A practical, plain-language summary of the rights every person in the European Union and European Economic Area has under the General Data Protection Regulation (Regulation (EU) 2016/679), and exactly how to exercise them with us.
This page explains how to use each right in connection with the freebillgen.com service. For the underlying detail - which categories of data we hold, on what lawful basis, for how long, and which sub-processors touch them - see our Privacy. The two pages are designed to be read together: the privacy policy tells you what we do with your data; this page tells you what you can do about it.
How a request works with us
You do not need a form, a lawyer, or a specific phrase. A short email naming the right you want to use is enough. We handle every request the same way, regardless of which right is invoked.
- Where to write
- info@freebillgen.com A single email address handles every right on this page. We do not run a separate ticketing system for data requests.
- Our deadline
- We reply within one calendar month of receiving your request. For genuinely complex cases we may extend by up to two further months and will tell you the reason in advance.
- Identity check
- We need to be sure the request comes from you. In many cases, sending the email from the address tied to your FreeBillGen account is enough. If we have reasonable doubts, we may ask for additional information needed to confirm your identity. We do not ask for a copy of an identity document unless it is necessary and proportionate.
- Cost
- Free. We only charge a reasonable fee, or refuse, if a request is manifestly unfounded or excessive (for example, repeated identical requests).
- Format of the reply
- We answer in writing, in the language you wrote to us in (English or Lithuanian). For data exports we use a structured, machine-readable format.
If we ever decline a request, in whole or in part, we tell you why in writing and remind you that you can complain to the supervisory authority listed below or seek a judicial remedy.
Right of access
You can ask us to confirm whether we hold personal data about you and, if so, to give you a copy together with the supporting information listed in Article 15 - the purposes, the categories of data, the recipients, the retention period, and the safeguards used for any transfers outside the EEA.
How to exercise it Email info@freebillgen.com with the subject line "Access request". You do not need to justify the request. We provide the copy in an appropriate electronic format and explain the delivery method.
Right to rectification
If any personal data we hold about you is inaccurate or incomplete, you can ask us to correct or complete it. Most account and invoicing fields can be edited directly inside the application; this right exists for everything else.
How to exercise it Email info@freebillgen.com describing what should be changed and what the correct value is. Where the original record is one we issued (such as an invoice already sent to a third party), we will explain what we can and cannot retroactively alter.
Right to erasure ("right to be forgotten")
You can ask us to delete personal data we hold about you - the so-called "right to be forgotten". This includes account closure with full data removal.
Erasure is not absolute. Information may be kept where a legal obligation or the establishment, exercise or defence of legal claims requires it. In the self-service deletion flow, access is blocked and the account name and email are replaced immediately; tenant data is hard-deleted after 30 days. De-identified authentication event type and time remain. Completed financial records and a limited sanctions-warning acknowledgement use the separate retention limits in the Privacy Policy. A documented legal hold can delay deletion of covered financial records while the hold is reviewed.
How to exercise it Email info@freebillgen.com with the subject line "Erasure request". We confirm in writing once the deletion is complete and tell you what, if anything, we are legally required to retain.
Right to restrict processing
You can ask us to restrict processing in the circumstances described in Article 18, for example while we verify the accuracy of data you have challenged. Restricted data may still be stored and may be processed where the GDPR permits, including with your consent or for legal claims.
How to exercise it Email info@freebillgen.com saying which data should be restricted and why. We reply in writing and tell you before a restriction is lifted.
Right to data portability
For data you have provided to us and which we process by automated means on the basis of your consent or a contract with you, you have the right to receive it in a structured, commonly used, machine-readable format - and to ask us to transmit it directly to another controller where technically feasible.
How to exercise it Email info@freebillgen.com with the subject line "Portability request". Where the right applies, we provide eligible data in a structured, commonly used, machine-readable format. Tell us if you need a particular format or direct transfer, and we will confirm what is technically feasible.
Right to object
You can object, on grounds relating to your particular situation, to processing we carry out in our legitimate interests. Where we cannot show compelling legitimate grounds that override your interests, rights, and freedoms, we stop the processing.
How to exercise it Email info@freebillgen.com explaining what you object to and why. We assess the objection and write back with the outcome within one month. You may separately request restriction while the conditions in Article 18 apply.
Right to withdraw consent
Where we rely on your consent for a specific activity, such as saving the optional guest draft in your browser, you can withdraw that consent at any time. Withdrawal does not affect processing carried out lawfully before it.
How to exercise it Use Clear saved draft for the optional browser draft, or email info@freebillgen.com for another consent-based activity. We stop the activity after receiving the withdrawal, subject to the technical time needed to process it.
Right to lodge a complaint
If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the data protection supervisory authority of the EEA country in which you live, work, or where the alleged infringement took place. You can also seek a judicial remedy in court.
How to exercise it You can write to us first at info@freebillgen.com - we take complaints seriously and would rather resolve them directly - but you are not required to. The Lithuanian supervisory authority is listed in the next section.
Supervisory authority
Because the operator is established in Lithuania, the lead supervisory authority for FreeBillGen is the Lithuanian State Data Protection Inspectorate.
If you live in another EEA country, you may instead contact your own national authority - their decisions are recognised across the EEA under the GDPR cooperation mechanism. A directory of all national authorities is maintained by the European Data Protection Board at edpb.europa.eu.
You are not obliged to contact us before complaining to a supervisory authority, but in our experience most issues are resolved more quickly by writing to us first.
Contact
For anything on this page, write to info@freebillgen.com. For our full identity and postal address see the Imprint. For the underlying data-handling detail (categories, lawful bases, retention, sub-processors, security) see the Privacy.