{"id":8077,"date":"2022-07-18T16:18:13","date_gmt":"2022-07-18T14:18:13","guid":{"rendered":"https:\/\/triplast.ro\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\/"},"modified":"2022-12-02T12:13:44","modified_gmt":"2022-12-02T10:13:44","slug":"procedura-de-cartografiere-a-datelor-cu-caracter-personal","status":"publish","type":"page","link":"https:\/\/triplast.ro\/en\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\/","title":{"rendered":"GDPR – Personal data mapping procedure"},"content":{"rendered":"

[vc_row][vc_column width=”1\/3″][vc_wp_custommenu nav_menu=”1664″][\/vc_column][vc_column width=”2\/3″][vc_column_text]<\/p>\n

    \n
  1. DEFINITIONS \n

    “GDPR”, “Regulation” – Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing the Directive 95\/46\/CE (General Data Protection Regulation, in English General Data Protection Regulation);<\/p>\n

     <\/p>\n

    “personal data” – any information regarding an identified or identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more many specific elements, specific to his physical, physiological, genetic, psychological, economic, cultural or social identity;<\/p>\n

     <\/p>\n

    “processing” – means any operation or set of operations performed on personal data or sets of personal data, with or without the use of automated means, such as collection, recording, organization, structuring, storage, adaptation or modification , extracting, consulting, using, disclosing by transmission, disseminating or otherwise making available, aligning or combining, restricting, erasing or destroying;<\/p>\n

     <\/p>\n

    “operator” – means the natural or legal person, public authority, agency or other body that, alone or together with others, establishes the purposes and means of personal data processing; when the purposes and means of processing are established by Union law or domestic law, the operator or the specific criteria for its designation may be provided for in Union law or domestic law;<\/p>\n

     <\/p>\n

    “person authorized by the operator” – means the natural or legal person, public authority, agency or other body that processes personal data on behalf of the operator;<\/p>\n

     <\/p>\n

    “recipient” – means the natural or legal person, public authority, agency or other body to whom (to whom) personal data is disclosed, regardless of whether it is a third party or not. However, the public authorities to which personal data may be communicated within a<\/p>\n

    certain inquiries in accordance with Union or national law are not considered recipients; the processing of this data by the respective public authorities complies with the applicable data protection rules, in accordance with the purposes of the processing;<\/p>\n

     <\/p>\n

    “third party” – means a natural or legal person, public authority, agency or body other than the data subject, the operator, the person authorized by the operator and the persons who, under the direct authority of the operator or the person authorized by the operator, are authorized to process data personal;<\/p>\n

     <\/p>\n

    “consent” – of the data subject means any manifestation of the data subject’s free, specific, informed and unambiguous will by which the data subject accepts, through a statement or an unequivocal action, that the personal data concerning him\/her be processed;<\/p>\n

     <\/p>\n

    “personal data security breach” – means a security breach that leads, accidentally or unlawfully, to the destruction, loss, modification, or unauthorized disclosure of personal data transmitted, stored or otherwise processed, or to unauthorized access to them;<\/p>\n

     <\/p>\n

    “representative” – \u200b\u200bmeans a natural or legal person established in the Union, designated in writing by the operator or the person authorized by the operator, who represents the operator or the authorized person with regard to their respective obligations under the GDPR;<\/p>\n

     <\/p>\n

    “mandatory corporate rules” – means the personal data protection policies that must be respected by an operator or a person authorized by the operator established in the territory of a member state, with regard to transfers or sets of transfers of personal data personally to an operator or a person authorized by the operator in one or more third countries within a group of enterprises or a group of enterprises involved in a common economic activity;<\/p>\n

     <\/p>\n

    “supervisory authority” – means an independent public authority established by a Member State;<\/p>\n

     <\/p>\n

    “DPO” – data protection officer (in English, data protection officer);<\/p>\n

     <\/p>\n

    “DPIA” – data protection impact assessment (in English, data-protection impact assessment, DPIA);<\/p>\n

     <\/p>\n

    “Supervisory Authority” – the National Supervisory Authority for the Processing of Personal Data (ANSPDCP).<\/li>\n<\/ol>\n

     <\/p>\n

      \n
    1. PURPOSE AND SCOPE \n

      2.1. THE GOAL<\/p>\n

       <\/p>\n

      This procedure documents the requirements regarding the preparation of the document called “Personal data mapping”.<\/p>\n

