Data Deletion Procedures

1. Your Right to Erasure

Under GDPR Article 17, you have the right to request erasure of your personal data ("right to be forgotten"). eIDAS Pro is committed to honoring this right and making the deletion process straightforward.

This page explains how to request deletion of your data and what to expect during the process.

2. Types of Deletion Requests

3. How to Request Deletion

Your dashboard does not yet offer self-service account deletion, so all deletion requests are handled by email.

Send a deletion request to support [at] eidas-pro.com with:

• Subject line: "Data Deletion Request"
• Your registered email address
• Organization name (if applicable)
• Specify what data you want deleted (all data or specific categories)

4. Deletion Process Timeline

GDPR Compliance: We complete all deletion requests within 30 days as required by GDPR Article 12(3).

5. What Gets Deleted

5.1 Account Deletion Includes:

• Account credentials and profile information
• All API keys and access tokens
• Configuration settings and preferences
• Webhook endpoints and delivery history
• Support ticket content and communications
• Usage analytics and statistics

Verification audit records are not deleted with the account. They are your proof that you verified, and they contain no identifier of the person verifying, so we keep them until their normal 365-day expiry and then delete them. You may ask us for an export of them or for their earlier deletion. See section 7 of our Data Retention Policy.

5.2 Data Retained for Legal Reasons:

Certain data must be retained due to legal obligations:

• Accounting records (invoices, payment, commission and payout records) - Retained for 10 years from the end of the financial year they relate to (Article 16 of the Luxembourg Commercial Code)
• Legal dispute records - Retained until resolution
• Fraud prevention data - Retained as required by law

6. Data Export Before Deletion

Before deleting your account, you can ask us for a copy of your data:

7. End-User Deletion Requests

If you are an end-user whose identity was verified through a business using eIDAS Pro:

• Contact the business first - They are the data controller
• eIDAS Pro data - A verification session is deleted 15 minutes after it starts; the audit record we keep contains no identifier of you and no date of birth
• No biometrics stored - We never receive or store identity documents

If the business is unresponsive, contact us at support [at] eidas-pro.com and we will assist.

8. Exceptions to Deletion

Under GDPR Article 17(3), we may refuse or delay deletion when:

• Required for compliance with legal obligations
• Necessary for public interest in public health
• Necessary for archiving in public interest or scientific/historical research
• Necessary for establishment, exercise, or defense of legal claims

If we cannot fulfill your deletion request, we will explain the reasons in writing.

9. Verification Requirements

To protect against unauthorized deletion requests, we verify your identity by:

• Email verification - Request from registered account email
• Confirmation - We may ask you to confirm the request from your registered email address
• Additional verification - May be required for sensitive accounts

10. Related Resources

• Privacy Policy - How we collect and use your data
• Data Retention Policy - How long we keep your data
• Terms of Service - Our service agreement

11. Contact Us

For deletion requests or questions:

Privacy Team: support [at] eidas-pro.com General Support: eidas-pro.com/support