Privacy Policy

Data controller

The data controller is the business “KOKON”, based in Sparta, Laconia, Greece. For any matter concerning your data you can contact us at the email address listed in the Contact section.

What data we collect

Pickup order form: name, phone, optional email, the products you request and your pickup time.

Catering form: name, phone, type and date of event, estimated number of guests and your message.

Newsletter: your email address, with double opt-in confirmation.

Technical data: when you submit a form, your IP address is recorded solely for abuse protection (rate limiting).

Purpose and legal basis

Form details are used exclusively to handle your request (pre-contractual measures, Art. 6(1)(b) GDPR) and are submitted only with your explicit consent (Art. 6(1)(a)).

Your newsletter email is used only to send KOKON updates, based on your consent, which you can withdraw at any time via the unsubscribe link.

Cookies and third-party services

The site uses essential cookies for language, consent and accessibility settings.

Google Analytics 4 (analytics) and the embedded Google map (marketing) load only after your consent via the cookie banner. Without consent, no third-party connection is made at all.

You can change your choices at any time via “Cookie settings” in the footer.

Storage and transfers

Form data is stored in a database (Supabase) within the EU and notification emails are sent through an email provider (Resend). Your data is never sold or shared with third parties for advertising purposes.

Form submissions are kept for up to 12 months and then deleted, unless a legal retention obligation applies.

Your rights

You have the right of access, rectification, erasure, restriction, objection and data portability. You may also lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).

To exercise your rights, contact us by email — we will respond within 30 days.