Private preview · 4 October 2026
Your data. Your rights.
Controller
Maximilian Gerhardt & Co. Ltd
Arsinois 12B
8881 Agia Marina Chrysochous, Paphos
Cyprus
Represented by director Maximilian Gerhardt
Company registration: HE496285
VAT identification: CY60383173G
info@backandbuild.com
Scope of this information
This information describes the current local website preview. Fonts, images and scripts are provided by the local web server. No external analytics, advertising, maps or video players are active. Production hosting, its logs and service-provider arrangements must be documented before publication.
Your quiz answers
The quiz asks five questions about your goal, business stage, challenge, collaboration and budget or available resources. First name and surname are optional, separate steps. You choose a contact method: an email address for an email reply or an international telephone number for a callback. Both are not required. Before submission, answers stay in the memory of this tab, without localStorage or analytics events. Browser autofill and session restoration depend on your settings. The default preview does not submit enquiries. An explicitly enabled synthetic test mode accepts invented details only; do not enter real personal data here.
Submitting a test enquiry
The submit button sends the answers to /api/enquiry on this same local server. When explicitly enabled, an isolated local PostgreSQL database stores the test enquiry and a pending notification record in one transaction. A receipt means saved, not email delivered. Without this server configuration the request is rejected and your answers stay in the tab. No external mail transport is enabled. The separate email link opens your email application, where you decide whether to send. The copy button writes text to your clipboard only when requested.
Purpose and legal basis of an enquiry
When you send an enquiry, the operator uses your contact details and project information to respond and assess the requested collaboration. Article 6(1)(b) GDPR applies where this is necessary for steps at your request before a contract with you; for enquiries made on behalf of a company, Article 6(1)(f) can apply to the legitimate interest in responding to business enquiries. Your enquiry does not subscribe you to a newsletter.
Storage and recipients
Your cookie preference is stored locally with the version, service configuration, time and purpose choices. It is valid for 180 days; expired records are removed when the website is next opened. Submitted synthetic enquiries remain in the isolated local test database until that test environment is reset. A short-lived HMAC of the socket address limits submissions; no raw IP or answer content is written to application logs. The HMAC is pseudonymous, not anonymous. Expired throttle buckets are removed on the next accepted database call, with no automatic wall-clock deletion guarantee. No real enquiries are enabled. Before production use, storage location, provider agreements, access, backup and purpose-based deletion rules must be verified. No production retention period is invented here.
Cookies, analytics and advertising
The necessary preference record remembers your decision on this device. Optional analytics and advertising are off by default. Google Analytics, Google Ads and Meta adapters are prepared but disabled. No request goes to those services in the current configuration, including after “Allow all”. The provider details, applicable transfers and purposes must be reviewed and this notice updated before activation; a new consent version must then request a fresh choice.
Change your choice
Use “Cookie settings” in the footer at any time. Rejecting optional use is as accessible as accepting it. Withdrawal applies to the future; the controller prevents further optional activity and removes accessible optional cookies. A page reload is required if a third-party runtime was active. You can also delete the local preference using your browser controls.
Your rights
Subject to the applicable conditions, you may request access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests and withdraw consent at any time. Contact info@backandbuild.com. Requests may require proportionate identity verification. The ordinary GDPR response period is one month; statutory extension rules apply where necessary.
Complaints
You may complain to the competent supervisory authority, including in the EEA country where you live or work. In Cyprus: Commissioner for Personal Data Protection, commissioner@dataprotection.gov.cy.
Artificial intelligence and illustrations
This quiz uses fixed questions. It does not use an AI chatbot or make automated investment or eligibility decisions. AI-generated illustrations and AI-assisted project visualisations are labelled where they appear. They illustrate the idea or presentation; they are not documentary evidence of an office, staff, financial result or customer review.
External links
External websites are only contacted when you follow their links. Their operators are responsible for their own processing. Your quiz answers are not appended to these links.
Current preview status
Local preview, not publicly released. The mailbox exists; receipt and reply have not yet been verified end to end. Production hosting, enquiry delivery, retention and processor/transfer evidence remain open. These pages are not a legal certification.