(1) The registration authority is to delete data if they are no longer needed to carry out its tasks. The same applies if the data were already stored unlawfully.
(2) Data referred to in section 3 (1) no. 11 and subsection (2) no. 2 are to be deleted at the end of the calendar year following the year in which the resident moved away or died. The data referred to in section 3 (1) no. 17 are to be deleted five years after the end of the expiry of the identity document to which they refer. Other data of residents who have moved away or died which are not retained in accordance with section 13 (1) are to be deleted 30 days after the resident has moved away and the acknowledgement has been assessed, or after the resident’s death.
(3) If deletion in the case of non-automated data processing is not possible on account of the specific nature of the data storage, or only with a disproportionately high amount of effort, and the data subject’s interest in the deletion is to be regarded as negligible, then, in addition to the exceptions under Article 17 (3) of Regulation (EU) 2016/679, the data subject has no right to deletion of personal data and the registration authority is not obligated to delete personal data in accordance with Article 17 (1) of Regulation (EU) 2016/679. In such cases, the restriction of processing under Article 18 of Regulation (EU) 2016/679 takes the place of deletion.