Retention and deletion
While the service is active
While your service is active, your data is kept in your environment and
backed up periodically. Backups are kept for a defined retention window,
after which they are automatically deleted on a rolling basis. See
Backups.
Right to erasure
As data processor, we assist you in handling the erasure requests you
receive as controller. The application allows specific personal data to be
deleted or anonymized; we provide the technical capabilities to do so and,
where applicable, to propagate that deletion.
When the service ends
When the contractual relationship ends:
- We provide you with an export of your data in a usable format, within
the agreed timeframe.
- After that period, we proceed to delete your data and its backups
from the platform.
Pending validation
The specific timeframes for backup retention, export, and final
deletion at contract end are set out in your contractual documentation
(DPA / service contract) and provided on request. Here we describe the
procedure, not the numbers, to avoid misleading you.
Secure deletion
Deletion is carried out so that data is no longer recoverable from the
platform, including backups once their retention window has passed.