Privacy Policy

Last updated: 20 January 2025

1. Data controller

The controller of your data is DNA HEALTHCARE PROSTA SPÓŁKA AKCYJNA, ul. Adama Branickiego 15, 02-972 Warsaw, Poland (KRS 0001147776). Data contact: mail@dna.healthcare.

2. What data and why

• Plain listening (free) requires no account. Your daily listening allowance is stored locally in your browser (localStorage) — this data is not sent to the Operator.
• Account & subscription: email address (optionally a name) — to create the account, provide the service and contact you. Basis: performance of a contract (Art. 6(1)(b) GDPR).
• Payments: handled by an external payment provider; we do not store card data. Billing data is processed to complete payments and meet accounting duties (Art. 6(1)(b) and (c) GDPR).
• Newsletter (if you sign up): email address based on consent (Art. 6(1)(a) GDPR).
• Technical data (logs, IP address, cookies): operation, security and statistics — legitimate interest (Art. 6(1)(f)); non-essential cookies only with consent.

3. Recipients

Data may be entrusted to trusted providers acting on our behalf: hosting and CDN, the payment provider, and an email-sending tool — under data processing agreements.

4. Retention

• Account data — for the life of the account and the limitation period for claims.
• Billing data — for the period required by law (generally 5 years).
• Newsletter — until you withdraw consent.

5. Your rights

You have the right to access, rectify, erase, restrict, port and object to processing of your data, and to withdraw consent at any time (without affecting prior lawful processing). You may also lodge a complaint with the Polish DPA (uodo.gov.pl).

6. Cookies and localStorage

We use essential mechanisms (running the Service, remembering language, the daily listening allowance) and — with consent — statistics tools. You can manage these in your browser.

7. Contact

For privacy matters: mail@dna.healthcare.