What we process, and why.

FASE 2 — not yet written. This page is a shell built on the shared /styles.css to prove the pattern (stap 0 van FASE 1). The GDPR statement — controller (Combina B.V.), processing location, sub-processors (hosting, mail), retention terms and data-subject rights — is written in FASE 2 against the real stack from FASE 0, and approved line by line by David at STOP 2 (legal content is his responsibility; assumptions are marked [AANNAME — DAVID CHECKT]).