The law on data retention has changed. The famous GDPR law now applies. Although it may seem unclear to many entrepreneurs, understanding it is essential to properly manage your establishment and avoid problems in the event of inspections.
What does this mean for you?
Your establishment and the GDPR 💡
👉 Your declaration to the CNIL is no longer necessary: it used to be mandatory, for example to report the installation of a time clock in an establishment.
👉 Data collection is always subject to legal obligations: for example, photos of a time clock like the Skello Badge Machine must be treated exactly like any other personal data: name, first name, email, telephone number, social security number, etc. The type of data and the reason for its retention must be recorded in a register.
The GDPR law requires all companies to keep a register of all the personal data they retain, specifying several characteristics, including the reason for retention, the means of retention, and the duration.
When installing the time clock, the employer must indicate in their register that they are keeping the photo, in the same way that they indicated that they are keeping the employee's first and last names, email address, and telephone number.
