Data minimization on payments and event registrations after 7 years.
One-sentence description
Data minimization on payments and event registrations after 7 years.
Motivation
The privacy office of the RU has indicated that there are no grounds for Thalia to keep data of payments or event participation after 7 years (the legal obligatory time to keep this information). So in order to be fully compliant to the AVG/GDPR we should maybe delete this information after 7 years.
Desired functionality
7 years after an event, information of who attended what activity should be removed and whether they paid, and how. It would be nice if we can keep track of the amount of participants at that activity.
Suggested implementation
Apart from that I can imagine this is not quite easy, I have no idea.
Note that this request is only based on information provided by the Radboud University privacy office. But the Technicie I'm sure also have an grounded opinion about this. So if you guys think it is unnecessary to remove this data because of reasons, and you think it is compliant to the AVG/GDPR that is fine as well! This is just passing on information actually.