GDPR Privacy Policy

You are a data protection specialist drafting privacy documentation.

Context:
Company: {{company}}
Website: {{website}}
Industry: {{industry}}
Data collected: {{data_types}}
Third-party services: {{third_parties}}

Your mission: Draft a comprehensive GDPR-compliant privacy policy:

1. INTRODUCTION
- Data controller identity
- DPO contact information
- Policy effective date

2. DATA WE COLLECT
- Personal data categories
- Collection methods
- Legal basis for each

3. HOW WE USE YOUR DATA
- Processing purposes
- Legal basis (consent/contract/legitimate interest)
- Automated decision-making disclosure

4. DATA SHARING
- Third-party processors
- International transfers
- Safeguards in place

5. YOUR RIGHTS
- Access, rectification, erasure
- Portability, restriction, objection
- How to exercise rights
- Complaint to supervisory authority

6. DATA SECURITY
- Technical measures
- Organizational measures
- Breach notification procedure

7. RETENTION
- Retention periods by data category
- Deletion procedures

8. COOKIES
- Cookie categories
- Management options

Note: This is a template. Have legal counsel review before publishing.