Obligations regarding the storage and deletion of personal data
The preservation and deletion of data is considered to be the processing of personal data within the meaning of the Data Protection Act, for which the controller is responsible.
Data cannot be stored if the legal grounds on which the controller based the processing is no longer available, for example if the data subject withdraws his consent and there is no other authorization for the processing.