       <\/p>\n

      2.2. APLICATION DOMAIN<\/p>\n

       <\/p>\n

      This procedure applies to all organizational structures of the Operator TRIPLAST from Tirgu-Mures. This procedure will be considered as having a general character and will apply to all processing carried out by the Operator.<\/p>\n

       <\/p>\n

      If it is found that there are certain aspects for which this procedure does not provide appropriate directives, Employees must immediately request advice from the Data Protection Officer (DPO) or the legal representative of the Operator.<\/p>\n

       <\/p>\n

      2.3. REFERENCE DOCUMENTS<\/p>\n

       <\/p>\n

      – GDPR<\/p>\n

      – Internal regulation<\/p>\n

      – Internal procedures<\/p>\n

       <\/p>\n

      GENERAL RULES<\/p>\n

       <\/p>\n

      3.1. GENERAL. The operator – TRIPLAST – from Tirgu-Mures will draw up a table (preferably in excel format), in which he will list each line (e.g. “activity” carried out within each process) together with information related to the collection, storage, use, transfer and destruction of critical data content for each department.<\/p>\n

       <\/p>\n

      IMPORTANT: The operator will go through the points below each type of document that contains personal data.<\/p>\n

       <\/p>\n

      3.2. TYPE\/NAME OF DOCUMENTS FOR PERSONAL DATA COLLECTION<\/p>\n

       <\/p>\n

      The operator – TRIPLAST – from Tirgu-Mure\u0219 will identify the type\/name of the documents for the collection of personal data, the categories of data from the Data Classification Scheme (Annex 1) will be selected.<\/p>\n

       <\/p>\n

      3.3. DATA CATEGORIES<\/p>\n

       <\/p>\n

      The operator – TRIPLAST – from Tirgu-Mures will select the categories of personal data. In order to identify the categories of personal data collected, the Data Classification Scheme (Annex 1) will be considered.<\/li>\n<\/ol>\n

       <\/p>\n

      3.4. DATA TYPE<\/p>\n

       <\/p>\n

      The operator – TRIPLAST – will select the type of personal data. In order to identify the type of personal data collected, the Data Classification Scheme (Annex 1) will be considered.<\/p>\n

       <\/p>\n

      3.5. DATA SOURCE<\/p>\n

       <\/p>\n

      The operator – TRPLAST – will select where the personal data comes from (eg input source)? Tick \u200b\u200b”X” the data input source (multiple options are possible).<\/p>\n

      \u2610 Clients (PF or PJ)<\/p>\n

      \u2610 Employees<\/p>\n

      \u2610 Third parties (suppliers, partners, service providers)<\/p>\n

       <\/p>\n

      3.6. DATA COLLECTION METHOD<\/p>\n

      The operator – TRIPLAST – will select the method of collecting personal data. Tick \u200b\u200bwith “X” the support type of data collection (multiple options are possible).<\/p>\n

      \u2610 Physical (Paper Support)<\/p>\n

      \u2610 Post\/Courier<\/p>\n

      \u2610 Fax<\/p>\n

      \u2610 Email<\/p>\n

      \u2610 Web portal<\/p>\n

      \u2610 Online form<\/p>\n

      \u2610 USB Drive<\/p>\n

      \u2610 Hard drive<\/p>\n

      \u2610 CDs\/DVDs<\/p>\n

      \u2610 FTP server<\/p>\n

      \u2610 Social Media<\/p>\n

      \u2610 Call Center<\/p>\n

       <\/p>\n

      3.7. NEXT TRANSFER LOCATION<\/p>\n

      The operator – TRIPLAST – will select the location of the transfer of personal data. Tick \u200b\u200b”X” the data transfer location (multiple options are possible).<\/p>\n

      \u2610 Offices (Files)<\/p>\n

      \u2610 Email Server<\/p>\n

      \u2610 IT applications (name of applications used)<\/p>\n

      \u2610 Databases<\/p>\n

      \u2610 Electronic files<\/p>\n

      \u2610 Mobile phones<\/p>\n

       <\/p>\n

      3.8. STORAGE LOCATION<\/p>\n

      The operator – TRIPLAST – will select the location of personal data storage. Tick \u200b\u200b”X” the data storage location (multiple options are possible).<\/p>\n

