Like it or not, the right to proper, permanent deletion is enshrined in GDPR.