Privacy

Updated: 5 October 2026

Controller and contact

Maximilian Gerhardt & Co. Ltd · Director Maximilian Gerhardt
Arsinois 12B, 8881 Agia Marina Chrysochous, Paphos, Cyprus
Company registration HE496285 · VAT ID CY60383173G

Privacy requests and questions about an enquiry: info@backandbuild.com

GetClientsIn is a specialist brand of Maximilian Gerhardt & Co. Ltd. Gerhardt & Co. is the house brand; Back & Build connects the specialist brands. The registered address is not a promised staffed walk-in office.

Website delivery

Vercel provides this website and its server-side enquiry functions. Technical connection data such as IP address, time, requested path and browser information is processed for delivery and protection against misuse. Functions are configured for Frankfurt; global delivery and possible provider access are not thereby restricted to Germany. The purpose is a functional, protected service, based on legitimate interests under GDPR Article 6(1)(f).

What your enquiry sends

The quiz asks about situation, offer, area and current acquisition route, one chosen contact method (email or phone), and optional first name and surname. Before submission, answers remain in page memory; the website does not store them in localStorage. Only the send action transfers the reviewed answers, language and source page through a brand-bound server function. A technical request identifier helps recognise accidental repeats. Browser autofill and session restoration are separate browser features.

Email confirmation and callbacks

An email enquiry is initially stored as unconfirmed. Resend sends the confirmation message using the selected Ireland sending region (eu-west-1). The four-digit code lasts ten minutes and locks after five incorrect attempts; the alternative link lasts 24 hours. Opening the link alone confirms nothing. A callback request needs no email confirmation. Submitting or confirming an enquiry does not subscribe you to a newsletter.

Handling and storage

We use the details to prepare the requested reply or callback and handle the enquiry. Necessary steps before a contract with you rely on GDPR Article 6(1)(b); responding to an enquiry on behalf of a business generally relies on legitimate interests under Article 6(1)(f). The enquiry and confirmation status are held with brand separation in the existing Supabase database, whose project region is Frankfurt (eu-central-1). Delivery and confirmation events support execution and troubleshooting. Do not send credentials, other customers’ records or special categories of personal data.

Retention and deletion

Details support handling your enquiry and documenting its confirmation. Retention depends on that purpose, any subsequent contract, and applicable statutory retention or evidence duties. Expiry of a code or link does not delete the enquiry. No blanket automatic deletion period is promised here. Contact the operator to request access or deletion.

Necessary storage and cookie choices

getclientsin.consent.v2 stores the consent version, time and selected purposes in your browser for up to 180 days. Invalid or expired choices are discarded at the next access. Optional processing stays blocked when storage is unavailable. You can change your choice in the footer at any time. Rejecting optional purposes leaves the content and enquiry route usable.

Analytics and advertising

Google Analytics loads only with analytics consent, Google Ads only with separate Google advertising consent, and Meta Pixel/Conversions API only with separate Meta consent. Each requires an approved configuration. The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw it for the future in the footer. Events contain a clean page path, validated public campaign and click identifiers, page and registration language, quiz start, accepted enquiry (pending) and newly confirmed email (confirmed) with a random event identifier. Contact fields, quiz text, code and link proof never go to Google or Meta. Google receives no automatic page view, Google Signals or enhanced conversions. Meta may receive the technical IP address, browser user agent and existing valid _fbp/_fbc cookies. Where Meta Conversions API is configured, server Lead delivery uses a signed ten-minute receipt and the same event identifier as the Pixel, without hashed contact data. Withdrawal stops further website events and pending browser requests; accepted delivery cannot be recalled. Later consent never replays historic confirmations. Optional browser state lasts at most 180 days; provider cookies and retention follow the respective settings. There is no durable delivery queue or delivery guarantee. Google and Meta may process internationally.

Recipients and international processing

Vercel hosting, Supabase storage and Resend email delivery are distinct processing steps. A European project or sending region does not mean support, metadata or subprocessors process exclusively in the EEA. The linked provider information explains their contractual and transfer frameworks; it is not a promise of exclusively European processing.

Your rights

Where applicable, you may request access, rectification, erasure, restriction and portability. You may object to legitimate-interest processing and withdraw consent for the future. Proportionate identity verification may be required. You may complain to a competent supervisory authority, including where you live or work, or the Commissioner for Personal Data Protection in Cyprus.

External links and imagery

External websites are contacted when you open their links. Brand links may contain general source attribution, never quiz answers. Labelled generated scenes are illustrations, not documentary customer meetings or reviews. The quiz uses fixed questions, not runtime AI.

Enquiries through Facebook or Instagram forms

When you submit a GetClientsIn enquiry form directly on Facebook or Instagram, Meta makes your entered contact details and answers, together with information about the form and submission, available to us. Meta may prefill fields from your profile; review and correct them before submitting. Please do not include confidential third-party data or particularly sensitive information.

We retrieve the enquiry in Meta’s business interface and use it for personal assessment and the contact you requested, including arranging a conversation. Responsible staff of Maximilian Gerhardt & Co. Ltd handle the enquiry; we use our business mailbox to reply. Requests for pre-contractual steps for yourself rely on GDPR Article 6(1)(b); business enquiries and general questions rely on our legitimate interest in responding under Article 6(1)(f). This does not subscribe you to a newsletter or book an appointment. The website quiz’s email-code process does not run automatically for this form.

Meta Platforms Ireland Limited provides the form on its platform. Meta’s privacy information also applies to its platform processing, including information about international processing. This website’s cookie choices do not control processing inside Facebook or Instagram. We do not automatically add this contact enquiry to an advertising contact list or use it for an automated decision about working together. We need the information to handle the enquiry and any subsequent engagement; further retention depends on legal duties and necessary records. Contact info@getclientsin.com for access, correction or deletion. The rights explained below also apply to these enquiries.

Meta · Privacy

Provider information

Your undertaking may need more.

Back & Build connects six specialist brands. Find the next useful starting point, from visibility to products and everyday operations.

Gerhardt & Co. is the house brand. Operated by Maximilian Gerhardt & Co. Ltd.

You decide what can run. Optional analytics and advertising stay off until you choose.