Privacy Policy

Who processes your data

Kommu is the data controller. Full tax identification details are set out in the legal notice. You can get in touch at hola@kommu.app.

What data we process and why

• Contact form. Name, organisation, email, phone, type of entity and size. Purpose: to respond to your enquiry and prepare a proposal. Legal basis: your consent and the application of pre-contractual measures.
• User account. Email address and name. Purpose: to give you access to the communities you're authorised in. Legal basis: performance of the service.
• Published content. Notices, documents, listings, comments, sign-ups and bookings you publish within a community. Only visible to members of that community.
• Usage measurement. Aggregated statistics on pages visited, only if you accept measurement cookies.

Email lists provided by a community

When a school, a Parent Association, a residents' association or a company uploads its list of authorised people, that organisation is the data controller and Kommu acts as processor. We sign the Article 28 GDPR data processing agreement with each one before receiving any list.

Who we share data with

Only with the providers necessary to run the service: hosting and infrastructure, transactional email delivery and payment gateway. All of them act as processors and operate within the European Economic Area or under equivalent safeguards. We never sell or transfer data for advertising purposes.

How long we keep it

Commercial contact data, for up to a year from the last contact. Account data and published content, for as long as the community is active and up to six months after it closes. Billing data, for the periods legally required for tax purposes.

Your rights

You can request access, rectification, erasure, objection, restriction and portability by writing to hola@kommu.app. You can also file a complaint with the Spanish Data Protection Agency (www.aepd.es).