Privacy Policy
Last updated: 27/07/2026
1. Who we are
Volunect is a volunteer events marketplace. We apply data protection practices aligned with GDPR requirements for all users.
2. Data we collect
We collect the following personal data when you use Volunect:
- Name and email address (on registration)
- City (optional, provided by you)
- Event signup history
- Attendance records
- Support submissions
- Organization address and event location, including geographic coordinates (latitude/longitude), when an NGO provides them for its profile or its events
- Your device's precise location, only if you explicitly choose "Use my location" when searching for events near you. This is opt-in and never collected automatically
- Address text you type into an address search field, which is sent to Google to generate suggestions (see section 4). This happens as you type, even if you don't end up selecting or saving a suggestion
3. How we use your data
Your data is used solely to operate the platform: matching volunteers with NGOs, sending transactional emails such as account confirmations and password resets, platform moderation, and, where an address or location is provided, showing NGO/event locations on a map and finding events within a chosen distance of an address or your current location.
We do not sell your data or use it for advertising.
4. Third-party services (Google Maps Platform)
Address search and map display are provided by Google Maps Platform (Places and Maps JavaScript APIs). When you type an address (as an NGO setting an organization or event address, or as a volunteer searching near an address on Find Events), that text is sent to Google to generate suggestions, and a selected suggestion's coordinates are resolved via Google. Google acts as a data processor for this functionality; see Google's Privacy Policy for how Google handles this data. As a US-headquartered company, this may involve a transfer of data outside the EU/EEA; Google provides Standard Contractual Clauses for this purpose.
"Use my location" is different: it uses your browser's own geolocation feature to read your device's coordinates directly and is not sent to Google. It only runs when you click the button, and your browser will separately prompt you to allow or deny it.
5. Legal basis (GDPR)
We process your data under the following legal bases:
- Contract: to provide the service you signed up for.
- Consent: for optional features and communications.
- Legitimate interests: to maintain platform security and integrity.
6. Your rights
Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your account and data
- Object to processing
- Data portability
To exercise these rights, contact us via the Support page.
7. Data storage
Data is stored on Supabase infrastructure within the EU (Frankfurt region). Retention: active account data is kept while your account exists. Deleted accounts have their data anonymized within 30 days.
8. Cookies
We use only essential cookies required for authentication. No tracking or advertising cookies are used. See our Cookie Notice for details.