1. Controller
The personal data controller is [COMPANY NAME], [ADDRESS], e-mail [EMAIL], phone [PHONE]. Update these details before publication.
2. Data we process
We process data submitted through forms, enquiries, orders or communication, including name, e-mail, phone, address, message content, order data and technical website usage data.
3. Purposes and legal bases
We process data to answer enquiries, perform orders or contracts, send notifications, ensure security, comply with legal obligations and, where consent is given, for analytics or marketing communications. Legal bases include contract, law, legitimate interest and consent.
4. Cookies
The website uses necessary cookies for operation. Analytics, functional or marketing cookies are used only after consent in cookie settings.
5. Recipients and processors
Data may be processed by authorised persons and contracted processors, such as hosting, e-mail, accounting, analytics or technical support providers. We do not sell personal data.
6. Retention
Data is stored only as long as needed for the processing purpose or as required by law. Data processed on consent is kept until consent is withdrawn unless another legal basis applies.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Requests may be sent to the controller contact e-mail.
8. Supervisory authority
If you believe processing violates data protection rules, you may lodge a complaint with the competent supervisory authority.
Note: This is a general template and must be adapted to actual processing, tools, processors and retention periods.