Data Protection

This page is a practical GDPR starter structure. Replace placeholders and remove sections that do not apply to your website.

Controller: Responsible for processing personal data on this website is [legal business name], [address], [email address].

What data we process: Depending on the website setup, personal data may include contact form entries, e-mail enquiries, technical server logs, cookie consent choices, analytics data, and booking or newsletter data.

Hosting and server logs: Our hosting provider may process IP address, date and time, requested URL, referrer, browser, operating system, and access status to deliver and secure this website. Add the exact hosting provider and data processing agreement information here.

Cookies, analytics, and third-party tools: List every cookie, analytics, embedded media, map, scheduling, newsletter, payment, or tracking service used on the site. For non-essential services, obtain consent before activation.

Your rights: Data subjects may have rights to access, rectification, deletion, restriction, portability, objection, and withdrawal of consent. They may also lodge a complaint with the competent supervisory authority.

Retention and security: Personal data is stored only as long as necessary for the stated purposes or legal retention duties. Add your concrete deletion routines and security measures here.