PAPERBOAT
← All modules Money and governance

Data protection in practice

Keeping a guest's document and a car plate takes more than a notice in the footer.

The guest's document has a declared purpose and a date to be deleted.PAPERBOAT
How it works

Every piece of data collected has a declared purpose and a retention period. A guest's document, a parcel photo, a meter image and an access record are not kept forever — they expire on their own.

Consent is asked for by purpose, at the moment of collection, and is recorded with a date. Whoever consented may withdraw consent later.

The data subject asks for the export or the deletion of their own data through the platform, and the request comes in as a ticket with the legal deadline counted.

  • No more folder of photocopied documents kept at the gate with no deadline and no lock.
  • The property stops accumulating risk on data it should no longer hold.
  • The data subject's request has a counted deadline, and it does not get lost in the management's inbox.
  • Responsibility is documented, which is what an inspection asks for.
The screen

Data and retention

What is collected, what for, for how long, and how much has already been deleted in the period.

Data protection · inventory InventoryConsentsData-subject requestsDeletions
DataPurposeLegal basisRetentionRecordsStatus
Guest's documentIdentify who comes inLegitimate interest90 days28within the deadline
Access recordProperty securityLegitimate interest5 years14.302within the deadline
Parcel photoProve deliveryPerformance of a contract90 days412within the deadline
Meter photoProve the readingPerformance of a contract12 months3.744within the deadline
Vehicle plateGarage remoteLegitimate interestwhile active486within the deadline
Voice-page recordingFulfil the requestConsent30 days0not stored
6 declared purposes · 2 data-subject requests this quarter, both on time · 1,190 records deletedExample
What you configure
Privacy parameters
Consent by purposeyes
Retention configurable per data typeyes
Automatic deletion at expiryyes
Deadline to answer the data subject15 days
Export of the data subject's datayes
Voice recording storedno
Data protection officer appointedper property
Impact assessment availableyes

See this module running in the demo panel.

Sign in with any profile and operate on the populated database of a 312-unit resort.

Try it now Request a proposal