[kvdveer]

A 30-day lag in deletion is compliant IF you communicate that that's what you do (i.e. write that down in your privacy policy).

[notimetorelax]

Yes, but after that there should be a wipeout.