What measures are present in hansa for the requirements of GDPR?

I understood from the Feb London meeting that the database is held in Norway, so presumably that is OK although they aren't ion the EU just a specil partner. Could this be clarified please

HMRC only requires us to keep records for 6 years as a general rule, if there a way of deleting prior records or if leaving them all is there a way of deleting a single client who asks - perhaps overwriting with zeros etc their record - but does this also overwrite filed transactions with their data embedded.

A tag on the contact card to indicate the card is excluded from mailings would be helpful, or do we simply deletev all the objects and classifications, or add a classification for 'excluded'


Some guidance would be helpful