Data retention summary
This summary shows the default categories and purposes for retaining user data. Certain areas may have more specific categories and purposes than those listed here.
Category
- Training data
- Account details, enrolments, progress, examination results and certificates of trainees on the CofA training platform.
Purpose
- Training records and platform operation
- Delivering the training, keeping the training record and issuing certificates, as described in the privacy notice: five years after course completion, longer only where the customer contract requires it.
- Retention period
- 5 years
| Lawful bases |
| Contract (GDPR Art. 6.1(b)) |
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
| Legal obligation (GDPR Art 6.1(c)) |
Processing is necessary for compliance with a legal obligation to which the controller is subject |
Category
- Training data
- Account details, enrolments, progress, examination results and certificates of trainees on the CofA training platform.
Purpose
- Training records and platform operation
- Delivering the training, keeping the training record and issuing certificates, as described in the privacy notice: five years after course completion, longer only where the customer contract requires it.
- Retention period
- 5 years
| Lawful bases |
| Contract (GDPR Art. 6.1(b)) |
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
| Legal obligation (GDPR Art 6.1(c)) |
Processing is necessary for compliance with a legal obligation to which the controller is subject |
Category
- Training data
- Account details, enrolments, progress, examination results and certificates of trainees on the CofA training platform.
Purpose
- Training records and platform operation
- Delivering the training, keeping the training record and issuing certificates, as described in the privacy notice: five years after course completion, longer only where the customer contract requires it.
- Retention period
- 5 years
| Lawful bases |
| Contract (GDPR Art. 6.1(b)) |
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
| Legal obligation (GDPR Art 6.1(c)) |
Processing is necessary for compliance with a legal obligation to which the controller is subject |
Category
- Training data
- Account details, enrolments, progress, examination results and certificates of trainees on the CofA training platform.
Purpose
- Training records and platform operation
- Delivering the training, keeping the training record and issuing certificates, as described in the privacy notice: five years after course completion, longer only where the customer contract requires it.
- Retention period
- 5 years
| Lawful bases |
| Contract (GDPR Art. 6.1(b)) |
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
| Legal obligation (GDPR Art 6.1(c)) |
Processing is necessary for compliance with a legal obligation to which the controller is subject |
Category
- Training data
- Account details, enrolments, progress, examination results and certificates of trainees on the CofA training platform.
Purpose
- Training records and platform operation
- Delivering the training, keeping the training record and issuing certificates, as described in the privacy notice: five years after course completion, longer only where the customer contract requires it.
- Retention period
- 5 years
| Lawful bases |
| Contract (GDPR Art. 6.1(b)) |
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
| Legal obligation (GDPR Art 6.1(c)) |
Processing is necessary for compliance with a legal obligation to which the controller is subject |
Category
- Training data
- Account details, enrolments, progress, examination results and certificates of trainees on the CofA training platform.
Purpose
- Training records and platform operation
- Delivering the training, keeping the training record and issuing certificates, as described in the privacy notice: five years after course completion, longer only where the customer contract requires it.
- Retention period
- 5 years
| Lawful bases |
| Contract (GDPR Art. 6.1(b)) |
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
| Legal obligation (GDPR Art 6.1(c)) |
Processing is necessary for compliance with a legal obligation to which the controller is subject |