Any file or processing of personal data must be declared to the CNIL. This declaration must be made prior to the creation of the customer file and its use.
NB: The processing of personal data for the purposes of customer management, the exchange of customer and prospect files or loyalty operations; benefit from a simplified declaration with regard to the simplified standard NS-048.Before creating any file, you must define a clear and precise main objective. Indeed, article 6 of the Data Protection Act states that data must be collected "for specific, explicit and legitimate purposes" and must "not be further processed in a manner incompatible with these purposes". turkey whatsapp data
In addition, the data you collect must be “adequate, relevant and not excessive in relation to the said purposes”.Limited retention of information
Legal regulations subordinate the legality of your information to a specific retention period. Beyond a certain time, you will have to delete the information you have collected…
In addition, Article 5 of the Data Protection Act states that data retention must allow the data subject to be identified but must not exceed "the period necessary for the purposes for which they are collected and processed". Thus, once the previously determined purpose has been achieved, there is no longer any need to retain the information. It is therefore up to the data controller to define an appropriate lead retention period.
NB: According to Standard NS-048, customer data relating to commercial prospecting may be kept for up to three years after the end of the commercial relationship.