the transfer takes place under the standard contractual clauses as defined by the EU Commission to regulate such transfers under the GDPR and necessary supplementary safeguards have been implemented.</li> </ul> Data Retention <p>Schibsted operates with the general rule that we only keep user personal data for as long as we have to in order to fully execute the purpose for which it was collected.