content(privacy): disclose Google (Analytics + Forms) as data processor (GDPR)

Name Google Forms (membership/feedback/event forms) and Google Analytics as
processors in the privacy policy, add form-submission data to 'what we collect'
and its legal basis, and note the possible US transfer under SCCs. Applied to
EN/MK/SI. Draft wording — pending review.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

en/privacy-policy/index.html

@@ -215,6 +215,7 @@
                     <li>Your name, only if you choose to provide it in the newsletter form.</li>
                     <li>The content of any message you send us, if you contact us by email.</li>
                     <li>Basic technical data that your browser sends automatically (such as IP address, browser type, and the date and time of your request), stored temporarily in server logs for security and troubleshooting.</li>
+                    <li>The information you enter into our online forms — for example your name, email address, phone number, and details about your studies (such as your city and university) when you apply to become a member, or the feedback you send through the guide feedback form.</li>
                 </ul>
 
                 <p>We do not knowingly collect any special categories of data, and we do not use profiling or automated decision-making.</p>
@@ -225,6 +226,7 @@
                     <li>Newsletter: to send you news, event invitations, and student information you asked to receive. Our legal basis is your consent (Article 6(1)(a) GDPR).</li>
                     <li>Replying to your messages: to answer your question or request. Our legal basis is our legitimate interest in communicating with you (Article 6(1)(f) GDPR).</li>
                     <li>Website security and stability: to keep the site working and protect it from misuse. Our legal basis is our legitimate interest (Article 6(1)(f) GDPR).</li>
+                    <li>Membership and forms: to process your membership application or the feedback you submit through our forms. Our legal basis is your consent (Article 6(1)(a) GDPR).</li>
                 </ul>
 
                 <h2>The newsletter</h2>
@@ -239,6 +241,7 @@
 
                 <ul>
                     <li>MailerLite, which delivers our newsletter (European Union).</li>
+                    <li>Google (Google Ireland Limited / Google LLC), which provides Google Analytics for anonymous website statistics and Google Forms for our membership, feedback, and event forms.</li>
                     <li>Our hosting provider, which stores the website and its server logs.</li>
                 </ul>
 
@@ -246,7 +249,7 @@
 
                 <h2>International data transfers</h2>
 
-                <p>We try to keep your data within the European Union or the European Economic Area. Where a provider needs to process data outside the EEA, it must do so under the safeguards required by the GDPR, such as the European Commission’s Standard Contractual Clauses.</p>
+                <p>We try to keep your data within the European Union or the European Economic Area. Where a provider needs to process data outside the EEA, it must do so under the safeguards required by the GDPR, such as the European Commission’s Standard Contractual Clauses. In particular, Google (Google Analytics and Google Forms) may process some data in the United States under these Standard Contractual Clauses.</p>
 
                 <h2>How long we keep your data</h2>