Personal data is retained for the right amount of time