Data controller
The verified operator identity, contact details and regulatory status will be inserted from the same approved source used across the site.
Privacy
The notice must describe what actually happens.
The lead-intake and CRM connection is intentionally not enabled yet. The final notice will be completed against the real processing flow before personal data is accepted through the website.
Processing and retention
The notice will list the actual fields, purposes, legal basis, recipients, storage location and retention periods once the intake architecture is final.
Your rights
The final page will explain how to exercise applicable data-protection rights and how to contact the relevant supervisory authority.