What data we handle, on what legal basis, how long we keep it and how to exercise your rights.