Data retention summary

This summary shows the default categories and purposes for retaining user data. Certain areas may have more specific categories and purposes than those listed here.

Site

Category

Cookies and session data

Session identifiers, cookies, and related technical data used to maintain secure authentication, platform functionality, and user experience.


Purpose

User training delivery, platform administration, security monitoring, and learning record management

Personal and technical information is processed to provide access to training content, manage user authentication, track learning progress and certifications, maintain platform security, support system administration, and fulfil operational, contractual, and legal obligations.

Certain system logs and security-related records may be retained for monitoring, auditing, incident investigation, and compliance purposes.

Retention period
3 years
Lawful bases
Legitimate interests (GDPR Art. 6.1(f)) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child

Users

Category

Training and learning records

Information relating to course enrolment, learner participation, progress tracking, assessments, certifications, and course completion.


Purpose

User training delivery, platform administration, security monitoring, and learning record management

Personal and technical information is processed to provide access to training content, manage user authentication, track learning progress and certifications, maintain platform security, support system administration, and fulfil operational, contractual, and legal obligations.

Certain system logs and security-related records may be retained for monitoring, auditing, incident investigation, and compliance purposes.

Retention period
3 years
Lawful bases
Legitimate interests (GDPR Art. 6.1(f)) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child

Course categories

Purpose

Retention period
No retention period was defined

Courses

Purpose

Retention period
No retention period was defined

Activity modules

Purpose

Retention period
No retention period was defined

Blocks

Purpose

Retention period
No retention period was defined