It must also include how the data can be viewed, modified or deleted. Finally, you must also state in your privacy statement how you protect personal data.
It takes a century to make your own. You need a policy which is totally complete of course. Luckily, I have found a handy website for this. This website has a super handy policy generator, where you can make your policy easily. This saves a lot of time and then you know for sure your policy is complete. With this policy, you are a step closer to all the necessities you need to have to meet all the requisites of the privacy law. Do you want to see my policy? Then check out this page.
Reading tip: The new privacy law. What does this mean for you?