Privacy Policy

1. Data Controller

2. Purpose of Processing

The Cooperative will process the personal data of members and cohabitants for the following purposes:

• Corporate relationship management: Processing of registrations, cancellations, maintenance of the Member Registry Book, convening Assemblies, and exercising rights and obligations derived from the Bylaws.
• Right of Use Regime Management: Formalization and execution of the housing right of use contract, management of contributions to capital social and periodic fees.
• NATE Platform Usage: Member profile management, calculation of the "NATE Score", tracking values alignment (Motor Alignment), and participating in community dynamics.
• Community directory and contact: The minimum cooperative directory entry (community name or alias and Semilla/Motor status) is visible by default only to verified members of the same promotion, to support onboarding and group formation. It includes a profile photo and biography and can be hidden at any time. Interests, unit details, and contact require explicit activation. Personal-interest matches appear only when both members enable them and exclude sensitive categories. Email is not public. It is shared with the person who requested contact only after acceptance and explicit confirmation. If a unit chooses to publish a directory photo, it will be visible to members signed in to NATE.
• Cohabitation Unit Management: Processing the data of household members, including minors (under parent/legal guardian consent), for housing and resource allocation.
• Compliance with legal obligations: Communication of data to Public Administrations (Tax Authorities, Registries of Cooperatives) in accordance with current regulations.

3. Legal Basis

The legal basis for processing your data is:

• Contract execution: The corporate link (Bylaws) and the right of use or pre-registration contract.
• Legal obligation: Compliance with the applicable Cooperatives Act and tax regulations.
• Legitimate interest: For internal administrative management, platform security, and promoting community coexistence.
• Consent: For processing special categories of data or data of cohabitants voluntarily provided. We also ask for specific confirmation before sharing your email with a person who has requested to contact you. You may withdraw this consent at any time; withdrawal does not affect processing already carried out.

4. Recipients and Disclosures

Your data will not be transferred to third parties, except in the following cases:

• Public Administrations: When there is a legal obligation (AEAT, Social Security, Registry of Cooperatives).
• Service Providers: Entities providing technological services (such as Google Firebase in its capacity as data processor) or external advisors, under strict confidentiality agreements.
• Internal Transparency: In accordance with the Cooperatives Act, other members may access the minimum necessary data from the Member Registry Book to exercise their corporate rights.

5. Retention Period

Personal data will be kept as long as member status or the validity of the right of use contract is maintained. After this relationship ends, data will remain blocked for the applicable legal limitation periods.

Pending contact requests expire after 30 days. Rejected, cancelled, expired, or closed requests are deleted after 90 days. Accepted requests and blocks are kept while active to manage contact and prevent further unwanted requests.

Profile and cohabitation-unit photos can be deleted from the platform when no longer needed. Their removal is immediate in the platform; technical recovery copies are managed according to the applicable retention configuration.

6. Rights of Data Subjects

You can exercise your rights of access, rectification, deletion, objection, restriction, and portability by written communication to the registered office or the email indicated in Section 1. We may request additional information only when necessary to verify your identity.

You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if you consider that the processing of your data does not comply with current regulations.