VolloSpot Privacy Policy
Version 1.0
Effective from: 20 August 2026
1. Data Controller
The controller of personal data processed in connection with the VolloSpot service is: ФОП Юрій Подченко, Tax ID (РНОКПП): 3610403078, вул. Успенська 28/30, м. Одеса, Україна, email: support@vollospot.pl, phone: +48 577 690 285, hereinafter referred to as “VolloSpot” or the “Controller”.
This Privacy Policy explains what personal data VolloSpot may process, the purposes and legal bases of processing, recipients of the data, retention periods and the rights available to individuals whose personal data is processed.
2. Personal data we process
The categories of personal data processed depend on how the User uses VolloSpot.
- Account information, including name and email address;
- profile information such as city, skill level, selected language and voluntarily provided profile description;
- information concerning Games, Reservations, Waiting Lists, cancellations and Game history;
- information concerning payments, VolloSpot Balance, refunds and transaction history;
- transaction identifiers and other information necessary to correctly settle payments;
- where Telegram is voluntarily connected – Telegram chat ID and, where available, Telegram username;
- communications with VolloSpot, including support requests and complaints;
- technical and security data such as IP address, device and browser information, network requests and security events to the extent generated or processed by the Service and its infrastructure providers.
3. Passwords and payment card data
VolloSpot does not store User passwords in plain text. Authentication is provided using Supabase infrastructure.
VolloSpot does not require Users to provide full payment card details directly to VolloSpot. Where a payment is made through an external payment provider, the information required to process the transaction is handled in accordance with that provider’s rules.
VolloSpot may receive information necessary to identify and settle a transaction, such as the payment identifier, amount, currency and transaction status.
4. Purposes and legal bases
Personal data is processed only to the extent necessary for specified purposes.
- creating and operating an Account – performance of a contract or taking steps at the User’s request before entering into a contract;
- handling Reservations, Waiting Lists and participation in Games – performance of a contract;
- processing payments, VolloSpot Balance and refunds – performance of a contract and, where applicable, compliance with legal obligations;
- maintaining required accounting, tax or transaction records – compliance with legal obligations;
- handling complaints and disputes and establishing, exercising or defending claims – compliance with legal obligations or the Controller’s legitimate interests;
- maintaining Service security, preventing fraud and abuse and diagnosing errors – the Controller’s legitimate interests;
- sending operational notifications concerning the Service and Reservations – performance of a contract;
- operating a voluntarily connected Telegram account – providing functionality selected by the User.
5. Reservations and Games
VolloSpot processes information about Reservations and participation in Games in order to manage participant lists, Waiting Lists, cancellations, refunds and Game history.
Participation information may also be used to provide Account statistics, such as the number of Games played.
Such information may continue to be retained after a Game where necessary for transaction settlement, complaint handling, fraud prevention or the establishment, exercise or defence of legal claims.
6. Payments and WayForPay
Electronic payments may be processed using the external payment provider WayForPay.
For the purpose of completing a payment, certain information may be transferred to the payment provider or collected directly by that provider.
The payment provider may process information as an independent controller or in another role determined by applicable law and its terms of service.
VolloSpot processes information concerning the result and status of a payment to the extent necessary to confirm Reservations, update the Balance, issue refunds and maintain required records.
7. Telegram
Connecting a VolloSpot Account to Telegram is voluntary.
If the User chooses to connect Telegram, VolloSpot may process the Telegram chat ID and Telegram username where available.
This information is used to send notifications concerning Games, Reservations, Waiting Lists, spot promotions, refunds, cancellations and other important Account-related events.
Use of Telegram is also subject to Telegram’s own terms and privacy rules.
8. Technology providers
VolloSpot uses external technology providers to operate the Service.
Providers receive access to personal data only to the extent necessary to provide the relevant services, subject to their own applicable legal obligations.
- Supabase – user authentication, database and backend services;
- Vercel – application hosting, deployment and infrastructure;
- WayForPay – electronic payment processing;
- Telegram – delivery of voluntarily enabled Telegram notifications;
- other technical infrastructure providers where their services are necessary for the operation, security or maintenance of the Service.
9. Disclosure of personal data
VolloSpot does not sell Users’ personal data.
Personal data may be provided to technical, payment and communication service providers to the extent necessary to operate the Service.
Personal data may also be disclosed to public authorities or other authorized entities where required by applicable law or a legally binding request.
Data may be provided to legal advisers, accountants or other professional advisers where necessary to comply with legal obligations or protect VolloSpot’s rights.
10. International data transfers
The use of certain technology providers may involve processing personal data outside the European Economic Area.
Where applicable law requires an additional transfer mechanism, appropriate safeguards provided by applicable data protection law are used, such as an adequacy decision or standard contractual clauses.
The scope and location of processing may also depend on the infrastructure and service arrangements used by individual providers.
11. Data retention
Personal data is not retained for longer than necessary for the purposes for which it was collected.
Account-related information is generally retained while the Account remains active.
Following Account deletion, certain information may continue to be retained where necessary to comply with legal obligations, settle payments, handle complaints, prevent fraud or establish, exercise or defend legal claims.
Payment, accounting and tax-related records are retained for the period required by applicable law.
Technical and security information is retained for a period reasonably necessary for security, troubleshooting and abuse prevention.
After the relevant retention period expires, personal data is deleted or anonymized unless continued retention is required by law.
12. User rights
To the extent provided by applicable data protection law, Users may exercise rights concerning their personal data.
- the right of access;
- the right to rectify inaccurate data;
- the right to erasure where legally applicable;
- the right to restriction of processing;
- the right to data portability where applicable;
- the right to object to processing based on legitimate interests;
- the right to withdraw consent at any time where consent is the legal basis, without affecting the lawfulness of processing carried out before withdrawal;
- the right to lodge a complaint with a competent data protection supervisory authority.
13. Exercising rights and Account deletion
Users may exercise their data protection rights by contacting VolloSpot at support@vollospot.pl.
VolloSpot may request information reasonably necessary to verify the identity of the person making the request where this is required to protect the User’s data.
Deletion of an Account does not automatically require deletion of information that must continue to be processed due to legal obligations or for the establishment, exercise or defence of legal claims.
14. Security
VolloSpot uses appropriate technical and organizational measures intended to protect personal data against unauthorized access, loss, alteration or disclosure.
However, no internet-based system can guarantee absolute data security.
Users should protect their Account credentials and should not share their password with other persons.
15. Automated operations
Certain operations within the Service are performed automatically, including management of Waiting List order, promotion into an available spot, Game status changes and certain Balance and refund operations.
These operations are used to implement the functionality of the Service and the Reservation rules.
VolloSpot does not currently use User data for advertising profiling or automated decision-making producing legal or similarly significant effects on Users within the meaning of applicable data protection law.
16. Marketing
VolloSpot does not currently use Users’ personal data for external advertising profiling and does not sell personal data for marketing purposes.
If marketing activities requiring consent are introduced in the future, separate consent will be obtained where required by applicable law.
17. Minors
The Service is intended for persons aged 18 or older.
VolloSpot is not intended to knowingly collect personal data from children through User Accounts.
18. Changes to this Privacy Policy
This Privacy Policy may be updated following changes to the Service, technologies used, service providers or applicable law.
The effective date of the current version is displayed at the beginning of this document.
Where the nature of a change requires it, Users will be informed in an appropriate manner.
19. Contact
Questions concerning privacy, personal data or the exercise of data protection rights may be sent to support@vollospot.pl.
Controller: ФОП Юрій Подченко, Tax ID (РНОКПП): 3610403078, вул. Успенська 28/30, м. Одеса, Україна.