Privacy notice

TODO(alex): written once the booking tool and the Before you arrive form are settled (Q6).