Data Protection

1. Our Approach to Data Protection

Free-Will.pl is a personal workshop for ideas, research, projects and practical materials. We aim to keep the website useful without collecting unnecessary personal information from visitors.

When personal data is required, we aim to process it fairly, transparently and only for legitimate and clearly defined purposes.

2. Who Is Responsible for Your Data?

The controller of personal data processed through Free-Will.pl is the website operator located in Poland.

3. Data Protection Principles

Where applicable, personal data is handled according to the principles established by European data protection legislation, including the General Data Protection Regulation (GDPR).

• Lawfulness: personal data should be processed on an appropriate legal basis.
• Fairness and transparency: people should understand how and why their information is used.
• Purpose limitation: information should be collected for specific and legitimate purposes.
• Data minimisation: only information that is reasonably necessary should be collected.
• Accuracy: reasonable steps should be taken to keep personal information accurate.
• Storage limitation: information should not be retained indefinitely without a legitimate reason.
• Security: appropriate technical and organisational measures should be used to protect personal information.
• Accountability: appropriate responsibility should be maintained for how personal data is processed.

4. What Personal Data May Be Processed?

The exact information processed depends on how you interact with the website.

Information You Provide

• Name or preferred name.
• Email address.
• Telephone or WhatsApp number.
• Information included in a contact or project enquiry.
• Information voluntarily provided during communication.

Technical Information

Technical service providers may process information required to deliver and secure the website, such as IP address, browser type, device information, access times and technical logs.

5. Why Do We Process Personal Data?

Personal information may be processed when reasonably necessary for purposes such as:

• Responding to messages and enquiries.
• Communicating about projects or potential collaboration.
• Providing requested information or services.
• Operating and maintaining the website.
• Maintaining website security.
• Detecting and preventing abuse or fraudulent activity.
• Improving website functionality and content.
• Meeting legal and regulatory obligations.

6. Legal Basis for Processing

Depending on the circumstances, processing may rely on one of the legal bases recognised by applicable data protection law.

• Consent — where you have actively provided consent for a particular purpose.
• Contract — where processing is necessary to perform an agreement or take requested steps before entering into an agreement.
• Legal obligation — where processing is required to comply with applicable law.
• Legitimate interests — where processing is reasonably necessary for legitimate interests and your rights do not override those interests.

7. How We Protect Personal Data

Reasonable technical and organisational measures may be used to protect personal information against unauthorised access, accidental loss, destruction, alteration or unlawful processing.

Security Measures May Include

• Secure website and server configuration.
• Access controls and authentication.
• Software and security updates.
• Monitoring for suspicious activity where appropriate.
• Limited access to personal information.
• Secure communication channels where available.

8. Sharing Personal Data

Personal data is not sold as a commercial product.

Where necessary, information may be processed by trusted service providers involved in operating the website or communicating with visitors.

Depending on the services actually used, these may include:

• Hosting and infrastructure providers.
• Email and communication providers.
• Security and technical service providers.
• Analytics providers where applicable.
• Professional advisers where reasonably necessary.
• Public authorities where legally required.

9. International Data Transfers

Some service providers used by modern websites may process information in countries outside the European Economic Area (EEA).

Where such a transfer involves personal data protected by the GDPR, appropriate safeguards will be considered and implemented where required by applicable law.

Depending on the circumstances, safeguards may include an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism.

10. Data Retention

Personal data should only be retained for as long as reasonably necessary for the purpose for which it was collected, unless a longer period is required or permitted by law.

The appropriate retention period depends on the type of information, the purpose of processing, legal requirements and the nature of the relationship with the individual.

When information is no longer required, it may be deleted, anonymised or securely disposed of where appropriate.

11. Your Data Protection Rights

Depending on applicable law and the circumstances of processing, you may have the following rights:

12. How to Make a Data Protection Request

If you want to exercise a data protection right or ask a question about how your information is processed, contact us by email.

To help us process your request efficiently, please provide enough information to identify the request and explain what you are asking us to do.

We may need to verify your identity before fulfilling certain requests in order to protect personal information from unauthorised disclosure.

13. Cookies and Online Technologies

Free-Will.pl may use cookies and similar technologies for essential website functionality, security, preferences and, where applicable, analytics.

Non-essential cookies or technologies may be subject to consent requirements under applicable law.

For more information about how cookies and personal data are handled, please refer to our Privacy Policy .

14. Children's Data

Free-Will.pl is not specifically directed at children and we do not intentionally seek to collect children's personal data.

If you believe that personal information belonging to a child has been submitted to the website, please contact us so the situation can be reviewed.

15. Relationship With Our Privacy Policy

This Data Protection page provides an overview of our approach to personal data protection.

For more detailed information about the categories of data we may collect, purposes of processing, third-party services, cookies, retention and other privacy matters, please read our Privacy Policy .

16. Changes to This Information

Our data protection practices may change as the website develops, new technologies are introduced or legal requirements change.

We may therefore update this page from time to time. The latest version will always be published on this page.

17. Supervisory Authority

If you believe that your personal data protection rights have not been respected, you may have the right to lodge a complaint with the competent supervisory authority.

For Poland, the relevant supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

More information is available from the official Personal Data Protection Office .