The email Subscription has no double opt-in. In order to comply with GDPR it needs to. The user needs to receive a confirmation email once he opted in on the website ("please confirm subscription with link"). And I believe there needs to be an additional checkmark that must not be pre-checked stating "I agree to the terms and conditions and want to receive DAILY/WEEKLY emails".