Skip to content
papii

Document template · eu.gdpr.privacy_notice

Privacy Notice

  • Render-verified
  • Legal-sensitive
  • Version 1.0.0

Transparency notice supplied to data subjects at collection (Art. 13) or within a reasonable period when data is obtained indirectly (Art. 14). Covers every field the articles require.

JSON Schema

Fields in this template

Data sent to the API is validated against the template’s JSON Schema before anything is rendered. This template defines 28 fields:

Field Required Type Description
version Optional string
last_updated Optional date
effective_date Optional date
controller Required object
controller.name Required string
controller.address Required string
controller.contact_email Required string
controller.representative Optional string
controller.dpo_name Optional string
controller.dpo_email Optional string
collection_point Required string Where this notice is given (e.g. 'on our website signup form', 'during employee onboarding').
collection_mode Optional enum 'direct' = data collected from the subject (Art. 13); 'indirect' = from another source (Art. 14).
indirect_source Optional string Required when collection_mode='indirect' — source of the data (Art. 14(2)(f)).
processing_activities Required array of object
processing_activities[].purpose Required string
processing_activities[].legal_basis Required enum
processing_activities[].legitimate_interests_stated Optional string
processing_activities[].data_categories Required array of string
processing_activities[].recipients Optional array of string
processing_activities[].retention Required string
processing_activities[].international_transfers Optional string
processing_activities[].mandatory Optional boolean True if providing this data is a statutory/contractual requirement and non-provision has consequences (Art. 13(2)(e)).
processing_activities[].non_provision_consequences Optional string
automated_decisions Optional string Description of solely automated decision-making / profiling under Art. 22, if any. Leave empty if none.
rights_contact Required string Email/URL/postal address where data subjects exercise their rights.
supervisory_authority Optional object
supervisory_authority.name Optional string
supervisory_authority.url Optional string

POST /render

Generate it

One POST /render call: send your JSON, get the finished PDF back. Or skip the JSON entirely and describe the document in plain language on chut.app.

curl 
curl -X POST https://api.papii.eu/render \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "template": "eu.gdpr.privacy_notice",
    "data": { ... },
    "options": {"language": "en"}
  }' -o privacy-notice.pdf
Generate with AI on chut.app Try in the dashboard

Frequently asked questions

What is “Privacy Notice”?

Transparency notice supplied to data subjects at collection (Art. 13) or within a reasonable period when data is obtained indirectly (Art. 14). Covers every field the articles require. On papii this document is available as template eu.gdpr.privacy_notice: a JSON Schema plus a deterministic PDF renderer, so the same data always produces the same document.

Can I generate a Privacy Notice with AI?

Yes. chut.app — the AI back office papii powers — fills this template from a plain-language description: you describe the document in one sentence, the AI structures the data, papii validates it against the schema and renders the PDF. Developers can also call the papii API directly with structured JSON.

Is the Privacy Notice template legally compliant?

This template is render-verified: its schema, sample data and PDF output are automatically tested on every release. It is published with status “ready”, meaning it has not yet been through papii’s final legal review. Where it references specific legislation, that is stated in the template description — always have a professional check documents with legal effect before relying on them.