Privacy policy

Add processing purposes, lawful basis, rights and contact details.