Purpose

• The purpose of this policy is to outline QuantumEternal's approach to managing and retaining personal data in compliance with the General Data Protection Regulation (GDPR) regarding data retention practices.

Scope

• This policy applies to all departments and individuals responsible for data retention at QuantumEternal and covers all types of data. It also applies to all geographic areas where QuantumEternal operates.

Data Retention Principles

• 1. Lawful Basis for Retention: QuantumEternal will only retain personal data if there is a lawful basis for doing so.

• 2. Data Minimization: QuantumEternal will only retain the minimum amount of personal data necessary to achieve the purpose for which it was collected.

• 3. Data Accuracy: QuantumEternal will take reasonable steps to ensure that personal data is accurate and up-to-date.

Retention Periods

• 1. QuantumEternal will retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal requirements and business needs.

• 2. QuantumEternal will review and update its retention periods on a regular basis to ensure compliance with applicable laws and regulations.

Data Disposal

• 1. QuantumEternal will securely dispose of personal data once the retention period expires, through data deletion, anonymization, or archival processes.

• 2. QuantumEternal will ensure that all personal data is disposed of in a manner that is compliant with applicable laws and regulations.

Data Subject Rights

• 1QuantumEternal recognizes the rights of data subjects under GDPR, including the right to access, rectify, and erase their personal data.

• 2. QuantumEternal will respond to data subject requests in a timely and mannerly fashion within the context of data retention.

Data Security Measures

• 1. QuantumEternal will implement appropriate technical and organizational security measures to protect retained data from unauthorized access, loss, or misuse.

• 2. QuantumEternal will monitor and review its data security measures regularly and update them as necessary to ensure ongoing compliance and effectiveness.

Compliance and Governance

• 1. QuantumEternal will establish mechanisms for monitoring and ensuring compliance with this policy.

• 2. QuantumEternal will assign responsibilities for data retention and disposal, including the appointment of a Data Protection Officer (DPO) where required.

• 3. QuantumEternal will conduct regular audits or reviews of its data retention practices to ensure compliance with applicable laws and regulations.

• This GDPR and Data Retention Policy serves as a guiding document for QuantumEternal to establish consistent and compliant data retention practices while safeguarding the privacy rights of individuals.