Privacy policy

Who is responsible

The controller of your data is Panagiotis Dimopoulos, trading as Goatsong, Moschopoleos 8-10, 10446 Athens, Greece. Email: info@tragediesforkids.com.

Write to that address for any question or request about your data.

What we collect, and why

Newsletter and free book: your email address, the language you choose for the book, and the proof of your consent (the date and time you signed up and confirmed, and the IP address used). We use them to send you the free book and our newsletter, about one email a month. Legal basis: your consent (Article 6(1)(a) GDPR).

Visiting the site: like every website, our host receives technical data such as your IP address and browser type, to deliver the pages and protect them from attacks and spam. Our visitor statistics are counted in total, without cookies. Legal basis: our legitimate interest in a safe, working website (Article 6(1)(f) GDPR).

Emails you send us: we keep them as long as needed to answer you.

We do not sell your data, we do not use it for advertising or profiling, and we never ask for a child's name, age, photo or any other data about children.

Adults only

The site and the newsletter are for adults (18+): parents, grandparents and teachers. When you sign up you confirm that you are 18 or older. We do not knowingly collect data from children; in Greece the age of digital consent is 15. If you believe a child has given us their data, write to us and we will delete it.

Who helps us (processors)

Brevo (Sendinblue SAS, France, EU): sends the newsletter and the double opt-in emails and stores the subscriber list.

Zoho (EU data centre): our mailboxes, info@tragediesforkids.com and goatsong@tragediesforkids.com.

Cloudflare: hosts the site, protects it from spam and attacks (Turnstile) and counts visits without cookies (Web Analytics). Cloudflare works as our processor under its Data Processing Addendum. Cloudflare is a US company: transfers of data to the US rely on the EU–US Data Privacy Framework, with the EU Standard Contractual Clauses as a fallback.

Each of them works only on our instructions, under a data processing agreement.

How long we keep your data

We keep your email until you unsubscribe, then delete it within 30 days.

If you don't click the confirmation link, you are never added to our list.

Emails we send

Every email has an unsubscribe link; one click is enough.

We count how many people open our emails and click their links as totals only, never linked to you (Brevo's anonymous tracking).

Cookies and browser storage

We use no cookies that need your consent: no advertising, no tracking, no social media buttons that follow you. Our visitor statistics (Cloudflare Web Analytics) work without cookies, and the spam check on the form (Cloudflare Turnstile) is strictly necessary for security.

The site remembers your language choice in your own browser (local storage). It never leaves your device, and you can clear it at any time in your browser settings.

If we ever add a cookie that isn't strictly necessary, we will ask for your consent first.

Your rights

You can ask to see your data, correct it, delete it, limit its use, receive it in a portable format, or object to its use. You can withdraw your consent at any time, by the unsubscribe link or by email; this doesn't affect what was done before.

We answer within one month. If you think we have not respected your rights, you can complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifisias 1–3, 115 23 Athens, www.dpa.gr, or to the authority of the EU country where you live.

Changes

If this policy changes, we update this page and its date. Important changes will also be announced in the newsletter.