      \u2610 Offices (Files)<\/p>\n

      \u2610 Email Server<\/p>\n

      \u2610 IT applications (name of applications used)<\/p>\n

      \u2610 Generic System\/Server<\/p>\n

      \u2610 Electronic files<\/p>\n

      \u2610 Databases<\/p>\n

      \u2610 Web server<\/p>\n

      \u2610 Electronic Archive (back-up)<\/p>\n

      \u2610 Cloud<\/p>\n

       <\/p>\n

       <\/p>\n

      3.9. DATA USE (Internal)<\/p>\n

      The operator – TRIPLAST – will select the method of using personal data. Tick \u200b\u200bwith “X” the method of use (more options are possible).<\/p>\n

      \u2610 Department<\/p>\n

      \u2610 Internal transfer to another department<\/p>\n

      \u2610 How many employees have access to personal data?<\/p>\n

       <\/p>\n

      3.10. DATA TRANSFER (External)<\/p>\n

      The operator – TRIPLAST – will select the method of transfer of personal data. Tick \u200b\u200bwith “X” the method of transfer (several options are possible).<\/p>\n

      \u2610 Authorities<\/p>\n

      \u2610 Third parties (suppliers, partners, service providers)<\/p>\n

      \u2610 Cross-border (in the EU\/EEA or outside the EU\/EEA)<\/p>\n

       <\/p>\n

      3.11. DATA RETENTION AND ARCHIVING<\/p>\n

      The operator – TRIPLAST – will select the data retention\/storage location. Tick \u200b\u200b”X” the data retention\/storage location (multiple options are possible).<\/p>\n

      \u2610 Offices (Archive)<\/p>\n

      \u2610 Email Server<\/p>\n

      \u2610 IT applications (name of applications used)<\/p>\n

      \u2610 Generic System\/Server<\/p>\n

      \u2610 Electronic files<\/p>\n

      \u2610 Databases<\/p>\n

      \u2610 Web server<\/p>\n

      \u2610 Electronic Archiving (back-up)<\/p>\n

      \u2610 Cloud<\/p>\n

       <\/p>\n

      3.12. STORAGE\/RETENTION TERM<\/p>\n

      The operator – TRIPLAST – will complete the storage\/retention term for each topic of personal data processing.<\/p>\n

      \u2610 Consent<\/p>\n

      \u2610 Legal obligation<\/p>\n

      \u2610 Contractual obligation<\/p>\n

      \u2610 Public interest<\/p>\n

      \u2610 Public authorities<\/p>\n

      \u2610 Protecting vital interests<\/p>\n

      \u2610 Legitimate interest<\/p>\n

       <\/p>\n

       <\/p>\n

      3.13. DESTRUCTION\/DELETION<\/p>\n

      The operator – TRIPLAST – will complete the method of destruction\/deletion of personal data. Tick \u200b\u200bwith “X” the data deletion\/destruction method (several options are possible).<\/p>\n

      \u2610 Trash can<\/p>\n

      \u2610 Paper shredder<\/p>\n

      \u2610 Delete computer systems\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 .<\/p>\n

