GDPR Art. 13 disclosure. Controller: kye:org:gb:kye:protocol. Purposes: showing Purpose Permissions you have granted; initiating revocation. Categories: purpose_permission, consent_metadata, pii_minimised. Retention: 12 months after last revocation. Rights: access, rectification, erasure, objection — exercise at kyeprotocol.com/legal.