diff --git a/GDPR.txt b/GDPR.txt
index f8f7f13c83c97ff796b1c5f6c9837056edb7a1d0..a7336bac57c451ae5030afb0c97fb494adde3250 100644
--- a/GDPR.txt
+++ b/GDPR.txt
@@ -69,3 +69,15 @@ description:
     platforms (such as Apple Podcasts).
 mitigation:
     The e-mail can be generic.
+
+purpose: Grant access to premium content
+lawfulness: legitimate interest
+
+data: Subscriber's email address
+required: yes
+visibility: administrators
+description:
+    The subscriber's e-mail address is used to provide credentials for
+    listening to premium content.
+mitigation:
+    The e-mail can be generic.
diff --git a/public/.well-known/GDPR.yml b/public/.well-known/GDPR.yml
index 40c822bafb498e1e8c53a076c5c9f26a11667d1a..dba6d271c387ebeabeeceb8494c3b2d0be23438f 100644
--- a/public/.well-known/GDPR.yml
+++ b/public/.well-known/GDPR.yml
@@ -73,3 +73,14 @@ purposes:
           platforms (such as Apple Podcasts).
         mitigation: The e-mail can be generic.
         retention: forever
+  - description: Grant access to premium content
+    lawfulness: legitimate interest
+    data:
+      - field: Subscriber's email address
+        required: yes
+        visibility: administrators
+        description: |
+          The subscriber's e-mail address is used to provide credentials for
+          listening to premium content.
+        mitigation: The e-mail can be generic.
+        retention: until the subscription ends