{
    "success": true,
    "data": {
        "ready": true,
        "release": "2.9.0",
        "activation_status": "foundation-installed-writes-locked",
        "message": "Privacyrechten, toestemmingen, bewaartermijnen en accountverwijdering zijn voorbereid; alle writes blijven geblokkeerd in de open demo.",
        "config": {
            "environment": "staging",
            "writes_requested": false,
            "writes_enabled": false,
            "consent_updates_enabled": false,
            "data_export_enabled": false,
            "account_deletion_enabled": false,
            "retention_enforcement_enabled": false,
            "request_deadline_days": 30,
            "deletion_cooling_off_days": 14,
            "policy_locale": "nl-NL",
            "demo_locked": true
        },
        "summary": {
            "active_policies": 3,
            "consent_definitions": 5,
            "consent_records": 5,
            "open_requests": 0,
            "retention_policies": 8,
            "processing_activities": 6,
            "export_jobs": 0,
            "deletion_requests": 0,
            "audit_events": 0
        },
        "principal": {
            "user_uuid": "452c731b-9484-49d1-9d35-03b60b4e9a91",
            "email": "demo@ganjaguide.invalid",
            "display_name": "Green Explorer",
            "status": "demo_locked",
            "email_verified": false,
            "last_login_at": null,
            "profile": {
                "locale": "nl-NL",
                "timezone": "Europe/Amsterdam",
                "city": "Emmen",
                "country_code": "NL"
            },
            "roles": [
                "member"
            ],
            "permissions": [
                "auth.runtime.view",
                "auth.security_notifications.read_own",
                "auth.sessions.revoke_own",
                "favorites.read",
                "favorites.write",
                "locations.read",
                "portal.view",
                "privacy.consents.manage",
                "privacy.correction.request",
                "privacy.deletion.request",
                "privacy.export.request",
                "privacy.request.create",
                "privacy.view",
                "reviews.create",
                "web_account.gateway.use"
            ],
            "object_grants": []
        },
        "authorization": {
            "allowed": true,
            "reason": "AUTH_PERMISSION_GRANTED_GLOBAL",
            "permission": "privacy.view",
            "model_version": "gg-privacy-v1"
        },
        "policies": [
            {
                "policy_uuid": "af18d213-4b03-4aa2-b281-224a0d23d677",
                "policy_key": "cookie-notice",
                "version": "1.0",
                "locale": "nl-NL",
                "title": "Cookie- en opslagverklaring",
                "summary": "Uitleg over noodzakelijke opslag, voorkeuren, analytics en optionele tracking.",
                "status": "active",
                "published_at": "2026-07-27 10:31:03",
                "effective_at": "2026-07-27 10:31:03",
                "content_hash": "d4bb1fbfb5e6ef6d72f87740587b6f6f2c625700c584298d9bd658d071436806"
            },
            {
                "policy_uuid": "192e577f-1f9a-45c8-8202-e490689a1f86",
                "policy_key": "privacy-notice",
                "version": "1.0",
                "locale": "nl-NL",
                "title": "Privacyverklaring",
                "summary": "Transparantie over persoonsgegevens, doelen, grondslagen, bewaartermijnen en rechten.",
                "status": "active",
                "published_at": "2026-07-27 10:31:03",
                "effective_at": "2026-07-27 10:31:03",
                "content_hash": "8cfcbfa4f8572555e96a7d6b697b9924f39ea13da29b53b14e3ea1bbcd701b45"
            },
            {
                "policy_uuid": "29be8458-af61-400e-9a1f-5eb7620b6422",
                "policy_key": "terms-of-use",
                "version": "1.0",
                "locale": "nl-NL",
                "title": "Gebruiksvoorwaarden",
                "summary": "Voorwaarden voor het gebruik van het GanjaGuide-platform en accountfuncties.",
                "status": "active",
                "published_at": "2026-07-27 10:31:03",
                "effective_at": "2026-07-27 10:31:03",
                "content_hash": "9dd63fc6f2b6ea654748a0b3466d7a00082d43b7cb2fe6a2217119028ed6765a"
            }
        ],
        "consent_definitions": [
            {
                "consent_uuid": "d0065162-e2ed-488a-bf52-70822f4527cb",
                "consent_key": "essential_account",
                "version": "1.0",
                "locale": "nl-NL",
                "title": "Noodzakelijke accountverwerking",
                "description": "Nodig voor beveiligde account-, sessie- en portaalfuncties.",
                "purpose": "Account aanbieden, beveiligen en onderhouden.",
                "lawful_basis": "contract",
                "required": true,
                "default_enabled": false,
                "status": "active",
                "policy_key": "terms-of-use",
                "policy_version": "1.0"
            },
            {
                "consent_uuid": "67aee3d3-9542-4f4e-836a-61b6b6369e90",
