{
  "@context": {
    "krog": "https://krognetwork.com/ns#",
    "gdpr": "https://krognetwork.com/ns/gdpr#",
    "dct":  "http://purl.org/dc/terms/"
  },
  "@id": "krog:privacy-notice-1",
  "@type": "krog:PrivacyNotice",
  "dct:hasVersion": "2.0",
  "dct:issued": "«REVIEW»",
  "dct:language": ["en", "nb-NO"],
  "krog:hasDataController": {
    "@id": "krog:KrogDataPrivacyAndGovernance",
    "krog:hasName": "Krog Data Privacy & Governance",
    "krog:hasAddress": "Via Mariöl 31, 7524 Zuoz, Switzerland",
    "krog:hasContact": "mailto:hello@signatu.com"
  },
  "krog:hasDataProtectionOfficer": "«REVIEW»",
  "krog:hasAuthority": "«REVIEW: Datatilsynet | FDPIC | both»",
  "krog:hasRepresentative": "«REVIEW: Art. 27 required for a CH controller?»",
  "krog:hasProcess": [
    { "@id": "krog:publish-profile", "krog:order": 1,
      "krog:hasPurpose": "krog:ServiceProvision",
      "krog:hasLegalBasis": ["gdpr:A6-1-f", "gdpr:A6-1-a"],
      "krog:hasLegitimateInterestAssessment": "«REVIEW»",
      "krog:hasPersonalData": ["krog:Name", "krog:Photo", "krog:EmailAddress",
                              "krog:TelephoneNumber", "krog:SocialMediaAccount",
                              "krog:JobTitle", "krog:City", "krog:Qualification"],
      "krog:hasDataSource": ["krog:DataSubjectSource", "krog:PublicSource"],
      "krog:hasProcessing": ["krog:Collect", "krog:Store", "krog:MakeAvailable",
                            "krog:Disseminate"],
      "krog:hasRecipient": ["krog:LovableLabsAB", "krog:ThirdParty"],
      "krog:hasStorageCondition": { "krog:hasLocation": "krog:EEA" },
      "krog:hasLocation": ["krog:EEA", "krog:Switzerland"],
      "krog:hasJurisdiction": ["krog:Switzerland", "krog:EEA"],
      "krog:hasNotice": "krog:consent-notice-1",
      "krog:hasRight": ["gdpr:A7-3", "gdpr:A15", "gdpr:A16",
                       "gdpr:A17", "gdpr:A20", "gdpr:A21"],
      "krog:hasConsentControl": "krog:WithdrawConsent" },

    { "@id": "krog:issue-credential", "krog:order": 2,
      "krog:hasPurpose": "krog:ServiceProvision",
      "krog:hasLegalBasis": "gdpr:A6-1-b",
      "krog:hasDataSource": ["krog:DataSubjectSource", "krog:ThirdPartySource"],
      "krog:hasProcessing": ["krog:Assess", "krog:Store", "krog:MakeAvailable"],
      "krog:hasStorageCondition": { "krog:hasDuration": "«REVIEW: revoked»" },
      "krog:hasJurisdiction": ["krog:Switzerland", "krog:EEA"],
      "krog:art14Applies": true },

    { "@id": "krog:match-profile", "krog:order": 3,
      "krog:hasPurpose": "krog:SearchFunctionalities",
      "krog:hasLegalBasis": "gdpr:A6-1-f",
      "krog:hasLegitimateInterestAssessment": "«REVIEW»",
      "krog:hasProcessing": ["krog:Analyse", "krog:Profiling", "krog:Match"],
      "krog:hasAutomatedDecisionMaking": false,
      "krog:hasRight": "gdpr:A21" },

    { "@id": "krog:account", "krog:order": 4,
      "krog:hasPurpose": ["krog:AccountManagement", "krog:EnforceSecurity"],
      "krog:hasLegalBasis": ["gdpr:A6-1-b", "gdpr:A6-1-f"],
      "krog:hasPersonalData": ["krog:EmailAddress", "krog:Password"],
      "krog:hasStorageCondition": { "krog:hasDuration": "«REVIEW: grace period»" } },

