---
title: Personal data in Xperience
---
> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).
This page provides information about personal data stored in Kentico Xperience, as well as the flow of this data and its purpose. You can use the information when analyzing the [GDPR compliance](https://docs.kentico.com/13/configuring-xperience/data-protection/gdpr-compliance.md) of your websites.
> **Warning:** **Disclaimers**
>
> - This page only covers the **built-in Xperience functionality**. You also need to check any customized functionality for personal data handling.
> - This page is provided for **informational purposes only** and should not be relied upon as legal advice. You can use the information to identify personal data and its flow in the system, and take appropriate measures. However, we recommend consulting with a legally qualified professional to verify that your project complies with the GDPR.
The following is a list of the most important entities in Xperience that hold personal data. For every entity, the page displays up to three sets of data organized into tables. The first table contains a list of data considered as personal according to the [GDPR Article 4](http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e1489-1-1), Paragraph 1, the corresponding database columns, as well as the purpose of the data. The second table contains a list of sources, describing the flow of personal data in the system. The third table contains information about other entities with personal data that contain a reference to the given entity. The data includes entities, database fields, purposes and sources that might under various conditions manipulate with personal information of natural persons (in the default Xperience functionality). Depending on your usage of features and configuration, parts of the information may not apply to your Xperience project.
### Table of contents
## Accounts
Database table: OM\_Account
[Accounts](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts/organizing-contacts-into-accounts.md) are an on-line marketing entity representing organizations, companies, etc. They allow marketers to categorize [contacts](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts.md) based on their affiliations.
> **Note:** **Note**: Account data can be considered as personal only in cases where the account represents a natural person, not an entire organization (for example individual contractors).
### Accounts – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Address | AccountAddress1
AccountAddress2
AccountCity
AccountZIP | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md)
Displayed in the _Contact management_ application
Displayed by the _My accounts_ dashboard widget |
| Contact information | AccountEmail
AccountFax
AccountPhone | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md)
Displayed in the _Contact management_ application
Displayed by the _My accounts_ dashboard widget |
| Name | AccountName | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md)
Displayed in the _Contact management_ application
Displayed by the _My accounts_ dashboard widget
Displayed in various administration interface locations to identify accounts
May be used for contact segmentation and automated marketing (assigning entire accounts to [Contact groups](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/segmenting-contacts-into-contact-groups.md), account actions within [Marketing automation](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/marketing-automation.md))
[Salesforce](https://docs.kentico.com/13/integrating-3rd-party-systems/salesforce-integration.md) – the account name may be used to set the company name when replicating contacts to Salesforce leads |
| System data | AccountCreated
AccountLastModified
AccountGUID
AccountID | AccountID and AccountGUID – used as identifiers within the system
AccountCreated and AccountLastModified – timestamps used by the system |
| References to other entities | AccountOwnerUserID
AccountPrimaryContactID
AccountSecondaryContactID
AccountSubsidiaryOfID
AccountCountryID
AccountStateID | AccountOwnerUserID – user responsible for managing the account
AccountPrimaryContactID and AccountSecondaryContactID – significant [contacts](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts.md) set for the account
AccountSubsidiaryOfID – a different account of which the given account is a subsidiary
AccountCountryID – [country](https://docs.kentico.com/13/configuring-xperience/configuring-countries.md) of the account's address
AccountStateID – (federated) state of the account's address within the given country |
### Accounts – Personal data sources
| Source | Data flow |
| --------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Account editing | Users with access to the administration interface manually create or edit accounts in the _Contact management_ application.
Users who are assigned as account owners can edit the data of accounts using the _My accounts_ dashboard widget. |
### Accounts – References from entities containing personal data
| Entity (Database table) | Column name | Description |
| -------------------------------------------------- | ----------- | ---------------------------------------------------------------------------------- |
| Contact-account relationships (OM\_AccountContact) | AccountID | Binding table containing relationships between accounts and the assigned contacts. |
[> Back to table of contents](#personaldatainxperience-toc)
## Activities
Database table: OM\_Activity
[Activities](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/tracking-contact-activities.md) are an on-line marketing entity which represents actions done on the live site by visitors (contacts). The system logs activities of various [types](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/tracking-contact-activities/reference-activity-types.md), therefore activity records can contain different data based on the activity type. The type of each activity is determined by the value of the _ActivityType_ column in the _OM\_Activity_ table.
### Activities – Stored personal data
> **Note:** **Activity personal data purpose**
>
> All activity data collected for contacts can be viewed by users of the administration interface in the [activity log](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/tracking-contact-activities/viewing-contact-activities.md) (in the _Contact management_ application or displayed on dashboards using the _Activities_ widget). Each activity may contain different data based on its [type](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/tracking-contact-activities/reference-activity-types.md). For example, user registration activities contain a username in their title, but most other activities do not.
>
> The data of logged activities is also used by the system when evaluating on-line marketing conditions, macro rules and methods (for example for [automation process triggers](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/marketing-automation/setting-triggers-for-automation-processes.md) or in [scoring rules](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/scoring-contacts/managing-contact-scores.md)).
| Data | Column names | Description |
| ---------------------------- | ----------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Referring URL | ActivityURLReferrer | The URL referrer of the web request during which the activity occurred (for example may contain the URL of a site from which a visitor arrived) |
| Title | ActivityTitle | The activity title contains personal data for the following activity types:
User login (_userlogin_) – the full name and email address of the authenticated user
User registration (_userregistration_) – the full name and email address of the registered user |
| URL | ActivityURL | The URL where the activity occurred contains personal data for the following activity types:
Opened marketing email (_newsletteropen_) – a tracking link which includes the email address of the recipient
Opted out from all marketing emails (_newsletterunsubscriptionfromall_) – an unsubscription link which includes the email address of the recipient
Unsubscription from a single email feed (_newsletterunsubscription_) – an unsubscription link which includes the email address of the recipient |
| References to other entities | ActivityContactID
ActivityItemID
ActivityItemDetailID | ActivityContactID – the contact who performed the activity (for all activity types)
ActivityItemID – contains references to objects related to the activity. The type of the object is determined by the activity type:
Clicked link in marketing email (_newsletterclickthrough_) – the email feed related to the email where the link was clicked
Form submission (_bizformsubmit_) – the form for which the data record was submitted
Opened marketing email (_newsletteropen_) – the email feed related to the opened email
Opted out from all marketing emails (_newsletterunsubscriptionfromall_) – the email feed issue where the unsubscription link was clicked
Purchase (_purchase_) – the created order
Subscription to a newsletter (_newslettersubscription_) – the newsletter (email feed) for which the subscription was added
Unsubscription from a single email feed (_newsletterunsubscription_) – the email feed for which the unsubscription occurred
User login (_userlogin_) – the user who signed in to the website
User registration (_userregistration_) – the registered user
ActivityItemDetailID – contains references to additional objects related to the activity. The type of the object is determined by the activity type:
Clicked link in marketing email (_newsletterclickthrough_) – the email feed issue where the link was clicked
Form submission (_bizformsubmit_) – the specific form data record that was submitted
Opened marketing email (_newsletteropen_) – the email feed issue that was opened
Subscription to a newsletter (_newslettersubscription_) – the added newsletter subscription
Unsubscription from a single email feed (_newsletterunsubscription_) – the email feed issue where the unsubscription link was clicked |
### Activities – Personal data sources
| Source | Data flow |
| ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| User and visitor actions | The system logs new activities when users or website visitors perform any of the monitored actions. Activity data is loaded from various types of related entities. |
| Manual editing | Users with access to the administration interface can manually edit the **Title** and **URL** values of logged activities in the _Contact management_ application or using the _Activities_ dashboard widget. |
[> Back to table of contents](#personaldatainxperience-toc)
## Contacts
Database table: OM\_Contact
[Contacts](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts.md) are an on-line marketing entity representing website visitors and users. During the first visit of the website, an anonymous contact is created and linked to the current session. If further information is provided by the visitor through various sources, the system updates the contact and adds the information.
Contacts aggregate information about page visitors. This information is further processed by the system and can be used to deduce conclusions, such as marketing prospectiveness, about visitors and customers.
All of the data acquired by contacts may be viewed in the **Contact management** application.
