(No) surprise!
I think we all saw this coming... #Odido didn't remove data when they said they would, which we now know because it leaked out. Some leaked data was from customers who left 10 years ago, while they state they remove it after 2. Only 8 years late. Even the tax office doesn't need it that long...
https://nos.nl/artikel/2602804-odido-overschrijdt-eigen-termijn-bewaren-gegevens