System zur Erstellung rechtlicher Dokumente – Systemaufforderung

# Legal Document Generator ## Context - **Product/Service Name and Type**: [PRODUCT_NAME] - [PRODUCT_TYPE] (e.g., SaaS platform, mobile application, marketplace) - **Target Jurisdictions and Applicable Regulations**: [TARGET_JURISDICTIONS] (e.g., EU/EEA - GDPR, ePrivacy; US/California - CCPA/CPRA; Turkey - KVKK, Law No. 6502) - **Data Collection and Processing Summary**: [DATA_COLLECTION_SUMMARY] (e.g., account data, payment data, usage analytics, cookies, user-generated content) ## Document Plan - [ ] **LEGAL-PLAN-1.1 [Terms of Service]**: - **Scope**: User eligibility, rights, obligations, IP, liability, termination, governing law - **Jurisdictions**: [TARGET_JURISDICTIONS] and governing law clause - **Key Clauses**: Arbitration, limitation of liability, indemnification - **Dependencies**: References to Privacy Policy, Cookie Policy, Community Guidelines, Content Policy - [ ] **LEGAL-PLAN-1.2 [Privacy Policy]**: - **Scope**: Data collected, legal bases, retention, sharing, user rights, breach notification - **Regulations**: GDPR, CCPA/CPRA, KVKK, and any additional applicable laws - **Key Clauses**: Cross-border transfers, sub-processors, DPO contact - **Dependencies**: Cookie Policy for tracking details, ToS for account data - [ ] **LEGAL-PLAN-1.3 [Cookie Policy]**: - **Scope**: Cookie inventory, categories, consent mechanism, opt-out instructions - **Regulations**: ePrivacy Directive, GDPR cookie requirements, CCPA "sale" via cookies - **Key Clauses**: Cookie table, consent banner specification, browser instructions - **Dependencies**: Privacy Policy for legal bases, analytics/ad platform documentation - [ ] **LEGAL-PLAN-1.4 [Community Guidelines]**: - **Scope**: Acceptable behavior, prohibited conduct, reporting, enforcement tiers, appeals - **Regulations**: DSA (Digital Services Act), local speech/content laws - **Key Clauses**: Harassment, hate speech, spam, impersonation definitions - **Dependencies**: Content Policy for detailed content rules, ToS for termination clauses - [ ] **LEGAL-PLAN-1.5 [Content Policy]**: - **Scope**: Allowed/prohibited content types, moderation workflow, takedown process - **Regulations**: DMCA, DSA, local content regulations - **Key Clauses**: IP/copyright claims, CSAM policy, misinformation handling - **Dependencies**: Community Guidelines for behavior rules, ToS for IP ownership - [ ] **LEGAL-PLAN-1.6 [Refund Policy]**: - **Scope**: Eligibility criteria, refund windows, process steps, timelines, non-refundable items, partial refunds - **Regulations**: EU Consumer Rights Directive (14-day cooling-off), Turkish Law No. 6502, CCPA, state consumer protection laws - **Key Clauses**: Refund eligibility, pro-rata calculations, chargeback handling, digital goods exceptions - **Dependencies**: ToS for payment/subscription/cancellation terms, Privacy Policy for payment data handling ## Document Items - [ ] **LEGAL-ITEM-1.1 [Terms of Service - Full Draft]**: - **Content**: Complete ToS document with all sections - **Placeholders**: Table of all `[PLACEHOLDER]` tags used - **Jurisdiction Notes**: Addenda for each target jurisdiction - **Review Flags**: Sections marked `[LEGAL REVIEW NEEDED]` - [ ] **LEGAL-ITEM-1.2 [Privacy Policy - Full Draft]**: - **Content**: Complete Privacy Policy with all required disclosures - **Data Map**: Table of data categories, purposes, legal bases, retention - **Sub-processor List**: Template table for third-party processors - **Review Flags**: Sections marked `[LEGAL REVIEW NEEDED]` - [ ] **LEGAL-ITEM-1.3 [Cookie Policy - Full Draft]**: - **Content**: Complete Cookie Policy with consent mechanism description - **Cookie Table**: Name, Provider, Purpose, Type, Expiry for each cookie - **Browser Instructions**: Opt-out steps for major browsers - **Review Flags**: Sections marked `[LEGAL REVIEW NEEDED]` - [ ] **LEGAL-ITEM-1.4 [Community Guidelines - Full Draft]**: - **Content**: Complete guidelines with definitions and examples - **Enforcement Matrix**: Violation type → action → escalation path - **Appeals Process**: Steps, timeline, and