### Contacts – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | -------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Address | ContactAddress1
ContactCity
ContactZIP | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Contact management_ application
Contact profiling and personalized marketing ([Lead scoring](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/scoring-contacts.md), [Personas](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/personas.md), [Contact groups](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/segmenting-contacts-into-contact-groups.md))
[Salesforce](https://docs.kentico.com/13/integrating-3rd-party-systems/salesforce-integration.md)
Mapping to Salesforce data
Contact export to a third-party Salesforce organization |
| Campaign name | ContactCampaign | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Contact management_ application |
| Email address | ContactEmail | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in various locations in the administration interface to identify contacts
[Email engine](https://docs.kentico.com/13/managing-users/sending-emails.md) – sending emails to contacts
Contact profiling and personalized marketing ([Lead scoring](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/scoring-contacts.md), [Personas](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/personas.md), [Marketing automation](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/marketing-automation.md))
[Newsletters](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing/creating-newsletters.md)
Sending marketing emails
Subscription/unsubscription
Bounce checking
Identification of contacts during [contact merging](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts/merging-contacts.md) and update
[Salesforce](https://docs.kentico.com/13/integrating-3rd-party-systems/salesforce-integration.md)
Mapping to Salesforce data
Contact export to a third-party Salesforce organization
[Activities](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-activities.md) – titles of activities may contain the email address of the related contact
Building [reports](https://docs.kentico.com/13/configuring-xperience/working-with-system-reports.md) |
| Name | ContactFirstName
ContactLastName
ContactMiddleName | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in various locations in the administration interface to identify contacts
Contact profiling and personalized marketing ([Lead scoring](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/scoring-contacts.md), [Personas](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/personas.md), [Marketing automation](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/marketing-automation.md))
[Form controls](https://docs.kentico.com/13/custom-development/extending-the-administration-interface/developing-form-controls/managing-form-controls.md)
_Contact selector_ form control
Selecting a contact's name from a list of all contact names
[Salesforce](https://docs.kentico.com/13/integrating-3rd-party-systems/salesforce-integration.md)
Mapping to Salesforce data
Contact export to the third-party Salesforce organization
[Newsletters](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing/creating-newsletters.md)
Identification of contacts during [contact merging](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts/merging-contacts.md) and update
Propagating data to the Newsletter subscriber entity
Building subscriber names
Building [reports](https://docs.kentico.com/13/configuring-xperience/working-with-system-reports.md) |
| Natural personal data | ContactBirthday
ContactGender | Contact profiling and personalized marketing ([Lead scoring](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/scoring-contacts.md), [Personas](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/personas.md))
ContactGender – displayed in [Contact demographics](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing/viewing-the-email-report-insights.md)
ContactBirthday – displayed in the _My contacts_ dashboard widget |
| Occupational information | ContactCompanyName
ContactJobTitle | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in various administration interface locations that contain detailed contact information
Contact profiling and personalized marketing ([Lead scoring](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/scoring-contacts.md), [Personas](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/personas.md))
[Salesforce](https://docs.kentico.com/13/integrating-3rd-party-systems/salesforce-integration.md)
Mapping to Salesforce data
Contact export to a third-party Salesforce organization
ContactCompanyName – used to build [reports](https://docs.kentico.com/13/configuring-xperience/working-with-system-reports.md) |
| Phone numbers | ContactMobilePhone
ContactBusinessPhone | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in various administration interface locations that contain detailed contact information
Contact profiling and personalized marketing ([Lead scoring](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/scoring-contacts.md), [Personas](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/personas.md))
ContactBusinessPhone
Displayed in notification emails
Building [reports](https://docs.kentico.com/13/configuring-xperience/working-with-system-reports.md) |
| System data | ContactCreated
ContactLastModified
ContactGUID
ContactID | ContactID – used as a unique identifier within the system
ContactCreated and ContactLastModified – timestamps used by the system
ContactGUID – used as a unique identifier in the following features:
[Scoring](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/scoring-contacts.md)
[Activities](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-activities.md)
[Forms with smart fields](https://docs.kentico.com/13/managing-website-content/forms/using-smart-fields-in-forms.md) (the system automatically adds a form field, which stores the GUID of the contact who submitted the form record)
Contact tracking cookie
3rd party – [Salesforce integration](https://docs.kentico.com/13/integrating-3rd-party-systems/salesforce-integration.md) |
| References to other entities | ContactStatusID
ContactCountryID
ContactStateID
ContactPersonaID
ContactOwnerUserID
ContactSalesForceLeadID | ContactStatusID – marketing [status](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts/assigning-statuses-to-contacts.md) of the contact
ContactCountryID – [country](https://docs.kentico.com/13/configuring-xperience/configuring-countries.md) of the contact's address
ContactStateID – (federated) state of the contact within the given country
ContactPersonaID – [persona](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/personas.md) to which the contact is assigned
ContactOwnerUserID – user responsible for managing the contact
ContactSalesForceLeadID – identifier of a third-party Salesforce entity matching the contact |
### Contacts – Personal data sources
| Source | Data flow | Related tables |
| --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------ |
| Campaigns | When a contact is created within the context of a specific [campaign](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/campaigns.md), the campaign's name is saved into the contact's data. | |
| Contact editing | Users with access to the administration interface manually create or edit contacts in the _Contact management_ application. | |
| Contact import | Manual [import of contacts](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts/importing-contacts.md) creates new contacts in the system or updates existing ones. | |
| Customers | When a customer is created or updated, the system transmits data to contact fields according to [mapping configuration](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-contacts/mapping-fields-to-contact-attributes.md).
Update of account details and processing of information obtained from the purchase order creates [user relationships](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts.md) and updates the contact's properties.
Billing or shipping addresses used in a customer's orders are saved into the **address** fields of the corresponding contact. | COM\_Customer |
| Forms | Form submissions transmit data to contact fields according to [mapping configuration](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-contacts/mapping-fields-to-contact-attributes.md). | Separate database table generated for each form. |
| Geolocation | If enabled, the [Geolocation feature](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-contacts/using-geolocation-for-contacts.md) can update the contact's properties based on the visitor's IP address. | |
| Personas | Updates of personas or contact scores trigger a re-evaluation of personas and assign contacts to the corresponding personas. | |
| Subscribers | When a subscriber is created or updated, the system transmits data to contact fields according to [mapping configuration](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-contacts/mapping-fields-to-contact-attributes.md).
Subscription to newsletters saves the given **first name** and **last name** into the contact.
Subscription to newsletters without double opt-in and access to approval pages updates the contact's properties. | Newsletter\_Subscriber |
| Users | When a user is created or updated, the system transmits data to contact fields according to [mapping configuration](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-contacts/mapping-fields-to-contact-attributes.md).
Retrieval of contact information from the login or register activity, submission of forms in the _My profile_ application creates [user relationships](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts.md) and updates the contact's properties. | CMS\_User |
### Contacts – References from entities containing personal data
| Entity (Database table) | Column name | Description |
| -------------------------------------------------- | ---------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Accounts (OM\_Account) | AccountPrimaryContactID
AccountSecondaryContactID | Primary and secondary contacts set for accounts. |
| Activities (OM\_Activity) | ActivityContactID | The contact who performed the given activity. |
| Contact membership relationships (OM\_Membership) | ContactID | The contact related to a user/customer. The table contains records representing relationships between contacts and users/customers. |
| Contact-account relationships (OM\_AccountContact) | ContactID | Binding table containing relationships between accounts and the assigned contacts. The optional role of the contact in the account is stored in the ContactRoleID column, which references a role from the OM\_ContactRole database table. |
| Marketing automation states (CMS\_AutomationState) | StateObjectID | The contact related to the given state of a [marketing automation](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/marketing-automation.md) process. The type of the referenced object is stored in the StateObjectType column (the value is _om.contact_ for contacts). |
| Queued marketing emails (Newsletter\_Emails) | EmailContactID | The contact who is the email recipient. |
| Shopping carts (COM\_ShoppingCart) | ShoppingCartContactID | The contact related to the shopping cart. The system uses the reference to track abandoned shopping carts. |
[> Back to table of contents](#personaldatainxperience-toc)
## Contact scores
Database table: OM\_Score
[Scoring](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/scoring-contacts.md) is an on-line marketing feature that evaluates each [contact](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts.md) based on their profile information and activity on the website. Score definitions can store an email address, which is used to send notification emails when a contact reaches a specified score value.
### Contact scores – Stored personal data
| Data | Column names | Purpose / Description |
| ------------- | ----------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Email address | ScoreNotificationEmail | [Email engine](https://docs.kentico.com/13/managing-users/sending-emails.md) – the system sends notification emails to the given address when a contact reaches a certain score value (specified in the _ScoreEmailAtScore_ column)
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Scoring_ application |
| System data | ScoreID
ScoreGUID
ScoreLastModified | ScoreID and ScoreGUID – identifiers used within the system
ScoreLastModified – timestamp used by the system |
### Contact scores – Personal data sources
| Source | Data flow |
| ------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
| Score editing | Users with access to the administration interface manually edit notification address values for scores in the _Scoring_ application. |
[> Back to table of contents](#personaldatainxperience-toc)
## E-commerce – Customers
Database table: COM\_Customer
[Customers](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/customers.md) are an e-commerce entity representing users who make purchases on the website. Every completed [order](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/orders.md) is linked with a specific customer. Customers can either be anonymous (created for one specific order) or registered (linked with a user account).
Customer data is required to process orders and payments, and maintain e-commerce records.
> **Note:** **Note**: For registered customers, the system automatically synchronizes **name**, **email address** and **phone number** data with the corresponding user account. The synchronization works in both directions whenever changes occur for the related entity.
### Customers – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | ---------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Company information | CustomerCompany
CustomerOrganizationID
CustomerTaxRegistrationID | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed as part of customer information in various administration interface locations:
_Customers_ application
_Orders_ application
_Contact management_ application
_Orders_ dashboard widget
Customer selection dialogs
Used to set the _AddressPersonalName_ field for the customer's company addresses
Used to prefill customer values during checkout for existing customers
Displayed in [E-commerce reports](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/store-reports.md)
CustomerTaxRegistrationID – used to exempt customers from tax (for [tax classes](https://docs.kentico.com/13/e-commerce-features/configuring-on-line-stores/configuring-taxes.md) that have the _Zero tax if tax ID is supplied_ flag enabled) |
| Email address | CustomerEmail | [Email engine](https://docs.kentico.com/13/managing-users/sending-emails.md) – sending [e-commerce email notifications](https://docs.kentico.com/13/e-commerce-features/configuring-on-line-stores/configuring-e-commerce-email-notifications.md) to customers
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed as part of customer information in various administration interface locations:
_Customers_ application
_Orders_ application
_Contact management_ application
_Orders_ dashboard widget
Customer selection dialogs
Saved into the email address field of related users and contacts representing customers (according to [mapping configuration](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-contacts/mapping-fields-to-contact-attributes.md))
Saved into the username field of new user objects when registering customers, if a separate username value is not set
Used to validate the uniqueness of email addresses when registering customers
Sent to third-party payment gateways when performing payment transactions
Used to prefill customer values during checkout for existing customers
Displayed in [E-commerce reports](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/store-reports.md) |
| Fax | CustomerFax | Not displayed or processed by default. |
| Name | CustomerFirstName
CustomerLastName | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed as part of customer information in various administration interface locations:
_Customers_ application
_Orders_ application
_Contact management_ application
_Orders_ dashboard widget
Customer selection dialogs
Saved into the name fields of related users and contacts representing customers (according to [mapping configuration](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-contacts/mapping-fields-to-contact-attributes.md))
Used to set the _AddressPersonalName_ field for the customer's billing and shipping addresses
Sent to third-party payment gateways when performing payment transactions
Displayed in [E-commerce reports](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/store-reports.md) |
| Phone number | CustomerPhone | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed when editing customers in the _Customers_ application
Saved into the phone number field of related users and contacts representing customers (according to [mapping configuration](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-contacts/mapping-fields-to-contact-attributes.md))
Prefilled as the default phone value for the customer's addresses
Sent to third-party payment gateways when performing payment transactions
Displayed in [E-commerce reports](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/store-reports.md) |
| System data | CustomerID
CustomerGUID
CustomerCreated
CustomerLastModified | CustomerID and CustomerGUID – used as identifiers within the system
CustomerCreated and CustomerLastModified – timestamps used by the system |
| References to other entities | CustomerUserID
CustomerSiteID | CustomerUserID – the user related to the customer (for registered customers)
CustomerSiteID – the site on which the customer was created (only for anonymous customers) |
### Customers – Personal data sources
| Source | Data flow | Related tables |
| ---------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------ |
| Order checkout | Customers submit data when checking out orders on the live site. For new customers, the system creates the customer object when the visitor inputs valid data into the customer form and moves to the next checkout step. | |
| Customer editing | Users with access to the administration interface manually edit customer data in the _Customers_ application.
