Droit à la suppresion de données personnelles

Bonjour,
Je ne suis pas certain d'être dans la bonne section, si je me suis trompé, je m'en excuse par avance.
J'aimerai avoir votre avis sur une question concernant le droit de suppression des données personnelles. J'ai demandé l'entreprise Couchsurfing (entreprise américaine je pense, offrant des services sur internet type réseau sociaux) d'effacer toutes les données personnelles me concernant.

Voici leur réponse:
" Unfortunately, we are unable to delete your account at this time. While we believe in everyone's right to control their data, and fully comply with the Global Data Protection Regulation, there are certain exceptions. Based on the history of your account, we've made the decision to retain your data.

When your account is deactivated, your data is removed from public access. Couchsurfing retains a copy of all data submitted to us on secure servers in accordance with our Privacy Policy (http://about.couchsurfing.com/privacy-policy/) for member safety purposes, to ensure compliance with our policies, and to respond to potential requests from law enforcement.

Your information will not be used by Couchsurfing for any other reason once your account has been deactivated. While we are unable to permanently delete your data from our servers, please be aware that it is only retained for the reasons outlined above and is only accessible by designated staff members.


Kind Regards,

Amelia
Trust & Safety
Couchsurfing Staff
www.couchsurfing.com"

Le fait de conserver des données personnelles me concernant malgré ma demande de suppression est-ce légal ou non ?

Merci,
Maxime