Privacy policy

Last updated: [Date]

Draft structure — the legal text is still to be provided. Everything in [brackets] is a placeholder.

Controller

[Name and address of the controller, contact]

Hosting

[Provider, location (EU?), purpose, legal basis, data processing agreement]

Server logs

[Data processed when the site is accessed, retention, legal basis]

Cookies and consent

[Necessary cookies and the consent-based categories statistics and marketing]

Change or withdraw your consent at any time in the cookie settings.

Teardown requests

[Data processed: name, email, website address, message; purpose, legal basis, retention]

Orders and payment via Stripe

[Recipient, data transferred, third-country transfer, legal basis]

Customer area and sign-in links

[Processing of email address, subscription status, change requests and attachments; retention]

Sending emails

[Email service provider, purpose, legal basis]

Statistics

[First-party visit measurement without IP address; Google Analytics if used – only after consent]

Marketing

[Google Ads, Meta Pixel – only after consent and only if used]

Retention

[General deletion rules]

Your rights

[Access, rectification, erasure, restriction, portability, objection, withdrawal of consent]

Right to lodge a complaint

[Competent supervisory authority]