Who is responsible
The Seventh-day Adventist Church in Greece (Greek Mission) is responsible for information collected through GM Hub at comms.gmsda.net. Contact us through the Church’s contact page or by post: Maiandrou 7, Nikaia 18450, Greece. Mark your request ‘Personal data protection’ and mention GM Hub or your volunteer application.
Volunteer applications
We collect your name, email, city or area, languages, availability, preferred frequency of volunteering, interests and self-assessed skills. Phone number, church information and a short example or portfolio link are optional. We also record submission time, the consent time and the version of the notice accepted, and private staff review notes and status.
We use these details, with your consent, to review your interest, identify suitable opportunities and contact you about volunteering. Required fields help us assess and respond to your application. Applying does not create a GM Hub account, guarantee a placement or subscribe you to a newsletter or marketing.
Church information may reveal religious affiliation. We request separate explicit consent if you choose to share a church. You can choose ‘Prefer not to say’ and still apply. Please do not submit health information, passwords, private files or other people’s personal information.
The internal workspace
GM Hub is intended for internal Mission work. For registered users, it stores account and profile details, roles and church assignments, requests, tasks, discussions, announcements, uploaded files and related activity. Inventory, reservations and expenses may include borrower details, approvals and supporting documents. Access depends on roles, church scope and sharing settings; files deliberately shared with all GM Hub users are visible to that audience.
Account and work information supports coordination, access control, resource management and operational accountability. The applicable basis depends on the activity, including our legitimate interests in running and securing internal operations and, where applicable, legal obligations or consent. Do not disclose internal information outside the authorised audience unless expressly permitted.
Deactivating an account or removing an asset from the library does not automatically erase its underlying records or stored file. Requests for personal-data erasure are handled separately, taking account of applicable obligations and linked records.
Who can access information
Volunteer applications are not public. Access is limited to authorised staff with volunteer-review permission. Staff may use the information to arrange follow-up with the relevant Mission team. We do not publish applicant details or send public applications to social media.
GM Hub uses hosting and a PostgreSQL database, Amazon S3 for private file storage and Amazon SES for email notifications when configured. Dool Social is used only for enabled publishing workflows; a volunteer application is not a social publishing submission. Service providers may process necessary information to operate their services.
Some hosting or service processing may take place outside the European Economic Area. Applicable safeguards, such as an adequacy decision or standard contractual clauses, are required for such transfers. Contact Greek Mission for information about the providers, locations and safeguards used for your data.
Security and cookies
We use access controls, private storage, activity records and submission limits to help protect information and prevent abuse. Technical logs can include request and device information. Form submission limits use hashed identifiers derived from the email and network address; the counters reset after a 15-minute window, but this is not automatic deletion of those records.
GM Hub uses necessary session and security cookies for sign-in and account protection. The volunteer form does not require an account. GM Hub does not currently include advertising or analytics tracking. External links, including the Church’s contact page or portfolio links, are governed by those sites’ own policies.
How long information is kept
Volunteer information is kept for reviewing the application and necessary follow-up; active volunteer coordination may require ongoing contact details. Internal records are kept according to their operational purpose, applicable obligations and any unresolved claims. Consent evidence, audit records and backups may need separate retention for accountability, security and recovery.
There is no automatic expiry or deletion of volunteer applications in GM Hub. Retention and erasure requests are managed by authorised Mission administrators. Marking an application ‘closed’ does not delete it. Contact us if you no longer wish to be considered or want your details removed.
Your choices and rights
You can withdraw consent for future processing at any time without affecting earlier lawful processing. Depending on the circumstances, you can request access, correction, erasure, restriction or portability, or object to processing based on legitimate interests. You can apply without sharing your church or phone number. Without the required application details and consent, we cannot process the online application.
Use the contact page or postal address above and identify the relevant application or account. We normally respond within one month, with extensions where permitted by the GDPR. You may also complain to the Hellenic Data Protection Authority at dpa.gr. Volunteer selection is reviewed by people; GM Hub does not make solely automated decisions with legal or similarly significant effects.