# Website: Enquiries (leads)

{/* AUTO-SYNCED SOURCE: this page lives in apps/app/src/modules/website/docs/ and is mirrored into the docs app by `bun sync:module-docs`. Edit it in the module, not in apps/docs. */}

<Lead>
Every enquiry made through your website lands in the tool's **Anfragen** (enquiries) area: with sender, message, property reference and a documented privacy consent. The sidebar badge shows new enquiries, notifications go to the workspace and via email. Spam is filtered without real prospects ever solving a captcha.
</Lead>

## Where enquiries come from

Two forms feed the inbox: the **contact form** (the contact block on your pages) and the **enquiry form on exposé pages**. They produce four types:

<DefinitionList>
  <DefItem term="Kontakt (contact)">A general message via the contact form.</DefItem>
  <DefItem term="Rückruf (callback)">A callback request with phone number.</DefItem>
  <DefItem term="Objekt-Anfrage (property enquiry)">A question about a specific listing, with the property referenced in the enquiry.</DefItem>
  <DefItem term="Exposé-Anforderung (exposé request)">A request for a listing's full exposé.</DefItem>
</DefinitionList>

After submitting, visitors see: "Vielen Dank für Ihre Nachricht. Wir melden uns zeitnah bei Ihnen." (thank you for your message, we will get back to you shortly). Invalid input produces a friendly error asking to review the entries.

## GDPR: consent with proof

Every form contains a **mandatory checkbox** referencing the privacy policy ("Ich habe die Datenschutzerklärung gelesen ...", I have read the privacy policy). No tick, no submit. The consent wording and timestamp are stored together with the enquiry; the lead detail view shows "Datenschutz-Einwilligung dokumentiert am `<Datum>`." (privacy consent documented on date). That gives you proof if a supervisory authority or a data subject ever asks.

## Spam protection without captchas

Three invisible mechanisms keep spam out without annoying real prospects:

- **Honeypot:** an invisible field only bots fill in.
- **Time trap:** forms submitted inhumanly fast are discarded.
- **Rate limit:** at most 5 enquiries per hour per sender.

Whatever still gets through, you mark as **Spam** in the inbox; those enquiries leave the active list.

## The inbox: statuses and actions

<DefinitionList>
  <DefItem term="Neu (new)">Unread enquiry. Counts toward the sidebar badge and the overview tile.</DefItem>
  <DefItem term="Gesehen (seen)">Set automatically and silently when you open the enquiry.</DefItem>
  <DefItem term="Erledigt (done)">Set by you via **Als erledigt markieren** (mark as done) once the enquiry is closed.</DefItem>
  <DefItem term="Spam">Junk you marked. Excluded from warnings and counters.</DefItem>
</DefinitionList>

Actions per enquiry: **Antworten** (reply) opens your email client with a prepared subject, **Als erledigt markieren** and **Spam**. If nothing has arrived yet, the inbox shows "Noch keine Anfragen hier." (no enquiries here yet).

## Notifications

- **In-app:** new enquiries appear as a workspace notification and as a badge on the **Anfragen** sidebar entry.
- **Email:** additionally, an email goes to your office address. If your own mail server is connected under **Settings > Integrations > Email delivery**, it is preferred, so your notifications come from your own domain.
- **Flood protection:** if many enquiries arrive in quick succession, the tool bundles them and sends at most one summary email per hour instead of one email per enquiry.

## Keeping an eye on response time

If an enquiry sits unanswered for more than 48 hours, the tool overview warns you: "Eine Anfrage wartet seit über 48 Stunden auf eine Antwort." (an enquiry has been waiting for over 48 hours; with a count when there are several), followed by "Schnelle Reaktionen erhöhen die Abschlusschance deutlich." (fast responses clearly increase the closing chance). Done and spam enquiries never trigger the warning.

## Retention and deletion

- **Done and spam enquiries** are deleted automatically 12 months after completion (data minimization under GDPR).
- **Unprocessed enquiries** are kept until you handle them. Nothing you have not seen yet is ever lost.

<Note title="Permissions">
Reading the inbox and managing enquiries are separate permissions. By default, team members with website access can view and process enquiries; owners and admins control the exact assignment in the member management.
</Note>

## Further reading

You configure the contact form in the contact block ([block reference](/tools/website/bloecke)); the consent wording comes from the [Legal](/tools/website/rechtliches) area. Back to the [Website overview](/tools/website).