Data retention summary

This summary shows the default categories and purposes for retaining user data. Certain areas may have more specific categories and purposes than those listed here.

Site

Category

Training data
Account details, enrolments, progress, examination results and certificates of trainees on the CofA training platform.

Purpose

Training records and platform operation
Delivering the training, keeping the training record and issuing certificates, as described in the privacy notice: five years after course completion, longer only where the customer contract requires it.
Retention period
5 years
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
Legal obligation (GDPR Art 6.1(c)) Processing is necessary for compliance with a legal obligation to which the controller is subject

Users

Category

Training data
Account details, enrolments, progress, examination results and certificates of trainees on the CofA training platform.

Purpose

Training records and platform operation
Delivering the training, keeping the training record and issuing certificates, as described in the privacy notice: five years after course completion, longer only where the customer contract requires it.
Retention period
5 years
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
Legal obligation (GDPR Art 6.1(c)) Processing is necessary for compliance with a legal obligation to which the controller is subject

Course categories

Category

Training data
Account details, enrolments, progress, examination results and certificates of trainees on the CofA training platform.

Purpose

Training records and platform operation
Delivering the training, keeping the training record and issuing certificates, as described in the privacy notice: five years after course completion, longer only where the customer contract requires it.
Retention period
5 years
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
Legal obligation (GDPR Art 6.1(c)) Processing is necessary for compliance with a legal obligation to which the controller is subject

Courses

Category

Training data
Account details, enrolments, progress, examination results and certificates of trainees on the CofA training platform.

Purpose

Training records and platform operation
Delivering the training, keeping the training record and issuing certificates, as described in the privacy notice: five years after course completion, longer only where the customer contract requires it.
Retention period
5 years
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
Legal obligation (GDPR Art 6.1(c)) Processing is necessary for compliance with a legal obligation to which the controller is subject

Activity modules

Category

Training data
Account details, enrolments, progress, examination results and certificates of trainees on the CofA training platform.

Purpose

Training records and platform operation
Delivering the training, keeping the training record and issuing certificates, as described in the privacy notice: five years after course completion, longer only where the customer contract requires it.
Retention period
5 years
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
Legal obligation (GDPR Art 6.1(c)) Processing is necessary for compliance with a legal obligation to which the controller is subject

Blocks

Category

Training data
Account details, enrolments, progress, examination results and certificates of trainees on the CofA training platform.

Purpose

Training records and platform operation
Delivering the training, keeping the training record and issuing certificates, as described in the privacy notice: five years after course completion, longer only where the customer contract requires it.
Retention period
5 years
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
Legal obligation (GDPR Art 6.1(c)) Processing is necessary for compliance with a legal obligation to which the controller is subject