       <\/p>\n

      Annex 1: Data classification scheme<\/p>\n

       <\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
      Warning!<\/strong><\/td>\nONLY attributes (data) of natural persons shall be considered<\/strong><\/td>\n<\/tr>\n
      Below you can find the list of personal data (P.D.)<\/strong> categogories. The list below in non-exhaustive, new entries shall be added as new P.D. are identified, collected, and processed.<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      A<\/strong><\/td>\nIdentification data and personal characteristics<\/strong><\/td>\n<\/tr>\n
      A.1<\/td>\nName, Surname<\/td>\n<\/tr>\n
      A.2<\/td>\nDate of birth<\/td>\n<\/tr>\n
      A.3<\/td>\nPersonal Identification Number (CNP)<\/td>\n<\/tr>\n
      A.4<\/td>\nCitizenship<\/td>\n<\/tr>\n
      A.5<\/td>\nID Card \/ Passport \/ Other document serial number (e.g. driving license, work permit, residency permit, e.a.)<\/td>\n<\/tr>\n
      A.6<\/td>\nHome address (including those previous if applicable)<\/td>\n<\/tr>\n
      A.7<\/td>\nDate of issuing of identification documents<\/td>\n<\/tr>\n
      A.8<\/td>\nDate of expiry of identification documents<\/td>\n<\/tr>\n
      A.9<\/td>\nPhoto (CV, identity documents, diplomas, e.a.)<\/td>\n<\/tr>\n
      A.10<\/td>\nResidence (if applicable)<\/td>\n<\/tr>\n
      A.11<\/td>\nMarital status<\/td>\n<\/tr>\n
      A.12<\/td>\nPhone number (personal and\/or workplace)<\/td>\n<\/tr>\n
      A.13<\/td>\nE-mail (personal and\/or workplace)<\/td>\n<\/tr>\n
      A.14<\/td>\nPseudoname(s)<\/td>\n<\/tr>\n
      A.15<\/td>\nSignature<\/td>\n<\/tr>\n
      A.16<\/td>\nAge<\/td>\n<\/tr>\n
      A.17<\/td>\nReligion<\/td>\n<\/tr>\n
      A.18<\/td>\nSex<\/td>\n<\/tr>\n
      A.19<\/td>\nPlace of birth<\/td>\n<\/tr>\n
      A.20<\/td>\nNationality<\/td>\n<\/tr>\n
      A.21<\/td>\nFather’s name and surname<\/td>\n<\/tr>\n
      A.22<\/td>\nMother’s name and surname<\/td>\n<\/tr>\n
      A.23<\/td>\nVehicle’s registration number (personal and\/or workplace)<\/td>\n<\/tr>\n
      A.24<\/td>\nDriving license number<\/td>\n<\/tr>\n
      A.25<\/td>\nSocial security number or health insurance number<\/td>\n<\/tr>\n
      A.26<\/td>\nSpoken languages<\/td>\n<\/tr>\n
      A.27<\/td>\nRasial or ethnical origin<\/td>\n<\/tr>\n
      A.28<\/td>\nReligious or philosophical beliefs<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      B.<\/strong><\/td>\nDetails about family members<\/strong><\/td>\n<\/tr>\n
      B.1<\/td>\nSpouse’s name and surname<\/td>\n<\/tr>\n
      B.2<\/td>\nSpouse’s date of birth<\/td>\n<\/tr>\n
      B.3<\/td>\nSpouse’s name before marriage<\/td>\n<\/tr>\n
      B.4<\/td>\nSpouse’s name after marriage<\/td>\n<\/tr>\n
      B.5<\/td>\nKids’ name and surname<\/td>\n<\/tr>\n
      B.6<\/td>\nKids’ dates of birth<\/td>\n<\/tr>\n
      B.7<\/td>\nKids’ personal identification number<\/td>\n<\/tr>\n
      B.8<\/td>\nSerial number of marriage certificate, divorce sentence, death certificate, e.a.<\/td>\n<\/tr>\n
      B.9<\/td>\nSpouse’s personal identification number<\/td>\n<\/tr>\n
      B.10<\/td>\nParents’ name and surname<\/td>\n<\/tr>\n
      B.11<\/td>\nMarital status history: previous marriages, divorces, e.a.<\/td>\n<\/tr>\n
      B.12<\/td>\nInformation of other family members: number of children, dependants, parents, e.a.<\/td>\n<\/tr>\n
      B.13<\/td>\nInformation on dependant kids (alimony)<\/td>\n<\/tr>\n
       <\/p>\n

