Data Retention Policy
Personal Data will be retained by CA Plus in accordance with the Data Retention Policy defined in the table below as it relates to different data types:
|Data Type||Retention Policy|
|Client’s Personal Data shared with Authorised Staff for the purposes of the provision of implementation and support services.||30 days|
|Data managed in Shireburn On-Premises Software||Managed by the Client|
|Data Managed within CA+ environments hosted by CA Plus||60 days following termination of the Subscription agreement.|
Personal Data related to users who are terminated will be able to be deleted by the Client immediately.
|Personal Data stored related to contracts, billing, procurement and similar administrative processes to enable the on-going relationship between Shireburn and the Client||10 years from termination of the relationship.|
|Personal Data related to correspondence, proposals, actions and opportunities||Up to 6 years after termination of the relationship with Client|
CA Plus shall hold the Client’s Personal Data only as long as is necessary to provide the Services, including administration, accounting, marketing and reporting in the context of a Legitimate Business Interest, and subject to:
- the rights of a Data Subject in terms of the Data Protection Law, such as requests for data access or deletion;
- any legal requirement for data retention as specified in any other law of the Republic of Malta, including laws including but not limited to Social Security, Income Tax, Value Added Tax, Employment and Industrial Relations etc.
- a request by an authorised Governmental or regulatory authority for an additional retention period
Modifications to this data retention policy can be effected by CA Plus publishing the new policy on this page and giving the client 10 days’ notice of such change.