add reference to GEANT Code of Conduct to privacy policy

André says:

I just got the information from DFN-AAI that the privacy policy document for your SP [https://clarin-dev.eurac.edu/Shibboleth.sso/Metadata] is missing the mandatory reference to the GÉANT Data Protection Code of Conduct (DP-CoCo) [1] [2] [3] You can use any of our other SP’s privacy policy as a example to fix yours.

This way DFN-AAI cannot assign the CoCo unity category and your SP won’t be picked up by any academic IdP!

[1] - https://www.clarin.eu/content/guidelines-saml-metadata-about-your-sp Point 10 [2] - https://www.clarin.eu/content/how-can-i-comply-data-protection-code-conduct [3] - https://geant3plus.archive.geant.net/uri/dataprotection-code-of-conduct/V1/Pages/default.aspx

Also the Shibboleth metadata only reference one privacy policy and not both of them.