Privacy Policy
Last updated: 1 July 2026
This policy explains how IYC Suomi ("we", "us") collects and uses your personal data when you create an account and take part in our volunteering activities through this platform. We are committed to protecting your privacy and handling your data in line with the EU General Data Protection Regulation (GDPR) and Finnish data protection law.
Who is responsible for your data
IYC Suomi is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, you can contact us at suomi@iyouthc.org.
What data we collect
Depending on how you use the platform, we may collect:
- Account details: first name, last name, email address, and password (stored securely and encrypted).
- Volunteer profile: phone number, age, languages you speak, nationality, how long you have been / will be in Finland, and whether you have a driving license.
- Activity information: the activities you sign up for, your registration status, and attendance.
- Communications: the confirmation and reminder emails we send you about your activities.
Why we use your data and our legal basis
- To manage your volunteer account and participation, so you can sign up for activities and we can organise them. Legal basis: your consent and our legitimate interest in running our volunteering programme.
- To communicate with you, for example, confirmation and day-before reminder emails for the activities you join. Legal basis: your consent and legitimate interest.
- To coordinate activities, for example, knowing languages spoken or driving-license availability helps us organise teams. Legal basis: legitimate interest.
You can withdraw your consent at any time (see "Your rights" below).
Who can see your data
Your profile and activity information are visible to the organisers and administrators of IYC Suomiwho coordinate volunteering. We do not sell your data or share it for advertising. We only share data with the service providers described below, and where we are required to by law.
Service providers we use
To run this platform we rely on trusted providers who process data on our behalf:
- Supabase, database and account authentication. Your data is hosted in the European Union.
- Vercel, hosting of the web application.
- Resend, sending the confirmation and reminder emails.
Some providers may process data outside the EU/EEA. Where that happens, appropriate safeguards (such as the European Commission's Standard Contractual Clauses) are in place to protect your data.
How long we keep your data
We keep your data for as long as you have an active volunteer account with us. If you ask us to delete your account, or after a prolonged period of inactivity, we will delete or anonymise your personal data, unless we are required to keep certain information by law.
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Ask us to correct data that is wrong or incomplete.
- Ask us to delete your data ("right to be forgotten").
- Ask us to restrict or object to how we use your data.
- Receive your data in a portable format.
- Withdraw your consent at any time.
To exercise any of these rights, contact us at suomi@iyouthc.org. You can also update much of your profile yourself from your account.
Cookies
We only use essential cookies needed to keep you logged in and to make the platform work. We do not use advertising or third-party tracking cookies.
Data of young people
Our volunteering is open to young people. We collect only the data we need and treat the data of minors with particular care. If you are under 18 and have questions, or if a parent or guardian wishes to contact us, please reach out at suomi@iyouthc.org.
Complaints
If you believe we have handled your data improperly, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi.
Changes to this policy
We may update this policy from time to time. When we do, we will change the "last updated" date above and, where appropriate, let you know.