[TO BE COMPLETED BY A LAWYER BEFORE GOING LIVE — GDPR]

Data controller identity. Data Protection Officer (DPO).

Data collected: categories, purposes, legal basis, retention. Recipients (Booking.com, HubSpot, hosting, etc.).

User rights: access, rectification, erasure, restriction, objection, portability. Complaint to the data protection authority.

Security, non-EU transfers, technical and organisational measures.