1. Data Controller Identification
The controller of your personal data under Article 4(7) of the GDPR is:
Entity: Esencja / Zordon Hub Operations
Jurisdiction: Warsaw, Republic of Poland (European Union)
Privacy & DPO Inquiries: privacy@esencja.app
Supervisory Authority: Prezes Urzędu Ochrony Danych Osobowych (PUODO)
2. Data We Collect & Processing Methods
We process personal data only when necessary to provide our digital book synthesis service:
- HTTP Request & Edge Server Logs: When accessing our platform, our edge infrastructure automatically logs IP addresses, request timestamps, requested URLs, HTTP status codes, and browser user-agent strings solely for diagnostic security and anti-DDoS mitigation.
- Client-Side State Storage: Your reading percentage, book completion status, audio playback coordinates, custom playlists, and reading streak count are kept directly in your browser client storage.
- Correspondence Data: If you contact our editorial or support desk, we collect your email address and message contents to respond to your inquiry.
3. Legal Bases for Processing (Article 6 GDPR)
| Processing Purpose | Legal Ground under GDPR |
|---|---|
| Web app navigation & audio streaming | Art. 6(1)(b) GDPR (Performance of requested digital service) |
| Server security & bot protection | Art. 6(1)(f) GDPR (Legitimate interest in cyberdefense) |
| Client-side functional storage & telemetry | Art. 6(1)(a) GDPR (Explicit user consent) |
| Handling copyright or statutory legal notices | Art. 6(1)(c) GDPR (Compliance with legal obligations) |
4. Data Sub-Processors & International Transfers
We rely on tier-one infrastructure providers to deliver audio streaming and static content:
- Cloudflare, Inc. (USA/Global): Cloudflare R2 object storage CDN for high-speed chapter audio streams. Transfers are governed by the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs).
- Vercel, Inc. (USA/Global): Edge deployment and hosting platform, compliant with GDPR via verified Data Processing Agreements.
We do not sell, license, or transfer user records to data brokers, advertising retargeters, or lead generation networks.
5. Your Enforceable Rights (Articles 15–22 GDPR)
Under the General Data Protection Regulation, you have the right to:
Access & Rectification
Request a copy of any personal data we hold and have inaccuracies rectified (Arts. 15 & 16 GDPR).
Erasure ("Right to be Forgotten")
Request deletion of your data when legal processing grounds cease to apply (Art. 17 GDPR).
Restriction & Objection
Restrict processing or object to processing based on legitimate interests (Arts. 18 & 21 GDPR).
Withdraw Consent
Revoke cookie or storage consent at any time via the Cookie Settings modal (Art. 7(3) GDPR).
To exercise your rights, email privacy@esencja.app. We process verified requests within 30 days free of charge.
6. Supervisory Authority & Complaints
You have the right to lodge a complaint with the competent data protection supervisory authority:
Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warszawa, Poland
Infolinia: 606-950-000 | Website: https://uodo.gov.pl