IT security & data protection
Deletion policy
Data that has to go does go
What this is about
Retention is regulated, and so is deletion. We set a period for each type of data and set up deletion so that it actually happens, instead of just standing in a policy.
What is included
- Periods for each type of data, aligned with retention obligations
- Automatic deletion or follow-up reminder
- Handling of job applications
- Backups: deletion considered there too
- Evidence for audits
Process
How we go about it.
Record
Which data is stored where?
Define
Set periods and name those responsible.
Set up
Automation and reminders.
Prove
Collect the logs.
Frequent questions
This is what we are often asked.
How long may applications be kept?
As a rule six months after rejection, and longer only with consent for an applicant pool.
What about old backups?
They expire with the backup rotation. That belongs in the policy so that it stays traceable.
Does everything really have to be deleted?
No. Tax-relevant documents must be kept. We document exactly that weighing-up.
Sollen wir uns das ansehen?
Ein kurzes Gespräch genügt, um einzuschätzen, was in Ihrem Betrieb sinnvoll ist — und was nicht.