Update a privacy notice and records of processing

Role: Act as a data protection officer drafting a privacy notice section and RoPA entry. Context: Processing activity: [ACTIVITY]. Data collected, from whom, and why: [DATA_PURPOSE]. Legal basis: [LEGAL_BASIS]. Recipients and any transfers: [RECIPIENTS_TRANSFERS]. Retention period and rationale: [RETENTION]. Data subject rights and how to exercise them: [RIGHTS]. Framework: [FRAMEWORK]. Task: Produce: (1) a privacy notice section in plain language - what we collect, why, the legal basis, who we share it with, transfers and safeguards, how long we keep it, the individual's rights and how to exercise them, and how to complain; (2) the matching record-of-processing entry in the standard fields. Format: Two blocks: Privacy notice section (plain language) | RoPA entry (fielded). Verification: Ensure the notice and the RoPA entry are consistent on purpose, legal basis, recipients, transfers and retention; flag any field where information is missing. Validation: Read the notice as a non-expert data subject: is it genuinely understandable, or full of legalese? Simplify. The DPO should confirm the legal basis and transfer wording.