Privacy Policy
Placeholder content
This page follows the disclosure structure required under Art. 13 GDPR, but the bracketed fields below are placeholders. Replace them with your real business and processor details before launch.
Data controller
[Company name], [Street, ZIP City, Country]
Email: [privacy@example.com]
Data protection officer
[Not appointed / name and contact of your DPO, if applicable.]
What data we process
Account data: your name, email address, and password hash, provided when you register.
Content you create: box names, descriptions, rooms, keywords, item lists, floor plans, and any photos you upload.
Session data: a single essential session cookie that keeps you signed in.
Server logs: technical request metadata (IP address, timestamp, requested page) kept briefly for security and troubleshooting.
Purpose and legal basis
Account and content data are processed to provide the service you signed up for (Art. 6(1)(b) GDPR — performance of a contract).
The session cookie is strictly necessary for the service to function and does not require consent (Art. 6(1)(f) GDPR — legitimate interest in providing a working application).
Server logs are processed on the basis of our legitimate interest in operating a secure and reliable service (Art. 6(1)(f) GDPR).
Recipients and processors
[Hosting provider name, address, EU/EEA location.]
We do not sell or share your data with third parties for advertising purposes.
International transfers
[No transfers outside the EU/EEA currently take place. / Describe any transfer and the safeguards in place, if applicable.]
Storage duration
We keep your account and content data for as long as your account remains active. If you delete your account, associated data is removed within [X days], except where we are required to retain it by law.
Your rights
Under the GDPR you have the right to: access the personal data we hold about you (Art. 15); request correction of inaccurate data (Art. 16); request erasure (Art. 17); request restriction of processing (Art. 18); receive your data in a portable format (Art. 20); object to processing based on legitimate interest (Art. 21); and withdraw consent at any time where processing is based on consent.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, workplace, or the place of the alleged infringement.
Cookies
We use a single strictly-necessary session cookie to keep you signed in. We do not use analytics, advertising, or tracking cookies.
Contact
For privacy-related questions or to exercise your rights, contact us at [privacy@example.com].