Data Retention Policy

Version 1 · 10 September 2026 · ISKRA ASSOCIATION, UIC 208183744

The periods below set when personal data held by Spark Network should be reviewed for deletion or anonymisation. Some older records may remain until reviewed. You can request a review or erasure at office@spark-network.eu.

Enquiries and partnerships

Contact enquiries and related correspondence: 12 months after resolution. Declined or withdrawn partnership applications: 12 months after the final decision or withdrawal. Active partnership records: for the relationship plus 12 months after it ends. Public listings should be removed when publication is withdrawn or the listing is no longer current. A record needed for a specific legal obligation or dispute is handled separately.

Accounts and learning records

Accounts and unfinished learning progress: review after 24 months without account or course activity, with 30 days’ notice before closure where we have a usable email address. Completed course results and certificate verification records: 5 years after course completion, limited to the information needed to verify the award. These are our operational periods, not a claim that all educational records have a statutory five-year minimum.

Donations and accounting

Accounting registers, financial statements and documents needed for tax control, audit or subsequent financial inspections: 10 years from 1 January of the reporting period following the one concerned. Other accounting information generally follows 3 years from that starting point. The applicable category and any longer tax, grant or dispute requirement must be determined for the particular record. These periods do not require keeping every browser signal, message or entire user account.

Separate donation correspondence: 12 months after resolution. Current monthly-donation records remain available while needed to administer the arrangement; cancellation does not remove the financial records that must be retained. Stripe’s own records and retention responsibilities are explained in its privacy notice.

Consent and technical records

Consent evidence: while the recorded choice is relied on and for 12 months after withdrawal or replacement, limited to what is needed to demonstrate that choice. Rights-request handling records: 12 months after closure, subject to a documented dispute or legal requirement. These server records are separate from browser storage.

Google Cloud operational logs use 30 days for default logs and 400 days for required audit logs. The Cookie Policy explains browser lifetimes, analytics and your choices. Browser storage and information already received by a provider have separate retention periods; contact us for information about records relating to you.

Deletion, exports and exceptions

This schedule covers records, related files and copies held under our control. Removing a record from the website does not necessarily remove related correspondence, financial records or separate copies at the same time. You can ask us to review these records as part of an erasure request.

Any exception must identify the record, specific legal duty or claim, access restrictions and a review date. A dispute does not justify retaining unrelated information indefinitely. We will explain applicable reasons when responding to an erasure request.

For the controller’s address, processing purposes, providers, transfers and your rights, see the Privacy Policy.