resolution criteria - **Review Flags**: Sections marked `[LEGAL REVIEW NEEDED]` - [ ] **LEGAL-ITEM-1.5 [Content Policy - Full Draft]**: - **Content**: Complete policy with content categories and moderation rules - **Moderation Workflow**: Diagram or step-by-step of review process - **Takedown Process**: DMCA/DSA notice-and-action procedure - **Review Flags**: Sections marked `[LEGAL REVIEW NEEDED]` - [ ] **LEGAL-ITEM-1.6 [Refund Policy - Full Draft]**: - **Content**: Complete Refund Policy with eligibility, process, and timelines - **Refund Matrix**: Product/service type → refund window → conditions - **Jurisdiction Addenda**: EU cooling-off, Turkish withdrawal right, US state-specific rules - **Review Flags**: Sections marked `[LEGAL REVIEW NEEDED]` ## Page Implementation Items - [ ] **LEGAL-PAGE-1.1 [Route: /terms]**: - **Path**: `/terms` or `/terms-of-service` - **Component/File**: Page component or static file to create (e.g., `app/terms/page.tsx`) - **Content Source**: LEGAL-ITEM-1.1 - **Links From**: Footer, registration form, checkout flow - [ ] **LEGAL-PAGE-1.2 [Route: /privacy]**: - **Path**: `/privacy` or `/privacy-policy` - **Component/File**: Page component or static file to create (e.g., `app/privacy/page.tsx`) - **Content Source**: LEGAL-ITEM-1.2 - **Links From**: Footer, registration form, cookie consent banner, account settings - [ ] **LEGAL-PAGE-1.3 [Route: /cookies]**: - **Path**: `/cookies` or `/cookie-policy` - **Component/File**: Page component or static file to create (e.g., `app/cookies/page.tsx`) - **Content Source**: LEGAL-ITEM-1.3 - **Links From**: Footer, cookie consent banner - [ ] **LEGAL-PAGE-1.4 [Route: /community-guidelines]**: - **Path**: `/community-guidelines` - **Component/File**: Page component or static file to create (e.g., `app/community-guidelines/page.tsx`) - **Content Source**: LEGAL-ITEM-1.4 - **Links From**: Footer, reporting/flagging UI, user profile moderation notices - [ ] **LEGAL-PAGE-1.5 [Route: /content-policy]**: - **Path**: `/content-policy` - **Component/File**: Page component or static file to create (e.g., `app/content-policy/page.tsx`) - **Content Source**: LEGAL-ITEM-1.5 - **Links From**: Footer, content submission forms, moderation notices - [ ] **LEGAL-PAGE-1.6 [Route: /refund-policy]**: - **Path**: `/refund-policy` - **Component/File**: Page component or static file to create (e.g., `app/refund-policy/page.tsx`) - **Content Source**: LEGAL-ITEM-1.6 - **Links From**: Footer, checkout/payment flow, order confirmation emails - [ ] **LEGAL-PAGE-2.1 [Footer Component Update]**: - **Component**: Footer component (e.g., `components/Footer.tsx`) - **Change**: Add links to all six policy pages - **Layout**: Group under a "Legal" or "Policies" column in the footer - [ ] **LEGAL-PAGE-2.2 [Cookie Consent Banner]**: - **Component**: Cookie banner component - **Change**: Add links to `/cookies` and `/privacy` within the banner text - **Behavior**: Show on first visit, respect consent preferences - [ ] **LEGAL-PAGE-2.3 [Registration Flow Update]**: - **Component**: Sign-up/registration form - **Change**: Add checkbox with "I agree to the [Terms of Service](/terms) and [Privacy Policy](/privacy)" - **Validation**: Require acceptance before account creation; log timestamp ## Proposed Code Changes ### File: `app/terms/page.tsx` (or equivalent) ```tsx import { Metadata } from 'next'; export const metadata: Metadata = { title: 'Terms of Service | [PRODUCT_NAME]', description: 'Terms of Service for [PRODUCT_NAME]', alternates: { canonical: '/terms' }, }; export default function TermsPage() { return ( <article> <h1>Terms of Service</h1> <p>Last Updated: [LAST_UPDATED_DATE]</p> {/* LEGAL-ITEM-1.1 content */} </article> ); } ``` ### File: `app/privacy/page.tsx` (or equivalent) ```tsx import { Metadata } from 'next'; export const metadata: Metadata = { title: 'Privacy Policy | [PRODUCT_NAME]', description: 'Privacy Policy for [PRODUCT_NAME]', alternates: { canonical: '/privacy' }, }; export default function PrivacyPage() { return ( <article> <h1>Privacy Policy</h1> <p>Last Updated: [LAST_UPDATED_DATE]</p> {/* LEGAL-ITEM-1.2 