Users with access to the administration interface can add new customers while manually creating orders in the _Orders_ application. | |
| Users | When the **name**, **email address** and **phone number** data of a user account is modified, the system automatically transfers the values to all customer objects associated with the given user. | CMS\_User
CMS\_UserSettings |
### Customers – References from entities containing personal data
| Entity (Database table) | Column names | Description |
| --------------------------------------------------- | ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Contact membership relationships (OM\_Membership) | RelatedID | The customer related to a given contact. The table contains records representing relationships between contacts and users/customers.
Records representing customer relationships have the value of the MemberType column set to 1. |
| Customer addresses (COM\_Address) | AddressCustomerID | The customer related to the address. |
| Customer credit events (COM\_CustomerCreditHistory) | EventCustomerID | The customer for which the [customer credit](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/customers/managing-customer-credit.md) record was logged. |
| Orders (COM\_Order) | OrderCustomerID | The customer who created the order. |
| Shopping carts (COM\_ShoppingCart) | ShoppingCartCustomerID | The customer who created the shopping cart. |
[> Back to table of contents](#personaldatainxperience-toc)
## E-commerce – Customer addresses
Database table: COM\_Address
The system stores various types of addresses (billing, shipping or company) for [Customers](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/customers.md) who make purchases on the website. The addresses are required to process orders and payments, deliver order shipments, and maintain e-commerce records.
### Customer addresses – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | ------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Address | AddressCity
AddressLine1
AddressLine2
AddressName
AddressZip | Used to process e-commerce orders (billing, shipping and company addresses). Automatically saved into the address values of created orders.
Billing addresses are sent to third-party payment gateways when performing payment transactions.
Billing address values are saved into the address fields of contacts representing customers.
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Customers_ application under the _Addresses_ tab. |
| Name | AddressPersonalName | Labels addresses with the customer's name for easier identification
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Customers_ application under the _Addresses_ tab |
| Phone number | AddressPhone | Saved into the mobile phone field of contacts representing customers.
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Customers_ application under the _Addresses_ tab |
| System data | AddressID
AddressGUID
AddressLastModified | AddressID and AddressGUID – used as identifiers within the system
AddressLastModified – timestamp used by the system |
| References to other entities | AddressCustomerID
AddressCountryID
AddressStateID | AddressCustomerID – the customer related to the address
AddressCountryID – [country](https://docs.kentico.com/13/configuring-xperience/configuring-countries.md) of the customer address
AddressStateID – (federated) state within the given country |
### Customer addresses – Personal data sources
| Source | Data flow |
| --------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Order checkout | Customers submit billing/shipping address data when checking out orders.
The _AddressName_ value is a summary, automatically composed from the other address data fields.
When creating addresses, the customer's name is saved into the _AddressPersonalName_ field. |
| Address editing | Users with access to the administration interface manually edit customer addresses in the _Customers_ application.
Customers edit their address data on the live site. |
### Customer addresses – References from entities containing personal data
| Entity (Database table) | Column names | Description |
| ---------------------------------- | --------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Shopping carts (COM\_ShoppingCart) | ShoppingCartBillingAddressID
ShoppingCartShippingAddressID
ShoppingCartCompanyAddressID | The billing, shipping and company addresses specified for the given shopping cart. The billing address is always required for completed shopping carts, the shipping and company addresses are optional. |
[> Back to table of contents](#personaldatainxperience-toc)
## E-commerce – Orders
Database table: COM\_Order
[Orders](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/orders.md) represent purchases that customers make on e-commerce websites. Typically, customers create orders on the live site by going through a [checkout process](https://docs.kentico.com/13/e-commerce-features/developing-on-line-stores/implementing-a-checkout-process.md). Users with access to the administration interface can also edit or create orders in the _Orders_ application.
Order data is required to process orders and payments, generate invoices, and maintain e-commerce records.
The order entity can be used to obtain information about the products purchased by specific customers (when combined with the data of the related order items).
### Orders – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | ----------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Date and time | OrderDate | The date and time when the customer placed the order
Used by the system when recalculating existing orders (for example to evaluate discount validity)
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Orders_ application and by the _Orders_ dashboard widget |
| Invoice | OrderInvoice | Stores the full HTML code of the [invoice](https://docs.kentico.com/13/e-commerce-features/configuring-on-line-stores/configuring-invoices.md) for the order. May contain personal data of the related customer.
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Orders_ application |
| Payment data | OrderPaymentResult | Stores details of the order's payment status
Processed by the system's [payment gateways](https://docs.kentico.com/13/e-commerce-features/configuring-on-line-stores/configuring-payment-methods.md)
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Orders_ application |
| User input | OrderNote | Stores the text of notes that customers add to their purchase during the checkout process
Can be included in [ e-commerce email notifications](https://docs.kentico.com/13/e-commerce-features/configuring-on-line-stores/configuring-e-commerce-email-notifications.md)
May be sent to third-party payment gateways when performing payment transactions
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Orders_ application and by the _Orders_ dashboard widget |
| Tracking number | OrderTrackingNumber | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Orders_ application and by the _Orders_ dashboard widget
Can be displayed on the live site |
| System data | OrderID
OrderGUID
OrderLastModified | OrderID and OrderGUID – used as identifiers within the system. The OrderID value is used to generate invoice numbers by default.
OrderLastModified – timestamp used by the system |
| References to other entities | OrderCustomerID
OrderCreatedByUserID | OrderCustomerID – the customer who created the order
OrderCreatedByUserID – the user who created the order (for registered customers) |
### Orders – Personal data sources
| Source | Data flow | Related tables |
| ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------- |
| Invoice template | The system generates the **invoice** for orders according to a template defined in the _Store configuration_ or _Multistore configuration_ application (when creating new orders or if an administrator re-generates an invoice in the _Orders_ application). | |
| Order editing | Users with access to the administration interface manually edit or create orders in the _Orders_ application. | |
| Payment options | The system's [payment gateways](https://docs.kentico.com/13/e-commerce-features/configuring-on-line-stores/configuring-payment-methods.md) set the **payment data** for orders when processing payments. | |
| Shopping carts | When a customer completes checkout on the live site, the system automatically creates a new order based on the customer's shopping cart. Transfers information, such as the **order note**. | COM\_ShoppingCart |
### Orders – References from entities containing personal data
| Entity (Database table) | Column names | Description |
| --------------------------------------------------- | ---------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Activities (OM\_Activity) | ActivityItemID | The object related to the logged [activity](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/tracking-contact-activities.md) is an order for activities of the _Purchase_ type – i.e., when the value of the ActivityType column is _purchase_ . |
| Order items (COM\_OrderItem) | OrderItemOrderID | The order containing the given order item (product). |
| Order status changes (COM\_OrderStatusUser) | OrderID | The order whose status was changed.
The _COM\_OrderStatusUser_ table tracks changes in [statuses](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/orders/order-statuses.md) for orders. The _ChangedByUserID_ column of this table can be used to connect the order with a user (the administrator who performed the order status change). |
| Customer credit events (COM\_CustomerCreditHistory) | EventName | The text values stored in the _EventName_ column of [customer credit](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/customers/managing-customer-credit.md) records may contain the ID of the related order. |
[> Back to table of contents](#personaldatainxperience-toc)
## E-commerce – Order items
Database table: COM\_OrderItem
Every order item represents one or more units of a given product within an [Order](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/orders.md) created by a customer. Order items can either be standard products, [product variants](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/products/working-with-product-variants.md), or [product options](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/products/working-with-product-options.md) that were purchased together with another product.
Order item data is required to process orders and payments, generate invoices, and maintain e-commerce records.
Order items do not directly contain any personal data, but can be used to obtain information about the products purchased by specific customers (when combined with the data of the related order).
### Order items – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | ---------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| References to other entities | OrderItemSKUID
OrderItemOrderID | Each item stores a reference to the related product and order
Processed by the system when calculating and evaluating orders (total prices, shipping, discounts, etc.)
Used to display the products contained within orders:
In the _Orders_ application of the administration interface
In order invoices and [ e-commerce email notifications](https://docs.kentico.com/13/e-commerce-features/configuring-on-line-stores/configuring-e-commerce-email-notifications.md) (by default)
Order items are sent to certain third-party payment gateways when performing payment transactions |
### Order items – Personal data sources
| Source | Data flow | Related tables |
| ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------------- |
| Order editing | Users with access to the administration interface can add, remove or update order items in the _Orders_ application (only for orders that have not been paid yet). | |
| Shopping cart items | When a customer completes checkout on the live site, the system automatically creates order items for the new order based on the customer's shopping cart. | COM\_ShoppingCartSKU |
[> Back to table of contents](#personaldatainxperience-toc)
## E-commerce – Order addresses
Database table: COM\_OrderAddress
The system stores various types of addresses (billing, shipping or company) for [Orders](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/orders.md). The addresses are required to process orders and payments, generate invoices, deliver order shipments, and maintain e-commerce records.
