Article 10
1. Personal data shall not be kept in a form that enables identification of the person concerned for any longer than is necessary for the realisation of the purposes for which they were gathered or were then processed.
2. Personal data may be kept for longer than is provided for in the first paragraph, to the extent that they are kept for historical, statistical or scientific purposes and the responsible party has made the necessary provisions to ensure that the relevant data are used solely for those specific purposes.