ConvertVisits · Information: 6 October 2026
Your data.
Your choice.
Controller and contact
Maximilian Gerhardt & Co. Ltd
Arsinois 12B, 8881 Agia Marina Chrysochous, Paphos, Cyprus
HE496285 · VAT: CY60383173G
Maximilian Gerhardt
info@convertvisits.com
Company and service
ConvertVisits is a specialist brand of the company above, not a separate legal entity. Corporate details come from the company record of 29 September 2026, not a new registry check. The registered office does not imply a staffed walk-in office. Scope, fees and delivery dates are agreed individually. An enquiry does not conclude a contract or book an appointment.
This version
This version accepts enquiries. Sending an email enquiry first creates a pending record; confirmation releases it for handling. A telephone enquiry requests a callback.
Enquiries through Facebook or Instagram forms
When you submit a ConvertVisits enquiry form directly on Facebook or Instagram, Meta makes your entered contact details and answers, together with information about the form and submission, available to us. Meta may prefill fields from your profile; review and correct them before submitting. Please do not include confidential third-party data or particularly sensitive information.
We retrieve the enquiry in Meta’s business interface and use it for personal assessment and the contact you requested, including arranging a conversation. Responsible staff of Maximilian Gerhardt & Co. Ltd handle the enquiry; we use our business mailbox to reply. Requests for pre-contractual steps for yourself rely on GDPR Article 6(1)(b); business enquiries and general questions rely on our legitimate interest in responding under Article 6(1)(f). This does not subscribe you to a newsletter or book an appointment. The website quiz’s email-code process does not run automatically for this form.
Meta Platforms Ireland Limited provides the form on its platform. Meta’s privacy information also applies to its platform processing, including information about international processing. This website’s cookie choices do not control processing inside Facebook or Instagram. We do not automatically add this contact enquiry to an advertising contact list or use it for an automated decision about working together. We need the information to handle the enquiry and any subsequent engagement; further retention depends on legal duties and necessary records. Contact info@convertvisits.com for access, correction or deletion. The rights explained below also apply to these enquiries.
Optional measurement
Analytics, Google advertising and Meta advertising require separate consent (GDPR Article 6(1)(a)). No optional provider loads before that choice, and an enquiry works without advertising consent. A received enquiry is pending; only a newly verified email can produce the confirmed Lead event. Email verification is not professional qualification, a sale or a booked appointment.
Google Analytics 4
With analytics consent, Google receives allowlisted page/quiz and enquiry-status events, page and registration languages, a clean page address, a shortened referrer and a random event identifier. Its SDK also processes technical browser information, network information and analytics cookies. We do not send contact fields, quiz answers, email codes or confirmation tokens.
Google Ads
Separate Google advertising consent allows advertising cookies, recognised Google click identifiers and advertising personalisation. The own conversion is sent only for a newly verified email with consent before that confirmation attempt and the same current decision. Enhanced conversions using contact data are off. A pending enquiry or callback is not this conversion.
Meta Pixel / Meta Conversions API
With separate Meta consent, the Pixel measures allowlisted page/quiz and enquiry-status events. Our server may also send the same newly verified Lead through Meta Conversions API, independently of Pixel availability and with the same random event ID for deduplication. Consent must precede the confirmation attempt and remain current immediately before sending. The server sends the original event time, fixed clean site address, status, page and registration languages, actual browser user agent, trusted client IP when available and recognised _fbp/_fbc cookies. No contact details, form answers, email code or DOI token are sent. The signed ten-minute transfer permission stays only in the current flow, never in browser storage. No later grant, regrant, reload or historical confirmation backfills an event. No durable retry queue exists; a provider outage never reverses email confirmation.
Withdrawal, storage and providers
Change each purpose in the footer. Withdrawal stops further events, removes accessible optional cookies and aborts pending browser CAPI requests; it cannot recall a request already received by the server or Meta. If an SDK was loaded, a fresh page may be required. A local convertvisits:measurement:v1 record contains only consent-decision reference, expiry, visitor/pending/confirmed status, registration language and random event IDs for deduplication; it does not contain your form answers or contact details and expires with the original privacy choice (up to 180 days). Google and Meta publish cookie lifetimes and international processing below. We do not promise EU-only processing.
Google Privacy · Google data processing terms · Google cookies · Meta Privacy · Meta Cookies · Meta Business Tools
Data and purposes
The quiz asks for website type, desired next step, current obstacle and project context, optional first name and surname, and either an email address or an international phone number. We use submitted information to understand and answer your enquiry. Please do not include sensitive data. Details are not legally required; without a contact route we cannot reply. Fixed questions do not produce automated eligibility decisions or AI scoring.
Legal grounds
Requested pre-contractual steps rely on GDPR Article 6(1)(b). Other enquiries, secure website operation, abuse prevention and verification of the requested contact route rely on our legitimate interests under Article 6(1)(f). The necessary privacy preference remembers your selection. The quiz does not subscribe you to a newsletter or give advertising consent.
Hosting and security
Vercel provides the website and technical request handling. Requests expose IP address, browser information, requested path and timing to the hosting infrastructure. Security and error records help deliver and protect the service. The configured function region is Frankfurt; delivery through a global network and provider access are not limited to that region.
Enquiry storage and confirmation
On submission, the website relay passes your contact details, answers, language and page path to the ConvertVisits intake. Supabase stores the enquiry, status and technical verification records in the configured Frankfurt database. Resend sends confirmation emails from info@convertvisits.com. Email confirmation uses a four-digit code or confirmation link; a callback request requires no email confirmation. Email opening and click tracking are disabled. The selected Resend region Ireland (eu-west-1) controls sending, not storage: Resend states that message content, delivery logs, webhook payloads and account records are stored in the United States. Direct emails also involve your own mail provider and our mailbox.
Recipients and international processing
Only people handling or administering the enquiry and the technical providers involved receive the data needed for their task. EU infrastructure does not exclude access from other countries. The provider documents below describe international transfers and safeguards; these documents alone do not prove the contractual coverage of our account. Vercel is currently used on the Hobby plan during testing; its published DPA names Pro and Enterprise. Account-specific contractual coverage remains under review. Contact us for information about the applicable safeguards.
Storage on your device
The localStorage record convertvisits.consent.v2 contains preference version, purposes, creation and expiry time for up to 180 days. You can change the choice in the footer or clear website data. Quiz answers, contact details and confirmation codes are not written to localStorage or sessionStorage. They remain in page memory; browser autofill and session restoration depend on your browser.
Retention
We retain enquiries while needed to answer them, carry out agreed steps or meet applicable legal obligations. Unconfirmed enquiries and technical evidence must be assessed separately. Expiry of a confirmation code or link does not delete the enquiry. This version does not promise automatic deletion after a fixed number of days. Resend describes 30-day email/log retention on standard plans and a separate backup period; this does not determine retention in our database or mailbox. You may ask for deletion using the contact above.
Illustrations and external links
Brand links open external websites only when followed and do not include quiz answers. Labelled AI illustrations are fictional scenes, not customer testimonials or staff portraits; the Stöckl excerpt is a real project artifact.
Your rights
Subject to the legal conditions, you can request access, correction, erasure, restriction and portability. You may object to processing based on legitimate interests and withdraw consent for the future without affecting earlier lawful processing. Contact info@convertvisits.com. You may complain to the Cyprus Commissioner for Personal Data Protection or another competent authority.
Commissioner for Personal Data Protection · Vercel Privacy Notice · Vercel DPA · Supabase DPA · Resend: data locations and retention