Civyx places great importance on the protection of your personal data.
This Privacy Policy describes how Civyx ("Civyx", "we", "us" or "our") collects, uses, stores and protects personal data when you access or use the platform.
We process personal data in accordance with the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the European Union General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for processing personal data through the Civyx platform is:
David Amorim
Lavey-Village, Canton of Vaud, Switzerland
Email: privacy@civyx.app
For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the address above.
2. Categories of Data Collected
We may collect and process the following categories of personal data:
| Category | Examples |
|---|---|
| Identity data | First name, last name, email address, profile picture (optional) |
| Contact data | Email address, notification preferences |
| Profile data | Biography, interests, volunteer preferences, organisation information |
| Participation data | Event registrations, event participation history, recognition points history |
| Technical data | IP address, browser type, device information, login timestamps, session identifiers |
| Content data | Events, comments, messages, uploaded images, uploaded documents |
| Communication data | Support requests, contact forms, emails exchanged with Civyx |
| Usage data | Platform interactions, navigation data, feature usage statistics |
Providing certain information is necessary to create an account and use the platform.
3. Purposes and Legal Bases of Processing
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Contract performance |
| Providing platform functionality | Contract performance |
| Managing event participation | Contract performance |
| Sending notifications related to events and platform activity | Contract performance |
| Managing recognition points and engagement history | Contract performance |
| Providing customer support | Legitimate interest |
| Improving platform functionality and user experience | Legitimate interest |
| Security monitoring, fraud prevention and abuse detection | Legitimate interest |
| Compliance with legal obligations | Legal obligation |
| Marketing communications (where applicable) | Consent |
| Non-essential cookies and analytics | Consent |
Where consent is required, it may be withdrawn at any time.
4. Information Shared with Other Users
Certain information is visible to other users of the platform.
Depending on your role and privacy settings, the following information may be visible:
- Name
- Profile picture
- Public profile description
- Volunteer activity statistics
- Event participation history where applicable
- Organisation information
When you apply to participate in an event, relevant information may be shared with the event organiser for the purpose of managing participation.
Documents uploaded by associations for specific events are only accessible to authorised participants as determined by the organiser.
5. Hosting and Service Providers
The Civyx platform is primarily hosted on Microsoft Azure infrastructure (West Europe region).
Current service providers may include:
- Microsoft Azure (hosting and cloud infrastructure)
- Azure Communication Services (email delivery)
- Other service providers necessary for platform operation
These providers process personal data solely on our behalf and under contractual obligations designed to protect your information.
We do not sell, rent or share personal data with advertising networks or data brokers.
6. International Data Transfers
Personal data is primarily stored within the European Economic Area.
Certain service providers may occasionally access data from countries outside the European Economic Area, including the United States.
Where such transfers occur, appropriate safeguards are implemented, including contractual protections such as Standard Contractual Clauses or equivalent safeguards recognized under applicable law.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy.
| Data Category | Retention Period |
|---|---|
| User account data | Up to 2 years after account deletion |
| Event participation data | Up to 3 years after event completion |
| Support communications | Up to 3 years |
| Login and security logs | Up to 12 months |
| Financial and billing records | Up to 10 years where legally required |
| Analytics data | Up to 13 months |
Data may be retained longer where required by law or necessary for the establishment, exercise or defence of legal claims.
8. Your Rights
Subject to applicable law, you may have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a competent supervisory authority
To exercise your rights, contact: privacy@civyx.app
We will respond within a reasonable period and in accordance with applicable legal requirements.
9. Account Deletion
You may request deletion of your account at any time through the platform settings or by contacting us.
Following deletion:
- Your account will be deactivated.
- Personal data will be deleted or anonymised where possible.
- Certain records may be retained where required by law or for legitimate legal purposes.
10. Children's Privacy
The platform is intended for users aged 16 years or older.
Users below the age required by applicable law must obtain consent from a parent or legal guardian before creating an account.
We do not knowingly collect personal data from children in violation of applicable law. If we become aware of such collection, we will take appropriate measures to delete the data.
11. Security Measures
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.
These measures include:
- Encrypted communications (TLS)
- Access controls
- Authentication and authorisation mechanisms
- Security logging
- Secure cloud infrastructure
- Regular software updates
Despite these measures, no method of transmission or storage can guarantee absolute security.
12. Automated Decision-Making
Civyx does not use fully automated decision-making processes that produce legal or similarly significant effects on users.
Certain recommendation features may be used to suggest events, organisations or opportunities, but these recommendations do not constitute automated decisions within the meaning of applicable data protection laws.
13. Cookies
The platform may use cookies and similar technologies to:
- Maintain user sessions
- Remember preferences
- Improve platform functionality
- Measure platform usage where consent is provided
Further information is available in the Cookie Policy.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
Where material changes occur, users may be notified through the platform or by email.
The version published on this page is the version currently in force.
15. Contact
For questions regarding this Privacy Policy or the processing of personal data:
Civyx Privacy Contact
Lavey-Village, Canton of Vaud, Switzerland
Email: privacy@civyx.app