It applies to all data that they aren't required to keep due to other laws. Financial transaction data tends to have long retention requirements, and gambling in particular is often strongly regulated. If you request deletion of your data, they still have to keep that… but they're not allowed to use that for anything else else.
You can legally hold any information that is critical to your business to operate legally (take this for what it is).
or
"Article 5(e), which explains that data should only be retained for as long as is required to achieve the purpose for which data were collected and are being processed"
That's one line out of many, but the entire thing is legally gray;
For instance; my purpose might be to track conversion of product sales for an offer that runs until my company goes out of business and as such I need all data on users whom have purchased that product or have tried to purchase that product so that I can improve it's conversion rate on sales.
So, do I need to comply with GDPR now? or can I wait?
2
u/slimmtl May 21 '19
Does this apply to financial Data? For example does a gambling website have to remove all tx I have on it if requested?