Figure 2 –Table showing the relationship between categories of collected data, purposes, legal bases, and retention periods: Legal representatives of employers of LégiSchool students
Relevant assumptions:
You are the legal representative of a LégiSchool student’s employer
Data categories
Objectives
Legal Basis
Shelf life
Training contracts or training agreements
👩💼 👨💼 Legal representative’s identification information: last name, first name, mailing address
📞 Phone numbers
📆 📅📍Date, time, and, if applicable, training location
📧 Email addresses
📝 Date and time of signature
Allow learners to enroll in LégiSchool's training programs
The processing is necessary for the performance of a contract to which the legal representative is a party (Article 6(1)(b) of the GDPR)
5 years following the signing of the contract or training agreement (statute of limitations)
Then destruction (no archiving)
Qualiopi Surveys
👩💼 👨💼 Legal representative’s identification information: last name, first name, mailing address
📞 Phone numbers
📧 Email addresses
Enable LégiSchool to meet transparency and quality requirements and obtain Qualiopi certification
The processing is necessary for the performance of a contract to which the legal representative is a party (Article 6(1)(b) of the GDPR)
5 years following the signing of the contract or training agreement (statute of limitations)
Then destruction (no archiving)
⭐⭐⭐⭐
Results of satisfaction and positioning surveys (pre-training, post-training, immediate feedback, delayed feedback)
Allow learners to enroll in LégiSchool's training programs
The processing is necessary for the performance of a contract to which the learner is a party (Article 6(1)(b) of the GDPR)
5 years following the signing of the contract or training agreement (statute of limitations)
Then destruction (no archiving)
☝️Claim forms:
Personal information: last name, first name, email address, phone number
Nature of the complaint
Date of the claim
Allow the funder to submit claims to LégiSchool
The processing is necessary for the performance of a contract to which the legal representative is a party (Article 6(1)(b) of the GDPR)
No data retention: information is fully anonymized
Communication
Mailing lists
📧 Last name, first name, and email addresses of customers and former customers who have not opted out of receiving electronic communications, along with their category (former customer, former student, etc.)
Enable LégiSchool to keep its former clients informed about its training offerings
Enable customers to stay informed about LégiSchool’s training offerings
The processing is necessary for the legitimate interests of LégiSchool (Article 6(1)(f) of the GDPR)
3 years after the completion of the last training course, and then
Destruction
Statistics (anonymized data) made available to the healthcare professional or their institution
📊 📈 📉 Statistical data
Allow LégiSchool to compile statistics on its learners and courses
Enable LégiSchool to assess customer satisfaction and meet its quality standards (Qualiopi)
The processing is necessary for the legitimate interests of LégiSchool (Article 6(1)(f) of the GDPR)
3 years from the date of data collection, and then
Irreversible anonymization
Accounting
📒 Accounting data (if applicable, customer identification information if the customer is an individual)
Enable LégiSchool to meet its accounting obligations
The necessity arising from a legal obligation imposed on LégiSchool (Article 6.1(d) of the GDPR)
10 years from the end of the fiscal year