Data retention summary
This summary shows the default categories and purposes for retaining user data. Certain areas may have more specific categories and purposes than those listed here.
Site
Category
- Education data
Delegates details and course progression
Purpose
- Records of Education Attainment
- We keep a record of training undertaken and when it will need to be retaken
We on occasion collate and present anonymised information on our reports, website or at conferences or requested by employer and this consists of:
- Number of staff trained
- What type of courses staff undertook
- Job role of staff trained
- Feedback information – qualitative and quantitate
- Retention period
- 10 years
| Lawful bases | |
|---|---|
| Contract (GDPR Art. 6.1(b)) | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
| Legal obligation (GDPR Art 6.1(c)) | Processing is necessary for compliance with a legal obligation to which the controller is subject |
| Vital interests (GDPR Art. 6.1(d)) | Processing is necessary in order to protect the vital interests of the data subject or of another natural person |
| Public task (GDPR Art. 6.1(e)) | Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller |
| Legitimate interests (GDPR Art. 6.1(f)) | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child |
| Sensitive personal data processing reasons | |
|---|---|
| Explicit consent (GDPR Art. 9.2(a)) | The data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 of GDPR Article 9 may not be lifted by the data subject |
| Public health (GDPR Art. 9.2(i)) | Processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy |
Users
Category
- Education data
Delegates details and course progression
Purpose
- Records of Education Attainment
- We keep a record of training undertaken and when it will need to be retaken
We on occasion collate and present anonymised information on our reports, website or at conferences or requested by employer and this consists of:
- Number of staff trained
- What type of courses staff undertook
- Job role of staff trained
- Feedback information – qualitative and quantitate
- Retention period
- 10 years
| Lawful bases | |
|---|---|
| Contract (GDPR Art. 6.1(b)) | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
| Legal obligation (GDPR Art 6.1(c)) | Processing is necessary for compliance with a legal obligation to which the controller is subject |
| Vital interests (GDPR Art. 6.1(d)) | Processing is necessary in order to protect the vital interests of the data subject or of another natural person |
| Public task (GDPR Art. 6.1(e)) | Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller |
| Legitimate interests (GDPR Art. 6.1(f)) | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child |
| Sensitive personal data processing reasons | |
|---|---|
| Explicit consent (GDPR Art. 9.2(a)) | The data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 of GDPR Article 9 may not be lifted by the data subject |
| Public health (GDPR Art. 9.2(i)) | Processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy |
Course categories
Purpose
- Retention period
- No retention period was defined
Courses
Purpose
- Retention period
- No retention period was defined
Activity modules
Purpose
- Retention period
- No retention period was defined
Blocks
Purpose
- Retention period
- No retention period was defined