Professional Documents
Culture Documents
GXO EU Data Retention Policy 8.2.21
GXO EU Data Retention Policy 8.2.21
Data Retention
Guidelines
VERSION CONTROL
Ver.
Release Approved By Reason for New
No.
Date Release
1 Chief
08.02/2021 Compliance Documentation of existing policy
Officer
1
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
2
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
Disclaimer:
This document is a guideline about data retention and therefore proposes data retention periods according to the
laws, but also according to the recommendations of the data protection supervisory authorities. The elements
displayed in this document are only accurate at the current date of production of the document: 29th May 2019. The
key statutes described in the first section are in no way exhaustive.
Concerned countries
Belgium BE
Switzerland CH
Germany DE
Spain ES
France FR
Ireland IE
Italy IT
Netherlands NL
Poland PL
Portugal PT
Romania RO
United Kingdom UK
Russia RU
Summary table:
Disclaimer.......................................................................................................................................................................... 2
Concerned countries ......................................................................................................................................................... 2
Summary table: ................................................................................................................................................................. 2
Key Data Retention statutes: ............................................................................................................................................ 4
Belgium ......................................................................................................................................................................... 4
Switzerland.................................................................................................................................................................... 4
Germany........................................................................................................................................................................ 4
Spain .............................................................................................................................................................................. 4
France............................................................................................................................................................................ 5
Ireland ........................................................................................................................................................................... 5
Italy................................................................................................................................................................................ 5
The Netherlands ............................................................................................................................................................ 5
Poland ........................................................................................................................................................................... 6
Portugal ......................................................................................................................................................................... 6
Romania ........................................................................................................................................................................ 7
The United Kingdom ..................................................................................................................................................... 7
Russia ............................................................................................................................................................................ 7
Key Retention Times ......................................................................................................................................................... 9
3
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
European General Company Records Data Retention Guidelines .................................................... 9
European Payroll and Salary Records Data Retention Guidelines .................................................. 10
European Human Resources Data Retention Guidelines............................................................................................ 11
European Medical and Safety Data Retention Guidelines .......................................................................................... 12
European Marketing Records Data Retention Guidelines .......................................................................................... 12
European Purchasing Records Data Retention Guidelines ......................................................................................... 13
European Legal, Contracts and Agreements Data Retention Guidelines ................................................................... 13
European Environmental Records Data Retention Guidelines ................................................................................... 14
4
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
Key Data Retention statutes:
DISCLAIMER: The content of this section is not exhaustive and may change from time to time as a result of changes
in legislation.
Belgium
General statutes for data retention in the Belgian legislature:
- Belgian Companies Code (Article 195)
- Act of 17 July 1975 regarding companies’ accountancy (Articles 6 and 8)
- Law of 8 December 1992 (Article 4)
Switzerland
General statutes for data retention in the Swiss legislature:
- Swiss Code of Obligations (SR 220, CO) Articles 957 et seq
- Ordinance on the Management and Record of Accounting Books (SR 221.431).
Germany
General statues for data retention in the German legislature:
- Sec. 147 of the Fiscal Code
- Sec. 257 of the Commercial Code
- Sec. 35 of the Federal Data Protection Act
- Sec. 195 German Civil Code
Spain
General statutes for data retention in the Spanish legislature:
- Commercial Law
- Personal Data Protection Draft Act 2017
- Royal Decree 1784/19 July 1996, which concerns Commercial Registry Regulation (RRM), especially Article
377
5
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
- Article 66 Spanish Law 58/17 December 2003, regarding General Tax Law (LGT);
- Article 21 Royal Decree 5/4 August 2000, regarding Infringement and Sanctions Social Law (LISOS);
- Article 25 of Law 10/28 April 2010, regarding the Prevention of Money Laundering and Financing of
Terrorism (LPBCFT); and
- Article 5 Law 25/2007, regarding Data Protection in Electronic Communications.
France
General statutes for data retention in the French legislature:
- The French Code of Commerce
- The French Civil Code
- French Post and electronic communications Code,
- French Consumer Code,
- French Tax Procedure Handbook,
- French Social Security Code,
- French Criminal Code.
