Documentation

Archiving and GDPR

AnnexGroup provides the technical functions for GDPR-compliant data processing. Archiving Automatic archiving once retention periods elapse Movement into the se…

AnnexGroup provides the technical functions for GDPR-compliant data processing.

Archiving

• Automatic archiving once retention periods elapse
• Movement into the separate archive storage
• Restoration of individual messages by authorised administrators
• Deletion once the statutory periods have passed

GDPR export

Every user can export their personal data as a machine-readable archive under Privacy / GDPR.

Anonymisation

Archived messages can be anonymised individually. Personal data such as sender, recipient and subject are masked. The original blob is retained for evidentiary reasons, but the archive entry is marked as anonymised.

Right to erasure

Users can delete their own account completely:

• Archived messages and attachments are removed
• Active messages, contacts, calendars and tasks are deleted
• Audit logs remain, for compliance reasons

Every deletion and anonymisation is written to the audit log.

Retention periods

Set the policies under Administration → Archiving:

• Days in the mailbox
• Days in the archive
• Automatic deletion after archiving

Your data protection officer can advise you further.