### Order addresses – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | -------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Address | AddressCity
AddressLine1
AddressLine2
AddressZip | Used to process orders (billing, shipping and company addresses)
Billing addresses are sent to third-party payment gateways when performing payment transactions
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Orders_ application when editing orders on the _Shipping_ and _Billing_ tabs
Displayed in order invoices and[ e-commerce email notifications](https://docs.kentico.com/13/e-commerce-features/configuring-on-line-stores/configuring-e-commerce-email-notifications.md) (by default) |
| Name | AddressPersonalName | Labels addresses with the customer's name for easier identification
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Orders_ application when editing orders on the _Shipping_ and _Billing_ tabs
Displayed in order invoices and[ e-commerce email notifications](https://docs.kentico.com/13/e-commerce-features/configuring-on-line-stores/configuring-e-commerce-email-notifications.md) (by default) |
| Phone number | AddressPhone | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Orders_ application when editing orders on the _Shipping_ and _Billing_ tabs |
| System data | AddressID
AddressGUID
AddressLastModified
AddressType | AddressID and AddressGUID – used as identifiers within the system
AddressLastModified – timestamp used by the system
AddressType – indicates whether the address is a billing, shipping or company address for the related order. |
| References to other entities | AddressCountryID
AddressStateID
AddressOrderID | AddressCountryID – [country](https://docs.kentico.com/13/configuring-xperience/configuring-countries.md) of the order address
AddressStateID – (federated) state within the given country
AddressOrderID – the order where the address is used (a single order can have multiple related addresses, each with a different _AddressType_ – billing, shipping or company) |
### Order addresses – Personal data sources
| Source | Data flow | Related tables |
| ------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------- |
| Customer addresses | When a customer completes checkout on the live site, the system automatically creates order addresses based on the customer's shopping cart and the data of the referenced customer addresses. | COM\_Address |
| Address editing | Users with access to the administration interface manually edit order addresses in the _Orders_ application. | |
[> Back to table of contents](#personaldatainxperience-toc)
## E-commerce – Shopping carts
Database table: COM\_ShoppingCart
Customers purchase [products](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/products.md) by browsing the website and adding items to their shopping cart. The system stores the shopping cart of each customer until they complete the [checkout process](https://docs.kentico.com/13/e-commerce-features/developing-on-line-stores/implementing-a-checkout-process.md), or until the cart is [abandoned and cleared](https://docs.kentico.com/13/e-commerce-features/configuring-on-line-stores/deleting-expired-shopping-carts-from-the-database.md). When a customer completes checkout, the system automatically converts the given shopping cart into an order and then deletes the cart.
The shopping cart entity can be used to obtain information about the products in which specific users or customers were interested (when combined with the data of the related shopping cart items).
### Shopping carts – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| User input | ShoppingCartNote | Stores the text of notes that customers can add to their purchase during the checkout process
When the customer completes checkout, the system copies the shopping cart note into the resulting order |
| System data | ShoppingCartID
ShoppingCartGUID
ShoppingCartLastUpdate | ShoppingCartID and ShoppingCartGUID – used as identifiers within the system
ShoppingCartLastUpdate – timestamp used by the system |
| References to other entities | ShoppingCartBillingAddressID
ShoppingCartShippingAddressID
ShoppingCartCompanyAddressID
ShoppingCartContactID
ShoppingCartCustomerID
ShoppingCartUserID | ShoppingCartBillingAddressID, ShoppingCartShippingAddressID, ShoppingCartCompanyAddressID – the customer address used for the shopping cart's billing, shipping or company address respectively. The billing address is always required for completed shopping carts, the shipping and company addresses are optional.
ShoppingCartContactID – the contact related to the shopping cart. The system uses the reference to track abandoned shopping carts (logging of [activities](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-activities.md) of the _Shopping cart abandoned_ type).
ShoppingCartCustomerID – the customer who created the shopping cart.
ShoppingCartUserID – the user related to the shopping cart (for registered customers). |
### Shopping carts – Personal data sources
| Source | Data flow |
| --------------- | ----------------------------------------------------------------------------------------------------------------------------------- |
| Product catalog | The system automatically creates shopping carts for customers when they add the first product to their cart. |
| Order checkout | Shopping cart addresses are assigned by customers when checking out orders.
Customers can input a note when checking out orders. |
### Shopping carts – References from entities containing personal data
| Entity (Database table) | Column names | Description |
| ------------------------------------------ | -------------- | -------------------------------------------------------------------- |
| Shopping cart items (COM\_ShoppingCartSKU) | ShoppingCartID | The shopping cart containing the given shopping cart item (product). |
[> Back to table of contents](#personaldatainxperience-toc)
## E-commerce – Shopping cart items
Database table: COM\_ShoppingCartSKU
Customers purchase [products](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/products.md) by browsing the website and adding items to their shopping cart. Every item represents one or more units of a given product. Shopping cart items can either be standard products, [product variants](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/products/working-with-product-variants.md), or [product options](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/products/working-with-product-options.md) that were purchased together with another product.
Shopping cart items do not directly contain any personal data, but can be used to obtain information about the products in which specific customers were interested (when combined with the data of the related shopping cart).
The system automatically deletes all items together with the related shopping cart when it is converted into an order upon successful checkout, or after it is abandoned and cleared.
### Shopping cart items – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| References to other entities | SKUID
ShoppingCartID | Each item stores a reference to the related product and shopping cart
[Activities](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-activities.md) – activities of the _Product added to shopping cart_ and _Product removed from shopping cart_ types are logged when shopping cart items are created or removed
Used to display shopping cart content on the website
The system creates the content of orders based on shopping cart items when the customer completes the checkout process |
### Shopping cart items – Personal data sources
| Source | Data flow |
| --------------- | ---------------------------------------------------------------------------------------------------------------------------- |
| Product catalog | The system automatically creates shopping cart items when a customer adds a product to their shopping cart on the live site. |
[> Back to table of contents](#personaldatainxperience-toc)
## E-commerce – Suppliers
Database table: COM\_Supplier
E-commerce sites can store objects representing [suppliers](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/products/managing-suppliers.md) of products. Supplier data can be considered as personal only in cases where the supplier is a natural person.
### Suppliers – Stored personal data
| Data | Column names | Purpose / Description |
| ------------------- | -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Contact information | SupplierEmail
SupplierFax
SupplierPhone | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Suppliers_ application
Can be displayed on the live site (for example in product details) |
| Name | SupplierDisplayName
SupplierName | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Suppliers_ application and when editing products in the _Products_ or _Pages_ application
Can be displayed on the live site (for example in product details) |
| System data | SupplierID
SupplierGUID
SupplierLastModified | SupplierID and SupplierGUID – used as identifiers within the system
SupplierLastModified – timestamp set by the system |
### Suppliers – Personal data sources
| Source | Data flow |
| --------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Suppliers | Users with access to the administration interface manually create suppliers in the _Suppliers_ application or directly from product editing forms (in the _Products_ or _Pages_ application). |
### Suppliers – References from other entities
| Entity (Database table) | Column names | Description |
| ----------------------- | ------------- | --------------------------------------------- |
| Products (COM\_SKU) | SKUSupplierID | The supplier specified for the given product. |
[> Back to table of contents](#personaldatainxperience-toc)
## E-commerce – Wishlist items
Database table: COM\_Wishlist
Wishlist items are records representing relationships between products and users. Each record means that a user (customer) has added a given product to their wishlist on an e-commerce website. Wishlists are only available for [customers who are registered](https://docs.kentico.com/13/e-commerce-features/managing-on-line-stores/customers.md) as users.
### Wishlist items – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| References to other entities | SKUID
UserID | Each item stores a reference to the product that was added to the wishlist and the related user
[Activities](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-activities.md) – activities of the _Product added to wishlist_ type are logged when wishlist items are created |
### Wishlist items – Personal data sources
| Source | Data flow |
| -------- | ----------------------------------------------------------------------------------------------------------------------------- |
| Wishlist | The system automatically creates wishlist items when a registered customer adds a product to their wishlist on the live site. |
[> Back to table of contents](#personaldatainxperience-toc)
## Emails
Database table: CMS\_Email
The system stores records of sent emails according to the settings configured in the **System -> Emails** category of the **Settings** application. This includes:
- Queued emails that are waiting to be sent to the SMTP server for mail out
- Emails whose sending failed
- Archived emails that were successfully sent (stored for a limited number of days)
For more information, see [Sending emails](https://docs.kentico.com/13/managing-users/sending-emails.md).
### Emails – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | -------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Email address | EmailFrom
EmailTo
EmailCc
EmailBcc
EmailReplyTo | [Email engine](https://docs.kentico.com/13/managing-users/sending-emails.md) – used to fill the email address header fields for emails sent by the system
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Email queue_ application |
| Email content | EmailBody
EmailPlainTextBody
EmailSubject | [Email engine](https://docs.kentico.com/13/managing-users/sending-emails.md) – used in the subject and content of emails sent by the system. May contain personal data depending on the type of the email.
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Email queue_ application |
| System data | EmailID
EmailGUID
EmailCreated
EmailLastModified
EmailLastSendAttempt
EmailLastSendResult | EmailID and EmailGUID – identifiers used within the system
EmailCreated, EmailLastModified and EmailLastSendAttempt – timestamps used by the system
EmailLastSendResult – displayed in the _Email queue_ application
For emails whose sending failed, stores error messages that may in some cases contain related email address values |
| References to other entities | EmailSiteID
EmailHeaders | EmailSiteID – the site for which the email was sent (0 for global emails)
EmailHeaders – custom email message headers that may contain references to related entities for certain types of emails (for example contact or subscriber identifiers) |
### Emails – Personal data sources
| Source | Data flow |
| ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Administration interface | Various applications in the system provide an interface for sending emails or configuring email parameters. The input is then used to set the **email address** values and **content** of the given emails. |
| Email templates | Automated emails sent by the system load their **email address** values and **content** from [Email templates](https://docs.kentico.com/13/configuring-xperience/managing-email-templates.md). |
| Settings | Various [settings](https://docs.kentico.com/13/configuring-xperience/managing-sites/configuring-settings-for-sites.md) configured by administrators are used to set the **From** and **To** addresses of sent emails. |
| SMTP servers | When sending of emails fails on the side of the used SMTP server, third-party error messages are saved into the **EmailLastSendResult** field (may contain email address values). |
| User entities | For emails related to user entities within the system (users, contacts, customers, etc.), the system automatically:
Sets **From** and **To** addresses based on the corresponding email address values stored for the given entity.
Saves the identifier referencing the given entity into the email's **EmailHeaders** field. |
[> Back to table of contents](#personaldatainxperience-toc)
## Email feeds
Database table: Newsletter\_Newsletter
[Email feeds](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing.md) are an on-line marketing entity representing a [newsletter](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing/creating-newsletters.md) or an [email campaign](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing/creating-email-campaigns.md). Email feeds are managed in the **Email marketing** application.