-
Ireland
General statutes for data retention in the Irish legislature:
- Statute of Limitations Act, 1957 – 2010
- Irish Data Protection Acts 1988 and 2003
Italy
General statutes for data retention in the Italian legislature:
- Articles 2214 to 2220 of the Italian Civil Code
- Article 39 of Presidential Decree, 26 October 1972, n. 633
- Article 22 of Presidential Decree 29 September 1973, n. 600
The Netherlands
General statutes for data retention in the Dutch legislature:
- General Tax Act (Algemene Wet inzake rijksbelastingen)
- Dutch Civil Code (Burgerlijk Wetboek)
- Gegevensbescherming
6
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
Poland
General statutes for data retention in the Polish legislature:
- Bookkeeping Act of 29 September 1994
- Personal Data Protection Act of 29 August 1997
Portugal
General statutes for data retention in the Portuguese legislature:
- Portuguese Labor Code, approved by Law 7/2009, of 12 February 2009, and as amended from time to time,
including by Law 105/2009, of 14 September 2009
- Law 102/2009, of 10 September 2009 on health and safety rules at workplace
- Decree-Law 28/2019, of 15 February 2019 on processing of invoices and retention deadlines of books,
records and financial accounting documents
- Law 83/2017, of 18 August 2017, which establishes measures to combat money laundering and terrorist
financing
- Decree-Law 24/2014, of 14 February 2014 on distance and off-premises contracts
- Electronic Communications Law approved by Law 5/2004, of 10 February 2004
- Portuguese Data Protection Authority’s Guidelines dated 27 July 2017 on retention deadlines in electronic
communications
- Regulation (EC) No 1907/2006 of the European Parliament and of the Council of 18 December 2006
concerning the Registration, Evaluation, Authorization and Restriction of Chemicals (REACH)
- Decree-Law 178/2006, of 5 September 2006 on waste management rules
- Decree-Law 210/2009, of 3 September 2009 approving the legal framework for the constitution,
management and functioning of the “Waste Organized Market”
- Decree-Law 156/2013, of 5 November 2013 approving the framework for the responsible and safe
management of spent fuel and radioactive waste
- Decree-Law 150/2015, of 5 August 2015 approving the regime for the prevention of serious accidents
involving dangerous substances and the limitation of their consequences to individuals and the environment
- Ordinance 145/2017, of 26 April 2017 on waste management electronic documents
- Decree-Law 183/2009, of 10 August 2009 on the landfill of waste
- Decree-Law 12/2011, of 24 January 2011 establishing a framework for the setting of eco-design
requirements for energy-related products
- Decree-Law 118/2013, of 20 August 2013 on the energy performance of buildings, and the Ordinance 349-
A/2013, of 29 November 2013 on the powers of the operator authority of the energy performance of
buildings
7
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
- Decree-Law 12/2011, of 10 September 2011, implementing the obligations provided for in
the Regulation (EU) No 305/2011 of the European Parliament and of the Council of 9 March 2011 laying
down harmonizedconditions for the marketing of construction products
- Decree-Law 42 -A/2016, of 12 August 2016 on Environmental Fund
- Decree-Law 167/2008, of 26 August 2008 on legal framework for public subsidies
- Decree-Law 47/2017, of 10 May 2017 approving the regime for the assessment of ambient air quality
Romania
General statutes for data retention in the Romanian legislature:
- Accountancy Law no. 82/1991
- National Archives Law no. 16/1996
Russia
All the records of personal data must be archived as hard copies as per Russian regulation. Generally, electronic
retention of documents is not authorized except for specific accounting and tax calculation documents.
The records must be kept on Russian soil for the entire duration of the retention decided by either the entity or
forced by law. However, the entity can request an authorization to retain the data in a foreign count.
In some specific cases defined by Russian regulation, documents and therefore personal data should be retained
permanently
8
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
General statutes for data retention in the Russian legislature:
- Federal law On Archiving in the Russian Federation, № 125-ФЗ, 22 October 2004
9
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
Key Retention Times
European General Company Records Data Retention Guidelines
The following table summarises the main data retention recommendations for general company records in Europe:
• Financial statements, audit reports, etc. 7-10y 10y 10y 6y 10y - 10y 7y P 10-12y P 3-6y 5y
• Profit and loss accounts 7-10y 10y 10y 6y 10y - 10y 7y 5y 10-12y 10y 3-6y 5y
• Records and documents of the dissolved legal entity 5y 10y 10y P+6y 5y* 7y - P* 10y 7y 5y 10-12y 10y S 5y
6y
• Membership records in a cooperative association P+5y* - 3y
R
- - 10y 10y - - P S 5y