       <\/p>\n

       <\/td>\n

      		<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      C.<\/strong><\/td>\nElectronic identification<\/strong><\/td>\n<\/tr>\n
      C.1<\/td>\n\u201cCookies\u201d<\/td>\n<\/tr>\n
      C.2<\/td>\nEmployees’ access logs<\/td>\n<\/tr>\n
      C.3<\/td>\nEmployees’ IP addresses<\/td>\n<\/tr>\n
      C.4<\/td>\nGPS coordinates, location<\/td>\n<\/tr>\n
      C.5<\/td>\nSerial number of employees’ \/ visitors’ access card<\/td>\n<\/tr>\n
      C.6<\/td>\nEmployees’ log entry number<\/td>\n<\/tr>\n
      C.7<\/td>\nHealth and fitness equipment<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      D.<\/strong><\/td>\nFinancial elements (banking, financials and wealth)<\/strong><\/td>\n<\/tr>\n
      D.1<\/td>\nNatural person’s banking identification (e.g. employees’ bank account number).<\/td>\n<\/tr>\n
      D.2<\/td>\nNatural person’s bank card number<\/td>\n<\/tr>\n
      D.3<\/td>\nUndisclosed codes (e.g. access codes for certain areas)<\/td>\n<\/tr>\n
      D.4<\/td>\nAny transactions involving natural persons (e.g. receiving\/paying natural persons within a payment operation)<\/td>\n<\/tr>\n
      D.5<\/td>\nCommercial contracts, other documents financial in nature, concluded between a legal entity and a natural person or by the natural person from within the legal entity with a third party (legal entity or natural person)<\/td>\n<\/tr>\n
      D.6<\/td>\nIncome and wealth<\/td>\n<\/tr>\n
      D.7<\/td>\nDebts and expenses<\/td>\n<\/tr>\n
      D.8<\/td>\nLoans and mortgages<\/td>\n<\/tr>\n
      D.9<\/td>\nSolvency, delays, incidents<\/td>\n<\/tr>\n
      D.10<\/td>\nFinancial transactions<\/td>\n<\/tr>\n
      D.11<\/td>\nCompensations<\/td>\n<\/tr>\n
      D.12<\/td>\nAgreements and commitments<\/td>\n<\/tr>\n
      D.13<\/td>\nMaterials and equipment<\/td>\n<\/tr>\n
      D.14<\/td>\nProperties, housing, land, e.a.<\/td>\n<\/tr>\n
      D.15<\/td>\nCertifications, personal development trainings, professional activities (types of activities, business relations) of the natural person from within the legal entity<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      E.<\/strong><\/td>\nOther personal characteristics<\/strong><\/td>\n<\/tr>\n
      E.1<\/td>\nInformation on military training<\/td>\n<\/tr>\n
      E.2<\/td>\nInformation on alien: visa details, work permit, special conditions<\/td>\n<\/tr>\n
      E.3<\/td>\nIdentification numbers issued by government<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      F.<\/strong><\/td>\nPhysical characteristics<\/strong><\/td>\n<\/tr>\n
      F.1<\/td>\nHeight<\/td>\n<\/tr>\n
      F.2<\/td>\nWeight<\/td>\n<\/tr>\n
      F.3<\/td>\nHair colour<\/td>\n<\/tr>\n
      F.4<\/td>\nEye colour<\/td>\n<\/tr>\n
      F.5<\/td>\nDistinctive features<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      G.<\/strong><\/td>\nInformation on lifestyle and behaviour<\/strong><\/td>\n<\/tr>\n
      G.1<\/td>\nSmoking and alcohol consumption<\/td>\n<\/tr>\n
      G.2<\/td>\nConsumption of market goods<\/td>\n<\/tr>\n
      G.3<\/td>\nDetails regarding travels: visas, work permits<\/td>\n<\/tr>\n
      G.4<\/td>\nSocial media contacts: friends, associates, relations other than family<\/td>\n<\/tr>\n
      G.5<\/td>\nPublic positions previously held<\/td>\n<\/tr>\n
      G.6<\/td>\nInformation on previous accidents, implicated persons, nature of accident<\/td>\n<\/tr>\n
      G.7<\/td>\nPsychological profile<\/td>\n<\/tr>\n
      G.8<\/td>\nCivil awards, distinctions received<\/td>\n<\/tr>\n
       <\/p>\n

       <\/td>\n

      		<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      H.<\/strong><\/td>\nHobbies and interests<\/strong><\/td>\n<\/tr>\n
      H.1<\/td>\nHobby type activities, sports attended<\/td>\n<\/tr>\n
       <\/p>\n

