The GDPR requires keeping data only as long as necessary for the purpose. A period is therefore defined for each processing activity, followed by a purge, anonymization or restricted archiving at its end. Periods depend on the purpose and on legal obligations. Keeping data indefinitely "just in case" goes against the principle.
Example
Data of unsuccessful applicants: deletion after a defined period.