    { "@id": "krog:records-layer", "krog:order": 5,
      "krog:hasPurpose": "krog:RecordManagement",
      "krog:hasLegalBasis": ["gdpr:A6-1-c", "gdpr:A6-1-f"],
      "krog:hasOrganisationalMeasure": "krog:AuditLog",
      "krog:hasStorageCondition": { "krog:hasDuration": "«REVIEW»" },
      "krog:hasRight": "gdpr:A15",
      "krog:hasOptOut": false },

    { "@id": "krog:course-enrolment", "krog:order": 6,
      "krog:hasPurpose": ["krog:ServiceProvision", "krog:PaymentManagement"],
      "krog:hasLegalBasis": "gdpr:A6-1-b",
      "krog:hasPersonalData": ["krog:Name", "krog:EmailAddress"],
      "krog:hasDataSource": "krog:ThirdPartySource",
      "krog:hasRecipient": "krog:GumroadInc",
      "krog:hasLocation": ["krog:EEA", "krog:UnitedStatesOfAmerica"],
      "krog:hasStorageCondition": { "krog:hasDuration": "«REVIEW: course records»" },
      "krog:art14Applies": true,
      "krog:c2cArrangement": "«REVIEW: Gumroad»" },

    { "@id": "krog:operate-platform", "krog:order": 7,
      "krog:hasPurpose": "krog:TechnicalServiceProvision",
      "krog:hasLegalBasis": "gdpr:A6-1-f",
      "krog:hasDataProcessor": "krog:LovableLabsAB",
      "krog:hasDataSubProcessor": "«REVIEW: list + region each»",
      "krog:hasJurisdiction": ["krog:Switzerland", "krog:EU", "krog:EEA"],
      "krog:transferMechanism": "«REVIEW: per processor»" },

    { "@id": "krog:assistant", "krog:order": 8,
      "krog:hasPurpose": "krog:ServiceProvision",
      "krog:hasLegalBasis": "gdpr:A6-1-f",
      "krog:hasRecipient": "krog:LovableAIGateway",
      "krog:hasLocation": "«REVIEW: model provider region»",
      "krog:usedForTraining": "«REVIEW: written confirmation pending»" }
  ],
  "krog:consentControlsApplicability": [
    { "krog:hasProcess": "krog:publish-profile",
      "krog:iso29184-5.4": "applies in full",
      "krog:appliesTo": ["krog:Photo", "krog:EmailAddress",
                         "krog:TelephoneNumber", "krog:SocialMediaAccount"] },
    { "krog:hasProcess": "krog:issue-credential",
      "krog:iso29184-5.4": "not applicable",
      "krog:reason": "No consent sought; contract basis. Withdrawal could not un-issue a verified credential." },
    { "krog:hasProcess": "krog:match-profile",
      "krog:iso29184-5.4": "not applicable",
      "krog:reason": "No consent sought; Art. 21 objection applies instead, available in place." },
    { "krog:hasProcess": "krog:account",
      "krog:iso29184-5.4": "not applicable",
      "krog:reason": "No consent sought; no service exists without an account, so no free choice could be offered." },
    { "krog:hasProcess": "krog:records-layer",
      "krog:iso29184-5.4": "not applicable",
      "krog:reason": "No consent sought and none possible; Art. 5(2) accountability cannot be waived on request." },
    { "krog:hasProcess": "krog:course-enrolment",
      "krog:iso29184-5.4": "not applicable",
      "krog:reason": "No consent sought; contract. The purchase is the choice. Gumroad's collection is governed by Gumroad's own notice." },
    { "krog:hasProcess": "krog:operate-platform",
      "krog:iso29184-5.4": "not applicable",
      "krog:reason": "No consent sought; storage limited to sign-in and language, so no consent is required." },
    { "krog:hasProcess": "krog:assistant",
      "krog:iso29184-5.4": "not applicable",
      "krog:reason": "No consent sought; invoking the assistant is the choice. May change if transfer questions resolve badly." }
  ],
  "krog:nestedNotice": {
    "@id": "krog:consent-notice-1",
    "@type": "krog:ConsentNotice",
    "dct:hasVersion": "1.0",
    "dct:isPartOf": "krog:privacy-notice-1",
    "krog:hasIndicationMethod": "krog:CheckboxAgreement",
    "krog:citedByRecordsAs": "krog:consent-notice-1@v1.0"
  }
}