### Email feeds – Stored personal data
| Data | Column names | Purpose / Description |
| ------------- | -------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Email address | NewsletterSenderEmail | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Email marketing_ application
Used as the sender address of the feed's marketing emails and automatic subscription status notifications |
| Name | NewsletterSenderName | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Email marketing_ application
Used as the sender of the feed's marketing emails and automatic subscription status notifications |
| System data | NewsletterID
NewsletterGUID
NewsletterLastModified | NewsletterID and NewsletterGUID – used as identifiers within the system
NewsletterLastModified – timestamp used by the system |
### Email feeds – Personal data sources
| Source | Data flow |
| --------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Email marketing | Users with access to the administration interface manually submit the **name** and **email address** of the sender in the _Email marketing_ application. |
| Campaigns | Users with access to the administration interface manually submit the **name** and **email address** of the sender in the _Campaigns_ application. |
### Email feeds – References from entities containing personal data
| Entity (Database table) | Column name | Description |
| ------------------------------------------------------- | -------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Activities (OM\_Activity) | ActivityItemID | The object related to the logged [activity](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/tracking-contact-activities.md) is an email feed for activities of the _Clicked link in marketing email_ , _Opened marketing email_, _Subscription to a newsletter_ and _Unsubscription from a single email feed_ types – i.e., when the value of the ActivityType column is **newsletterclickthrough** , **newsletteropen** , _newslettersubscription_ or _newsletterunsubscription_. |
| Email feed issues (Newsletter\_Issue) | IssueNewsletterID | Email feed related to the given issue. |
| Email feed unsubscriptions (Newsletter\_Unsubscription) | UnsubscriptionNewsletterID | Email feed from which the given email address is unsubscribed. |
[> Back to table of contents](#personaldatainxperience-toc)
## Email feeds – Issues
Database table: Newsletter\_NewsletterIssue
Email feed issues represent individual emails related to an email feed. An email feed may contain multiple issues which can be viewed on the **Emails** tab of the email feed in the **Email marketing** application.
### Issues – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | ------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Email address | IssueSenderEmail | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in _Email marketing_ application
Used as the sender address of marketing emails |
| Name | IssueSenderName | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in _Email marketing_ application
Used as the sender of marketing emails |
| System data | IssueID
IssueGUID
IssueLastModified
IssueMailoutTime | IssueID and IssueGUID – identifiers used within the system
IssueLastModified and IssueMailoutTime – timestamps used by the system |
| References to other entities | IssueNewsletterID
IssueVariantOfIssueID | IssueNewsletterID – email feed to which the issue is related
IssueVariantOfIssueID – the original issue for emails that are [A/B testing variants](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing/a-b-testing-marketing-emails.md) |
### Issues – Personal data sources
| Source | Data flow | Related tables |
| ----------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------- |
| Email feeds | When issues are created, the sender **name** and **email address** are preloaded from the related email feed. | Newsletter\_Newsletter |
| _Email marketing_ application | Users with access to the administration interface manually submit the **name** and **email address** of the sender in the _Email marketing_ application. | |
### Issues – References from entities containing personal data
| Entity (Database table) | Column name | Description |
| ------------------------------------------------------ | ------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Activities (OM\_Activity) | ActivityItemID | The object related to the logged [activity](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/tracking-contact-activities.md) is an email feed issue for activities of the _Opted out from all marketing emails_ type – i.e., when the value of the ActivityType column is **newsletterunsubscriptionfromall**. |
| Activities (OM\_Activity) | ActivityItemDetailID | The additional object related to the logged [activity](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/tracking-contact-activities.md) is an email feed issue for activities of the _Clicked link in marketing email_ , _Opened marketing email_ and _Unsubscription from a single email feed_ types – i.e., when the value of the ActivityType column is **newsletterclickthrough** , **newsletteropen** or _newsletterunsubscription_. |
| Email feed unsubscription (Newsletter\_Unsubscription) | UnsubscriptionFormIssueID | The email feed issue from which the given email address is unsubscribed. |
| Queued marketing emails (Newsletter\_Emails) | EmailNewsletterIssueID | The issue related to the given queued email item. Queued emails are temporary objects created by the system when sending emails to individual recipients. |
| Opened emails (Newsletter\_OpenedEmail) | OpenedEmailIssueID | The issue related to the email open record. |
[> Back to table of contents](#personaldatainxperience-toc)
## Email feeds – Clicked links
Database table: Newsletter\_ClickedLink
The Clicked link entity represents user actions of opening links in received marketing emails. Multiple clicks may be registered for the same email recipient and link if the user clicks the link multiple times. The purpose of this entity is to [track](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing/tracking-marketing-emails.md) how recipients react to marketing emails.
### Clicked links – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | --------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Email address | ClickLinkEmail | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Email marketing_ application in the _Clicks_ report of individual emails
Matching clicked links to contacts – used for displaying contact demographic insights when viewing click details in the _Overview_ report of individual emails in the _Email marketing_ application |
| System data | ClickedLinkID
ClickedLinkGUID
ClickedLinkTime | ClickedLinkID and ClickedLinkGUID – identifiers used by the system
ClickedLinkTime – stores the time when the link was clicked, but the system does not display or process the value by default (the column is obsolete) |
| References to other entities | ClickedLinkNewsletterID | ClickedLinkNewsletterID – the email feed issue where the link was clicked |
### Clicked links – Personal data sources
| Source | Data flow |
| ------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
| Clicked links | New clicked links are registered and stored when a recipient clicks a link in a marketing email, including the recipient's **email address**. |
[> Back to table of contents](#personaldatainxperience-toc)
## Email feeds – Opened emails
Database table: Newsletter\_OpenedEmail
The Opened email entity represents user actions of opening received marketing emails. The purpose of this entity is to [track](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing/tracking-marketing-emails.md) how users react to marketing emails.
### Opened emails – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | -------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Email address | OpenedEmailEmail | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Email marketing_ application in the _Opens_ report of individual emails
Matching opened emails to contacts – used for displaying contact demographic insights when viewing open details in the _Overview_ report of individual emails in the _Email marketing_ application |
| System data | OpenedEmailD
OpenedEmailGUID
OpenedEmailTime | OpenedEmailID and OpenedEmailGUID – identifiers used by the system
OpenedEmailTime – displayed in the _Email marketing_ application in the _Opens_ report of individual emails |
| References to other entities | OpenedEmailIssueID | OpenedEmailIssueID – the related email issue |
### Opened emails – Personal data sources
| Source | Data flow |
| ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Opened marketing emails | New opened emails are logged when a recipient opens an email in their email client for the first time, or when they click a link within the email. The saved data includes the recipient's **email address** and the **open time**. |
[> Back to table of contents](#personaldatainxperience-toc)
## Email feeds – Newsletter subscriptions
Database table: Newsletter\_Subscriber
Newsletter subscriptions represent [contacts](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts.md) or entire [contacts groups](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/segmenting-contacts-into-contact-groups.md) who are [subscribed](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing/managing-marketing-email-recipients.md) to receive [newsletters](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing/creating-newsletters.md).
### Newsletter subscriptions – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | --------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Email address | SubscriberEmail | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Email marketing_ application
Can be displayed within the content of marketing emails |
| Name | SubscriberFirstName
SubscriberLastName
SubscriberFullName | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Email marketing_ application
Can be displayed within the content of marketing emails |
| System data | SubscriberID
SubscriberGUID
SubscriberLastModified | SubscriberID and SubscriberGUID – identifiers used within the system
SubscriberLastModified – timestamp used by the system |
| References to other entities | SubscriberRelatedID
SubscriberType | SubscriberRelatedID – the subscribed contact or contact group object
SubscriberType – specifies the type of the subscribed object (contact or contact group)
Together both fields reference a contact or contact group, which is used to:
Get the recipient addresses when sending marketing emails
Provide information about the newsletter subscriptions of contacts/users in various parts of the administration interface |
### Newsletter subscriptions – Personal data sources
| Source | Data flow | Related tables |
| ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------- |
| Subscription | Data of newsletter subscriptions is created or updated when:
Users or anonymous visitors fill in a newsletter subscription form on the live site.
Authenticated users manage their newsletter subscriptions (using the _Users_ or _My profile_ applications in the administration interface).
Users with access to the administration interface manually subscribe a contact to a newsletter in the _Email marketing_ or _Users_ application. | |
| Contacts | The system automatically updates **email address** and **name** data of subscriptions when the related contact is updated (from any source). | OM\_Contact |
### Newsletter subscriptions – References from entities containing personal data
| Entity (Database table) | Column name | Description |
| -------------------------------------------- | -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Activities (OM\_Activity) | ActivityItemDetailID | The additional object related to the logged [activity](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/tracking-contact-activities.md) is a newsletter subscription for activities of the _Subscription to a newsletter_ type – i.e., when the value of the ActivityType column is _newslettersubscription_. |
| Queued marketing emails (Newsletter\_Emails) | EmailSubscriberID | Subscription related to the given queued email item. Queued emails are temporary objects created by the system when sending emails to individual recipients. |
[> Back to table of contents](#personaldatainxperience-toc)
## Email feeds – Unsubscriptions
Database table: Newsletter\_Unsubscription
Email feed unsubscriptions represent email addresses that are opted out from receiving [newsletters](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing/creating-newsletters.md) and [email campaigns](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing/creating-email-campaigns.md). Unsubscriptions can either be for a specific email feed or all feeds in the system.
### Unsubscriptions – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | --------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Email address | UnsubscriptionEmail | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Email marketing_ application:
On the _Opt-out list_ tab
In the _Contact loss_ details of marketing email reports
Matching opted out email addresses to contacts – used to evaluate and display the "Receiving marketing email" status of contacts |
| System data | UnsubscriptionID
UnsubscriptionGUID
UnsubscriptionCreated | UnsubscriptionID and UnsubscriptionGUID – identifiers used by the system
UnsubscriptionCreated – timestamp, displayed in the _Email marketing_ application |
| References to other entities | UnsubscriptionNewsletterID
UnsubscriptionFromIssueID | UnsubscriptionNewsletterID – email feed from which the email address is unsubscribed (if the unsubscription is not for all email feeds)
UnsubscriptionFromIssueID – the specific email feed issue from which the recipient unsubscribed (only for unsubscriptions created via unsubscription links in marketing emails) |
### Unsubscriptions – Personal data sources
| Source | Data flow |
| ----------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
| Marketing emails | New email feed unsubscriptions are created when recipients click unsubscription links in the content of marketing emails. |
| _Email marketing_ application | Users with access to the administration interface manually add or edit **email addresses** in the opt-out list in the _Email marketing_ application. |
[> Back to table of contents](#personaldatainxperience-toc)
## Email feeds – Queued emails
Database table: Newsletter\_Emails
When a user in the administration interface initiates the sending of a marketing email issue, the system generates a sending queue of emails, with separate records for individual recipients. The queued emails are **deleted immediately after sending is successfully finished**.
