{
    "success": true,
    "data": {
        "items": [
            {
                "activity_uuid": "c012b4b3-984c-44e4-99a8-d5d9a4920c99",
                "activity_key": "account_and_security",
                "title": "Account- en beveiligingsbeheer",
                "purpose": "Accounts, rollen, sessies, apparaten en MFA veilig aanbieden.",
                "lawful_basis": "contract",
                "international_transfer": false,
                "dpia_required": true,
                "status": "active",
                "retention_category": "account_profiles",
                "retention_days": 30,
                "retention_action": "anonymize",
                "data_categories": [
                    "accountgegevens",
                    "beveiligingsgegevens",
                    "apparaatmetadata"
                ],
                "data_subjects": [
                    "leden",
                    "venuebeheerders"
                ],
                "recipient_categories": [
                    "hosting",
                    "beveiligingsleveranciers"
                ]
            },
            {
                "activity_uuid": "ebaa4eb8-3fdb-4790-bcaf-191d56f2631d",
                "activity_key": "personalized_portal",
                "title": "Persoonlijk GanjaGuide-portaal",
                "purpose": "Favorieten, routes, voorkeuren en Radar-signalen tonen.",
                "lawful_basis": "consent",
                "international_transfer": false,
                "dpia_required": false,
                "status": "active",
                "retention_category": "account_profiles",
                "retention_days": 30,
                "retention_action": "anonymize",
                "data_categories": [
                    "voorkeuren",
                    "favorieten",
                    "gevolgde regio’s"
                ],
                "data_subjects": [
                    "leden"
                ],
                "recipient_categories": [
                    "hosting"
                ]
            },
            {
                "activity_uuid": "b8724040-8de0-46e0-b16c-c229aa480a68",
                "activity_key": "privacy_rights",
                "title": "Privacyrechten afhandelen",
                "purpose": "Inzage, export, correctie, verwijdering en bezwaar verwerken.",
                "lawful_basis": "legal_obligation",
                "international_transfer": false,
                "dpia_required": true,
                "status": "active",
                "retention_category": "privacy_requests",
                "retention_days": 1825,
                "retention_action": "archive",
                "data_categories": [
                    "identiteitscontrole",
                    "verzoekmetadata",
                    "besluitvorming"
                ],
                "data_subjects": [
                    "gebruikers",
                    "contactpersonen"
                ],
                "recipient_categories": [
                    "privacyteam",
                    "juridische adviseurs"
                ]
            },
            {
                "activity_uuid": "565c054c-d9fe-47e5-b447-5a0f453080fc",
                "activity_key": "reviews_and_moderation",
                "title": "Reviews en moderatie",
                "purpose": "Reviews publiceren, modereren en geschillen behandelen.",
                "lawful_basis": "contract",
                "international_transfer": false,
                "dpia_required": true,
                "status": "active",
                "retention_category": "review_contributions",
                "retention_days": 365,
                "retention_action": "anonymize",
                "data_categories": [
                    "reviewinhoud",
                    "scoregegevens",
                    "moderatiesignalen"
                ],
                "data_subjects": [
                    "leden",
                    "venues"
                ],
                "recipient_categories": [
                    "hosting",
                    "moderatoren"
                ]
            },
            {
                "activity_uuid": "e8ac73cb-b534-42cb-ae15-29baaa10a128",
                "activity_key": "security_monitoring",
                "title": "Beveiligingsmonitoring",
                "purpose": "Misbruik, tokenhergebruik en ongeoorloofde toegang detecteren.",
                "lawful_basis": "legitimate_interests",
                "international_transfer": false,
                "dpia_required": true,
                "status": "active",
                "retention_category": "authentication_security_events",
                "retention_days": 365,
                "retention_action": "delete",
                "data_categories": [
                    "gehashte netwerkmetadata",
                    "security events"
                ],
                "data_subjects": [
                    "alle gebruikers"
                ],
                "recipient_categories": [
                    "hosting",
                    "securityteam"
                ]
            },
            {
                "activity_uuid": "3a19c2d2-b364-4848-9438-0b1d8ac26135",
                "activity_key": "service_analytics",
                "title": "Privacyvriendelijke platformanalyse",
                "purpose": "Geaggregeerd gebruik en technische prestaties meten.",
                "lawful_basis": "consent",
                "international_transfer": false,
                "dpia_required": false,
                "status": "active",
                "retention_category": "audit_logs",
                "retention_days": 2190,
                "retention_action": "delete",
                "data_categories": [
                    "geaggregeerde gebruiksdata",
                    "technische telemetrie"
                ],
                "data_subjects": [
                    "bezoekers",
                    "leden"
                ],
                "recipient_categories": [
                    "analytics-provider na beoordeling"
                ]
            }
        ]
    },
    "meta": {
        "api_version": "v1",
        "release": "2.9.0",
        "read_only_demo": true
    }
}