Privacy Policy

Last updated: October 16th, 2026

This policy explains what personal data this website and its newsletter collect, why, and what rights you have over it, in line with the EU General Data Protection Regulation (GDPR).

Who is responsible for your data

The data controller for this site is:
Luca Donato
Contact: hello@donatoluca.com

What data is collected

If you subscribe to the newsletter, we collect the email address you provide, along with the date/time of signup and confirmation, which our email provider records automatically as proof of consent.

This site does not use any cookies or tracking scripts, including for the newsletter signup — see Cookies below.

Why we collect it, and our legal basis

Your email address is used only to send the newsletter you signed up for (new releases, events, updates about the book). The legal basis is your consent (GDPR Article 6(1)(a)), given via the opt-in checkbox at signup and confirmed by a double opt-in email.

If you subscribed via the free short story offer, the same consent and the same newsletter list apply — subscribing is what unlocks the download link, which is sent to your inbox once your subscription is confirmed. No extra data is collected for the story beyond the email address used for the newsletter itself.

Who processes your data

Newsletter signups are processed by MailerLite (UAB "MailerLite", Lithuania, EU), who host the subscriber list and send the emails on our behalf under a Data Processing Agreement. See MailerLite's privacy policy for details of their own processing.

Cookies

This site does not set any cookies and loads no JavaScript from MailerLite or anyone else. The newsletter signup (both on the page and in the popup window, which is our own code) is a plain HTML form that submits directly to MailerLite when you click Subscribe — nothing runs in your browser before that, and nothing is stored on your device by this site either way.

Submitting the form sends your email address to MailerLite's servers, covered by "Who processes your data" above; what happens on MailerLite's own side after that (e.g. any cookies their confirmation page might set) is covered by their privacy policy, not this one.

How long we keep it

We keep your email address for as long as you remain subscribed. You can unsubscribe at any time using the link included in every email, which removes you from future sends.

Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent at any time (e.g. by unsubscribing)
• Lodge a complaint with your local data protection supervisory authority

To exercise any of these rights, contact hello@donatoluca.com.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new "last updated" date.

This page is a starting template, not legal advice. Review it (or have it reviewed) before relying on it, especially if your subscriber base or data practices grow beyond a simple newsletter.