Privacy

Updated: 6 October 2026

Controller and contact

Maximilian Gerhardt & Co. Ltd · Director Maximilian Gerhardt
Arsinois 12B, 8881 Agia Marina Chrysochous, Paphos, Cyprus
Company registration HE496285 · VAT ID CY60383173G

Privacy requests and questions about an enquiry: info@backandbuild.com

AppsToMarket is a specialist brand of Maximilian Gerhardt & Co. Ltd. Gerhardt & Co. is the house brand; Back & Build connects the specialist brands. The registered address is not a promised staffed walk-in office.

Website delivery

Vercel provides this website and its server-side enquiry functions. Technical connection data such as IP address, time, requested path and browser information is processed for delivery and protection against misuse. Functions are configured for Frankfurt; global delivery and possible provider access are not thereby restricted to Germany. The purpose is a functional, protected service, based on legitimate interests under GDPR Article 6(1)(f).

What your enquiry sends

The quiz asks about project, users, task and current obstacle, one chosen contact method (email or phone), and optional first name and surname. Before submission, answers remain in page memory; the website does not store them in localStorage. Only the send action transfers the reviewed answers, language and source page through a brand-bound server function. A technical request identifier helps recognise accidental repeats. Browser autofill and session restoration are separate browser features.

Email confirmation and callbacks

An email enquiry is initially stored as unconfirmed. Resend sends the confirmation message using the selected Ireland sending region (eu-west-1). The four-digit code lasts ten minutes and locks after five incorrect attempts; the alternative link lasts 24 hours. Opening the link alone confirms nothing. A callback request needs no email confirmation. Submitting or confirming an enquiry does not subscribe you to a newsletter.

Handling and storage

We use the details to prepare the requested reply or callback and handle the enquiry. Necessary steps before a contract with you rely on GDPR Article 6(1)(b); responding to an enquiry on behalf of a business generally relies on legitimate interests under Article 6(1)(f). The enquiry and confirmation status are held with brand separation in the existing Supabase database, whose project region is Frankfurt (eu-central-1). Delivery and confirmation events support execution and troubleshooting. Do not send credentials, other customers’ records or special categories of personal data.

Retention and deletion

Details support handling your enquiry and documenting its confirmation. Retention depends on that purpose, any subsequent contract, and applicable statutory retention or evidence duties. Expiry of a code or link does not delete the enquiry. No blanket automatic deletion period is promised here. Contact the operator to request access or deletion.

Necessary storage and cookie choices

atm:privacy:v4 stores the consent version, time, selected purposes and non-personal provider configuration in your browser for up to 180 days. Invalid or expired choices are discarded at the next access. Provider, activation or purpose changes require a new choice. Optional processing stays blocked when storage is unavailable. You can change your choice in the footer at any time. Rejecting optional purposes leaves the content and enquiry route usable.

Analytics and advertising

With a verified configuration and your separate choices, Google Ireland Limited processes analytics or advertising measurements; Meta Platforms Ireland Limited processes Pixel and Conversions API advertising measurements. A newly verified enquiry may send a Lead with the same event ID through browser and server, with page and registration language. Meta server matching uses actual browser information, IP where available and existing _fbp/_fbc cookies, without your name, email, phone, answers or confirmation capability. Google/Meta may associate technical identifiers with other data and process them internationally, including in the USA. Optional processing relies on consent under GDPR Article 6(1)(a); withdrawal stops future sends and pending browser requests. It cannot recall an event already transmitted. A later grant never backfills an earlier enquiry or confirmation. Newsletter choices remain separate.

Recipients and international processing

Vercel hosting, Supabase storage and Resend email delivery are distinct processing steps. A European project or sending region does not mean support, metadata or subprocessors process exclusively in the EEA. The linked provider information explains their contractual and transfer frameworks; it is not a promise of exclusively European processing.

Your rights

Where applicable, you may request access, rectification, erasure, restriction and portability. You may object to legitimate-interest processing and withdraw consent for the future. Proportionate identity verification may be required. You may complain to a competent supervisory authority, including where you live or work, or the Commissioner for Personal Data Protection in Cyprus.

External links and imagery

External websites are contacted when you open their links. Brand links may contain general source attribution, never quiz answers. Labelled generated scenes are illustrations, not documentary customer meetings or reviews. The quiz uses fixed questions, not runtime AI.

Enquiries through Facebook or Instagram forms

When you submit a AppsToMarket enquiry form directly on Facebook or Instagram, Meta makes your entered contact details and answers, together with information about the form and submission, available to us. Meta may prefill fields from your profile; review and correct them before submitting. Please do not include confidential third-party data or particularly sensitive information.

We retrieve the enquiry in Meta’s business interface and use it for personal assessment and the contact you requested, including arranging a conversation. Responsible staff of Maximilian Gerhardt & Co. Ltd handle the enquiry; we use our business mailbox to reply. Requests for pre-contractual steps for yourself rely on GDPR Article 6(1)(b); business enquiries and general questions rely on our legitimate interest in responding under Article 6(1)(f). This does not subscribe you to a newsletter or book an appointment. The website quiz’s email-code process does not run automatically for this form.

Meta Platforms Ireland Limited provides the form on its platform. Meta’s privacy information also applies to its platform processing, including information about international processing. This website’s cookie choices do not control processing inside Facebook or Instagram. We do not automatically add this contact enquiry to an advertising contact list or use it for an automated decision about working together. We need the information to handle the enquiry and any subsequent engagement; further retention depends on legal duties and necessary records. Contact info@appstomarket.com for access, correction or deletion. The rights explained below also apply to these enquiries.

Meta · Privacy

Provider information

Your undertaking may need more.

Back & Build connects six specialist brands. Find the next useful starting point, from visibility to products and everyday operations.

Gerhardt & Co. is the house brand. Operated by Maximilian Gerhardt & Co. Ltd.

Your privacy is your choice. Optional analytics and advertising tools only start with your permission.