Operational baseline. Controller-specific legal details must be completed before production.
The public gallery does not require an account. Newsletter registration processes the submitted email address, language preference, consent version and confirmation status for sending requested editions.
Subscription uses double opt-in. Records are kept until unsubscribe, suppression for delivery protection, or a documented retention limit. Subscriber data is not sold and must not be included in analytics or application logs.
Before production, the legal controller identity, contact, processors, lawful basis, retention periods, international-transfer safeguards and data-subject request channel must be completed and legally reviewed.