{% extends 'base.html.twig' %}

{% block title %}Privacy Policy{% endblock %}

{% block body %}
    <div class="container my-5">
        <h1 class="mb-4">🔒 Privacy Policy</h1>

        <h2>1. Data Controller</h2>
        <p>The data controller is <strong>[your company/service name]</strong>, located at [address], contact: <a href="mailto:[contact email]">[contact email]</a>.</p>

        <h2>2. What data do we collect?</h2>
        <ul>
            <li>Email address (for account creation and login),</li>
            <li>Password (stored in encrypted form),</li>
            <li>Images uploaded by the user in ads (may contain personal data, e.g., license plates).</li>
        </ul>

        <h2>3. Purpose of data processing</h2>
        <p>We process your data for the following purposes:</p>
        <ul>
            <li>User account registration and management,</li>
            <li>Ad publication,</li>
            <li>Communication related to the service,</li>
            <li>Compliance with legal obligations.</li>
        </ul>

        <h2>4. Legal basis for processing</h2>
        <p>Data is processed in accordance with:</p>
        <ul>
            <li>Article 6(1)(b) of the GDPR – performance of a contract,</li>
            <li>Article 6(1)(c) of the GDPR – legal obligation,</li>
            <li>Article 6(1)(f) of the GDPR – legitimate interest of the controller.</li>
        </ul>

        <h2>5. Data retention</h2>
        <p>Data is retained for the duration of service use and up to 3 years after termination.</p>

        <h2>6. Your rights</h2>
        <p>You have the right to:</p>
        <ul>
            <li>Access your data,</li>
            <li>Rectify your data,</li>
            <li>Erase your data ("right to be forgotten"),</li>
            <li>Restrict processing,</li>
            <li>Object to processing,</li>
            <li>Data portability,</li>
            <li>Lodge a complaint with the Data Protection Authority (UODO).</li>
        </ul>

        <h2>7. Who do we share data with?</h2>
        <p>Data may be shared with IT service providers (hosting, email), and – when required by law – with government authorities.</p>

        <h2>8. Security</h2>
        <p>We implement measures such as:</p>
        <ul>
            <li>Password encryption (bcrypt),</li>
            <li>Secure HTTPS protocol,</li>
            <li>Restricted data access.</li>
        </ul>

        <h2>9. Are data transferred outside the EU?</h2>
        <p>No. Your data is not transferred outside the European Economic Area.</p>

        <h2>10. Contact</h2>
        <p>For any matters related to personal data, please contact us at: <a href="mailto:[Your email]">[Your email]</a></p>
    </div>
{% endblock %}