Written for the person whose record is in the software, and for the school answering them.
The driving school decides what it records and why: it is the controller. rodap runs the software on its behalf and acts as its processor. A question about a particular record goes to the school first.
A person followed in the software has an area where the data concerning them is displayed, without asking anyone.
The same area exports that data in an open format, so it can be read outside rodap and given to another tool.
Retention periods are configured for each kind of record rather than left to run indefinitely, and an engine applies them.
An erasure and anonymisation path exists in the software. It is not described here as a promise, because it has not been proved end to end since it was last repaired. This page will say so plainly the day it has been.