Data Controller

Name and contact details Data Protection Officer (if applicable) Representative (if applicable)
Name Name Name
Address Address Address
Email Email Email
Telephone Telephone Telephone
epresentative (if applicable)
 Processing Activity Name Data Subjects' categories
The Retail company
Marketing communication - newsletter Card holders
Access control - employees Employees
Marketing Communication - SMS Card holders
3rd party system - Email Invoicing Card holders, Potential customers
Keeping a record of business phone users Employees
Manage user accounts in IT systems Customers, Potential customers
The Company Delivery - Delivery of goods Card holders, Vendors
Selection procedure Job candidates
Working hours record Employees
Payroll - employees Employees
 Data Types categories Lawful basis Purpose

First name, Last name OIB, Email AddresLegitimate interest Notifying Customers of current offers vi
First name, Last name, OIB Legitimate interest To enable access to facilities
Email, phone, mobile, fax, Mail addr Consent Notifying Customers of current Metro of
First name, Last name, OIB, Account Contract Invoicing and shipping to Customers elec
First name, Last name, Phone, Mobile Legitimate interest To keep and maintain a list of contact
First name, Last name, Phone, Email Consent To gain access to user accounts
First
Workname, Last name, OIB
experience Contract Delivery of the purchased goods to the
Certificate
SAP ID of good conduct Contract Implementation of selection procedures
Membership of the Workers' CouncilLegal obligations
Time and stay information Recording the time an employee spends
Social status (e.g., number of children)
Contract Calculation and payment of salaries to
 Data retention period Processing Activity details Data Processor

0 days The list of recipients is retrieved fro External 3rd party

0 days (Until contract expiry) The list of recipients is retrieved fro External 3rd party
0 days (As long as the card is active) For customers who already have access External
to 3rd party
0 days (As long as the card is active) Invoicing necessary to provide the servi External 3rd party
0 days (As long as the employee works Records of employees' business phone N/A
0 days (Until user requests deletion of t To manage different accounts within ThN/A
0 days (As long as the card is active) The company processes data in order toExternal 3rd party
0 days (Until the employed candidate haCandidates' CVs are submitted via e-mailExternal 3rd party
0 days (Until work contract is no longe Employees use access cards with which External
th 3rd party
SAP
0 days (Until contract expiry or terminatFind out how payroll works for two workers in METSPA
External Ltd.
3rd party
 Data Reciever Security Measures External Systems

External 3rd party Logical

Logical access
access controll
controll Company managed system
N/A Physical access controll External 3rd party
External 3rd party Logical access controll Company managed system
External 3rd party Logical access controll Company managed system
N/A Logical access controll Company managed system
N/A Logical
Logical access
access controll
controll Company managed system
External 3rd party Physical access controll Company managed system
N/A Logical access controll Company managed system
External
External3rd
3rdparty
party Logical access controll Company managed system
Pension fund Logical access controll Company managed system
Health insurance fund
 Owner Name

Example Owner
Example Owner
Example Owner
Example Owner
Example Owner
Example Owner
Example Owner
Example Owner
Example Owner
Example Owner