f:I[254865,["/_next/static/immutable/chunks/059vai310m7y7.js","/_next/static/immutable/chunks/2buxrsgtyol1g.js","/_next/static/immutable/chunks/1d57e1c8r2dxa.js","/_next/static/immutable/chunks/1t34x73tv0l7x.js","/_next/static/immutable/chunks/1zg7l1us_8hc8.js","/_next/static/immutable/chunks/384gl0bk51-q6.js","/_next/static/immutable/chunks/1_rl3u3--85d3.js","/_next/static/immutable/chunks/122s878qbozsh.js"],"default"] :HL["https://okzklhj6dqfoztwq.public.blob.vercel-storage.com/illustrations/collage-legal-privacy-hero-620101e290.webp","image",{"fetchPriority":"high"}] 10:T373f,

Last updated: 2 October 2026

This policy explains what personal data we collect when you use www.housingcoop.eu, why we collect it, who else receives it and what rights you have. We have tried to keep it plain. If anything is unclear, write to us.

1. Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

Jonathan Imme
Wildenbruchplatz 9
12045 Berlin
Germany
Email: ji@housingcoop.eu
Contact form: www.housingcoop.eu/contact

European Housing Coop (EHC) is a project under development and not yet a legal entity. We are not required to appoint a data protection officer.

2. Visiting the website

Hosting. The website runs on Vercel. Its servers that run our code are in Frankfurt. When you open a page, your browser sends technical data that every website receives: your IP address, the date and time, the page requested, the referring page, and your browser and operating system. Vercel processes this to deliver the page and keeps short-lived logs for security and error-finding.

Security and misuse protection. To stop automated abuse, we count requests per IP address for a short window (usually one minute, at most one day) in a database run by Upstash in Frankfurt. The counters then expire.

Error monitoring. We use Sentry (Functional Software, Inc.) with data stored in its EU region in Germany to find and fix errors. Error reports contain technical information about the error and your browser. We have configured Sentry not to collect IP addresses, email addresses or cookies.

Visitor statistics. We count visits with Umami, which we run ourselves on our own hosting. Umami sets no cookies and does not store your IP address. It records the page, the referrer, the browser, the device type and the country. We cannot identify you from these statistics. We also count views of library resources using a hash of your IP address made with a secret key that changes every day, so the original address cannot be recovered; these hashes are deleted after 120 days at the latest.

Legal basis: our legitimate interest in running a secure, working website and understanding how it is used (Art. 6 (1) (f) GDPR).

3. Cookies and storage in your browser

We only use cookies and browser storage that are strictly necessary for something you ask for (§ 25 (2) TDDDG). We use no advertising or tracking cookies, so we do not ask for cookie consent.

Name	Purpose	Duration
`__Secure-next-auth.ehc.session-token`	Keeps you signed in	7 days
`__Host-next-auth.csrf-token`, `__Secure-next-auth.ehc.callback-url`	Protects sign-in against forged requests; returns you to the right page	Session
`linkedin_oauth_state`	Protects sign-in with LinkedIn	10 minutes
`googtrans`	Remembers the language you chose in the translation menu	Until you change it

We also save a few settings in your browser's local storage, which never leaves your device unless stated: your chat history with Carla (kept 30 days), the city you picked on the home page, your saved economic-model scenarios, your narration speed, and which tips you have already seen. You can delete them at any time in your browser settings.

4. Contact form and email

When you write to us through the contact form, we receive your name, email address, subject and message. The form sends them to us by email (via Amazon SES, see section 13). They are not stored on the website. We use them only to answer you and delete the email once the matter is closed, unless we must keep it by law.

To keep out spam, the form contains a hidden field and checks how quickly it was filled in, and we count submissions per IP address for one hour (see section 2). We use no external captcha.

Legal basis: answering your enquiry (Art. 6 (1) (b) GDPR if it concerns becoming involved with EHC, otherwise our legitimate interest in replying, Art. 6 (1) (f) GDPR).

5. Signing up and your account

What we collect. When you sign up on the Participate page, we collect your name and email address, a password if you choose one (we store it only as a secure hash), and whatever you choose to tell us: city, country, organisation and role, profession, interests, expertise, a short bio, your LinkedIn and website, and whether you are open to an interview. We send you an email to confirm your address.

Signing in with LinkedIn. If you sign in with LinkedIn, LinkedIn Ireland Unlimited Company sends us your name, email address and profile picture. We store the access tokens encrypted.

Profile picture. If you upload one, it is stored on Vercel Blob and can be opened by anyone who has its link.

Public profile. Your profile is visible to other visitors only if you switch it on.

Our member database. We keep a copy of members' profiles in Notion (Notion Labs, Inc., USA), which we use to organise the community.

