Introduction

According to the GDPR, we must delete personal data once the purpose of processing no longer applies. Only if there are other valid reasons (usually legal obligations) may we retain the data for longer. When a project is completed, it is therefore quite possible that we are still responsible for personal data.

A typical example is data that is subject to statutory retention periods for tax law reasons. In Germany, for example, business letters and tax documents must be kept for 10 years. 

There are also retention obligations for ERASMUS+ projects. Depending on the funding amount and project, these are between three and five years and apply in particular to accounting and tax documents, as well as documents relating to actual income and expenditure within the scope of the project. The relevant retention periods can be found in the grant agreement with the national agency. 

Source: Clker-Free-Vector-Images on Pixabay