GCJ EDITOR / PRIVACY
Your data,
clearly explained.
How we handle personal data when an adult reader requests a book bonus or separately chooses publishing updates.
The bonus is available without consent to publishing updates.
Last updated: 1 October 2026Download the PDF summaryThe full and current notice is always available on this page.
Controller and contact
The controller is Claire Dawson, operating under the GCJ Editor publishing brand. For personal-data requests, write to privacy@gcj-editor.com.
This address is also for objections, withdrawals and erasure requests.
Data collected
The site form requires an adult’s email address. First name is optional; last name is not requested. The system records the request, the optional publishing-updates choice, the version of the wording shown, email sending and confirmation, and technical data needed to secure access to the bonus. On the bonus page, Turnstile processes technical signals to distinguish visitors from bots: according to Cloudflare, these include IP address, TLS fingerprint, User-Agent header, widget sitekey and site origin. Brevo processes transactional-email events and, only if the box is ticked, data for the publishing list. Per-contact tracking consent is enabled in the account: recipients without a separate tracking choice are not individually tracked for future email opens and clicks. The publishing-updates box is not consent to email tracking.
Providers may retain technical and security logs according to their settings and notices. Book purchases take place on Amazon, not on the GCJ Editor website.
Purposes and lawful bases
The email address is used to confirm the request and enable the bonus download from this website. For delivery requested by the reader and abuse prevention, the controller relies on legitimate interests (GDPR Article 6(1)(f)), limited to necessary data. You may object to this processing where the law provides. The request and the recorded choice are separate from publishing updates.
Only a voluntarily ticked marketing box may trigger subscription to the relevant list. The lawful basis for these messages is consent (GDPR Article 6(1)(a)). Email confirmation alone does not prove marketing consent.
Required fields and choices
A valid, confirmed email address is needed to download the bonus; first name is optional. The publishing-updates checkbox is separate, empty by default and optional: the bonus remains available without it. Consent to updates may be withdrawn at any time through “Unsubscribe” in promotional emails or by writing to privacy@gcj-editor.com, without affecting prior lawful processing.
Viewing this notice does not mean accepting it as a contract. The request and explicit choice are recorded with the version of the wording displayed.
Service providers and recipients
Cloudflare hosts the site, checks requests with Turnstile and stores the request, confirmation and recorded choice in a database. Bonus PDFs are held in non-public storage and downloaded from the site after verification. Cloudflare also states that it processes Turnstile signals as an independent controller to improve bot detection; see its Turnstile privacy notice. Brevo sends confirmation emails and manages publishing lists only for readers who opt in. Cloudflare forwards mail sent to privacy@gcj-editor.com to a mailbox managed by the controller. Purchases take place on Amazon’s external website.
Brevo identifies the European Union as its service-data storage location. Some providers or subprocessors may process data outside the European Economic Area, subject to safeguards in their data-processing terms. You can request further details at the privacy address.
Retention
The website separates purposes: unconfirmed requests are deleted 7 days after submission; confirmed bonus-only request records 90 days after email confirmation, even if the PDF is not downloaded. In the Brevo account, transactional-email logs are set to one month and new message previews are not stored; these settings do not erase contacts or any earlier events. For readers choosing publishing updates, there is an annual review of inactive contacts and a 24-month limit after the last verifiable meaningful interaction, such as a new explicit choice, a relevant reply or a preference confirmation. Simple email opens and automatic deliveries do not count. Without later actions, this period begins at the initial confirmation linked to the positive choice. A new bonus-only request does not renew marketing consent.
Minimal evidence of a positive marketing choice is retained for 24 months after withdrawal or expiry, separately from an address eligible for campaigns. The controller also handles withdrawal in Brevo contacts; removing an address from a list does not erase all related data.
Your rights
You may request access, rectification, erasure, restriction, portability where applicable, and object where the law provides. You may withdraw consent to publishing updates at any time without affecting prior lawful processing. You may also lodge a complaint with the Italian data protection authority.
Requests can be sent to privacy@gcj-editor.com. The form is intended for adults and is not designed to collect children’s data directly.
Cookies and automated decisions
After confirmation, the site uses a technical session for the bonus download; details are in the cookie page. No automated decision with legal or similarly significant effects for readers is planned.
Any future use of non-essential technologies will require assessment and an updated notice before activation.
GCJ EDITOR / NOTE
A separate choice
Email confirmation enables the bonus download. Only a voluntarily ticked optional box allows publishing updates.
References: Articles 6, 7 and 13 of Regulation (EU) 2016/679 and guidance from the Italian data protection authority.