Privacy Policy
1. Who processes your data
The controller of your personal data is VolID Sp. z o.o., Prosta 51, 00-838 Warsaw, Poland. Contact for data protection matters: lv@volid.io, +48 517 330 700.
2. What data we collect
| Category | Scope |
|---|---|
| Registration | Page address (handle), e-mail, optionally phone, Google or Apple account data |
| Profile | Name, photo, description, links, gallery, matching parameters — provided voluntarily |
| Contacts | Data of people you exchanged contacts with, and data submitted to you via a form |
| Operations | Vols earned and spent, linked carriers, transaction history |
| Payment | Payment Account Reference (PAR), card scheme, last four digits of the card |
| Technical | IP address, device and browser type, country and city, access logs |
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Operating your account and providing services | Performance of a contract — Art. 6(1)(b) GDPR |
| Earning and settling Vols | Performance of a contract — Art. 6(1)(b) GDPR |
| Sharing your contact with a recipient you select | Your consent — Art. 6(1)(a) GDPR |
| Sending news and offers | Your consent — Art. 6(1)(a) GDPR |
| Security and prevention of abuse | Legitimate interest — Art. 6(1)(f) GDPR |
| Accounting and tax obligations | Legal obligation — Art. 6(1)(c) GDPR |
4. Who receives the data
- Users and businesses to whom you personally sent your contact. Upon transfer the recipient becomes an independent controller of that data.
- Hosting and cloud infrastructure providers.
- Messaging service providers — if you consented to receive messages.
- Our payment partner — to the extent required to identify a transaction.
- Public authorities — upon a lawful request.
5. Retention periods**
| Data | Period |
|---|---|
| Account data | While the account is active and 30 days after deletion |
| Contacts and exchange history | Until you delete them |
| Vols transactions | 5 years — accounting requirements |
| Consents and withdrawals | 3 years after withdrawal — as evidence |
| Technical logs | 12 months |
6. Your rights
You have the right to request access to your data, its rectification, erasure or restriction of processing, to object to processing based on legitimate interest, to receive your data in a portable format and to withdraw consent. Withdrawal does not affect the lawfulness of processing carried out before it.
You have the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
7. Withdrawing consent and opting out
- In your account settings.
- Via the link in any message received — without signing in.
- By e-mail to lv@volid.io.
If you shared your contact with another participant, you may withdraw that transfer and request erasure by the recipient — the relevant link is available in your account.
8. Payment cards
We do not store your card number, expiry date or security code. To credit Vols on payment we use the Payment Account Reference (PAR) — a standard identifier that is not sensitive cardholder data. You may unlink a card at any time in your account.
9. Transfers outside the European Economic Area
We aim to process data within the EEA. If a transfer outside the EEA becomes necessary, it takes place on the basis of a European Commission adequacy decision or standard contractual clauses.
10. Changes to this policy
We notify you of changes in your account and by e-mail no later than 14 days before they take effect. The current version is always available on our website.