### Queued emails – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | ------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Email address | EmailAddress | [Email engine](https://docs.kentico.com/13/managing-users/sending-emails.md) – sending of marketing emails to recipients |
| System data | EmailID
EmailGUID | EmaiIID and EmailGUID – identifiers used within the system |
| References to other entities | EmailNewsletterIssueID
EmailSubscriberID
EmailContactID | EmailNewsletterIssueID – the related email feed issue
EmailSubscriberID – the related email feed subscription
EmailContactID – the related contact (recipient) |
### Queued emails – Personal data sources
| Source | Data flow | Related tables |
| ------- | --------------------------------------------------------------------------------------------------------------------------------------------- | -------------- |
| Contact | When generating queued emails, the system retrieves the recipient **email address** from the contact referenced by the EmailContactID column. | OM\_Contact |
[> Back to table of contents](#personaldatainxperience-toc)
## Email templates
Database table: CMS\_EmailTemplate
The system sends automatic emails for various purposes, such as password reset emails, workflow notifications, etc. The content of such emails is based on [Email templates](https://docs.kentico.com/13/configuring-xperience/managing-email-templates.md), which can also store email address values used for sender, copy and reply-to addresses.
### Email templates – Stored personal data
| Data | Column names | Purpose / Description |
| ------------- | -------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Email address | EmailTemplateFrom
EmailTemplateCc
EmailTemplateBcc
EmailTemplateReplyTo | [Email engine](https://docs.kentico.com/13/managing-users/sending-emails.md) – used to fill the email address header fields (sender, copy, reply-to) for emails based on templates. Typically sent automatically by the system.
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Email templates_ application |
| System data | EmailTemplateID
EmailTemplateGUID
EmailTemplateLastModified | EmaiITemplateID and EmailTemplateGUID – identifiers used within the system
EmailTemplateLastModified – timestamp used by the system |
### Email templates – Personal data sources
| Source | Data flow |
| ---------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
| Email template editing | Users with access to the administration interface manually edit email address values for templates in the _Email templates_ application. |
[> Back to table of contents](#personaldatainxperience-toc)
## Event log records
Database table: CMS\_EventLog
The system automatically creates records within an [Event log](https://docs.kentico.com/13/developing-websites/troubleshooting-websites/working-with-the-system-event-log.md) to keep track of errors and many types of events. The event log helps administrators and developers find sources of problems, identify potential security threats, and monitor the behavior of the system.
### Event log records – Stored personal data
> **Note:** **Event log personal data purpose**
>
> All types of data stored within event log records can be used by the system in the following ways (depending on the configuration of settings):
>
> - Displayed in the _Event log_ application
> - Displayed on dashboards by the _EventLog_ widget
> - Sent within error notification emails (for error events)
> - Saved into the _CMS\App\_Data\logEvents.log_ file on the server's file system
> - Logged into the Windows Event Viewer on the server's operating system
| Data | Column names | Description |
| ---------------------------- | -------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Browser user agent | EventUserAgent | User agent providing information about the browser and operating system of the user or visitor who triggered the event |
| Event details | EventDescription | A detailed description of the event, which may contain personal data in certain cases. For example, if the _Log metadata changes_ setting is enabled, the system logs events for all updates of objects, including the values of the modified object fields. If the given object field contains personal data, the values are stored in the description of the corresponding event. |
| IP address | IPAddress | The IP address of the user or visitor who triggered the event |
| Referring URL | EventUrlReferrer | The URL referrer of the web request during which the event occurred (for example may contain the URL of a site from which a visitor arrived) |
| User name | UserName | The user name of the user that triggered the event |
| System data | EventTime
EventID | EventTime – timestamp identifying when the event occurred
EventId – used as an identifier within the system |
| References to other entities | SiteID
UserID | SiteID – the site on which the event occurred
UserID – the user who triggered the event |
### Event log records – Personal data sources
| Source | Data flow |
| -------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| System activity and user actions | The system logs events based on user actions or automated processes.
Not all types of personal data are logged for all events. Events that are not directly triggered by a user's web request do not contain any of the user-related data. Events that do not occur within the context of a specific site are global and do not reference a site, etc. |
[> Back to table of contents](#personaldatainxperience-toc)
## Object version history
Database table: CMS\_ObjectVersionHistory
Many types of objects in the system support [versioning](https://docs.kentico.com/13/configuring-xperience/working-with-object-versioning.md). If enabled, the system creates and stores separate versions of these objects when they are edited and saved. Object versions are also created when objects are deleted to the [recycle bin](https://docs.kentico.com/13/configuring-xperience/working-with-object-versioning/objects-recycle-bin.md). The recycle bin functionality can include objects that do not otherwise support versioning (for example personal data entities, such as users).
Every object version record stores all data of the original object in XML format, so any personal data contained in the given object is also stored in the version history. Users in the administration interface can restore objects from the recycle bin, or roll objects back to previous versions.
### Object version history – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | ---------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Object data | VersionXML | Contains all data of the versioned or deleted object in XML format
Allows the system to restore deleted objects from the recycle bin, compare different versions of an object's history, or roll objects back to older versions
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – used and displayed in the following locations:
On the _Versions_ tab when editing an object that supports versioning (see [supported object types](https://docs.kentico.com/13/configuring-xperience/working-with-object-versioning.md))
In the _Recycle bin_ application on the _Objects_ tab
By the _Object recycle bin_ dashboard widget |
| Object name | VersionObjectDisplayName | Identifies the original object related to the version history record
May contain personal data for certain types of objects (for example a user name for user objects in the recycle bin)
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the following locations:
In the _Recycle bin_ application on the _Objects_ tab
The _Object recycle bin_ dashboard widget |
| System data | VersionID
VersionModifiedWhen
VersionDeletedWhen | VersionID – used as an identifier within the system
VersionModifiedWhen – stores the time when the versioned object was modified
VersionDeletedWhen – stores the time when the object was deleted to the recycle bin |
| References to other entities | VersionModifiedByUserID
VersionDeletedByUserID
VersionObjectSiteID
VersionObjectID
VersionObjectType | VersionModifiedByUserID – the user who modified the versioned object
VersionDeletedByUserID – the user who deleted the object to the recycle bin
VersionObjectSiteID – the site to which the versioned or deleted object belongs
VersionObjectID and VersionObjectType – these two columns together reference the object to which the version history data belongs. VersionObjectType stores the type of the referenced object and VersionObjectID holds the identifier of a specific object. |
### Object version history – Personal data sources
| Source | Data flow |
| -------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Modification of versioned objects | Users in the administration interface update and save an object for which versioning is enabled, and the system creates a new record in the object's version history. |
| Deleting of objects to the recycle bin | Users in the administration interface (or scheduled/automated processes) delete an object, and the system creates a new object version history record for the recycle bin. |
[> Back to table of contents](#personaldatainxperience-toc)
## Report subscriptions
Database table: Reporting\_ReportSubscription
[Report subscriptions](https://docs.kentico.com/13/configuring-xperience/working-with-system-reports/subscribing-to-reports.md) represent relationships between subscribed users and reports.
### Report subscriptions – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Email address | ReportSubscriptionEmail | [Reporting](https://docs.kentico.com/13/configuring-xperience/working-with-system-reports.md)
Used to send emails containing report data
Displayed in the list of subscriptions for each report in the _Reporting_ application |
| System data | ReportSubscriptionLastModified
ReportSubscriptionID
ReportSubscriptionGUID | ReportSubscriptionLastModified – timestamp used by the system
ReportSubscriptionID and ReportSubscriptionGUID – used as identifiers within the system |
| References to other entities | ReportSubscriptionReportID
ReportSubscriptionUserID
ReportSubscriptionGraphID
ReportSubscriptionTableID
ReportSubscriptionValueID | ReportSubscriptionReportID – the report to which the subscription applies
ReportSubscriptionUserID – the user who created the subscription (the user does not need to match the subscription's email address)
ReportSubscriptionGraphID – a graph from the report for subscriptions to a specific graph (component that retrieves data and displays it in various formats)
ReportSubscriptionTableID – a table from the report for subscriptions to a specific table (component that retrieves data and formats it into a table)
ReportSubscriptionValueID – a value from the report for subscriptions to a specific value (component that retrieves a single scalar value) |
### Report subscriptions – Personal data sources
| Source | Data flow |
| --------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Reporting | Users with access to the administration interface can enter their **email address** and subscribe to reports displayed in various applications (_Reporting_, _Web analytics_, _Store reports_, _A/B testing_, _Facebook_, _LinkedIn_, _Twitter_)
Users with access to the _Reporting_ application can manually create, edit or delete subscriptions for reports. |
[> Back to table of contents](#personaldatainxperience-toc)
## Saved reports
Database table: Reporting\_SavedReport
Saved reports represent archived data from reports in the [Reporting](https://docs.kentico.com/13/configuring-xperience/working-with-system-reports/storing-data-from-reports.md) application.
### Saved reports – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | ------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Saved report content | SavedReportHTML | HTML content used to display and print saved report data in the _Reporting_ application
Contains the data that is displayed within the original report, which may include personal information for some reports |
| System data | SavedReportDate
SavedReportLastModified
SavedReportID
SavedReportGUID | SavedReportDate and SavedReportLastModified – timestamps used by the system
SavedReportID and SavedReportGUID – used as identifiers within the system |
| References to other entities | SavedReportReportID
SavedReportCreatedByUserID | SavedReportReportID – the original report
SavedReportCreatedByUserID – the user who saved the report |
### Saved reports – Personal data sources
| Source | Data flow |
| --------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Reporting | The system generates **Saved Report HTML** content when users in the administration interface manually save reports (for example in the _Reporting_, _Store reports_ or _Web analytics_ applications). |
[> Back to table of contents](#personaldatainxperience-toc)
## Synchronization tasks
Database tables: Export\_Task, Integration\_Task, Staging\_Task, CMS\_WebFarmTask
The system creates and stores the following types of synchronization tasks:
- **Export delete tasks** – serve as representations of object delete operations, and can be included within [Export packages](https://docs.kentico.com/13/deploying-websites/exporting-and-importing-sites.md).
- **Integration tasks** – synchronize data with external systems or applications via the [Integration bus](https://docs.kentico.com/13/integrating-3rd-party-systems/using-the-integration-bus/integration-bus-overview.md). The system automatically deletes integration bus tasks after they are successfully processed.
- **Staging tasks** – synchronize content and objects between different Xperience instances via [Staging](https://docs.kentico.com/13/deploying-websites/content-staging.md). The system automatically deletes staging tasks after they are successfully synchronized.
