Controller takes into account

 When performing the latter obligation the data the available technology and the cost of implementation and his obligations should be considered reasonable. In the described situation the rights and interests of a natural person the application user coincide with the interests of the application owner the data administrator who is obliged to ensure the availability of data and the resilience of systems and services involving data processing the ability to quickly restore and access to data in the event of an incident integrity of the backup copy including the obligation to ensure technological standards by limiting access to data by unauthorized persons.

Moreover there may be a situation where technically the owner of the application the data administrator will not be able to selectively Phone Number List delete personal data from the backup copy as requested and the costs incurred will be too high. The owner of the application the data controller faces a challenge which may include the payment of an administrative fine of up to % of the total annual global turnover from the previous financial year or the payment of compensation to the application user for violating his rights.



 In such a situation in accordance with the opinion of the Ministry of Digitization expressed in the GDPR Guide for the fintech sector upon the termination of the legal basis for the processing of personal data recorded in a backup copy the administrator is obliged to delete or anonymize them whenever possible taking into account the limitations resulting from the technological conditions of the backup copy. backup copies and the risk of violating the rights and freedoms of all persons whose personal data are stored in the backup copy.