Privacy policy

Controller: Asociación CoCo Sapiens, NIF G56315831, C/ de Bergara 7, 08172 Sant Cugat del Vallès, Barcelona, Spain.

Privacy contact: info@cocosapiens.org / [dedicated privacy email if different].

Data Protection Officer (DPO): [name and email, or “not appointed”].

Depending on your interaction, we may process: identity and contact data (name, email, phone); message content; membership interest; newsletter preferences; technical data (IP address, browser type, device) needed for security and, where consented, analytics; and cookie identifiers as described in the Cookie policy.

On your first visit to the home page only, we may derive a country from your IP address in order to suggest a language. The IP address is not stored. We store only the language code you end up with, in the strictly necessary cookie coco_lang.

Responding to enquiries (legitimate interest / pre-contractual steps).

Managing membership applications and member relations (contract / pre-contractual steps; where required, consent).

Sending the newsletter when you opt in (consent; you may withdraw at any time).

Operating and securing the website, including remembering your language (legitimate interest / strictly necessary cookie).

Analytics or marketing cookies only with consent where required.

Complying with legal obligations (legal obligation).

We use service providers that process data on our behalf:

Formspree — contact and membership forms.

Beehiiv — newsletter subscription and delivery.

YouTube (Google) — privacy-enhanced player (youtube-nocookie.com), loaded only if you allow marketing cookies and choose to play an embedded film. Nothing is requested from YouTube on page view.

Hostinger — website hosting.

Other processors: [CDN / email / analytics provider names if any].

Country detection on the first visit to the home page is done in your browser by requesting a country code from api.country.is. We do not receive or store the IP address from that lookup.

We do not sell personal data. Data may be disclosed where legally required.

Some providers may process data outside the European Economic Area. Where transfers occur, we rely on [adequacy decision / Standard Contractual Clauses / other safeguard] as applicable. Details: [transfer details].

Enquiry data: [period, e.g. up to 12 months after last contact] unless a longer period is needed for a claim.

Membership data: for the relationship and [statutory retention] thereafter.

Newsletter: until you unsubscribe or withdraw consent.

Cookie / consent logs: [period].

Language preference (coco_lang): 12 months, or until you change it.

You may request access, rectification, erasure, restriction, portability and objection, and withdraw consent without affecting prior lawful processing. You may lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

To exercise rights: info@cocosapiens.org / [privacy email], with enough information to identify you.

Where Norwegian law applies, you may also contact the Norwegian Data Protection Authority (Datatilsynet). Additional local requirements: [if any].

Where Swiss law (nFADP) applies, you may contact the Federal Data Protection and Information Commissioner (FDPIC). Representative in Switzerland if required: [name/address or “not applicable”].

Under the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations, you may exercise ARCO rights (access, rectification, cancellation, opposition) and revoke consent via info@cocosapiens.org / [privacy email].

Short first-layer notice also appears on relevant forms: we process your data to manage your request and, if you opt in, the newsletter; see this policy for full details and ARCO rights.

Where UK GDPR / Data Protection Act 2018 applies, you may contact the Information Commissioner’s Office (ICO). UK representative if required: [name/address or “not applicable”].

If we target users in these jurisdictions: [state privacy rights / CASL email rules — to be completed]. Currently the site is primarily directed at audiences in Europe and partner countries listed above.

Services are not directed at children under [14/16]. We do not knowingly collect their data. If you believe we have, contact us to delete it.

We may update this policy. The “last updated” date will change; material changes may be highlighted on the site.