- **Web farm tasks** – synchronize cached data and files between Xperience servers in a [Web farm](https://docs.kentico.com/13/configuring-xperience/setting-up-web-farms.md) environment. The system automatically deletes web farm tasks after they are successfully processed.
Synchronization tasks store the data of the related object in XML format, so personal data contained in the given object can also be stored within corresponding tasks. This may include sensitive objects such as users, contacts or customers.
### Export, Integration, and Staging tasks – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | -------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Object data | TaskData | Contains data of the related object in XML format (may include sensitive objects such as users, contacts or customers)
Allows the system to synchronize objects to other instances or external systems (staging and integration tasks) or identify objects that need to be deleted when importing a package (export tasks)
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – the data can be viewed in the following locations:
In the _Integration bus_ application (integration tasks)
In the _Staging_ application (staging tasks)
For export tasks, the data can be included within [export packages](https://docs.kentico.com/13/deploying-websites/exporting-and-importing-sites/exporting-objects.md) that the system creates on the file system. |
| Task name | TaskTitle | Describes the type of the synchronization task (create, delete, update, etc.) and identifies the related object
May contain personal data for certain types of objects (for example the user name of deleted or modified user objects)
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the following locations:
In the _Integration bus_ application (integration tasks)
In the _Staging_ application (staging tasks)
In the _Sites_ application on the _Tasks_ tab of the _View export history_ page, and in the export/import wizard (export tasks) |
| System data | TaskID
TaskTime | TaskID – used as an identifier within the system
TaskTime – timestamp storing the time when the task was logged (matches the time when the related create, update or delete action was performed) |
| References to other entities | TaskSiteID
TaskObjectID
TaskObjectType | TaskSiteID – the site for which the task was logged
TaskObjectID and TaskObjectType – these two columns together reference the object related to the synchronization task. The type of the referenced object is stored in the TaskObjectType column and TaskObjectID holds the identifier of a specific object. |
### Web farm tasks – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | --------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Object data | TaskTextData | Stores data of the related object in XML format (may include sensitive objects such as users, contacts or customers). The data primarily includes object identifiers and/or names.
Allows the system to synchronize cached data and files between Xperience servers when running in a web farm environment
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – the data can be viewed in the _Web farm_ application |
| System data | TaskID
TaskGUID
TaskCreated | TaskID and TaskGUID – used as identifiers within the system
TaskCreated – timestamp storing the time when the task was logged (matches the time when the related action was performed) |
| References to other entities | TaskTarget | Stores the type of the object related to the web farm task. Used to reference the related object in combination with the identifier data stored in the TaskTextData column. |
### Staging tasks – References from entities containing personal data
| Entity (Database table) | Column name | Description |
| -------------------------------------- | ----------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Staging task users (Staging\_TaskUser) | TaskID | The system stores relationships between staging tasks and users. Every relationship indicates that the specified user performed the change which caused the system to log the given staging task (referenced in the _TaskID_ column). |
### Export tasks – Personal data sources
| Source | Data flow |
| --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Object deletion | If the [Log export tasks](https://docs.kentico.com/13/configuring-xperience/managing-sites/configuring-settings-for-sites/settings-versioning-synchronization/settings-staging.md) setting is enabled, the system creates export tasks when an object is deleted (by a user in the administration interface or by a scheduled/automated process). |
### Integration tasks – Personal data sources
| Source | Data flow |
| ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Object changes | If the [Integration bus is enabled](https://docs.kentico.com/13/integrating-3rd-party-systems/using-the-integration-bus/enabling-the-integration-bus.md) and appropriate [connectors](https://docs.kentico.com/13/integrating-3rd-party-systems/using-the-integration-bus/creating-integration-connectors.md) for outgoing synchronization are created in the system, the system logs integration tasks when objects are created, updated or deleted (by a user in the administration interface or by a scheduled/automated process). |
| External systems | If the [Integration bus is enabled](https://docs.kentico.com/13/integrating-3rd-party-systems/using-the-integration-bus/enabling-the-integration-bus.md) and appropriate [connectors](https://docs.kentico.com/13/integrating-3rd-party-systems/using-the-integration-bus/creating-integration-connectors.md) for incoming synchronization are created in the system, the system logs integration tasks based on data transfers from the related external application or system. |
### Staging tasks – Personal data sources
| Source | Data flow |
| ------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Object changes | If [staging is enabled,](https://docs.kentico.com/13/deploying-websites/content-staging/configuring-content-staging.md) the system logs staging tasks when pages or objects are created, updated or deleted (by a user in the administration interface or by a scheduled/automated process). |
| Manual staging synchronization | Users with access to the administration interface can manually run synchronization of objects, pages or custom table data in the _Staging_ application.
Manual synchronization creates update staging tasks for the related objects and immediately runs them. All successfully synchronized tasks are immediately deleted. |
### Web farm tasks – Personal data sources
| Source | Data flow |
| -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Object changes | The system logs synchronization tasks for every available server when objects are created, updated or deleted (by a user in the administration interface or by a scheduled/automated process). |
[> Back to table of contents](#personaldatainxperience-toc)
## Users
Database tables: CMS\_User, CMS\_UserSettings
[Users](https://docs.kentico.com/13/managing-users/user-management.md) are an entity representing people in Xperience. User accounts allow people to sign in on the live site and into the Xperience administration interface (depending on the user privilege level). New user accounts are typically created when a visitor goes through [registration ](https://docs.kentico.com/13/managing-users/user-registration-and-authentication.md) on the live site. However, administrators can also create accounts manually in the **Users** application.
The system stores user data within two coupled database tables – users (CMS\_User) and user settings (CMS\_UserSettings).
### Users – Stored personal data
| Data | Column names | Purpose / Description |
| ------------------------ | ----------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Email address | Email | [Email engine](https://docs.kentico.com/13/managing-users/sending-emails.md) – sending various types of automated emails to users (notifications, password reset functionality, registration confirmation, etc.)
Used as the recipient address when [sending emails](https://docs.kentico.com/13/managing-users/sending-emails.md) to registered users (for example from the _Users_ or _Email queue_ applications)
Saved into the user's _UserName_ field as an identifier if a separate value is not specified during registration
Used to validate email address values of new users if the _Require unique user emails_ setting is enabled
Synchronized into the email address field of related customers and contacts (according to [mapping configuration](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-contacts/mapping-fields-to-contact-attributes.md))
Pre-filling of email address values for signed in users in various locations within the administration interface
[Activities](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-activities.md) – saved into the titles of logged activities of the _User registration_ and _User login_ types
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed as part of user information in various administration interface locations:
_Users_ application
_My profile_ application
_Contact management_ application
User selection dialogs
Various lists of subscriptions (Reports, etc.) |
| Last sign-in information | UserLastLogon
UserLastLogonInfo | UserLastLogon – the date and time of the user's last sign-in on the live website or into the administration interface
UserLastLogonInfo – stores the IP address and browser user agent of the user's environment at the time of their last sign-in
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – the last sign-in information is displayed in the _Users_ application |
| Name | UserName
FirstName
MiddleName
LastName
FullName | UserName – serves as a unique identifier for users, most importantly when signing in (authentication)
Saved into the fields of various system objects to identify related users (event log records, staging tasks, security debug logs, etc.)
Stored as the value of the authentication cookie
[Caching](https://docs.kentico.com/13/configuring-xperience/configuring-caching.md) – username values are added to the names of cache keys to allow user-specific caching
Used when generating [preview links to unpublished pages](https://docs.kentico.com/13/managing-website-content/working-with-pages/sending-links-to-unpublished-pages.md)
Saved into the [security signatures](https://docs.kentico.com/13/macro-expressions/troubleshooting-macros/working-with-macro-signatures.md) of macro expressions
FullName – the full name is automatically composed for each user from the first, middle and last name values (if not directly modified)
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed throughout the administration interface to identify users
Displayed within user-related system emails based on the default [email templates](https://docs.kentico.com/13/configuring-xperience/managing-email-templates.md)
Synchronized into the names fields of related customers and contacts (according to [mapping configuration](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-contacts/mapping-fields-to-contact-attributes.md))
[Activities](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-activities.md) – user names are saved into the titles of logged activities of the _User registration_ and _User login_ types
[Translation services](https://docs.kentico.com/13/multilingual-websites/translating-content-using-external-services.md) – submissions for human translation services include an instructions file, which contains the full name of the user who created the submission (by default)
Displayed in various [system reports](https://docs.kentico.com/13/configuring-xperience/working-with-system-reports.md)
Displayed by user-related dashboard widgets (_Recent users_) |
| Password | UserPassword | Required for user authentication (sign-in)
Passwords are stored in a secured format, created using a [selected cryptographic function](https://docs.kentico.com/13/securing-websites/designing-secure-websites/securing-user-accounts-and-passwords/setting-the-user-password-format.md) |
| System data | UserID
UserGUID
UserCreated
UserLastModified | UserID and UserGUID – used as identifiers within the system
UserCreated – the date and time when the user account was created
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Users_ application
Used to evaluate which non-activated users are automatically deleted based on the _Delete non-activated users after (days)_ setting
Displayed by user-related dashboard widgets (_Recent users_)
UserLastModified – timestamp used by the system |
### User settings – Stored personal data
| Data | Column names | Purpose / Description |
| ---------------------------- | ----------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Contact information | UserPhone
UserSkype
UserIM | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Users_ and _My profile_ applications
UserPhone – synchronized into the phone number field of related customers |
| Descriptions | UserDescription
UserPosition | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Users_ and _My profile_ applications |
| Name | UserNickName | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed as part of user names in various locations in the administration interface |
| Natural personal data | UserGender
UserDateOfBirth | UserGender – stores the gender of the user
UserDateOfBirth – used when computing the value of the _UserAge_ macro property for users
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Users_ and _My profile_ applications |
| Password change information | UserPasswordLastChanged | Required to calculate the [expiration](https://docs.kentico.com/13/securing-websites/designing-secure-websites/securing-user-accounts-and-passwords/password-expiration.md) date and time for user passwords |
| Signature | UserSignature | [User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – displayed in the _Users_ and _My profile_ applications |
| Registration information | UserRegistrationInfo
UserCampaign
UserURLReferrer
UserActivationDate | UserRegistrationInfo – stores the IP address and browser user agent of the user's environment at the time of registration
UserCampaign – the name of a specific [campaign](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/campaigns.md) if the user registered within the context of campaign
UserURLReferrer – the URL referrer of the web request during which the user registered (for example may contain the URL of a site from which a visitor arrived)
UserActivationDate – the date and time when the user account was activated via email confirmation or administrator approval
[User interface](https://docs.kentico.com/13/using-the-xperience-interface.md) – the registration information values are displayed when editing users in the _Users_ application |
| System data | UserSettingsID | UserSettingsID – used as an identifier within the system |
| References to other entities | UserAvatarID
UserSettingsUserID
UserSettingsUserGUID
UserActivatedByUserID | UserAvatarID – the user's [avatar](https://docs.kentico.com/13/managing-users/user-avatars.md)
UserSettingsUserID and UsersSettingsUserGUID – the user object coupled with the user settings
UserActivatedByUserID – the user who approved the given user's registration (when [requiring approval for new users](https://docs.kentico.com/13/managing-users/user-registration-and-authentication/enabling-user-registration.md)) |
### Users – Personal data sources
| Source | Data flow | Related tables |
| -------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------- |
| Authentication | A user's **last sign-in information** is automatically updated when they sign in to the administration interface.
