In compliance with the General Data Protection Regulation (GDPR), we collect and process personal data only for legitimate purposes. We retain this data for a period necessary to fulfil these purposes, after which it will be securely deleted. Our retention period is based on legal requirements, the nature of the data, and the need to protect the rights of the data subjects.