1. Principle
Personal data is retained only for as long as required by its processing purpose, contractual obligations, security needs and applicable law.
2. Operational records
Account, support, visit, task, form, complaint and audit records may have different retention periods depending on customer requirements and legal obligations.
3. Closed accounts
At the end of service, customers should be given a reasonable opportunity to export data before eligible operational data is scheduled for deletion, subject to mandatory retention duties.
4. Backups
Deleted data may remain in encrypted or protected backups until the relevant backup rotation expires.
5. Disposal methods
Eligible data is deleted, securely destroyed or anonymized according to the data type and storage environment.