PRIVACY POLICY
CoCreatify GmbH | Updated 24 September 2026
This policy explains how we process personal data when you visit our website, contact us or work with us on a project.
Who is responsible
CoCreatify GmbH, Ennsgasse 11/1, 5541 Altenmarkt im Pongau, Austria
Email: office@co-creatify.com | Telephone: +43 664 7513 2950
How your data is collected and used
We receive personal data through our contact form, email, telephone, Microsoft Teams and project work. This includes names, company details, business contact details and relevant correspondence or project files. Your employer or our client may also provide your business contact details for project coordination.
We use this data to respond to enquiries, prepare proposals, deliver services and manage business relationships. Where you are personally our contractual partner, the legal basis is Article 6(1)(b) GDPR. For communications with representatives of companies and other business enquiries, we rely on our legitimate interest in efficient business communication and project delivery under Article 6(1)(f) GDPR. Statutory processing obligations are based on Article 6(1)(c) GDPR.
Providing contact and project information is generally voluntary, but we may be unable to respond or deliver a requested service without the necessary details.
Website hosting
Our website is hosted on the Wix platform provided by Wix.com Ltd., Israel, and its affiliated service providers. Wix processes technical data such as IP addresses, device and browser information, requested pages and access times to deliver and secure the website. The legal basis is our legitimate interest in operating a reliable and secure website under Article 6(1)(f) GDPR. IP addresses are treated as personal data where they can identify an individual.
Cookies and Wix Analytics
Our website uses cookies and similar technologies. Essential technologies support security, core website functions and remembering your privacy choices. Optional technologies require your consent under Section 165(3) of the Austrian Telecommunications Act 2021; associated personal data processing is based on Article 6(1)(a) GDPR.
We use Wix Analytics to understand website use and improve our content. It may process page views, visit times, referral sources, device information and online identifiers. Analytics cookies and associated visitor tracking are used only with your consent. We do not currently use Google Analytics.
You can accept or reject optional cookies through our cookie banner and change or withdraw your consent through the website’s cookie settings. Withdrawal does not affect processing that occurred lawfully before withdrawal. Session cookies expire when the session ends; persistent cookies remain until their expiry or deletion. The cookie information available through our cookie settings identifies the technologies used and their lifetimes.
Contact form and spam protection
Our Wix contact form uses the “Advanced and reCAPTCHA” spam protection setting. Wix spam filters and Google reCAPTCHA assess technical and interaction signals, such as IP addresses, browser information and visitor behaviour, to detect automated abuse. Wix filters may also assess contact information submitted through the form. A visible challenge may appear when activity seems suspicious.
Processing necessary to protect our form against abuse is based on our legitimate interest in secure communications under Article 6(1)(f) GDPR. Where consent is required for device access or further processing, the relevant features are used only with consent under Section 165(3) TKG 2021 and Article 6(1)(a) GDPR. You can also contact us by email or telephone.
Email and Microsoft Teams
We use Microsoft 365 for email and Microsoft Teams for project communication. Microsoft, including Microsoft Ireland Operations Limited and relevant affiliated service providers, processes contact details, message content, attachments and technical connection data. Teams also processes your display name and, when enabled, audio, video, chat or shared-screen content. The legal bases are the contract and legitimate-interest grounds described above. Any meeting recording or transcription requires separate prior information and an appropriate legal basis.
Microsoft privacy and data protection information
Who receives data and international transfers
Where necessary, we share relevant data with freelancers involved in a project, our IT support provider, and the hosting and communication providers described above. Access is limited to the data required for their tasks. Providers processing data on our behalf must be bound by the applicable data protection terms. Disclosure may also be necessary to comply with legal obligations or establish, exercise or defend legal claims.
Wix, Microsoft and Google may process data through international infrastructure and service providers, including in Israel and the United States. Processing is therefore not necessarily restricted to the European Economic Area (EEA). Transfers outside the EEA must rely on an applicable European Commission adequacy decision or appropriate safeguards, such as the EU Standard Contractual Clauses and supplementary measures where required. The applicable mechanism depends on the recipient and service. You may contact us for information about the safeguards relevant to your data and how to obtain a copy.
Wix data processing terms and transfer safeguards
Microsoft data processing terms
How long we keep data
We retain enquiry data until the enquiry and relevant follow-up are complete. Project correspondence and contractual records are kept for the duration of the business relationship and thereafter only as required by statutory retention obligations or relevant limitation periods for legal claims. Access to retained records is restricted to these purposes.
Technical logs and security data are retained for as long as necessary to operate the services, investigate incidents and prevent abuse. Analytics data is retained only for the period necessary to evaluate and improve website use, after which it is deleted or irreversibly anonymised. Cookie lifetimes are separate from the retention of data collected using cookies.
Your rights
Subject to the applicable legal conditions, you may request access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time without affecting the lawfulness of earlier processing.
You may object, on grounds relating to your particular situation, to processing based on legitimate interests. You may object to processing for direct marketing at any time.
To exercise your rights, email office@co-creatify.com. You may lodge a complaint with a supervisory authority, particularly the Austrian Data Protection Authority at www.dsb.gv.at, or the authority where you live or work. We do not use your data to make solely automated decisions producing legal or similarly significant effects about you.