Comment by MVorlm

GDPR does not fix this situation. There are cut-outs in GDPR that allows companies to store data for longer. Financial/billing/taxes fall under that category.