                "consent_key": "functional_preferences",
                "version": "1.0",
                "locale": "nl-NL",
                "title": "Functionele voorkeuren",
                "description": "Bewaar taal-, thema- en kaartvoorkeuren.",
                "purpose": "De gebruikerservaring personaliseren zonder marketingprofilering.",
                "lawful_basis": "consent",
                "required": false,
                "default_enabled": false,
                "status": "active",
                "policy_key": "cookie-notice",
                "policy_version": "1.0"
            },
            {
                "consent_uuid": "550fa201-8614-4f66-9ac1-59858bd596c4",
                "consent_key": "marketing_email",
                "version": "1.0",
                "locale": "nl-NL",
                "title": "Marketing per e-mail",
                "description": "Ontvang optionele platform- en partnerupdates.",
                "purpose": "Commerciële communicatie verzenden na aantoonbare toestemming.",
                "lawful_basis": "consent",
                "required": false,
                "default_enabled": false,
                "status": "active",
                "policy_key": "privacy-notice",
                "policy_version": "1.0"
            },
            {
                "consent_uuid": "e8084f66-023d-44cd-bced-c1c8a7cf8e8e",
                "consent_key": "personalized_radar",
                "version": "1.0",
                "locale": "nl-NL",
                "title": "Persoonlijke Radar",
                "description": "Gebruik gevolgde regio’s en categorieën voor relevante signalen.",
                "purpose": "Persoonlijke locatie-, nieuws- en regelgevingsalerts tonen.",
                "lawful_basis": "consent",
                "required": false,
                "default_enabled": false,
                "status": "active",
                "policy_key": "privacy-notice",
                "policy_version": "1.0"
            },
            {
                "consent_uuid": "5bdcbc8d-6f19-4955-b861-fed6df2ce392",
                "consent_key": "privacy_preserving_analytics",
                "version": "1.0",
                "locale": "nl-NL",
                "title": "Privacyvriendelijke analytics",
                "description": "Meet geaggregeerd gebruik zonder advertentieprofielen.",
                "purpose": "Prestaties en gebruiksvriendelijkheid verbeteren.",
                "lawful_basis": "consent",
                "required": false,
                "default_enabled": false,
                "status": "active",
                "policy_key": "cookie-notice",
                "policy_version": "1.0"
            }
        ],
        "consents": [
            {
                "consent_record_uuid": "6c5633b0-3349-4ae8-bf9a-a293f424fb2b",
                "consent_key": "essential_account",
                "title": "Noodzakelijke accountverwerking",
                "status": "not_asked",
                "source": "demo",
                "policy_version": "1.0",
                "granted_at": null,
                "withdrawn_at": null,
                "created_at": "2026-07-27 10:31:03",
                "updated_at": "2026-07-27 10:31:03"
            },
            {
                "consent_record_uuid": "e45d0fe1-d612-44d3-b9aa-1cbd042cc08e",
                "consent_key": "functional_preferences",
                "title": "Functionele voorkeuren",
                "status": "not_asked",
                "source": "demo",
                "policy_version": "1.0",
                "granted_at": null,
                "withdrawn_at": null,
                "created_at": "2026-07-27 10:31:03",
                "updated_at": "2026-07-27 10:31:03"
            },
            {
                "consent_record_uuid": "987e01ae-5544-4189-92fa-363f8f5ba850",
                "consent_key": "marketing_email",
                "title": "Marketing per e-mail",
                "status": "not_asked",
                "source": "demo",
                "policy_version": "1.0",
                "granted_at": null,
                "withdrawn_at": null,
                "created_at": "2026-07-27 10:31:03",
                "updated_at": "2026-07-27 10:31:03"
            },
            {
                "consent_record_uuid": "c360f548-1685-4383-b8e5-13bc875e5a27",
                "consent_key": "personalized_radar",
                "title": "Persoonlijke Radar",
                "status": "not_asked",
                "source": "demo",
                "policy_version": "1.0",
                "granted_at": null,
                "withdrawn_at": null,
                "created_at": "2026-07-27 10:31:03",
                "updated_at": "2026-07-27 10:31:03"
            },
            {
                "consent_record_uuid": "180b4e19-7fd3-4f77-bf7f-af8510445a6a",
                "consent_key": "privacy_preserving_analytics",
                "title": "Privacyvriendelijke analytics",
                "status": "not_asked",
                "source": "demo",
                "policy_version": "1.0",
                "granted_at": null,
                "withdrawn_at": null,
                "created_at": "2026-07-27 10:31:03",
                "updated_at": "2026-07-27 10:31:03"
            }
        ],
        "requests": [],
        "retention": [
