Privacy policy

Asociación CoCo Sapiens Conscious Consumer Community, NIF G-56315831, registered in the National Register of Associations (Spain) under national number 627148, with the registered address shown in the Legal notice. Contact for any privacy matter: info (at) cocosapiens.org.

CoCo Sapiens has not appointed a data protection officer because it is not required to do so.

Browsing. When you visit the website, the server logs technical data (IP address, date, page requested and browser) so that the website works and stays secure. Legal basis: our legitimate interest in keeping the website secure. We keep this data for as long as needed for that purpose and for no more than 12 months.

Language. If you choose a language, we store it in your browser so that we can show you the website in that language next time. Legal basis: it is necessary for the service you request. More details in the Cookie policy.

Country. If your browser language is not one of the website’s languages, we ask the country.is service which country matches your IP address, only to choose the website language. In addition, your own browser works out your area from the device’s time zone and language, without sending anything out, to centre the map and to show you the producers from your country first. We store neither the IP address nor the country. Legal basis: our legitimate interest in showing you the website in a language you understand and what is closest to you.

Analytics. We do not currently measure visits. If we do so in the future, it will only be with your consent, as explained in the Cookie policy.

Enquiries. If you write to us through the contact form or by email, we use your name, your email address and your message to reply to you. Legal basis: your consent when you send us the enquiry. We keep the enquiry for 12 months from the last communication.

Members. If you become a member, we use the data from the membership form to manage your relationship with the association and your fees. Legal basis: the membership relationship you request. We keep the data for as long as you are a member and for 6 years afterwards, to meet accounting and legal obligations.

Producers. If a producer applies to join, we use their data and the data of their farm to assess the application and manage the membership. Legal basis: the steps prior to joining that the producer requests and, afterwards, the membership relationship. The same retention periods as for members apply.

Payments and donations. Payments are made on Stripe’s page, and Stripe processes the payment data as an independent controller. We only receive the name, the email address and the amount. Legal basis: legal accounting obligation. Retention period: 6 years.

Newsletter. You subscribe on beehiiv’s page. We use your email address to send you the newsletter until you unsubscribe; every issue includes a link to do so. Legal basis: your consent.

Map. The map images are served by OpenFreeMap, which receives your browser’s IP address in order to send them. It does not use cookies. If you click “Near me”, your location is used only in your browser to centre the map: it is not sent to us and it is not stored.

Producer map. The map also shows independent producers who sell directly. For them we publish the name, location, website, what they produce and how they sell, taken from their own public website or from the request they send us. We do this so that consumers can find direct sales nearby. Legal basis: our legitimate interest or, if the producer asked to be listed, their request. Any producer can ask us at any time to correct or remove their listing, through the map form or by writing to info (at) cocosapiens.org. Requests are sent through Formspree; if a request is not published, we delete it after 12 months.

Producer sign-up. If a producer applies to join, we process the data and documents they send us: their contact details, the details of their farm or their boat, texts, photos, points of sale, products and the evidence for what they declare, which may include employment documents with data about their workers (contracts, payslips or the official summary of staff). Only the inspector and the certification body see those documents, and they are never published. We use them to assess the application to join, to prepare and carry out the inspection and, if the producer joins, to publish their profile and their products' profiles. Legal basis: their application and, afterwards, the joining contract. For other people's names and photos, their consent, which the producer gives us signed. Contact details, documents and studies are not published. If the producer does not end up joining, we delete everything after 12 months. If they join, we keep it for as long as the contract lasts and afterwards for as long as the law requires. So that they can carry on filling in the form later, we send them a private link by email.

Videos. YouTube videos only load if you accept marketing cookies and press play. Legal basis: your consent.

We do not make automated decisions about you or create profiles. We do not sell or pass on your data.

Only the providers that supply a service to us, under contract and following our instructions:

• Formspree, Inc. (United States): sending of the contact, membership and Food Map request forms.
• Hostinger International Ltd. (Cyprus): website hosting, forms and email.
• beehiiv, Inc. (United States): newsletter.
• Stripe: payments.
• Hyperknot Software Kft. (Hungary), OpenFreeMap: map images.
• country.is: approximate country based on the IP address, without storing it.
• Google (YouTube): videos, only with your consent.
• The inspector and the certification body for each region: only the producer sign-up data, for the inspection and certification.

We will also disclose data to the authorities when the law requires us to.

Some providers are based in the United States. These transfers rely on the EU-U.S. Data Privacy Framework when the provider has signed up to it or, if it has not, on the standard contractual clauses adopted by the European Commission.

You can ask for access to your data, its rectification or erasure, the restriction of or objection to its processing, and its portability. You can also withdraw any consent you have given at any time. Write to info (at) cocosapiens.org. We reply within one month.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es) or with the authority in your country.

The website is not aimed at children under 16. You must be at least 16 to become a member.

• European Union, Norway, Iceland and Liechtenstein: the General Data Protection Regulation applies. In Norway, the authority is Datatilsynet.
• Switzerland: the Federal Act on Data Protection applies. The authority is the Federal Data Protection and Information Commissioner (FDPIC). Representative in Switzerland: not applicable.
• United Kingdom: the UK GDPR and the Data Protection Act 2018 apply. The authority is the Information Commissioner's Office. Representative in the United Kingdom: not applicable.
• Mexico: the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, DOF 20-3-2025) applies. You can exercise your ARCO rights by writing to info (at) cocosapiens.org. The authority is the Secretaría Anticorrupción y Buen Gobierno.
• United States and Canada: you can exercise your privacy rights by writing to info (at) cocosapiens.org. We do not sell or share your data for advertising purposes. We only send the newsletter to people who have subscribed.

If we change this policy, we will publish the new version on this page with its date.