Retention of personal data

The retention period is the period for which the data can be kept for a given purpose. After its expiration, personal data must be deleted or anonymized. Shred physical documents. The retention period should correspond to the purpose of processing and must not be unreasonably long, for example, it would be difficult to defend the retention of camera recordings for a period of 2 years.

Retention periods for individual purposes may overlap and may be given, for example:

  • By law – the company is obliged to keep accounting documents with VAT for a period of 10 years
  • In the interest of the controller – for the purposes of a possible complaint, documents are kept for a period of 3 years
  • In the interest of the controller – for the purposes of a possible complaint, documents are kept for a period of 3 years