            {
                "retention_uuid": "4243d0bf-bb0b-4917-b26b-8524de700530",
                "data_category": "account_profiles",
                "purpose": "Accountdienst leveren en fraude voorkomen.",
                "lawful_basis": "contract",
                "retention_days": 30,
                "trigger_event": "account_deletion_completed",
                "action": "anonymize",
                "jurisdiction": "EU",
                "status": "active",
                "reviewed_at": "2026-07-27 10:31:03"
            },
            {
                "retention_uuid": "0dee1c05-d0b9-415f-957a-f87b750d2570",
                "data_category": "audit_logs",
                "purpose": "Beveiligings- en beheerhandelingen controleerbaar houden.",
                "lawful_basis": "legitimate_interests",
                "retention_days": 2190,
                "trigger_event": "event_created",
                "action": "delete",
                "jurisdiction": "EU",
                "status": "active",
                "reviewed_at": "2026-07-27 10:31:03"
            },
            {
                "retention_uuid": "ec7fe58e-3a01-4759-8f41-0eff00d70ce5",
                "data_category": "authentication_security_events",
                "purpose": "Misbruikdetectie en beveiligingsonderzoek.",
                "lawful_basis": "legitimate_interests",
                "retention_days": 365,
                "trigger_event": "event_created",
                "action": "delete",
                "jurisdiction": "EU",
                "status": "active",
                "reviewed_at": "2026-07-27 10:31:03"
            },
            {
                "retention_uuid": "da413078-b3b5-4cd5-91da-995a5f143290",
                "data_category": "authentication_sessions",
                "purpose": "Sessiebeveiliging, intrekking en incidentonderzoek.",
                "lawful_basis": "legitimate_interests",
                "retention_days": 90,
                "trigger_event": "session_revoked_or_expired",
                "action": "delete",
                "jurisdiction": "EU",
                "status": "active",
                "reviewed_at": "2026-07-27 10:31:03"
            },
            {
                "retention_uuid": "fe5c1501-3137-42a4-b4bc-1af3955cbc56",
                "data_category": "consent_records",
                "purpose": "Toestemming en intrekking aantoonbaar maken.",
                "lawful_basis": "legal_obligation",
                "retention_days": 1825,
                "trigger_event": "consent_replaced_or_account_deleted",
                "action": "archive",
                "jurisdiction": "EU",
                "status": "active",
                "reviewed_at": "2026-07-27 10:31:03"
            },
            {
                "retention_uuid": "2befdfa9-d234-4b53-bd17-727655c47c45",
                "data_category": "data_exports",
                "purpose": "Tijdelijke beveiligde download beschikbaar stellen.",
                "lawful_basis": "contract",
                "retention_days": 7,
                "trigger_event": "export_ready",
                "action": "delete",
                "jurisdiction": "EU",
                "status": "active",
                "reviewed_at": "2026-07-27 10:31:03"
            },
            {
                "retention_uuid": "aa618ab6-d967-4d11-af02-930f32136cdd",
                "data_category": "privacy_requests",
                "purpose": "AVG-verzoeken en afhandeling aantoonbaar maken.",
                "lawful_basis": "legal_obligation",
                "retention_days": 1825,
                "trigger_event": "request_completed",
                "action": "archive",
                "jurisdiction": "EU",
                "status": "active",
                "reviewed_at": "2026-07-27 10:31:03"
            },
            {
                "retention_uuid": "836decc3-a8c9-424c-94d7-61efc0b21667",
                "data_category": "review_contributions",
                "purpose": "Reviews tonen en geschillen behandelen.",
                "lawful_basis": "contract",
                "retention_days": 365,
                "trigger_event": "review_deleted_or_account_deleted",
                "action": "anonymize",
                "jurisdiction": "EU",
                "status": "active",
                "reviewed_at": "2026-07-27 10:31:03"
            }
        ],
        "processing_activities": [
            {
                "activity_uuid": "c012b4b3-984c-44e4-99a8-d5d9a4920c99",
                "activity_key": "account_and_security",
                "title": "Account- en beveiligingsbeheer",
                "purpose": "Accounts, rollen, sessies, apparaten en MFA veilig aanbieden.",
                "lawful_basis": "contract",
                "international_transfer": false,
                "dpia_required": true,
                "status": "active",
                "retention_category": "account_profiles",
                "retention_days": 30,
                "retention_action": "anonymize",
                "data_categories": [
                    "accountgegevens",
                    "beveiligingsgegevens",
                    "apparaatmetadata"
                ],
                "data_subjects": [
                    "leden",
                    "venuebeheerders"
