About GDPR and deleting a user

You can't delete a user that has been active FlightLogger but you can at any time anonymize a given user by removing the personal details.

Important thing is that anonymizing a user will still keep the training related data (gradings, attendance, etc.)

Most CAA's require data to be stored for at least 5 years which normally overrides the European GDPR which can be more restrictive. Hence, to avoid doing "harm" to our customer's student database we currently do not plan to implement any "automatic deletion/anonymization" - but you can at any time anonymize a given user manually as shown.

To our knowledge, all of the above comes down to what you have stated in the "data processor agreement" towards your users.

Note that you can also have the DPO perform a GDPR neutralization of a user.