Privacy Policy

Website Operator

Website operated by: Charlotte Frost (pseudonym)
Location: Heidelberg, Germany
Contact: charlotte.frost.books@gmail.com

This is a private, non-commercial author website operated in accordance with §5 TMG (Germany). All content and communications are provided for literary and informational purposes only. No commercial services or direct sales are conducted through this website.

Data Collection

This website collects the following personal data when you subscribe to the newsletter:

• Email address - To send you newsletters
• Name - To personalize communications
• IP address - For GDPR compliance and proof of consent
• Timestamp - Date and time of subscription and confirmation
• Country information - Auto-detected from IP address to comply with regional regulations
• Consent details - Record of which consent text version you agreed to
• Subscription source - Whether you subscribed via website or BookFunnel

We do not use cookies or tracking technologies on this website.

Double Opt-In Process

This website uses a double opt-in process, as required by German and EU law:

1. When you submit the subscription form, your information is stored with a "pending" status
2. You receive a confirmation email with a unique verification link
3. Your subscription is only activated after you click the confirmation link
4. A confirmation timestamp is recorded when you complete this process

This two-step process ensures that only you can subscribe your email address to the newsletter.

How We Use Your Data

Your data is used exclusively for the following purposes:

• Send occasional newsletters and updates about Charlotte Frost's books and writing
• Provide information about new releases and special offers
• Share behind-the-scenes content and author updates
• Maintain legal proof of consent as required by GDPR

Legal basis for processing: Your explicit consent, obtained through the double opt-in process (GDPR Article 6(1)(a)).

Data Storage

Your personal data is stored securely in Google Sheets, managed directly by the author. We do not use third-party email marketing services.

The following information is stored for each subscriber:

• Email address and name
• Subscription status (pending, confirmed, or unsubscribed)
• IP address at time of signup
• Country and region (auto-detected)
• Signup and confirmation timestamps
• Consent text version agreed to
• Source of subscription (website or BookFunnel)

The Google Sheets database is stored within Google's secure cloud infrastructure (Google Ireland Limited), compliant with EU GDPR requirements under the EU–US Data Privacy Framework.

Data Processing by Google

Your subscriber data (name and email address) is stored securely in Google Sheets.

For all users located in the European Union, data processing is carried out by:

Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland

Google Ireland Limited acts as the data processor under GDPR.

Data is stored within Google's secure cloud infrastructure and may be transferred between EU and US data centres exclusively in accordance with the EU–US Data Privacy Framework, which governs lawful data protection and ensures appropriate safeguards.

No third-party access is granted, and your data is used solely for direct communication from the author.

Why We Collect IP Addresses

Under GDPR (Recital 32), we are permitted and encouraged to collect IP addresses as proof of consent. This protects both you and us by:

• Proving that consent was freely given at a specific time and place
• Providing evidence if someone claims they didn't subscribe
• Detecting and preventing fraudulent subscriptions
• Meeting legal requirements under German and EU data protection law

Your IP address is never used for tracking or shared with third parties.

Data Sharing

Your email address will never be sold, shared, or distributed to third parties. It remains confidential and is used solely for direct communication from Charlotte Frost.

Cookies and Analytics

This website does not use cookies or analytics tracking. We do not collect browsing data or use any tracking technologies.

Your Rights

You have the right to:

• Unsubscribe from the newsletter at any time
• Request deletion of your email address from our records
• Request information about the data we hold about you
• In accordance with Articles 12–23 of the General Data Protection Regulation (GDPR), you can contact the data controller (Charlotte Frost) directly for any data-related request

To exercise these rights, please contact us through the email address provided in newsletter communications.

GDPR Compliance

This website is committed to compliance with the General Data Protection Regulation (GDPR). By subscribing to the newsletter, you provide explicit consent for your email address to be used for the purposes described above.

External Links

This website contains links to external sites, including Amazon. We are not responsible for the privacy practices of external websites. Please review their privacy policies independently.

Updates to This Policy

This privacy policy may be updated periodically. Any changes will be posted on this page with an updated revision date.

Last updated: January 2025