Nat5 Privacy Policy

1. Introduction
At Nat5, user privacy is a priority. We are committed to protecting the personal data we collect, process, and store, in accordance with applicable data protection laws, such as the EU General Data Protection Regulation (GDPR) and other relevant regulations.
This Privacy Policy outlines:
What data we collect.
How we use it.
With whom we share it.
Your rights regarding your data.
How you can exercise these rights.
By accessing our website (www.nat5.bio) or using our services, you agree to the terms of this policy.

2. Information Collected During Account Creation or Site Navigation
a) Information You Provide Directly
We may collect the following data when you interact with us:
Personal Data: First name, last name, email address, and the organization you belong to.
Account Information: When you register or create a profile.
Digital Wallet Connection: When you link a Web3 wallet (e.g., MetaMask), we store the public address to identify transactions within our ecosystem.
b) Information Collected Automatically
When you browse our site, we collect:
Usage Data: Pages visited, duration of visit, clicks, and navigation paths.
IP Address and Approximate Geolocation.
Browser Type and Operating System.
Cookies and Similar Technologies: To facilitate site usage and personalize the user experience (see section 9).

3. Information Collected During Project Registration
When a project developer uses our Project Submission Form (PSF) to submit a project for evaluation, we collect additional specific information to analyze the project’s feasibility, legitimacy, and traceability. This information includes:
a) Project Data
Project name.
Technical and narrative description of the project.
Exact geographical location (GPS coordinates, maps, or regional references).
Project category (biodiversity, carbon, restoration, conservation, etc.).
Project objectives and expected outcomes.
Attached documentation (PDFs, images, diagrams, programs, among others).
b) Developer or Project Owner Information
Representative’s first and last name.
Name of the proposing organization or entity.
Contact email.
Phone number (optional).
Legal address or location of the entity.
Documents evidencing land ownership.
c) Use of This Information
The information provided in the form will be used to:
Evaluate the project’s eligibility and technical compliance according to our methodologies and standards.
Contact the developer or the responsible project team.
Incorporate the data into our verification, traceability, and tokenization systems (if the project advances to subsequent stages).
Share certain data with external validators, verifiers, or technical auditors, only when necessary for the review process, under confidentiality agreements.
Generate MRV (Monitoring, Reporting, and Verification) reports.
Important: All sensitive information, such as land ownership documents, signatures, or addresses, will be handled with high confidentiality standards and will only be shared when essential for project evaluation.
d) Unapproved or Withdrawn Projects
If a project:
Does not meet the technical or additionality criteria established by the Ases On-Chain Protocol standard.
Is voluntarily withdrawn by the developer.
Remains inactive for more than 12 months without communication from the developer.
The information provided in the form may be retained for a maximum period of 24 months for the following legitimate purposes:
Record the history of submissions and decisions.
Protect Nat5 against potential legal liabilities or disputes.
Analyze evaluation patterns and improve our review process.
After this period, the information will be securely deleted or anonymized for exclusively statistical purposes.
During this time, we will not use your data for commercial purposes nor will it be shared with third parties, unless legally required.

4. Purpose of Data Processing
We use your data for the following purposes:
Provide and manage our digital services.
Issue, verify, or track biodiversity, carbon, water, and soil credits.
Authenticate users through Web3 systems and wallet connections.
Communication: sending newsletters, project updates, event invitations, or educational content on sustainability.
Analyze and improve the website: user behavior analysis to optimize the experience.
Legal and regulatory compliance, including tax requirements or sustainability audits.

5. Legal Basis for Data Processing
We process your personal data based on one or more of the following legal justifications:
Your consent (when explicitly given, e.g., when submitting a project through the project submission form).
The execution of a contract or provision of services.
Nat5’s legitimate interests, such as improving user experience and developing new functionalities.
Legal obligations we must comply with.

6. Information Sharing and Disclosure
We do not sell your personal data. We only share your information with third parties when necessary:
Technology or Analytics Service Providers (e.g., Google Analytics, Mailchimp, blockchain platforms).
Nat5 Ecosystem Partners, only if part of the requested service (e.g., credit verifiers).
Public Authorities when required by law.
In the case of a merger, acquisition, or corporate restructuring, where the continued protection of your data is ensured.

7. Data Security and Protection
We implement technical and organizational measures to ensure the security of your information:
Data Encryption in Transit (SSL/TLS).
Restricted Access Control and User Authentication.
Regular Security Audits.
Best Practices in Managing Blockchain Keys and Wallet Addresses.

8. Information Retention
We will retain your information:
As long as the contractual relationship lasts or as necessary to provide the services.
Until you withdraw your consent, in the case of voluntary communications.
During periods required by law (e.g., for accounting or auditing purposes).
Once your data is no longer needed, we will securely delete it.

9. Cookies and Tracking Technologies
We use first-party and third-party cookies to enhance your experience on our website. The categories include:
Essential Cookies: Necessary for the site’s operation.
Performance Cookies: Help understand how users interact with the site.
Personalization Cookies: Adapt content to your preferences.
Marketing Cookies: For future campaigns.
You can manage your cookie preferences through our consent banner or in your browser settings.

10. Your Rights
In accordance with the GDPR and other privacy regulations, you have the right to:
Access your personal data.
Rectify incorrect information.
Delete your data (right to be forgotten).
Restrict or object to processing.
Port your data to another provider.
Withdraw your consent, without affecting the legality of prior processing.
To exercise these rights, contact us at: contact@nat-5.com

11. International Transfers
Some of our providers or servers may be outside the EEA. In such cases, we ensure that appropriate mechanisms (such as standard contractual clauses) are in place to protect your personal data.

12. Minors
Our services are not directed to individuals under 18 years of age. We do not knowingly collect data from minors. If you are a parent/guardian and believe we have collected information from a minor, please contact us immediately.

13. Changes to the Privacy Policy
We reserve the right to update this policy at any time. In case of significant changes, we will notify you via email or through a notice on our website.

14. Contact
For inquiries related to this Privacy Policy, please write to us at:
Email: contact@nat-5.com