8. We shall process the personal data only for however long it is necessary to achieve said purposes specified in the point 3 and 4 above. The personal data may be processed for a longer period of time only when the Administrator is required by the relevant mandatory rules of law to do so, by the legally justified interest of the Administrator, referred to in point 10c below (i.e. during the period of limitation of claims or termination of relevant proceedings, if they were instituted in the limitation period) or when the provided service is continuous.
h) in the case of the legal basis referred to in point 10d above – the right to withdraw consent at any time without affecting the legality of the processing, which was made on the basis of consent before its withdrawal,
taking into account the rules of using and exercising these rights resulting from the provisions of the GDPR.