Add GDPR statement

[joholl]

We should have a simple GDPR statement about which data is stored and why.

[joholl]

My suggestion:

I hereby consent to the CoffyBuddy system collecting and processing my personal data, as outlined below.

1. RESPONSIBILITY FOR DATA PROCESSING
Responsible for data protection:
<YOUR NAME> (as an employee of <YOUR COMPANY> AG)
TODO mail/phone

2. PURPOSE OF DATA PROCESSING
Data processing is carried out on the basis of keeping track of consumption and billing of coffee and similar items.
For this purpose, we collect, store and process your name, tag uuids, consumed items, timestamps, and application settings.
The collection of data is a prerequisite for providing a billing solution and consumption statistics.

3. RECIPIENTS OF YOUR DATA
We do not forward any data to third parties without your explicit consent.

4. STORAGE OF YOUR DATA
Your data is stored centrally and securely in a central database. At any times, you can delete your account,
purging any data in our databases.

5. YOUR RIGHTS
You have the right to obtain information about the personal data concerning you.
You may also request that incorrect data be corrected.
In addition, you have the right to have data deleted and the right to data portability.
You have the right to revoke your consent for future processing.
You also have the right to complain to the competent supervisory authority for data protection if you believe that the processing of your personal data is not lawful.

6. LEGAL BASIS
The legal basis for the processing of your data is the General Data Protection (GDPR) Act.
If you have any questions, please feel free to contact us.