Data Deletion Procedures

1. Your Right to Erasure

Under GDPR Article 17, you have the right to request erasure of your personal data ("right to be forgotten"). eIDAS Pro is committed to honoring this right and making the deletion process straightforward.

This page explains how to request deletion of your data and what to expect during the process.

2. Types of Deletion Requests

3. How to Request Deletion

3.1 Self-Service (Account Deletion)

You can delete your account directly from your dashboard:

1. Log in to your eIDAS Pro dashboard
2. Navigate to Settings → Account
3. Click "Delete Account"
4. Confirm by entering your email address
5. Optionally download a data export before deletion

3.2 Email Request

Send a deletion request to support [at] eidas-pro.com with:

• Subject line: "Data Deletion Request"
• Your registered email address
• Organization name (if applicable)
• Specify what data you want deleted (all data or specific categories)

4. Deletion Process Timeline

GDPR Compliance: We complete all deletion requests within 30 days as required by GDPR Article 12(3).

5. What Gets Deleted

5.1 Account Deletion Includes:

• Account credentials and profile information
• All API keys and access tokens
• Verification history and audit logs
• Configuration settings and preferences
• Webhook endpoints and delivery history
• Support ticket content and communications
• Usage analytics and statistics

5.2 Data Retained for Legal Reasons:

Certain data must be retained due to legal obligations:

• Billing records - Retained for 7 years (tax law requirements)
• Legal dispute records - Retained until resolution
• Fraud prevention data - Retained as required by law

6. Data Export Before Deletion

Before deleting your account, you can export your data:

7. End-User Deletion Requests

If you are an end-user whose identity was verified through a business using eIDAS Pro:

• Contact the business first - They are the data controller
• eIDAS Pro data - We only store minimal session data for 24 hours
• No biometrics stored - We never receive or store identity documents

If the business is unresponsive, contact us at support [at] eidas-pro.com and we will assist.

8. Exceptions to Deletion

Under GDPR Article 17(3), we may refuse or delay deletion when:

• Required for compliance with legal obligations
• Necessary for public interest in public health
• Necessary for archiving in public interest or scientific/historical research
• Necessary for establishment, exercise, or defense of legal claims

If we cannot fulfill your deletion request, we will explain the reasons in writing.

9. Verification Requirements

To protect against unauthorized deletion requests, we verify your identity by:

• Email verification - Request from registered account email
• Account access - Confirmation via logged-in dashboard
• Additional verification - May be required for sensitive accounts

10. Related Resources

• Privacy Policy - How we collect and use your data
• Data Retention Policy - How long we keep your data
• Terms of Service - Our service agreement

11. Contact Us

For deletion requests or questions:

Privacy Team: support [at] eidas-pro.com
General Support: eidaspro.com/support