A statutory retention period comprises the legal requirements for the minimum duration of data storage and processing. These are often derived from individual laws such as the German Commercial Code (HGB), the German Civil Code (BGB) or the German Fiscal Code (AO). The duration of the statutory retention periods often exceeds the duration of the purpose limitation within the meaning of the GDPR - in these cases, this is referred to as a ‘deletion conflict’.