Data retention summary

This summary shows the default categories and purposes for retaining user data. Certain areas may have more specific categories and purposes than those listed here.

Site

Purpose

Retention period
No retention period was defined

Users

Purpose

Retention period
No retention period was defined

Course categories

Category

Educational Data

Purpose

OCDS site
Retention period
12 months
Lawful bases
Consent (GDPR Art. 6.1(a)) The data subject has given consent to the processing of his or her personal data for one or more specific purposes
Public task (GDPR Art. 6.1(e)) Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
Sensitive personal data processing reasons
Explicit consent (GDPR Art. 9.2(a)) The data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 of GDPR Article 9 may not be lifted by the data subject
Public health (GDPR Art. 9.2(i)) Processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy

Courses

Category

Educational Data

Purpose

OCDS site
Retention period
12 months
Lawful bases
Consent (GDPR Art. 6.1(a)) The data subject has given consent to the processing of his or her personal data for one or more specific purposes
Public task (GDPR Art. 6.1(e)) Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
Sensitive personal data processing reasons
Explicit consent (GDPR Art. 9.2(a)) The data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 of GDPR Article 9 may not be lifted by the data subject
Public health (GDPR Art. 9.2(i)) Processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy

Activity modules

Category

Educational Data

Purpose

OCDS site
Retention period
12 months
Lawful bases
Consent (GDPR Art. 6.1(a)) The data subject has given consent to the processing of his or her personal data for one or more specific purposes
Public task (GDPR Art. 6.1(e)) Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
Sensitive personal data processing reasons
Explicit consent (GDPR Art. 9.2(a)) The data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 of GDPR Article 9 may not be lifted by the data subject
Public health (GDPR Art. 9.2(i)) Processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy

Blocks

Category

Educational Data

Purpose

OCDS site
Retention period
12 months
Lawful bases
Consent (GDPR Art. 6.1(a)) The data subject has given consent to the processing of his or her personal data for one or more specific purposes
Public task (GDPR Art. 6.1(e)) Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
Sensitive personal data processing reasons
Explicit consent (GDPR Art. 9.2(a)) The data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 of GDPR Article 9 may not be lifted by the data subject
Public health (GDPR Art. 9.2(i)) Processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy