Privacy Policy placeholder (GDPR): controller, purposes, legal bases, retention, data subject rights, contact details. Final text will be drafted before production.