1. Type of Processed Data Which personal data do you collect? (e.g., name, email address, phone number, IP address, payment details)

2. Purpose of Processing For what purposes are the data processed? (e.g., contact inquiries, marketing, newsletter, contract fulfillment)

3. Legal Basis Do you process data based on consent, a contract, legal obligations, or legitimate interests?

4. Data Sharing Do you share personal data with third parties? (e.g., with service providers such as hosting providers or payment processors)

5. Storage Period How long do you store the data? (e.g., "until the purpose is fulfilled," statutory retention periods)

6. Data Subject Rights What rights can affected individuals exercise? (e.g., access, rectification, erasure, objection)

7. Technical and Organizational Measures What measures do you take to protect the data? (e.g., SSL encryption, firewalls)

8. Contact Point for Data Protection Who is responsible for data protection inquiries? (e.g., data protection officer or contact person)

9. Cookies and Tracking Do you use cookies or tracking tools? If so, which ones? (e.g., Google Analytics, Facebook Pixel)

10. Third-Country Transfer Are data transferred to countries outside the EU/EEA? If so, how is the protection ensured? (e.g., standard contractual clauses)

11. Newsletter and Marketing Are data used for newsletters or personalized advertising? If so, what data and how?

12. Social Media Plugins Do you use social media plugins (e.g., Facebook, Instagram, LinkedIn)?