Privacy policyPublish the approved personal-data processing and protection policy, including purposes, retention periods, rights and contact details.