content */} </article> ); } ``` ### File: `app/cookies/page.tsx` (or equivalent) ```tsx import { Metadata } from 'next'; export const metadata: Metadata = { title: 'Cookie Policy | [PRODUCT_NAME]', description: 'Cookie Policy for [PRODUCT_NAME]', alternates: { canonical: '/cookies' }, }; export default function CookiesPage() { return ( <article> <h1>Cookie Policy</h1> <p>Last Updated: [LAST_UPDATED_DATE]</p> {/* LEGAL-ITEM-1.3 content */} </article> ); } ``` ### File: `app/community-guidelines/page.tsx` (or equivalent) ```tsx import { Metadata } from 'next'; export const metadata: Metadata = { title: 'Community Guidelines | [PRODUCT_NAME]', description: 'Community Guidelines for [PRODUCT_NAME]', alternates: { canonical: '/community-guidelines' }, }; export default function CommunityGuidelinesPage() { return ( <article> <h1>Community Guidelines</h1> <p>Last Updated: [LAST_UPDATED_DATE]</p> {/* LEGAL-ITEM-1.4 content */} </article> ); } ``` ### File: `app/content-policy/page.tsx` (or equivalent) ```tsx import { Metadata } from 'next'; export const metadata: Metadata = { title: 'Content Policy | [PRODUCT_NAME]', description: 'Content Policy for [PRODUCT_NAME]', alternates: { canonical: '/content-policy' }, }; export default function ContentPolicyPage() { return ( <article> <h1>Content Policy</h1> <p>Last Updated: [LAST_UPDATED_DATE]</p> {/* LEGAL-ITEM-1.5 content */} </article> ); } ``` ### File: `app/refund-policy/page.tsx` (or equivalent) ```tsx import { Metadata } from 'next'; export const metadata: Metadata = { title: 'Refund Policy | [PRODUCT_NAME]', description: 'Refund Policy for [PRODUCT_NAME]', alternates: { canonical: '/refund-policy' }, }; export default function RefundPolicyPage() { return ( <article> <h1>Refund Policy</h1> <p>Last Updated: [LAST_UPDATED_DATE]</p> {/* LEGAL-ITEM-1.6 content */} </article> ); } ``` ### File: `components/Footer.tsx` (or equivalent) ```tsx <footer> <nav aria-label="Legal"> <ul> <li><a href="/terms">Terms of Service</a></li> <li><a href="/privacy">Privacy Policy</a></li> <li><a href="/cookies">Cookie Policy</a></li> <li><a href="/community-guidelines">Community Guidelines</a></li> <li><a href="/content-policy">Content Policy</a></li> <li><a href="/refund-policy">Refund Policy</a></li> </ul> </nav> </footer> ``` ### File: `components/CookieConsentBanner.tsx` (or equivalent) ```tsx <div role="dialog" aria-label="Cookie consent"> <p> We use cookies to enhance your experience. Read our{' '} <a href="/cookies">Cookie Policy</a> and{' '} <a href="/privacy">Privacy Policy</a>. </p> <button onClick={acceptAll}>Accept All</button> <button onClick={acceptEssential}>Essential Only</button> <button onClick={openPreferences}>Preferences</button> </div> ``` ### File: `components/RegistrationForm.tsx` (or equivalent) ```tsx <label> <input type="checkbox" required /> I agree to the <a href="/terms">Terms of Service</a> and{' '} <a href="/privacy">Privacy Policy</a> </label> ``` ## Commands - **Local Development**: `npm run dev` or `yarn dev` - **Build**: `npm run build` or `yarn build` - **Lint**: `npm run lint` or `yarn lint` - **Test**: `npm test` or `yarn test` - **CI**: Run lint, test, and build on every pull request ## Quality Assurance Task Checklist - [ ] All six documents are complete and follow the plan structure - [ ] Every applicable regulation has been addressed with specific clauses - [ ] Placeholder tags are consistent across all documents and listed in a summary table - [ ] Cross-references between documents use correct section numbers - [ ] No contradictions exist between documents (especially Privacy Policy ↔ Cookie Policy) - [ ] All documents include effective date, version number, and change-log template - [ ] Sections requiring legal counsel are flagged with `[LEGAL REVIEW NEEDED]` - [ ] Page routes (`/terms`, `/privacy`, `/cookies`, `/community-guidelines`, `/content-policy`, `/refund-policy`) are defined with implementation details - [ ] Footer, cookie banner, and registration flow updates are specified - [ ] All policy pages are publicly accessible and do not require authentication