HPI Moodle
Data retention summary
This summary shows the default categories and purposes for retaining user data. Certain areas may have more specific categories and purposes than those listed here.
Site
Category
- User Data
- Administrative data (identity, profile, etc.)
- Connection data (IP address, logs, etc.)
- Educational Data (assessed coursework, etc.)
Purpose
- Organization and teaching of courses
In order to organize and carry out courses, we store the following personal data:
- Name and Mail address as well as necessary technical data for logins and session management.
- Additional optional profile information provided by the user.
- Personal settings specified by the user.
- Direct Moodle-Messages sent or received by the user.
- Interactions of each user with the provided courses, activities and teaching material are stored. This includes when and how a user accesses these items as well as all data that users explicitely provide via uploads, forms and other interactions with courses.
- Grades and comments given to users by teachers of their courses.
Data provided in forums, wikis and similar public channels are available to all people with access to the respective course. This usually includes all moodle users, but might be limited to a specific user group via protected course enrolments.
Files and other data provided in the context of assignments are available to the teaching team of the respective course. This data can be shared explicitely with other students of the course for peer assessment. Grades are visible to the teaching team of the respective course.
Managers of course categories can see all data connected to courses in their category. The site administrators have access to all data.
Additionally, external tools used in individual courses might store and process personal data. It is the responsibility of the respective course teachers to inform users about such external tools, the nature of the shared data, and to ask for the users' conset.
- Name and Mail address as well as necessary technical data for logins and session management.
- Retention period
- 3 years
| Lawful bases | |
|---|---|
| Consent (GDPR Art. 6.1(a)) | The data subject has given consent to the processing of his or her personal data for one or more specific purposes |
| Contract (GDPR Art. 6.1(b)) | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
Users
Category
- User Data
- Administrative data (identity, profile, etc.)
- Connection data (IP address, logs, etc.)
- Educational Data (assessed coursework, etc.)
Purpose
- Organization and teaching of courses
In order to organize and carry out courses, we store the following personal data:
- Name and Mail address as well as necessary technical data for logins and session management.
- Additional optional profile information provided by the user.
- Personal settings specified by the user.
- Direct Moodle-Messages sent or received by the user.
- Interactions of each user with the provided courses, activities and teaching material are stored. This includes when and how a user accesses these items as well as all data that users explicitely provide via uploads, forms and other interactions with courses.
- Grades and comments given to users by teachers of their courses.
Data provided in forums, wikis and similar public channels are available to all people with access to the respective course. This usually includes all moodle users, but might be limited to a specific user group via protected course enrolments.
Files and other data provided in the context of assignments are available to the teaching team of the respective course. This data can be shared explicitely with other students of the course for peer assessment. Grades are visible to the teaching team of the respective course.
Managers of course categories can see all data connected to courses in their category. The site administrators have access to all data.
Additionally, external tools used in individual courses might store and process personal data. It is the responsibility of the respective course teachers to inform users about such external tools, the nature of the shared data, and to ask for the users' conset.
- Name and Mail address as well as necessary technical data for logins and session management.
- Retention period
- 3 years
| Lawful bases | |
|---|---|
| Consent (GDPR Art. 6.1(a)) | The data subject has given consent to the processing of his or her personal data for one or more specific purposes |
| Contract (GDPR Art. 6.1(b)) | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
Course categories
Purpose
- Retention period
- No retention period was defined
Courses
Purpose
- Retention period
- No retention period was defined
Activity modules
Purpose
- Retention period
- No retention period was defined
Blocks
Purpose
- Retention period
- No retention period was defined