Information retention policy

Summary

The information retention policy defines the retention periods for all information in our organization.

The policy is applicable to all internal and external personnel.

Principles

Refer to the table below for relevant retention periods and disposal instructions for all data types:

Applicant data

• Retention period: 1 year after application, only if applicant agrees to be kept on file
• Location: Digitally on file server
• Disposal instructions: Delete

Personnel records (review forms, ...)

• Retention period: 1 year after termination
• Location: Digitally on file server
• Disposal instructions: Delete

Customer records

• Retention period: 7 years after last transaction
• Location: Digitally in CRM system
• Disposal instructions: Delete

Email

• Retention period: unlimited, unless it contains any of the data types above
• Location: Digitally on mail server
• Disposal instructions: Delete

Source code

• Retention period: unlimited
• Location: Digitally on file server(s)
• Disposal instructions: Delete

Financial records (invoices, tax, records)

• Retention period: 7 years
• Location: Digitally on file server(s) and payment system
• Disposal instructions: Delete