Privacy statement

[To be written by Heinz before go-live. Cover at least: controller details, which data is processed (email correspondence, calendar bookings), purposes and legal basis, retention periods, processors (email provider, calendar tool, Cloudflare as host), data subject rights and how to exercise them, and the right to complain to a supervisory authority.]