The law says that personal data must be erased immediately when the data is no longer needed for its original processing purpose, or the data subject has withdrawn his consent and there is no other legal ground for processing, the data subject has objected and there are no overriding legitimate grounds for the processing or erasure is required to fulfill a statutory obligation under the EU law or the right of the Member States.
Our experts are here to help you asset your rights.