Privacy policy

Asociación CoCo Sapiens Conscious Consumer Community, NIF G-56315831, registered in the National Register of Associations (Spain) under national number 627148, with the registered address shown in the Legal notice. Contact for any privacy matter: info (at) cocosapiens.org.

CoCo Sapiens has not appointed a data protection officer because it is not required to do so.

Browsing. When you visit the website, the server logs technical data (IP address, date, page requested and browser) so that the website works and stays secure. Legal basis: our legitimate interest in keeping the website secure. We keep this data for as long as needed for that purpose and for no more than 12 months.

Language. If you choose a language, we store it in your browser so that we can show you the website in that language next time. Legal basis: it is necessary for the service you request. More details in the Cookie policy.

Country. If your browser language is not one of the website’s languages, we ask the country.is service which country matches your IP address. We use this only to choose the website language and to centre the map on your area. We store neither the IP address nor the country. Legal basis: our legitimate interest in showing you the website in a language you understand.

Analytics. We do not currently measure visits. If we do so in the future, it will only be with your consent, as explained in the Cookie policy.

Enquiries. If you write to us through the contact form or by email, we use your name, your email address and your message to reply to you. Legal basis: your consent when you send us the enquiry. We keep the enquiry for 12 months from the last communication.

Members. If you become a member, we use the data from the membership form to manage your relationship with the association and your fees. Legal basis: the membership relationship you request. We keep the data for as long as you are a member and for 6 years afterwards, to meet accounting and legal obligations.

Producers. If a producer applies to join, we use their data and the data of their farm to assess the application and manage the membership. Legal basis: the steps prior to joining that the producer requests and, afterwards, the membership relationship. The same retention periods as for members apply.

Payments and donations. Payments are made on Stripe’s page, and Stripe processes the payment data as an independent controller. We only receive the name, the email address and the amount. Legal basis: legal accounting obligation. Retention period: 6 years.

Newsletter. You subscribe on beehiiv’s page. We use your email address to send you the newsletter until you unsubscribe; every issue includes a link to do so. Legal basis: your consent.

Map. The map images are served by OpenFreeMap, which receives your browser’s IP address in order to send them. It does not use cookies. If you click “Near me”, your location is used only in your browser to centre the map: it is not sent to us and it is not stored.

Videos. YouTube videos only load if you accept marketing cookies and press play. Legal basis: your consent.

We do not make automated decisions about you or create profiles. We do not sell or pass on your data.

Only the providers that supply a service to us, under contract and following our instructions:

• Formspree — contact and membership forms.
• Hostinger International Ltd. (Cyprus): website hosting, forms and email.
• beehiiv, Inc. (United States): newsletter.
• Stripe: payments.
• Hyperknot Software Kft. (Hungary), OpenFreeMap: map images.
• country.is: approximate country based on the IP address, without storing it.
• Google (YouTube): videos, only with your consent.

We will also disclose data to the authorities when the law requires us to.

Some providers are based in the United States. These transfers rely on the EU-U.S. Data Privacy Framework when the provider has signed up to it or, if it has not, on the standard contractual clauses adopted by the European Commission.

You can ask for access to your data, its rectification or erasure, the restriction of or objection to its processing, and its portability. You can also withdraw any consent you have given at any time. Write to info (at) cocosapiens.org. We reply within one month.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es) or with the authority in your country.

The website is not aimed at children under 16. You must be at least 16 to become a member.

• European Union, Norway, Iceland and Liechtenstein: the General Data Protection Regulation applies. In Norway, the authority is Datatilsynet.
• Switzerland: the Federal Act on Data Protection applies. The authority is the Federal Data Protection and Information Commissioner (FDPIC). Representative in Switzerland: not applicable.
• United Kingdom: the UK GDPR and the Data Protection Act 2018 apply. The authority is the Information Commissioner's Office. Representative in the United Kingdom: not applicable.
• Mexico: the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, DOF 20-3-2025) applies. You can exercise your ARCO rights by writing to info (at) cocosapiens.org. The authority is the Secretaría Anticorrupción y Buen Gobierno.
• United States and Canada: you can exercise your privacy rights by writing to info (at) cocosapiens.org. We do not sell or share your data for advertising purposes. We only send the newsletter to people who have subscribed.

If we change this policy, we will publish the new version on this page with its date.