[jodrellblank]

and you're required -by law-

Does the GDPR apply to non-commercial, non-business, non-organizations?

[plibither8]

Yes. If the organisation/company/service is processing the data of the users, GDPR applies.

https://gdprexplained.eu/who-has-to-comply/