Data residency and retention

We have developed and implemented an internal Data Retention and Destruction Policy that governs processing activities and scenarios we have carefully developed for each specific activity, specific terms for keeping your Personal Data, the legal basis we rely on, and justifications, as well as data destruction methods when retention periods expire.

We store your Personal Data:

1. For the fulfillment of our contractual obligations and providing services under EULA, we keep your data during the term of the EULA. To find out more, please refer to the EULA.

2. For the purpose of sending you newsletters, we keep your data for as long as we retain your consent. You may revoke your consent at any time by clicking “unsubscribe” in the email footer.

3. For the fulfillment of tax and accounting obligations in accordance with our legal obligations, we will retain your personal data usually for 10 years (depending on the applicable law).

4. When we process your data for the purposes of exercising your rights as the data subject and respond to your access requests, we will retain your data for 5 years.

5. When we process your data for the purpose of establishing, exercising, or defending against legal claims, we will keep the data for as long as it is necessary to defend our specific rights and interests, and, in the case of a dispute, until the final execution of the binding decision of the competent supervisory authority.

Upon expiration of data storage, we will securely destroy your data in accordance with our Data Retention and Destruction Policy and applicable laws and regulations.

If we seek to retain your personal data on file on the basis that a further opportunity may arise in the future, we will inform you with notice, seeking your explicit consent to retain your personal data for a fixed period on that basis.

If you believe that we are keeping your data illegally, please send the respective notice request to [email protected]. We will review your request at our earliest convenience and delete your data unless we are required by law to keep it for a longer period, or unless we can demonstrate legitimate grounds for processing that override your interests, rights, and freedoms. If deletion is impossible, we will securely store your personal data and isolate it from any further processing until deletion is permitted.