The retention period for personal data is often set out in specific laws (eg, labor regulations determine the retention period for employee payslips).

However, when the regulations do not establish a storage period, the principle of limiting the storage period given in Article 9 of the ZZLP is applied.

Personal data must be kept in a form that allows the identification of the subjects of personal data for a period that is not longer than is necessary for the purposes of processing the personal data.

Personal data can be stored for a longer period only if they are processed for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 86, paragraph (1) of ZZLP, in which appropriate technical and organizational measures should be applied. measures in accordance with ZZLP, in order to protect the rights and freedoms of the subjects of personal data.

If the storage term is not established by law, the controller keeps personal data as long as it is needed for the purposes of personal data processing.