                ],
                "recipient_categories": [
                    "hosting",
                    "beveiligingsleveranciers"
                ]
            },
            {
                "activity_uuid": "ebaa4eb8-3fdb-4790-bcaf-191d56f2631d",
                "activity_key": "personalized_portal",
                "title": "Persoonlijk GanjaGuide-portaal",
                "purpose": "Favorieten, routes, voorkeuren en Radar-signalen tonen.",
                "lawful_basis": "consent",
                "international_transfer": false,
                "dpia_required": false,
                "status": "active",
                "retention_category": "account_profiles",
                "retention_days": 30,
                "retention_action": "anonymize",
                "data_categories": [
                    "voorkeuren",
                    "favorieten",
                    "gevolgde regio’s"
                ],
                "data_subjects": [
                    "leden"
                ],
                "recipient_categories": [
                    "hosting"
                ]
            },
            {
                "activity_uuid": "b8724040-8de0-46e0-b16c-c229aa480a68",
                "activity_key": "privacy_rights",
                "title": "Privacyrechten afhandelen",
                "purpose": "Inzage, export, correctie, verwijdering en bezwaar verwerken.",
                "lawful_basis": "legal_obligation",
                "international_transfer": false,
                "dpia_required": true,
                "status": "active",
                "retention_category": "privacy_requests",
                "retention_days": 1825,
                "retention_action": "archive",
                "data_categories": [
                    "identiteitscontrole",
                    "verzoekmetadata",
                    "besluitvorming"
                ],
                "data_subjects": [
                    "gebruikers",
                    "contactpersonen"
                ],
                "recipient_categories": [
                    "privacyteam",
                    "juridische adviseurs"
                ]
            },
            {
                "activity_uuid": "565c054c-d9fe-47e5-b447-5a0f453080fc",
                "activity_key": "reviews_and_moderation",
                "title": "Reviews en moderatie",
                "purpose": "Reviews publiceren, modereren en geschillen behandelen.",
                "lawful_basis": "contract",
                "international_transfer": false,
                "dpia_required": true,
                "status": "active",
                "retention_category": "review_contributions",
                "retention_days": 365,
                "retention_action": "anonymize",
                "data_categories": [
                    "reviewinhoud",
                    "scoregegevens",
                    "moderatiesignalen"
                ],
                "data_subjects": [
                    "leden",
                    "venues"
                ],
                "recipient_categories": [
                    "hosting",
                    "moderatoren"
                ]
            },
            {
                "activity_uuid": "e8ac73cb-b534-42cb-ae15-29baaa10a128",
                "activity_key": "security_monitoring",
                "title": "Beveiligingsmonitoring",
                "purpose": "Misbruik, tokenhergebruik en ongeoorloofde toegang detecteren.",
                "lawful_basis": "legitimate_interests",
                "international_transfer": false,
                "dpia_required": true,
                "status": "active",
                "retention_category": "authentication_security_events",
                "retention_days": 365,
                "retention_action": "delete",
                "data_categories": [
                    "gehashte netwerkmetadata",
                    "security events"
                ],
                "data_subjects": [
                    "alle gebruikers"
                ],
                "recipient_categories": [
                    "hosting",
                    "securityteam"
                ]
            },
            {
                "activity_uuid": "3a19c2d2-b364-4848-9438-0b1d8ac26135",
                "activity_key": "service_analytics",
                "title": "Privacyvriendelijke platformanalyse",
                "purpose": "Geaggregeerd gebruik en technische prestaties meten.",
                "lawful_basis": "consent",
                "international_transfer": false,
                "dpia_required": false,
                "status": "active",
                "retention_category": "audit_logs",
                "retention_days": 2190,
                "retention_action": "delete",
                "data_categories": [
                    "geaggregeerde gebruiksdata",
                    "technische telemetrie"
                ],
                "data_subjects": [
                    "bezoekers",
                    "leden"
                ],
                "recipient_categories": [
                    "analytics-provider na beoordeling"
                ]
            }
        ]
    },
    "meta": {
        "api_version": "v1",
        "release": "2.9.0",
        "read_only_demo": true
    }
}