Insurance must open Employee Capital Plans (PPK) for its employees and contractors. PPKs are run by a financial institution on the basis of a PPK management agreement concludd by the employer on behalf of and for the benefit of employees. Without going into more details, it can be safely statd that both the employer and the financial institution in the context of PPK will act as separate data controllers. In this article.
Collect only the personal data without
We are interestd in the situation of the employer, and therefore in the context of PPK, the following obligations on his part phone number list can be indicatd: the nd to update (or develop a new) information obligation for employees who will join PPK, the nd to update the register of data processing activities – in the context of PPK, new processing activities will appear, and therefore we must record them in the RCP, the nd to implement mechanisms relatd to compliance.
User for example that our services
With data retention periods providd for. Data ndd for PPK purposes (destruction of documents, anonymization of Marketing List data in ICT systems), carrying out a risk assessment for data processing, and if it turns out that the risk is high – reaching for the DPIA.Providing personal data of the PPK participant is a requirement for the proper implementation of the PPK program.