If using [Windows Active Directory authentication](https://docs.kentico.com/13/managing-users/user-registration-and-authentication/configuring-windows-ad-authentication.md) or [mixed-mode authentication](https://docs.kentico.com/13/managing-users/user-registration-and-authentication/configuring-windows-ad-authentication/configuring-mixed-mode-authentication.md), the first sign-in automatically creates a new user based on the external Active Directory data.
During the first sign-in through an external authentication service ([external authentication](https://docs.kentico.com/13/managing-users/user-registration-and-authentication/configuring-external-authentication.md), [claims-based authentication providers](https://docs.kentico.com/13/managing-users/user-registration-and-authentication/claims-based-authentication.md), etc.), the system automatically creates a new user from the external data based on your implementation. | |
| Customers | When the **name**, **email address** and **phone number** data of a customer is modified, the system automatically synchronizes the values to the associated user.
If the _Register customer after first checkout_ setting is enabled, the system [automatically creates](https://docs.kentico.com/13/e-commerce-features/configuring-on-line-stores/enabling-automatic-registration-for-anonymous-customers.md) new users based on the data of anonymous customers when they complete the order checkout process.
Administrators can create new users based on customer data in the _Customers_ application when editing an anonymous customer on the _Login details_ tab. For registered customers, the same interface also allows administrators to change the **password** for the associated user account. | COM\_Customer |
| Emergency administrator recovery | Emergency recovery of administration interface access via the _CMSAdminEmergencyReset_ web.config key can create a new user with the Global administrator privilege level and a specified **username** and **password**. | |
| Password change | Users can change their **password** via the administration interface sign-in page (after submitting a password change request with email verification). | |
| Registration | Visitors create new user accounts through [custom developed registration forms](https://docs.kentico.com/13/managing-users/user-registration-and-authentication/enabling-user-registration.md). | |
| User activation | When new users activate their account via [email confirmation](https://docs.kentico.com/13/managing-users/user-registration-and-authentication/enabling-user-registration.md), the **UserActivationDate** is automatically set in the user settings.
If the system is configured to [require approval](https://docs.kentico.com/13/managing-users/user-registration-and-authentication/enabling-user-registration.md) for new users, the **UserActivationDate** and **UserActivatedByUserID** values are automatically set in the user settings when an administrator approves an account in the _Users_ application. | |
| User editing | Users with access to the administration interface manually create users or edit user and user settings data in the _Users_ application.
Users with access to the administration interface edit their data in the _My profile_ application. | |
### Users – References from entities containing personal data
| Entity (Database table) | Column name | Description |
| ---------------------------------------------------- | ------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Accounts (OM\_Account) | AccountOwnerUserID | The user assigned as the owner of the given [on-line marketing account](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts/organizing-contacts-into-accounts.md). |
| Activities (OM\_Activity) | ActivityItemID | The object related to the logged [activity](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/tracking-contact-activities.md) is a user for activities of the _User login_ and _User registration_ type – i.e., when the value of the ActivityType column is _userlogin_ or **userregistration** . |
| Contacts (OM\_Contact) | ContactOwnerUserID | The user assigned as the owner of the given contact. |
| Contact membership relationships (OM\_Membership) | RelatedID | The user related to a given contact. The table contains records representing relationships between contacts and users/customers.
Records representing user relationships have the value of the MemberType column set to 0. |
| Customers (COM\_Customer) | CustomerUserID | The user related to the customer (for registered customers). |
| Dashboard widget content (CMS\_Personalization) | PersonalizationUserID | The user who created the given dashboard widget content.
Considered as personal data, because the PersonalizationLastModified column of the personalization record contains a timestamp that could be used to track the user's activity. |
| Event log records (CMS\_EventLog) | UserID | The user who triggered the logged event. |
| External authentication records (CMS\_ExternalLogin) | UserID | The user related to the given external authentication record (for users created as a result of authentication via an external provider). |
| Media files (Media\_File) | FileCreatedByUserID
FileModifiedByUserID | The users who created and last modified the given media file.
Considered as personal data, because the media file record contains timestamps that could be used to track the user's activity. |
| Orders (COM\_Order) | OrderCreatedByUserID | The user who created the order (for registered customers). |
| Report subscriptions (Reporting\_ReportSubscription) | ReportSubscriptionUserID | The user who created the report subscription. |
| Shopping carts (COM\_ShoppingCart) | ShoppingCartUserID | The user related to the shopping cart (for registered customers). |
| User settings (CMS\_UserSettings) | UserSettingsUserGUID
UserSettingsUserID
UserActivatedByUserID | The user coupled with the given user settings (referenced in the UserSettingsUserID and UserSettingsUserGUID columns).
The user who approved the registration of the given user account (when [requiring approval for new users](https://docs.kentico.com/13/managing-users/user-registration-and-authentication/enabling-user-registration.md)). |
| Wishlist items (COM\_Wishlist) | UserID | The user who added the product to their wishlist. |
[> Back to table of contents](#personaldatainxperience-toc)
## Web analytic statistics
Database table: Analytics\_Statistics
The [web analytics](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/web-analytics.md) feature stores data as statistics representing individual tracked events. Each statistic contains the type of the event and information about the context in which the event occurred (i.e., a related object, site, and culture).
### Web analytic statistics – Stored personal data
> **Info:** Web analytics store all types of logged statistics within the _Analytics\_Statistics_ database table. The type of each statistic is determined by the value of the _StatisticsCode_ column. For statistics with the **browsertype**, **countries**, **mobiledevice** and **urlreferrals** _StatisticsCode_ values, the data stored in the additional _StatisticsObjectName_ column could be considered as personal (see the table below).
>
> The default statistics are anonymous and do not contain any references to entities representing a natural person.
| Data | Column names | Purpose / Description |
| ---------------------------- | -------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Browser type | StatisticsObjectName | Displayed in the _Browser types_ report in the _Web analytics_ application
Processed and displayed by reports under the _Web Analytics -> Browser capabilities -> Browser types_ category (accessible in the _Reporting_ application) |
| Country name | StatisticsObjectName | Displayed in the _Countries_ report in the _Web analytics_ application
Processed and displayed by reports under the _Web Analytics -> Countries_ category (accessible in the _Reporting_ application) |
| Mobile device type | StatisticsObjectName | Displayed in the _Mobile devices_ report in the _Web analytics_ application
Processed and displayed by reports under the _Web Analytics -> Mobiles devices_ category (accessible in the _Reporting_ application) |
| Referring URL | StatisticsObjectName | Displayed in the _Acquisition_ reports in the _Web analytics_ application
Processed and displayed by reports under the _Web Analytics -> Referrals_ and _Referring sites_ categories (accessible in the _Reporting_ application) |
| System data | StatisticsID | StatisticsID – used as an identifier within the system |
| References to other entities | StatisticsObjectID
StatisticsSiteID | StatisticsObjectID – the object related to the logged statistic. The type of the referenced object depends on the type of the statistic (stored in the _StatisticsCode_ column). |
### Web analytic statistics – Personal data sources
| Source | Data flow |
| ------------- | ----------------------------------------------------------------------------------------------------------------- |
| Web analytics | The system saves values into the **StatisticsObjectName** column when logging web analytics for website visitors. |
[> Back to table of contents](#personaldatainxperience-toc)
## Workflow and automation process steps
Database table: CMS\_WorkflowStep
[Marketing automation processes](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/marketing-automation/working-with-the-automation-process-designer.md) and [advanced workflows](https://docs.kentico.com/13/configuring-xperience/configuring-the-environment-for-content-editors/configuring-workflows/designing-advanced-workflows.md) consist of steps, which may in certain cases contain personal data. The most common example are email address values in the From / To parameters of _Send email_ steps.
### Workflow and automation process steps – Stored personal data
| Data | Column names | Purpose / Description |
| ------------------ | -------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Step configuration | StepActionParameters | Stores the parameter configuration for the step in XML format, which may include personal data in certain cases (e.g. email address values for _Send email_ steps) |
| System data | StepLastModified
StepID
StepGUID | StepLastModified – timestamp used by the system
StepID and StepGUID – used as identifiers within the system |
### Workflow and automation process steps – Personal data sources
| Source | Data flow |
| ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Step editing | Users with access to the administration interface manually enter parameter values for steps in the workflow / process designer interface (within the _Workflows_ or _Marketing automation_ application). |
### Workflow and automation process steps – References from entities containing personal data
| Entity (Database table) | Column name | Description |
| --------------------------------------------------- | ------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Automation process history (CMS\_AutomationHistory) | HistoryStepID
HistoryTargetStepID | The marketing automation steps related to the history record for a given process. Such history records are logged automatically when automation processes transition between steps. The history record also stores the ID of the user who approved the transition. |
| Workflow history (CMS\_WorkflowHistory) | StepID
TargetStepID | The workflow steps related to the version history record for a given page. Such history records are logged automatically when pages transition between workflow steps. The history record also stores the ID of the user who approved the transition. |
| Step security settings (CMS\_WorkflowStepUser) | StepID | The workflow or automation step which has [security settings](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/marketing-automation/working-with-the-automation-process-designer/configuring-step-security-for-automation-processes.md) assigned for specific users. Each record also stores the ID of the assigned user. |
[> Back to table of contents](#personaldatainxperience-toc)