Data Retention Policy

This policy implements the GDPR storage-limitation principle (Article 5(1)(e)): personal data is kept only as long as necessary for the purpose it was collected for. Where data still has operational value after that point, it is anonymised rather than kept in identifiable form.

A scheduled database routine runs every night at 03:15 Europe/Helsinki. It deletes expired security, verification, logging and enquiry records, and anonymises bookings older than 24 months by clearing the guest name, email, phone number and notes while keeping the row for capacity statistics. The job reports the number of records affected per table.

Erasure requests are handled through the administrator console, which can export all data held about a person and permanently delete their account while anonymising their booking history. Both actions require a stated reason and are written to the append-only audit log. Requests are actioned within one month.

Retention may be extended where required by accounting or tax law, or where the data is needed to establish, exercise or defend a legal claim. Any such hold is recorded with its reason and lifted as soon as it no longer applies.

Deleted data may persist in encrypted hosting backups for a short period until those backups roll over. Backups are not used for operational access and are subject to the provider's own rotation schedule.

Contact dynerestaurants@gmail.com.