Data Retention Policy

1. Purpose

This policy defines how long personal data is stored on the Moodle platform and when it is deleted or anonymised.

2. General Principles
  • Data is only stored as long as necessary
  • Data is deleted or anonymised after retention periods expire
  • Retention periods depend on legal and educational requirements
3. Retention Periods

User Accounts

  • Active users: retained while the account is in use
  • Inactive users: User accounts that remain inactive for 2 years will be deactivated. Once deactivated, access to the account will be disabled. Personal data associated with the account will be deleted when it is no longer required, while certain information may be retained where necessary for legal, security, fraud prevention, accounting, or dispute resolution purposes, in accordance with our data retention schedule.

Course Data

  • Course participation data: 5 years after course completion
  • Grades and assessment records: 5 years after course completion

Activity Logs

  • System logs (login, activity): 6 months after course completion

Uploaded Content

  • Assignments and submissions: 2 years after course completion
4. Deletion Process
  • Data is automatically deleted via Moodle retention settings, where possible
  • Manual deletion may be performed by administrators
5. User Rights

Users may request:

  • Early deletion
  • Data export

Requests are handled in accordance with GDPR timelines.

6. Legal Exceptions

Data may be retained longer if required by law (e.g. educational or tax regulations).

7. Responsibility

The platform administrator is responsible for enforcing this policy.

Back
Back to top