• Subsidy records and documents D* 10y - 6y 10y - 10y 7y 10y 10-12y 10y S 5y
10
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
European Payroll and Salary Records Data Retention Guidelines
The following table summarises the main data retention recommendations for Payroll and Salary Records in Europe:
11
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
European Human Resources Data Retention Guidelines
The following table summarises the main data retention recommendations for Human Resources Records in Europe:
Hr/employment/pension records BE CH DE ES FR IE IT NL PL PT RO UK RU
• Employment contract S 10y - D+4y 5y* D+7y* 10y* 7y 50y 5y* 10y D+6y 75y
12
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
European Medical and Safety Data Retention Guidelines
The following table summarises the main data retention recommendations for Medical and Safety Records in Europe:
Medical/safety records BE CH DE ES FR IE IT NL PL PT RO UK RU
• Medical (occupational health & safety company doctor) files; medical 15- D+7y 20- S
10y 10y P+5y R x P 15y 40y D TBC
documents in cases of a medical treatment contract 40y 40y* 50y R
• Floor plans and directions - 5y - R+5y R 5y 7y 10y* R 2y 40y 50y S TBC
• Work-related medical examinations related to hazardous substances 30-
10y 40y P+5y R x 40y-P D+10y 40y 50y 40y 40y 40y TBC
40y
• List of employees who have worked under dangerous conditions or D+10y
- - - P+5y R P* S 40y 40y 40y 40y 5-40y TBC
whose health has otherwise been under threat *
• Register of employees who work with 3rd and 4th category biological 10- 10- D+10y
10y D 10y 10-40y 10y 10y 10y 40y 40y 40y TBC
agents 30y 40y *
• Lists/register of employees who have been eGXOsed to asbestos dust 40y - 40y 40y P* 40y-P 40y 40y 40y 40y 40y 40y TBC
• Administration concerning measurements of radioactive substances 5y 2y 30y 20y P* S
D+10y
- 3-5y 40y 10y S TBC
*
• Records of radiation 30y 2y
30y
30y P* 5y-P 10y* 5y
30y
40y 10y S TBC
100y S
• Medical records of employees who have possibly been eGXOsed 30y 30y
- 10y 30y P* S 30y 30y 40y 40y 5-40y TBC
toionizing radiation 100y S
• Registration of work and rest periods (in appropriate format) R 2-3y 2y D+4y R 3y
3-7y*
R
1y 3y
5y R
2-3y
TBC
R 2y D R
• Necessary data for emergency medical care, individual reintegration D+7y-
3y 20-
plans, individual treatment agreements, degree of incapacity for work, - R R D+4y R P P R 40y R D+6y TBC
D* 50y
required workplace adaptations R
Marketing records BE CH DE ES FR IE IT NL PL PT RO UK RU
• The use of automatic call systems without operator intervention and
electronic messages for the sending of unrequested communications
3y 3y 24m*
for commercial, non-commercial or charitable purposes is allowed, R R - R - - - R - 5y
R 3y-D 30m*
provided the sender can demonstrate that prior consent was given by
the subscriber
13
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
European Purchasing Records Data Retention Guidelines
The following table summarises the main data retention recommendations for Purchasing Records in Europe :
Purchasing records BE CH DE ES FR IE IT NL PL PT RO UK RU
• An organisation is obliged to record all delivery of goods or services, all
intra-European Community acquisitions, all import and eGXOrt, and all 7y 10y 6-10y 15y 10y 6y 10y 7y 5y 10-12y 10y 3-6y 5y
other information relevant for VAT purposes
• General ledger, accounts receivable department, accounts payable
7-10y 10y 6-10y 6y 10y - 10y 7y 5y 10-12y 10y 5-6y 5y
department, (procurement and) sales administration, inventory records
• Procurement records 7-10y 10y 6-10y 6y 10y - 10y 7y 5y 10-12y 10y - 5y
• Debtors and creditors records R 10y
6-10y 6y
D R R 2y
5y
10-12y 5-10y R 5y
R R R
• Customers and suppliers records R R
6-10y
6y D+3y* R R 2y
5y
7y 5-10y R 5y
R R
14
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021
European Environmental Records Data Retention Guidelines
The following table summarises the main data retention recommendations for Environmental Records in Europe:
Environmental Records BE CH DE ES FR IE IT NL PL PT RO UK RU
• Data regarding chemicals or environmentally dangerous substances,
and preparations for these which a company has manufactured, 10y 10y 10y 10y 10y D 10y 10y 10y 10y 10y 10y TBC
imported or supplied
• The names and addresses of the clients/buyers of the above mentioned
10y - 10y 10y 10y D 10y 1y 10y 10y 10y 10y TBC
substances and preparations
• Documents related to an environmental permit D*-5y R S P - S - S D D+R - S TBC
• Registered data concerning the recycling or disposal of waste materials S -
3-5y 5y 3y 3y 3-5y 5y 5y 3y 3y S TBC
(waste bookkeeping)
• Registered data concerning the transfer of industrial or hazardous
waste to another party for collection or disposal 3-5y 5y 12m 3y 3-5y 3y 5y 5y 5y 5y 1y S TBC
• Documents containing audits on radioactivity and all results of 30y - 20y 10y S -
measurements taken 5y 5y - 3y R S TBC
15
©2021 GXO Logistics, Inc.- Version 1 Effective Aug 2, 2021