1. Data Collection and Usage
Personal Data Collected: Clearly specify the types of personal data collected through the contact form, such as names, email addresses, phone numbers, or any other information users provide.
Purpose of Collection: Explain why this data is being collected. For instance, to respond to inquiries, provide services, or manage bookings.
Legal Basis: State the legal grounds for processing the data. Common bases include the user's consent (obtained when they fill out the form) or the necessity to fulfill a contract.
2. Data Storage and Security
Storage Methods: Describe how and where the data is stored, ensuring that security measures are in place to protect against unauthorized access.
Retention Period: Indicate how long the personal data will be retained and the criteria used to determine this period.
3. Data Sharing and Transfers
Third-Party Sharing: Disclose if any personal data is shared with third parties, such as email service providers or hosting platforms, and the purposes of such sharing.
International Transfers: If data is transferred outside the European Economic Area (EEA), explain the safeguards in place to protect the data during these transfers.
4. User Rights
Access and Correction: Inform users of their right to access and correct their personal data.
Deletion and Restriction: Notify users of their right to request deletion or restriction of their data under certain circumstances.
Data Portability: Mention the user's right to receive their data in a commonly used format and transfer it to another controller.
Withdrawal of Consent: Explain how users can withdraw their consent at any time, if consent is the legal basis for processing.
5. Contact Information
Data Controller Details: Provide the name and contact details of the individual or entity responsible for data processing.
Data Protection Officer: If applicable, include contact information for the Data Protection Officer.
6. Updates to the Privacy Policy