Deletion concept and retention periods
Which data is deleted when, how the deletion runs work and what you maintain as operator.
ConfidentialitéBase (gratuit)Vérifié le 30.10.2026
Cet article n’est pour l’instant disponible qu’en allemand et en anglais ; nous affichons la version anglaise.
Prérequis
- You are responsible for data protection or operations of the platform.
Qui peut le faire ?
Operator process. Periods are enforced in code and listed in the deletion concept; changing periods is an operator decision (setting in the environment), agreed with data protection and counsel. The concept is a draft and must be reviewed before production.
Pas à pas
Understand the deletion runs
A daily run (03:00) and a weekly run carry out deletions; each run is logged. Jobs run under a lock so that they run exactly once even with several instances.
Look up key periods
Examples: account after a deletion request 30 days’ grace, then anonymization; soft-deleted posts and messages 30 days; reports 12 months after closing; support requests 12 months; audit log and data-subject requests 3 years; security events 365 days; attendance 36 months; health notes on events 90 days after the end.
Classify data subject rights
Erasure under Art. 17 happens in the account (Settings → Privacy) with 30 days’ grace; access and portability as an export. Requests concerning an organization’s data are for the organization – the platform forwards within 5 working days.
Deletion hold in legal disputes
In an ongoing dispute or on official order, audit retention is suspended; this is an operator instruction and is documented.
Register a new feature
Whoever builds a feature with new personal data adds, in the same piece of work, the deletion concept (row with period), the account deletion, the processing register and key rotation.
Erreurs fréquentes et solutions
- A period in the concept says “to be clarified legally”.
- It is marked as open (for example retention of bookings under commercial and tax law); nothing is deleted until clarified.
- Inactive accounts are not deleted automatically.
- After 3 years there is only a warning; automatic deletion is off by default.
Bon à savoir
- Club records (minutes, election minutes, resolutions) have no fixed platform period; the club decides under association law.
- Legal retention duties have not been assessed conclusively.