How long is all data stored (for privacy, etc.)?

According to the GDPR legislation, data may be stored if it is kept for legitimate purposes. The company (facility management) decides how long they store the data in the portal.