DAILY FREE EBOOKS

Your data.
Your choice.

Controller

Aleks Paramonov
Grandweg 162, 22529 Hamburg, Deutschland
hello@dailyfreeebooks.com

Summary

We only process the data we need to run the free newsletter and this website. Our website uses no advertising pixels, no analytics scripts and no externally hosted fonts. We do not sell data and we do not upload subscriber lists to advertising platforms such as Reddit.

Newsletter

To subscribe, you visit a signup page hosted by our email service provider Kit. We process your email address, the edition you chose (English/United States or German/Germany), your subscription status, and the time of signup and confirmation (and, where Kit logs it, the IP address used), in order to send you the newsletter you requested and to be able to prove your consent. You only receive the newsletter after clicking the link in our confirmation email (double opt-in).

The legal basis is your consent (Article 6(1)(a) GDPR). Logging the signup serves to prove that consent (Article 6(1)(c) and (f) GDPR). You can withdraw your consent at any time using the unsubscribe link in every email or by emailing us; this does not affect the lawfulness of processing before the withdrawal.

Kit records whether an email was delivered and opened (using a small image embedded in the newsletter) and which links were clicked, linked to the recipient address. We use this to see which recommendations resonate and to improve the newsletter. This measurement is part of your newsletter consent (Article 6(1)(a) GDPR, Section 25(1) German TDDDG); you can end it by unsubscribing. If your email app does not load images, opens are not measured.

If you reach us through a link with campaign tags (UTM parameters, for example from an ad on Reddit), Kit stores the source and campaign with your signup. This lets us see which campaigns bring readers. No data about you is sent to Reddit or other advertising platforms in the process. The legal basis is our legitimate interest in measuring the effectiveness of our advertising (Article 6(1)(f) GDPR).

Email service provider Kit

The signup page, list management and sending are provided by Kit, Inc. (USA) as our processor (Article 28 GDPR). Kit is certified under the EU-U.S. Data Privacy Framework; the safeguards in Kit’s data processing addendum apply in addition. On the signup page, Kit loads fonts from Google Fonts and may use Google reCAPTCHA to prevent abuse, which transmits your IP address to Google.

Retention

We keep your newsletter data for as long as you are subscribed. After you unsubscribe you receive no further emails. We then keep only a suppression record with your address and the consent evidence for as long as necessary to prevent unwanted re-sending and to defend legal claims (generally until the three-year limitation period expires). Unconfirmed signups are never used for sending. You can request deletion at any time.

Hosting of this website

This website runs on OpenAI Sites and is delivered through Cloudflare’s network. When you visit, technically necessary connection data such as IP address, time, requested page and browser identifier is processed to deliver the site and protect it against abuse (Article 6(1)(f) GDPR). Cloudflare may set a strictly necessary bot-protection cookie for this purpose (Section 25(2) no. 2 TDDDG). This may involve a transfer to the United States, based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.

Book links lead to external providers such as Standard Ebooks. Their privacy policies apply once you open such a link.

Contacting us by email

If you write to hello@dailyfreeebooks.com, we process your message and address to answer you (Article 6(1)(b) or (f) GDPR). Emails to this address are forwarded by our domain provider Namecheap to a mailbox hosted by Google (Gmail).

Book placements for authors

When book placements are offered, we process your contact name and email, book details, cover and sample links, free dates, preferred date and rights declaration, together with review notes and booking status, to prepare and perform the contract (Article 6(1)(b) GDPR). An inquiry does not subscribe you to the newsletter.

Payment takes place on a checkout page provided by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). You enter card details directly with Stripe; we only receive payment status, amount and references for reconciliation and refunds. Invoices and payment records are kept for the statutory periods (up to ten years under German tax and commercial law).

Your rights

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where we rely on legitimate interests, you may object on grounds relating to your particular situation (Article 21). You can withdraw consent at any time with effect for the future (Article 7(3)). Just email us at the address above.

You may also lodge a complaint with a data protection supervisory authority (Article 77 GDPR), for example the authority responsible for us: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

Providing your email address is voluntary, but we cannot send you the newsletter without it. We do not use automated decision-making, including profiling.

Last updated: September 2026