GDPR Data processing modelProcessing of personal information relating to financial instruments
Purposes (6)
A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable
Data categories (1)
Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)
Account and financial instrument data
Data details
Definition
- nature of the account ;- collateral ;- account usage limits and financial conditions ;- nominal values ;- issue price ;- date of entitlement ;- availability deadlines ;- form of securities ;- tax status ;- trading date ;- designation of security traded ;- quantity of securities, on deposit ;- tax transfers ; income from financial instruments;gains and losses;amounts subject to double taxation;quantity of securities traded;securities portfolio;investment capacity;stock market price;specific information on the management of various forms of employee savings, including employee share ownership: salaries, amount of rights;
Definition
Single, married, cohabiting etc.
Definition
Number of children, marital status
Definition
Name of the person
Data conservation rules
Active base:
For the duration of the client relationship or account. Afterwards: records relating to MiFID business are kept for at least 5 years (FCA SYSC 9.1); customer due diligence records and supporting transaction records are kept for 5 years after the end of the business relationship or the occasional transaction (Money Laundering Regulations 2017, reg. 40); records needed to defend claims may be kept up to 6 years (Limitation Act 1980, ss.2 and 5). Longer retention only where a specific FCA rule, an FCA request or a pending claim requires it.
FCA Handbook, SYSC 9.1; Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, reg. 40; Limitation Act 1980, ss.2 and 5
Destruction
Data subject (1)
A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process
- Customers
Attribution / Pas d'utilisation commerciale
CC-BY-NC
