Who is responsible for your data?
Vereniging Yekja is the data controller for the personal data described in this policy.
Scope and age requirement
This policy applies to the Yekja app, Yekja web app and the public Yekja website. Yekja is intended only for people aged 18 or older. We do not knowingly create accounts for children.
Personal data we collect
The information we process depends on which Yekja features you use.
Account and sign-in data
Email address, account identifier, authentication provider, sign-in status and information supplied by Google or Apple when you choose those sign-in methods, such as your name and profile picture.
Profile information
Display name, profile image, city, languages, biography, interests, volunteer information and other details you choose to add.
Community content
Support requests, posts, descriptions, images, comments, giveaways, event details, attendance information, volunteer requests, reviews and other content you submit.
Messages and reports
In-app chats, replies, moderation reports, safety reports and communications with Yekja.
Device and technical data
IP address, browser or device type, app version, timestamps, diagnostic logs, security events and push-notification tokens.
Location information
The city, postcode area or location you enter or select for a post, event or profile. Yekja does not require continuous background location tracking.
How and why we use personal data
- Create and manage your Yekja account
- Display your profile and content according to the selected visibility
- Connect members through support, giveaways and events
- Enable chats, replies, event attendance and volunteer interactions
- Send service messages and push notifications you have enabled
- Prevent abuse, fraud, spam and unsafe behaviour
- Review reports and enforce Yekja’s rules
- Maintain, troubleshoot and improve the app
- Comply with legal obligations and valid authority requests
Legal bases
Depending on the processing, we rely on performance of our agreement with you, your consent, our legitimate interests in operating and protecting Yekja, and compliance with legal obligations. You may withdraw consent where processing depends on consent, without affecting earlier lawful processing.
What other members can see
Information you publish may be visible to other members according to the feature and visibility setting you use. Public profiles, posts, event listings, comments and reviews may be visible to the community.
For private support requests, Yekja may show the request without your name or profile image while allowing verified volunteers to respond. Do not include identifying information in the request text when you want to remain anonymous.
International data transfers
Some technology providers may process information outside the Netherlands or European Economic Area. Where required, we use an adequacy decision or appropriate safeguards such as standard contractual clauses.
How long we keep personal data
We keep account and community data while your account is active and for as long as reasonably needed to provide Yekja. Content may be removed earlier when you delete it, when it expires, or when it violates our rules.
After an account-deletion request, we delete or anonymise personal data unless limited retention is necessary for legal obligations, fraud prevention, safety investigations, dispute resolution or secure backup cycles. Some information may remain where it is part of another user’s conversation or is required to preserve the integrity of reviews, reports or completed transactions, but we will minimise or anonymise it where reasonably possible.
Account and data deletion
You may request deletion of your account and associated personal data by contacting team@yekja.nl . We may need to verify your identity before completing the request.
Your privacy rights
Subject to the GDPR and applicable conditions, you may ask us to:
- Provide access to your personal data
- Correct inaccurate or incomplete data
- Delete personal data
- Restrict certain processing
- Provide portable data where applicable
- Object to processing based on legitimate interests
- Withdraw consent where consent is the legal basis
Send requests to team@yekja.nl. We may ask for information needed to verify your identity.
Security
We use technical and organisational measures intended to protect personal data, including access controls, encrypted connections, authentication controls, database access policies, monitoring and backups. No internet service can guarantee absolute security.
Notifications and local storage
If you allow notifications, Yekja stores a device notification token so it can send relevant app notifications. You can disable notifications in your device settings.
The website and web app may use cookies or local storage that are necessary for sign-in, security, language, theme and session preferences. We will update this policy and request consent before introducing non-essential tracking where consent is legally required.
Third-party links and services
Yekja may link to external websites, event locations or services. Their privacy practices are controlled by those third parties, not by Yekja. Review their policies before providing personal data.
Changes to this policy
We may update this policy when Yekja’s services, providers or legal obligations change. We will publish the updated version here and change the effective date. Material changes may also be announced in the app or by email.
Contact and complaints
Questions, privacy requests and complaints can be sent to:
You also have the right to submit a complaint to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.