Matching opportunities. If you use opportunities, we compare your interests, expertise, profession and location with open opportunities to suggest ones that fit. For this, Google's Gemini API turns that text into numerical representations. Suggestions are only suggestions; no decision is made about you automatically.

Legal basis: providing your account and membership of the community (Art. 6 (1) (b) GDPR).

Retention: until you ask us to delete your account (email ji@housingcoop.eu). We then delete it from our database and from Notion within one month.

If you tick the newsletter box, we use your name and email address to send you our newsletter. You confirm your subscription through a link we email you (double opt-in). We record when you subscribed and confirmed, to prove your consent. Every email has an unsubscribe link.

Our emails contain no tracking pixels and no tracked links: we do not record whether you open them or what you click. Our email service tells us only whether an email was delivered, bounced or marked as spam.

Members also receive emails about their account and, if they choose, about opportunities and invitations. You can change these in your account settings.

We send all emails through Amazon Simple Email Service (Amazon Web Services EMEA SARL, Luxembourg), region Frankfurt.

Legal basis: your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time. Account emails: Art. 6 (1) (b) GDPR.

7. Submitting a resource

If you suggest a resource for our library, we store your name, email address and organisation with the submission so we can ask questions and tell you when it is published. Files you upload are stored on Vercel Blob and become public once the resource is published. If you were not signed in, we create a pending account for you that you can activate or ignore. It does not subscribe you to anything.

Legal basis: Art. 6 (1) (b) GDPR.

8. Feedback, polls and surveys

Economic model. If you tell us you disagree with an assumption in our economic model, we store your reasoning, the values you changed, the city and view you were looking at, and your email address if you give one. We use your email only to reply.

Polls. When you answer a poll, we store your answer, your user ID if you are signed in, your browser type, and a hash of your IP address made with a secret key that changes every day, to stop repeat votes.

Surveys. Survey answers are added to your member profile.

Legal basis: our legitimate interest in learning from your feedback (Art. 6 (1) (f) GDPR). We delete feedback when we no longer need it.

9. Carla, our chat and voice assistant

Carla is an AI. Her answers are generated by Google's Gemini models (Google Ireland Limited / Google LLC). We use Google's paid API, under whose terms Google does not use your questions to train or improve its products.

Chat. Your messages and Carla's answers are sent to Google to generate the answer and stored in our database for 90 days, to fix problems and improve the answers. During that time they are linked to a code made from your IP address with a secret key that changes every day (it groups one day's questions without storing the address), and, if you are signed in, to your account. Your browser also keeps the conversation for 30 days so you can continue it. If you rate an answer, we store the question, the answer and your rating, without your IP address.

Voice. If you talk to Carla, your voice is streamed directly from your browser to Google to generate the spoken answer. We do not record or store the audio or a transcript. We store the length and cost of the conversation, and for signed-in users a short written summary with the sources Carla used, so you can find them again.

Please do not tell Carla sensitive personal information.

Legal basis: answering your question (Art. 6 (1) (b) GDPR) and our legitimate interest in improving the assistant and preventing misuse (Art. 6 (1) (f) GDPR).

10. Content from other services

Some pages show content that your browser loads directly from another company. That company then receives your IP address and browser information.

YouTube videos (Google Ireland Limited). On our pages and city and country pages, a video loads only when you press play. In news articles and topic pages, videos load from youtube-nocookie.com, which sets no cookies until you play the video.
Our own videos are streamed by Mux, Inc. (USA).
Maps use map tiles from OpenFreeMap (openfreemap.org).
Translation. If you choose a language in the translation menu, Google Translate (Google LLC) loads and translates the page.

Legal basis: our legitimate interest in showing this content (Art. 6 (1) (f) GDPR).

11. Who receives your data

We only share personal data with the service providers named above, who process it on our behalf under data processing agreements (Art. 28 GDPR): Vercel, Upstash, Neon (our database, Frankfurt), Amazon Web Services, Sentry, Notion, Google and Mux. We do not sell your data or use it for advertising. We may also have to disclose data where the law requires it.

12. Transfers outside the EU

Vercel, Neon, Upstash, Notion, Google, Sentry and Mux are based in the USA, even where our data is stored in the EU. Where a company is certified under the EU–US Data Privacy Framework, the transfer rests on the European Commission's adequacy decision (Art. 45 GDPR); otherwise on the Commission's standard contractual clauses (Art. 46 (2) (c) GDPR).

