Managing customer inquiries, complaints, and support tickets across phone, email, and chat channels.

Data Details
Data Subjects
Customers
Data Volume
2,000 - 8,000 tickets/month
Data Categories
Full NameContact DetailsComplaint DescriptionTransaction ReferenceCall RecordingsChat Logs
Processing Type
Collection
Automated Decision-Making
No
Legal Basis
Legal Basis
Legitimate Interest
Consent Mechanism
Informed by privacy notice; call recording notification at start of calls
Purpose
Resolving customer issues, ensuring satisfaction, and maintaining regulatory complaint records.
Legal Basis Detail
Legitimate interest in resolving customer complaints and improving service delivery.
Recipients & Transfers
Cross-Border
Internal Recipients
Customer ServiceQuality AssuranceManagement
External Recipients
Zendesk (CRM) (US)
Transfer Countries
US
Transfer Safeguards
Zendesk Data Processing Agreement with Standard Contractual Clauses.
Retention & Security
Retention Period
5 years after case closure
Retention Justification
Security Measures
✓ Call Recording Disclosure✓ Access Controls✓ Encrypted Storage✓ Quality Monitoring
PDPL Compliance Assessment
Update →
D1 Data Subject Rights & Consent
75%
Partial

Most requirements for Data Subject Rights & Consent are addressed. Some gaps identified in documentation or process.

D2 Processing Principles & Lawful Basis
80%
Compliant

All requirements for Processing Principles & Lawful Basis are met. Documentation is complete and up to date.

D3 Data Protection & Security
78%
Partial

Most requirements for Data Protection & Security are addressed. Some gaps identified in documentation or process.

D4 Organizational Requirements & Governance
72%
Partial

Most requirements for Organizational Requirements & Governance are addressed. Some gaps identified in documentation or p…

D5 Cross-Border Data Transfer
62%
Partial

Most requirements for Cross-Border Data Transfer are addressed. Some gaps identified in documentation or process.

D6 Compliance & Accountability
76%
Partial

Most requirements for Compliance & Accountability are addressed. Some gaps identified in documentation or process.

Associated Risks
1
Low Call recordings shared with third party without adequate notice… Accepted
Edit Activity Add Risk