Privacy Policy

This Privacy Policy explains how Hoffmann Consulting GmbH (“we”, “us”, or “our”), operating the website CoCreact.com, collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection law.

1. Controller

The controller responsible for data processing on this website is:

Hoffmann Consulting GmbH
Eppendorfer Baum 11
20249 Hamburg, Germany
Email: service@strategicplay.de
Phone: +49 40 421014-0

2. What Data We Collect

We may collect and process the following categories of personal data:

Contact data: First and last name, postal address, email address, phone number (when you contact us via forms or email)
Usage data: IP address, browser type, pages visited, time and date of access (collected via analytics tools)
Communication data: Content of messages sent to us via contact forms or email

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

Responding to inquiries (Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures)
Website analytics and improvement (Art. 6(1)(a) GDPR – your consent)
Compliance with legal obligations (Art. 6(1)(c) GDPR)
Legitimate interests, such as ensuring website security (Art. 6(1)(f) GDPR)

4. Cookies and Tracking

This website uses cookies. Cookies are small text files stored on your device. We use the following types of cookies:

Functional cookies: Necessary for the website to function properly
Analytics cookies: Used to analyze website usage (e.g. Google Tag Manager, Google Analytics) – only with your consent
Social media cookies: Placed when you interact with embedded social media content (Facebook, X/Twitter) – only with your consent

You can manage your cookie preferences at any time via our cookie banner or by adjusting your browser settings.

5. Third-Party Services

We use the following third-party services that may process your personal data:

Google Tag Manager / Google Analytics: Website analytics. Data may be transferred to Google LLC (USA). Google has accepted the EU Standard Contractual Clauses. IP anonymization is enabled.
Google Fonts: Web fonts loaded from Google servers. Your IP address may be transmitted to Google.
Google reCAPTCHA: Used to protect forms from spam. Processes IP address and browser data.
YouTube: Embedded videos. When you interact with a video, data may be transferred to Google LLC (USA).
Facebook / X (Twitter): Embedded social media content. Data may be transferred to the respective platform operators.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required by applicable statutory retention obligations:

Contact form inquiries: Retained until your inquiry has been fully processed, and deleted within 6 months thereafter, unless a contractual relationship or further correspondence requires continued storage.
Contractual and invoicing data: Retained for 6 to 10 years in accordance with German statutory retention periods (§ 147 German Fiscal Code (AO) and § 257 German Commercial Code (HGB)).
Server log files / technical usage data: Retained for up to 7 days for security purposes (e.g. to detect and prevent attacks), unless a security incident requires longer retention for investigation purposes.
Cookies and tracking tools: Retained according to the settings of our cookie consent tool and the respective provider’s policy (e.g. Google Analytics: typically 14 months). You may withdraw your consent at any time via the cookie banner, after which no further data will be processed for that purpose.

Once the purpose of processing no longer applies and no statutory retention obligation exists, the relevant personal data is deleted or anonymized.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact us at: service@strategicplay.de

You also have the right to lodge a complaint with a supervisory authority. The competent authority for Hamburg is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 20459 Hamburg
www.datenschutz.hamburg.de

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. This website uses SSL/TLS encryption for all data transmissions.

9. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

10. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. The current version is always available on this page. We recommend checking this page regularly for any changes.

11. Contact

If you have any questions about this Privacy Policy or the processing of your personal data, please contact us:

Hoffmann Consulting GmbH
Eppendorfer Baum 11
20249 Hamburg, Germany
Email: service@strategicplay.de
Phone: +49 40 421014-0