Privacy policy

TODO: Add controller details, contact, legal bases, recipients, transfers, retention and user rights before publication.