---
title: "Customer anonymization"
url: "https://help.simasuite.com/en/article/customers-providers-customer-anonymization-cp-azn-en"
language: "en"
last_updated: "2026-06-12T07:12:42.333Z"
---

# Customer anonymization

## Customer anonymization

This document describes the actions taken in relation to the customer anonymization process. It takes into account the expiration of a customer's data retention period based on the type of interaction they have with the company.

## Introduction

This document describes the actions taken in relation to the customer anonymization process. It takes into account the expiration of a customer's data retention period based on the type of interaction they have with the company.

## GDPR - Retention periods - Context

The GDPR establishes two data retention periods for customer data based on the type of interaction they have with the company. These retention periods appear in the company's privacy policies in relation to printed documents that define the different types of interactions, such as offers, proposals, contracts, invoices, etc.

Currently, with the established stipulations, the retention periods are as follows:

-   Offers and proposals: 12 months from data collection.
-   Contracts and invoices: 5 years from data collection.
-   Special case for contracts and invoices issued before October 7, 2015, where the retention period is extended to 15 years.

## Anonymization and deletion process. How does it work?

By interaction we mean any offer, proposal, contract, invoice, etc., from the customer with the company. Once the interaction is created, the customer data retention period for that interaction begins. For example:

-   A new customer visits the dealership and requests a New Vehicle offer on April 15, 2022. If the customer does not purchase the vehicle (or has no other interaction), on April 15, 2023 (12 months later) their data will be deleted from the system.

### What data will be deleted

For the example above, the customer's personal data will be unlinked from the offer, so they can no longer be identified in that offer. We will call this process anonymization and, since the customer has no further interactions, the customer will be completely removed from the customer database.

Consider another example:

-   A customer who purchased vehicle spare parts on April 10, 2021 visits the dealership and requests a New Vehicle offer on April 15, 2022. If after 1 year the customer does not purchase the vehicle, the customer will appear as anonymous in the offer, but will not be deleted since the data retention period for the parts invoice expires on April 10, 2026.

### External systems

All external systems that interact with SIMA Suite customer data must be informed of the customer deletion and interaction anonymization processes that occur, in order to maintain consistency between them. External systems include SalesForce, DataWareHouse, and any others that store customer data or customer interactions.

### Deletion of historical customers and next steps

For old data stored in SIMA Suite, a historical sweep will be applied to evaluate which interactions have expired their retention period in order to anonymize them and, where applicable, delete customers whose interactions are detected as expired.

For this deletion, execution will be carried out based on the volume to be deleted and establishing an order of action for those presenting the highest risk of non-compliance with the retention period. The foreseeable priority will be as follows:

-   Lead Customers with a 1-year retention period:
-   Lead Customers of NV/UV Offers without interactions in other business areas
-   Lead Customers of NV/UV Offers with possible interactions in other business areas
-   Lead Customers of Parts Estimates
-   Main Customers of workshop estimates
-   Formal Customers with a 5-year retention period (or 15 years, as applicable):
-   NV/UV Contracts
-   Workshop orders
-   Invoices in general (Vehicles, Accessories, Spare Parts, Workshop, etc.)