Data retention summary

This summary shows the default categories and purposes for retaining user data. Certain areas may have more specific categories and purposes than those listed here.

Site

Category

认证信息

密码哈希、OAuth ID、会话/令牌


Purpose

安全审计与防滥用

为保障系统安全与防止滥用而处理的技术日志(如登录/访问日志、IP、User-Agent、错误与审计日志、会话与令牌使用记录等)。

Retention period
6 months
Lawful bases
Legitimate interests (GDPR Art. 6.1(f)) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child

Users

Category

联系方式

Purpose

账户与服务提供

为提供账号注册、登录与站点功能之必要处理(例如:用户名、邮箱、密码哈希、个人偏好与会话信息),用于身份识别与服务交付。此用途不涉及敏感个人数据。

Retention period
1 years
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

Course categories

Category

学习数据

Purpose

教学与评估

为开展课程教学、作业与测验、提交与批改、成绩评定与申诉所需的数据处理(例如:作业提交、测验记录、成绩与评语、讨论互动等)。

Retention period
5 years
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

Courses

Category

学习数据

Purpose

教学与评估

为开展课程教学、作业与测验、提交与批改、成绩评定与申诉所需的数据处理(例如:作业提交、测验记录、成绩与评语、讨论互动等)。

Retention period
5 years
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

Activity modules

Purpose

Retention period
No retention period was defined

Blocks

Purpose

Retention period
No retention period was defined