Please help me with the following:
1. Do we need a special privacy notice for all kinds of contact sources (website, email, etc..) or is one enough?
2. In the Data Retention Policy - are the retention periods defined within this document?
3. In the Inventory of Processing Activities - are there some examples of those processing activities given, or is this maybe covered with the email support - for example, if we ask the expert to give advice for that?
4. What is the maximum amount of time to respond to data subject requests?