[Kbelicius]

I think that they have to delete the data per your request to be GDPR compliant since no law requires keeping such date.