Privacy and Personal Information
1. Data controller
The controller is Robert Maślańczyk, operator of De Oppresso Liber. Contact: kontakt@deopressoliber.org. Postal address: ul. 1 Maja 34, 58-260 Bielawa, Poland.
2. Request data and purpose
The questionnaire is used to prepare and provide pastoral support, conversation and prayer, and to arrange contact and an appointment. It is for adults.
You provide a name or pseudonym, age, gender, region, selected answers and your own descriptions. When submitting, you provide an email address or telephone number. A summary and consent confirmation are included. The data comes from you. We do not require a surname or precise home address; do not enter information identifying other people.
Answers may reveal religious beliefs and sometimes health or sex-life information. These are special categories of personal data. Provide only what is needed for your request; you may leave particularly personal matters for the conversation.
3. Legal bases
We handle requests on the basis of consent — Article 6(1)(a) GDPR, with explicit consent also required for special-category data — Article 9(2)(a). Providing data is voluntary. Without consent and necessary contact details we cannot handle a request; the Library remains available.
Organisational correspondence and necessary technical data are processed under Article 6(1)(f): our legitimate interests are responding to contact, delivering the website and protecting it. Data-protection obligations, including exercising your rights, are handled under Article 6(1)(c). Legitimate interests alone do not authorise processing special-category data.
Consent does not cover advertising, publication of a testimony, sharing your history with other communities or analysis by external AI services. We record the wording and version of the statement, language and time to demonstrate consent.
4. Access and separate features
The administrator and authorised people assigned to your case have access. Recipients may also include hosting, email and technical service providers to the extent needed, and competent authorities where a specific legal obligation requires disclosure.
Submitted questionnaire answers are stored on the website’s server. They are not sent to Telegram, voice services or external AI services.
The Contact form is a separate channel: the message, name or pseudonym and reply contact details may be forwarded through Telegram or email. Do not use it or ordinary email to send the complete questionnaire or details of your private history.
Telegram Messenger Inc. may share messages and contact details with group companies in the British Virgin Islands and Dubai. Its privacy policy states that EU standard contractual clauses are used as safeguards. Information about these safeguards and the EEA representative: https://telegram.org/privacy/eu (sections 1.4 and 8.2). This concerns contact messages, not questionnaire answers.
If you enable voice search, your browser may send a recording of the search phrase to its provider; the website does not save it. This feature is only for Library searches and does not use questionnaire answers. If you enable notifications, the server stores encrypted subscription data and browser or operating-system providers participate in delivery. Notifications contain no questionnaire answers. You can turn them off in site settings.
5. Data on your device
Filling in the questionnaire and saving a summary alone do not send answers to the administrator. Answers, notes, a pending submission or correction and private access details may remain on the device without automatic expiry. The app does not encrypt them. “Cookies” and “Safety” explain storage and deletion.
The server processes connection data needed to deliver the website and prevent abuse. The visit counter retains aggregate totals for 400 days without a visitor identifier; it is not a history of your answers or viewed cards.
6. Retention periods
Complete request, descriptions and summary: up to 30 days after receipt, or earlier upon deletion or withdrawal of consent.
Minimal organisational data — request number and status, contact details and appointment: up to 365 days after the last activity. If an appointment occurs later, necessary data remains until it is completed or cancelled; this does not extend retention of questionnaire contents.
Organisational correspondence: until resolved, no longer than 365 days after the last message. Access logs and minimal consent or withdrawal records, without answers: up to 365 days after the event. Current connection logs: up to 30 days. Backups: rotated within 30 days; deleted data is not restored for ongoing handling.
Keeping strictly necessary data longer requires a specific legal basis, such as a legal obligation or an actual dispute, and an appropriate Article 9 basis for special-category data.
7. Rights and deletion
You may withdraw consent at any time without affecting the lawfulness of previous processing. Through private access, you can withdraw consent and delete the request and associated organisational data, subject to the backups and justified exceptions above. This ends handling of the request. Deleting device data is separate.
Under the GDPR you have rights of access, rectification, erasure and restriction and, where the relevant conditions are met, portability and objection to processing based on legitimate interests.
To exercise rights or report lost private access, write to kontakt@deopressoliber.org without sending your full history. Identity checks are limited to necessary information. We normally respond within one month and notify you within that period of a justified extension.
You may complain to the President of Poland’s data-protection authority UODO or another competent EU/EEA supervisory authority: https://uodo.gov.pl/.
We do not make solely automated decisions about you with legal or similarly significant effects and do not create advertising profiles. We explain new processing purposes before introducing them; earlier consent does not automatically cover a new purpose.