       <\/td>\n

      		<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      I.<\/strong><\/td>\nAffiliations<\/strong><\/td>\n<\/tr>\n
      I.1<\/td>\nMembership in various organisations (exempting police force): charitable, voluntary, clubs, associations, e.a.<\/td>\n<\/tr>\n
      I.2<\/td>\nUnion membership, professional sindicates<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      J.<\/strong><\/td>\nLegal information<\/strong><\/td>\n<\/tr>\n
      J.1<\/td>\nCriminal convictions<\/td>\n<\/tr>\n
      J.2<\/td>\nAdministrative penalties<\/td>\n<\/tr>\n
      J.3<\/td>\nSuspicions, accusations, investigations (civil, criminal)<\/td>\n<\/tr>\n
      J.4<\/td>\nLegal measures: M\u0103suri judiciare: guardianship, judicial seisure, e.a.<\/td>\n<\/tr>\n
      J.5<\/td>\nAdministrative penalties: administrative-disciplinary, administrative-contraventional, administrative-patrimonial<\/td>\n<\/tr>\n
      J.6<\/td>\nPenalties under labour law: administrative-disciplinary, caviets, disciplinary actions, wage fortfeit<\/td>\n<\/tr>\n
      J.7<\/td>\nAdministrative sanctions: administrative-patrimonial, wage fortfeit \/ bank account\u00a0 blockings<\/td>\n<\/tr>\n
      J.8<\/td>\nCriminal record certificate, fiscal, auto<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      K.<\/strong><\/td>\nData regarding personal health and wellbeing (special category)<\/strong><\/td>\n<\/tr>\n
      K.1<\/td>\nSocial security number<\/td>\n<\/tr>\n
      K.2<\/td>\nInformation on persoanl health of person: medical certificates, medical reports, medical records, treatments, analysis results, sick leaves, e.a.<\/td>\n<\/tr>\n
      K.3<\/td>\nBlood type<\/td>\n<\/tr>\n
      K.4<\/td>\nDisability status<\/td>\n<\/tr>\n
      K.5<\/td>\nInformation on personal health of person regarding sex life: STD’s<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      L.<\/strong><\/td>\nInformation regarding studies and courses<\/strong><\/td>\n<\/tr>\n
      L.1<\/td>\nInformation regarding the sudy level of the person: schooling institutes attended, courses taken, diplomas, exam results, e.a.<\/td>\n<\/tr>\n
      L.2<\/td>\nProfessional qualifications: patents, licenses, certifiates, e.a.<\/td>\n<\/tr>\n
      L.3<\/td>\nPublications: newspapers, books, articles, reports, e.a.<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      M.<\/strong><\/td>\nInformation regarding professional history and professional life<\/strong><\/td>\n<\/tr>\n
      M.1<\/td>\nInformation on current employer: employer, title, date of employment, disciplinary measures, e.a.<\/td>\n<\/tr>\n
      M.2<\/td>\nInformation on work contract termination: date of leave, windup periods, e.a.<\/td>\n<\/tr>\n
      M.3<\/td>\nCarrier: professional history, position held, information on previous emplyers<\/td>\n<\/tr>\n
      M.4<\/td>\nFinancial information: salary, benefits, bonuses, pensions, taxes, e.a.<\/td>\n<\/tr>\n
      M.5<\/td>\nContact detail of employer (e-mail address, phone number, address)<\/td>\n<\/tr>\n
      M.6<\/td>\nGoods in responsibility: inventory items, equipment, e.a.<\/td>\n<\/tr>\n
      M.7<\/td>\nOrganisational and professional affiliations<\/td>\n<\/tr>\n
      M.8<\/td>\nPublic positions held<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      N.<\/strong><\/td>\nInformation on political views, philosophical opinions, and sindicate affiliations. Religious beliefs<\/strong><\/td>\n<\/tr>\n
      N.1<\/td>\nPolitical opinions and preferencies<\/td>\n<\/tr>\n
      N.2<\/td>\nMembership in any parties<\/td>\n<\/tr>\n
      N.3<\/td>\nLobby activities<\/td>\n<\/tr>\n
      N.4<\/td>\nUnion membership<\/td>\n<\/tr>\n
      N.5<\/td>\nReligious beliefs<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      O.<\/strong><\/td>\nInformation on photographic processing<\/strong><\/td>\n<\/tr>\n
      O.1<\/td>\nPhotographs, video recordings, e.a.<\/td>\n<\/tr>\n
      O.2<\/td>\nBiometrical data: digital fingerprint, retinal model, facial structure, voice recognition, hand geometry, vane model, and some deeply rooted abilities, including behavioural characteristics (e.g. signature)<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      P.<\/strong><\/td>\nInformation on sound processing<\/strong><\/td>\n<\/tr>\n
      P.1<\/td>\nRecording of phone conversations<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      R.<\/strong><\/td>\nInformation regarding sex life<\/strong><\/td>\n<\/tr>\n
      R.1<\/td>\nInformation on sexual orientation<\/td>\n<\/tr>\n
      R.2<\/td>\nInformation on sex life<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      CATEGORY<\/strong><\/td>\nDESCRIPTION<\/strong><\/td>\n<\/tr>\n
      S.<\/strong><\/td>\nOther personal data<\/strong><\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n
      <\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      [\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