13. How long we keep data

Data	Kept for
Account and profile	Until you ask us to delete it
Contact form emails	Until the matter is closed
Newsletter consent record	As long as you are subscribed, then up to 3 years to prove consent
Chat conversations with Carla	90 days
Rate-limit counters	1 minute to 1 day
Visitor statistics	Anonymous; hashed IPs deleted after at most 120 days
Email delivery records	As long as you receive our emails
Chat ratings (no IP address)	Until no longer needed to improve Carla

14. Your rights

You have the right to:

access the data we hold about you (Art. 15 GDPR);
correct it (Art. 16);
have it deleted (Art. 17);
restrict how we use it (Art. 18);
receive it in a common format or have it passed to someone else (Art. 20);
withdraw consent at any time, with effect for the future (Art. 7 (3));
object to processing based on our legitimate interests, on grounds relating to your situation (Art. 21). You can object to direct marketing at any time without giving a reason.

To use any of these rights, email ji@housingcoop.eu.

You can also complain to a data protection authority. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.

15. Do you have to give us your data?

No. You can read the whole website without giving us any personal data. To become a member, subscribe or contact us, we need at least your name and email address.

16. Changes

We will update this policy when the website or the law changes. The date at the top shows the current version.

5:[null,false,["$","div",null,{"className":"container","children":["$","div",null,{"className":"NotionContent-module___mTUFa__contentPage ","children":[["$","header",null,{"className":"CollageHero-module__wWYiXW__hero","children":[["$","div",null,{"className":"CollageHero-module__wWYiXW__text","children":[["$","span",null,{"className":"riso-stamp CollageHero-module__wWYiXW__kicker","children":"Privacy policy"}],["$","h1",null,{"className":"CollageHero-module__wWYiXW__title","children":"What personal data we collect, why, and your rights"}],null,null]}],["$","figure",null,{"className":"collage-cutout collage-cutout--right CollageHero-module__wWYiXW__art","children":["$","img",null,{"src":"https://okzklhj6dqfoztwq.public.blob.vercel-storage.com/illustrations/collage-legal-privacy-hero-620101e290.webp","width":1252,"height":831,"alt":"","loading":"eager","fetchPriority":"high","decoding":"async"}]}]]}],["$","main",null,{"className":"NotionContent-module___mTUFa__content fade-in-delay-2","children":["$","$Lf",null,{"html":"$10","resourceMap":null}]}]]}]}]] 8:null d:[["$","title","0",{"children":"Privacy policy - European Housing Coop | European Housing Coop"}],["$","meta","1",{"name":"description","content":"How the European Housing Coop website handles personal data, cookies and your GDPR rights."}],["$","meta","2",{"name":"author","content":"European Housing Coop"}],["$","link","3",{"rel":"manifest","href":"/manifest.webmanifest","crossOrigin":"$undefined"}],["$","meta","4",{"name":"keywords","content":"cooperative housing, Europe, sustainable housing, community, affordable housing, sustainable housing, Housing Crisis, community led housing, co-housing, co-living, urban living, city living, temporary living, Housing Cooperatives, Housing Coops, Impact Capital, Housing Solutions, citizen-led housing, impact housing, non-speculative housing, pan-European housing, pan-european movement"}],["$","meta","5",{"name":"robots","content":"index, follow"}],["$","meta","6",{"name":"googlebot","content":"index, follow, max-video-preview:-1, max-image-preview:large, max-snippet:-1"}],["$","link","7",{"rel":"canonical","href":"https://www.housingcoop.eu"}],["$","link","8",{"rel":"alternate","hrefLang":"x-default","href":"https://www.housingcoop.eu"}],["$","link","9",{"rel":"alternate","hrefLang":"en-GB","href":"https://www.housingcoop.eu"}],["$","meta","10",{"property":"og:title","content":"European Housing Coop - Tackling Europe's Housing Crisis, together!"}],["$","meta","11",{"property":"og:description","content":"Join us on our mission to shape and co-own sustainable and affordable homes in cities across Europe."}],["$","meta","12",{"property":"og:url","content":"https://www.housingcoop.eu"}],["$","meta","13",{"property":"og:site_name","content":"European Housing Coop"}],["$","meta","14",{"property":"og:locale","content":"en_EU"}],["$","meta","15",{"property":"og:image","content":"https://okzklhj6dqfoztwq.public.blob.vercel-storage.com/brand/share/ehc-share-landscape-1192ed3ab8.jpg"}],["$","meta","16",{"property":"og:image:width","content":"1200"}],["$","meta","17",{"property":"og:image:height","content":"630"}],["$","meta","18",{"property":"og:image:alt","content":"European Housing Coop"}],["$","meta","19",{"property":"og:type","content":"website"}],["$","meta","20",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","21",{"name":"twitter:title","content":"European Housing Coop - Tackling Europe's Housing Crisis, together!"}],["$","meta","22",{"name":"twitter:description","content":"Join us on our mission to shape and co-own sustainable and affordable homes in cities across Europe."}],["$","meta","23",{"name":"twitter:image","content":"https://okzklhj6dqfoztwq.public.blob.vercel-storage.com/brand/share/ehc-share-landscape-1192ed3ab8.jpg"}]]