Controller
The data controller is [[company name]]. Contact: [[controller / DPO email address]].
Data collected
Account: name, email address, language, role, login dates and login IP address. Business listings: the details supplied by the business. Security: login and security event logs. Audience: aggregated view counters tied to a hashed visit identifier, with no IP address stored in clear.
Purposes and legal bases
Providing the service (contract), securing it and preventing abuse (legitimate interest), audience measurement and third-party players (consent), and statutory retention obligations.
Retention
Security logs: 180 days. Viewing history: 90 days. Consent and acceptance evidence: [[period to be validated]]. Accounts: until deleted by the user.
Your rights
Access, rectification, erasure, restriction, objection and portability. Account deletion and data export are available from the user area or on request at the address above. You may lodge a complaint with the competent supervisory authority.