Figure 4 –Table showing the relationship between categories of collected data, purposes, legal bases, and retention periods: Website visitors
Relevant assumptions:
You are simply a visitor to the website www.legischool.com
Data categories
Objectives
Legal Basis
Shelf life
Mailing list
📧 Last name, first name, email addresses, date of consent to receive electronic communications (“opt-in”), associated segment (DPO Training Form, landing page form, etc.)
Allow LégiSchool to send its newsletters to those who have given their consent
User Consent (Article 6.1(a) of the GDPR)
3 years after subscribing to the mailing list
Contact forms
📩 Last name, first name, phone number, reason for contact, relevant training program
Allow website visitors to contact LégiSchool and express their interest in one of LégiSchool’s training programs
The processing is necessary for the legitimate interests of LégiSchool (Article 6(1)(f) of the GDPR)
3 years after submitting the contact form
Statistics (anonymized data) made available to the healthcare professional or their institution
💻 Website connection history (over 6 days), IP address, connection location, browser type, device type
Enable LégiSchool to ensure the security of its website www.legischool.com
The necessity arising from a legal obligation imposed on LégiSchool (Article 6.1(d) of the GDPR)
6 days after collection