Data retention summary

This summary shows the default categories and purposes for retaining user data. Certain areas may have more specific categories and purposes than those listed here.

Site

Category

Authenticating information

information used to authenticate an individual with something they know.

i.e. Passwords


Purpose

User authentication, access management
Retention period
3 months
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

Users

Category

Identifying information

information that uniquely or semi-uniquely identifies a specific individual.

i.e. Name, username


Purpose

Student administration
Retention period
3 months
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

Course categories

Purpose

Retention period
No retention period was defined

Courses

Purpose

Retention period
No retention period was defined

Activity modules

Purpose

Retention period
No retention period was defined

Blocks

Purpose

Retention period
No retention period was defined