Data Erasure. (1) The stored log data shall automatically be erased after 30 days in the system in each case (see Section 4 (1)). (2) Printed or electronic records of personal data of the access control’s system master data, which are no longer required based on the specific purpose as defined under Section 4(4), must be destroyed by the Head of Operating Technology no later than six months after creation. (3) After the departure of an employee, the associated data must immediately be erased by the Head of Operating Technology. (4) If there are ongoing proceedings to enforce or defend against legal claims at the time of erasure, the Head of Operating Technology must prevent the erasure of the data.
Appears in 1 contract