The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:</p> <p>(a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;</p> <p>