Data retention summary
This summary shows the default categories and purposes for retaining user data. Certain areas may have more specific categories and purposes than those listed here.
Site
Category
- Données administratives & contractuelles
Inscriptions, conventions/contrats, financeurs, émargements, facturation.
Purpose
- Administration & obligations légales
Gestion des inscriptions, conventions, financeurs, émargements, facturation et obligations comptables/fiscales.
- Retention period
- 72 months
| Lawful bases | |
|---|---|
| Legal obligation (GDPR Art 6.1(c)) | Processing is necessary for compliance with a legal obligation to which the controller is subject |
Users
Category
- Profil utilisateur
Identité, coordonnées, organisation, champs de profil, préférences.
Purpose
- Gestion des comptes inactifs
Gestion du cycle de vie des comptes et anonymisation/suppression après inactivité prolongée.
- Retention period
- 24 months
| Lawful bases | |
|---|---|
| Legitimate interests (GDPR Art. 6.1(f)) | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child |
Course categories
Category
- Données pédagogiques
Participations aux activités, devoirs remis, notes, commentaires d’évaluation, certificats.
Purpose
- Gestion pédagogique & certification
Assurer le déroulement des formations, l’évaluation des apprentissages, la délivrance des attestations/certificats et la traçabilité Qualiopi.
- Retention period
- 36 months
| Lawful bases | |
|---|---|
| Contract (GDPR Art. 6.1(b)) | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
| Legal obligation (GDPR Art 6.1(c)) | Processing is necessary for compliance with a legal obligation to which the controller is subject |
Courses
Category
- Données pédagogiques
Participations aux activités, devoirs remis, notes, commentaires d’évaluation, certificats.
Purpose
- Gestion pédagogique & certification
Assurer le déroulement des formations, l’évaluation des apprentissages, la délivrance des attestations/certificats et la traçabilité Qualiopi.
- Retention period
- 36 months
| Lawful bases | |
|---|---|
| Contract (GDPR Art. 6.1(b)) | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
| Legal obligation (GDPR Art 6.1(c)) | Processing is necessary for compliance with a legal obligation to which the controller is subject |
Activity modules
Category
- Données pédagogiques
Participations aux activités, devoirs remis, notes, commentaires d’évaluation, certificats.
Purpose
- Gestion pédagogique & certification
Assurer le déroulement des formations, l’évaluation des apprentissages, la délivrance des attestations/certificats et la traçabilité Qualiopi.
- Retention period
- 36 months
| Lawful bases | |
|---|---|
| Contract (GDPR Art. 6.1(b)) | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
| Legal obligation (GDPR Art 6.1(c)) | Processing is necessary for compliance with a legal obligation to which the controller is subject |
Blocks
Category
- Traces techniques
Journaux de connexion et d’activité, adresses IP, horodatages, événements de sécurité.
Purpose
- Sécurité & journalisation
Sécurité du SI, audit, prévention des fraudes/abus, diagnostics techniques.
- Retention period
- 12 months
| Lawful bases | |
|---|---|
| Legitimate interests (GDPR Art. 6.1(f)) | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child |