Privacy policy

The sole proprietorship named above is the controller for personal data processed on this website. Questions about data protection are answered at the same e-mail address.

This website runs at a hosting provider that processes data solely on our behalf and on our instructions (processing agreement under Art. 28 GDPR).

Every time a page is opened, your browser automatically transmits data that the server records:

• the page requested and the amount of data transferred
• date and time of the request
• browser type, browser version and operating system
• the page visited before (referrer)
• IP address

This data is technically required to deliver the page and to keep the site stable and secure. The legal basis is our legitimate interest in reliable, attack-resistant operation (Art. 6 (1)(f) GDPR). The logs are used for that purpose only, deleted after a short period and never combined with other data.

The site is served exclusively over encrypted HTTPS (TLS). Fonts, images and scripts are loaded from our own server — we embed no external CDNs, web fonts, map services or video players.

The form is how you ask us for prices and availability. When you send it, we store:

• your name and — if you fill the fields in — company, phone number and country
• your e-mail address
• your message and the items you asked about
• the language version of the site and the page the enquiry was sent from
• your browser identification (user agent)
• a SHA-256 hash of your IP address, keyed with a secret

We do not store your IP address itself. The salted hash cannot be turned back into an address; it exists only to limit bulk spam through the form.

The legal basis is Art. 6 (1)(b) GDPR (steps taken at your request prior to entering into a contract) and Art. 6 (1)(f) GDPR (our legitimate interest in answering your enquiry and protecting the form from abuse).

If you send your enquiry from a Ukrainian IP address, we also forward it, with your details, to our sales partner in Ukraine, so that you are advised locally and in your language. Whether an address is Ukrainian we determine with a country database on our own server (GeoLite2 data by MaxMind); the address is not sent to anyone for this, and the country found is not stored. The legal basis for forwarding is Art. 6 (1)(b) GDPR; as Ukraine is outside the EU, the transfer rests on Art. 49 (1)(b) GDPR (necessary for steps taken at your request prior to entering into a contract).

We keep enquiries for as long as we need them to answer you and to run the business relationship that may follow, and delete them afterwards — unless commercial or tax law requires longer retention (as a rule six or ten years under § 257 HGB and § 147 AO).

If you write or call us directly instead, we process what you tell us for the same purposes and on the same legal basis.

This site sets two cookies, both strictly necessary:

• NEXT_LOCALE — remembers the language you chose, so your next visit opens in the same one.
• prokar_session — is created only when we sign in to the internal admin area ourselves. It is never set for visitors of the website.

There are no analytics or statistics tools, no tracking, no advertising networks, no social media plugins and no embedded maps or videos. Strictly necessary cookies need no consent under § 25 (2) TDDDG — which is why you see no cookie banner here.

We do not sell data and do not pass it on for advertising. Data is shared only where it is needed to fulfil your order or to meet a legal obligation:

• with our hosting provider, acting as a processor
• with the carrier that delivers your goods
• with our sales partner in Ukraine, for enquiries sent from a Ukrainian IP address (see above)
• with our tax advisor and with authorities where the law requires it

You have the right at any time:

• to obtain information about the data we hold about you (Art. 15 GDPR)
• to have inaccurate data corrected (Art. 16 GDPR)
• to have your data erased (Art. 17 GDPR)
• to have processing restricted (Art. 18 GDPR)
• to receive or transfer your data in a common format (Art. 20 GDPR)
• to object to processing based on legitimate interests (Art. 21 GDPR)

An informal e-mail is enough, and it costs you nothing:

info@prokardrilling.com

If you believe we process your data unlawfully, you may lodge a complaint with a data protection supervisory authority. Ours is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

ldi.nrw.de

We update this policy when the website or the law changes. The version published here is the one that applies; the date at the top of the page shows how current it is.