      [vc_row][vc_column width=”1\/3″][vc_wp_custommenu nav_menu=”1664″][\/vc_column][vc_column width=”2\/3″][vc_column_text] DEFINITIONS  “GDPR”, “Regulation” – Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing the Directive 95\/46\/CE (General Data Protection Regulation, in […]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-8077","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nGDPR - Personal data mapping procedure - Triplast<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/triplast.ro\/en\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GDPR - Personal data mapping procedure - Triplast\" \/>\n<meta property=\"og:description\" content=\"[vc_row][vc_column width=”1\/3″][vc_wp_custommenu nav_menu=”1664″][\/vc_column][vc_column width=”2\/3″][vc_column_text] DEFINITIONS  “GDPR”, “Regulation” – Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing the Directive 95\/46\/CE (General Data Protection Regulation, in […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/triplast.ro\/en\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\/\" \/>\n<meta property=\"og:site_name\" content=\"Triplast\" \/>\n<meta property=\"article:modified_time\" content=\"2022-12-02T10:13:44+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/triplast.ro\\\/en\\\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\\\/\",\"url\":\"https:\\\/\\\/triplast.ro\\\/en\\\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\\\/\",\"name\":\"GDPR - Personal data mapping procedure - Triplast\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/triplast.ro\\\/#website\"},\"datePublished\":\"2022-07-18T14:18:13+00:00\",\"dateModified\":\"2022-12-02T10:13:44+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/triplast.ro\\\/en\\\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/triplast.ro\\\/en\\\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/triplast.ro\\\/en\\\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Prima pagin\u0103\",\"item\":\"https:\\\/\\\/triplast.ro\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GDPR – Personal data mapping procedure\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/triplast.ro\\\/#website\",\"url\":\"https:\\\/\\\/triplast.ro\\\/\",\"name\":\"Triplast\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/triplast.ro\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GDPR - Personal data mapping procedure - Triplast","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/triplast.ro\/en\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\/","og_locale":"en_US","og_type":"article","og_title":"GDPR - Personal data mapping procedure - Triplast","og_description":"[vc_row][vc_column width=”1\/3″][vc_wp_custommenu nav_menu=”1664″][\/vc_column][vc_column width=”2\/3″][vc_column_text] DEFINITIONS  “GDPR”, “Regulation” – Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing the Directive 95\/46\/CE (General Data Protection Regulation, in […]","og_url":"https:\/\/triplast.ro\/en\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\/","og_site_name":"Triplast","article_modified_time":"2022-12-02T10:13:44+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/triplast.ro\/en\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\/","url":"https:\/\/triplast.ro\/en\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\/","name":"GDPR - Personal data mapping procedure - Triplast","isPartOf":{"@id":"https:\/\/triplast.ro\/#website"},"datePublished":"2022-07-18T14:18:13+00:00","dateModified":"2022-12-02T10:13:44+00:00","breadcrumb":{"@id":"https:\/\/triplast.ro\/en\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/triplast.ro\/en\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/triplast.ro\/en\/procedura-de-cartografiere-a-datelor-cu-caracter-personal\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Prima pagin\u0103","item":"https:\/\/triplast.ro\/en\/"},{"@type":"ListItem","position":2,"name":"GDPR – Personal data mapping procedure"}]},{"@type":"WebSite","@id":"https:\/\/triplast.ro\/#website","url":"https:\/\/triplast.ro\/","name":"Triplast","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/triplast.ro\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/pages\/8077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/comments?post=8077"}],"version-history":[{"count":4,"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/pages\/8077\/revisions"}],"predecessor-version":[{"id":8290,"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/pages\/8077\/revisions\/8290"}],"wp:attachment":[{"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/media?parent=8077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}