Privacy information

Maximilian Gerhardt & Co. Ltd

AttentionLift is a specialist brand of Maximilian Gerhardt & Co. Ltd, based in Cyprus.

Using this website

Images, fonts and scripts are provided with this website. No external maps or media players are embedded. The motion setting applies only to the current page and is not saved in browser storage.

Hosting and technical protection

Vercel hosts the website and enquiry endpoints. Delivering and protecting these services involves technical request data such as IP address, requested resource, time and browser information. For abuse prevention, the enquiry endpoint derives a pseudonymous rate-limit key from technical request information. The purpose is reliable delivery and protection against misuse, based on our legitimate interest under Article 6(1)(f) GDPR. Vercel uses international infrastructure; processing outside the EEA, including in the USA, is possible.

Vercel · Privacy Policy

Your enquiry and email confirmation

When you send, we receive your selected campaign, venue or partner route, answers, first and last name, email address, any optional telephone number and the page from which you enquire. We save these details to handle your request. Required fields enable us to understand and answer your enquiry; the telephone number is voluntary. You can check and correct your answers before sending. Please do not include sensitive information or other people’s contact details.

We send a confirmation email with a four-digit code valid for 10 minutes and a confirmation link valid for 24 hours. We also process the confirmation status and technical identifiers needed to prevent duplicate submissions and verify your email. Confirmation is not a newsletter subscription. There is no automated decision with legal or similarly significant effects about you.

Database and email delivery

Enquiries and confirmation records are stored in our Supabase database in Frankfurt, Germany. Resend delivers the confirmation email through its Ireland sending region. The sending region does not mean that all email data stays in the EU: Resend states that message content, delivery logs and account data are stored in the USA. The email service receives the recipient address and message content needed for delivery. Access to enquiry data is limited to handling and operating the service.

These providers may involve international affiliates and subprocessors. Their published data-processing terms describe transfer safeguards, including standard contractual clauses where applicable. A European database or sending region alone does not rule out international processing.

Supabase · Data Processing Addendum · Resend · GDPR & data locations

Purpose and legal basis of enquiries

The company named above is the controller. We use received details to understand your request, reply and, where relevant, prepare a contract. Article 6(1)(b) GDPR applies to steps requested by you toward your own contract. For business enquiries made on behalf of an organisation, our legitimate interest in responding to relevant business contacts is the basis under Article 6(1)(f). You may object to processing based on legitimate interests on grounds relating to your particular situation.

Storage and deletion

We retain received enquiries for handling and necessary follow-up. We delete or restrict data when its purpose ends, unless statutory retention duties or the establishment, exercise or defence of legal claims require continued retention. Relevant criteria include the enquiry status, any resulting contract and applicable accounting or limitation periods. Service logs and backups can have separate provider retention cycles. You can ask us about or request deletion of your particular enquiry at info@attentionlift.com.

The 10-minute code and 24-hour link periods limit verification validity. They do not mean that the enquiry or delivery logs are automatically deleted when those periods end.

Your cookie choice

Your choice, timestamps and non-personal provider configuration are saved on this device for 180 days under attentionlift.consent.v2 so we can respect your decision; quiz answers are not stored in this record. A provider, activation or purpose change requires a new choice. This necessary preference storage serves your requested choice and our legitimate interest in respecting and documenting it. Optional tools require your separate consent under Article 6(1)(a) GDPR and applicable device-storage rules. No optional provider script loads before that consent. The footer opens the choices again. Withdrawal applies for the future and does not affect the lawfulness of earlier processing. Disabling an active tool reloads the page; first finish or copy your brief.

Optional measurement

Only the following configured tools are available, each subject to its own consent choice. They may process device and browser information, IP address, page visits and identifiers in cookies, including in the USA. Their purposes and recipients are described below.

Google Analytics — Google Ireland Limited: understand visits and use of the site; measure a pending or confirmed enquiry. Google · Privacy

Google Ads — Google Ireland Limited: measure confirmed enquiries attributed to advertising and support personalised advertising where permitted by your choice. Google · Advertising

Meta Pixel / Conversions API — Meta Platforms Ireland Limited: measure pending and confirmed enquiries and advertising results, and support personalised advertising on Meta. Meta · Privacy

Our enquiry events contain status, language and an event identifier, not your quiz answers, name, email, telephone number or verification code. Providers can associate technical identifiers with other information they hold. Cookie and provider retention depend on the tool and its configuration; the provider notices explain their retention criteria and privacy controls. The 180-day consent record is separate from provider storage.

With a verified configuration and your separate choices, Google Ireland Limited processes analytics or advertising measurements; Meta Platforms Ireland Limited processes Pixel and Conversions API advertising measurements. A newly verified enquiry may send a Lead with the same event ID through browser and server, with page and registration language. Meta server matching uses actual browser information, IP where available and existing _fbp/_fbc cookies, without your name, email, phone, answers or confirmation capability. Google/Meta may associate technical identifiers with other data and process them internationally, including in the USA. Optional processing relies on consent under GDPR Article 6(1)(a); withdrawal stops future sends and pending browser requests. It cannot recall an event already transmitted. A later grant never backfills an earlier enquiry or confirmation. Newsletter choices remain separate.

Your rights and contact

Subject to the applicable conditions, you may request access, correction, deletion, restriction or portability, object to processing based on legitimate interests and withdraw consent for the future. Contact info@attentionlift.com. You may complain to a competent supervisory authority, including the Cyprus Commissioner for Personal Data Protection.

Commissioner for Personal Data Protection, Cyprus

Images and external links

Synthetic campaign and venue images are visibly marked “AI Generated”. They illustrate ideas and do not document a real venue, endorsement or completed installation. The Stöckl creative board is original project material. Following an external link opens another operator’s service, whose own privacy information applies.