The ITM is authorised to keep your personal data for no longer than is necessary for the purposes for which the personal data are processed. Your personal data may be stored for longer periods insofar as your personal data are processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard your rights and freedoms.
Such retention periods may be imposed by the laws in force in the Grand Duchy of Luxembourg (i.e. Law of 23 July 2016 amending (1) the Law of 29 March 2013 on the Organisation of Criminal Records, (2) the Code of Criminal Investigation, (3) the Criminal Code, Covid law (data are stored for a period corresponding to the period of validity of the Covid law).
The retention periods may depend on the circumstances.