132,"id":133,"ref":20,"label":134,"type":123,"description":124,"relatedRisk":85,"moreDetailsUrl":125,"dateCreation":135,"dateUpdate":20,"tags":136,"attachments":137,"creatorUser":20,"workflowStepId":129,"workflowStep":20},"2026-04-21T17:23:30.6043056Z",{},"a9119fd8-1f23-4e3f-8782-385228e94487","05.16. Identity management","2023-08-08T12:03:38.6983711",[],[],{"date":139,"state":119,"descriptionHtml":20,"readonly":21,"purposes":20,"customFields":140,"id":141,"ref":20,"label":142,"type":123,"description":124,"relatedRisk":85,"moreDetailsUrl":125,"dateCreation":143,"dateUpdate":20,"tags":144,"attachments":145,"creatorUser":20,"workflowStepId":129,"workflowStep":20},"2026-04-21T17:23:30.6043074Z",{},"4212bea3-1a13-4912-8c71-4df6a7d72ded","05.18. Access rights","2023-08-08T12:03:38.7466855",[],[],[147],{"subjectCategory":148,"displayName":150,"id":155,"subjectCategoryId":149,"comment":156,"dataSubjectVolumeMax":20,"readonly":21,"purposes":157},{"id":149,"label":150,"ref":20,"dateCreation":151,"dateUpdate":152,"creatorUserId":153,"creatorUser":20,"description":20,"minorConcerned":21,"workflowStepId":154,"workflowStep":20},"162790ee-5118-425d-2ab5-08dadc63aaa6","Employees","2022-12-13T09:59:13.7702414","2025-07-14T12:57:21.2499274",2986,97315,"44213494-0aa7-439f-9ee4-926a9a552c3c","Current employees covered by the employer scheme",[],"2025-08-10T13:44:08.5101385","2023-10-09T12:33:23.9945595","Automatic","ManualOrOnDemand","NonApplicable","The information is given at the time of the compulsory complementary health insurance information.",[],[166,175,182],{"purposes":167,"dataRetentionRules":20,"parentId":20,"children":168,"displayName":169,"label":169,"transfers":170,"recipientType":171,"type":172,"jobTitle":20,"id":173,"actorId":20,"actor":20,"areaId":20,"area":20,"description":174,"readonly":21},[],[],"Internal HR & Payroll teams",[],"InternalService","Recipient","24e9c875-c8bf-4023-9dca-c13197f01f89","Administration and liaison with insurer.",{"purposes":176,"dataRetentionRules":20,"parentId":20,"children":177,"displayName":178,"label":178,"transfers":179,"recipientType":171,"type":172,"jobTitle":20,"id":180,"actorId":20,"actor":20,"areaId":20,"area":20,"description":181,"readonly":21},[],[],"Line managers",[],"29fd18de-f34c-4589-baa3-eb042c66bfb6","where necessary for eligibility confirmation.",{"purposes":183,"dataRetentionRules":20,"parentId":20,"children":184,"displayName":185,"label":185,"transfers":186,"recipientType":187,"type":172,"jobTitle":20,"id":188,"actorId":20,"actor":20,"areaId":20,"area":20,"description":189,"readonly":21},[],[],"Private health insurer",[],"ThirdParty","af767423-abcb-401a-aa9e-be03149097ee","Autonomous controller for insurance provision.",[],[192],{"id":193,"key":194,"label":195,"description":85,"legalBasis":196,"legalBasisText":197,"legalBasisDescription":198,"readonly":21},"2d4bad10-36c7-4e09-9707-47968239ccef","3e715c1c-9e1d-440a-9d18-e746bb8c589f","Membership and coverage management","LegalCommitment","Legal obligation","Legal obligation (Art. 6(1)(c)) — required to meet employer duties under employment law or collective agreements.\n\nFalls under UK GDPR Art. 6(1)(c) Legal obligation where provision of private health insurance is required by employment contracts or statutory schemes. If purely contractual (not statutory), use Art. 6(1)(b) Performance of a contract.",100,78,23,0]