Privacy policy

PROK planning studio, [legal form], NUI [unique identification number], Rruga Isa Boletini nr. 27, 20000 Prizren, Kosovo.

Phone: +383 48 163 956 · Email: info@prok-ks.com

Data protection contact: [name / role].

Contact form: your name, email address, phone number (optional), the services you select and your message. You decide what the message contains — please do not send sensitive data.

Email and phone: the details you give us when you write to or call us directly.

Technical server data: when you open the site, our hosting provider (Vercel) automatically processes your IP address, the time of the request, the page requested, your browser and operating system, to deliver the site and protect it from attacks. We do not use this data to identify you.

Local storage on your device: your consent choice, theme (dark/light) and project view are stored only in your browser. Details in the Cookie policy.

We use no analytics, tracking pixels, advertising or embedded social media. Fonts are served from our own server, not from third parties.

Answering your enquiry and preparing an offer or project — steps taken at your request before entering into a contract, and our legitimate interest in answering questions (Article 5 of Law 06/L-082; Article 6(1)(b) and (f) GDPR).

Operating and securing the site (technical server data, spam protection and rate limiting) — our legitimate interest in a secure website (Article 6(1)(f) GDPR).

Strictly necessary local storage — needed for a feature you request yourself (for example, the theme).

Analytics or marketing — only with your consent, if added in the future. Not in use at the moment.

Vercel Inc. (USA) — website hosting and running the contact form.

Resend (Plus Five Five, Inc., USA) — delivering contact-form messages to our mailbox.

Upstash, Inc. (USA) — rate limiting of the contact form (only a temporary identifier of your IP address is kept, for up to 10 minutes), if enabled.

Our email provider — [name of the email provider for info@prok-ks.com].

Google — the Google Maps map on the contact page.

We have, or will have, a data processing agreement (DPA) with each processor. We do not sell your data or share it with others for their own purposes.

Vercel, Resend and Upstash are US companies. Transfers rely on the EU–US Data Privacy Framework, for certified companies, and/or on the European Commission’s Standard Contractual Clauses included in their data processing agreements. Kosovo’s Information and Privacy Agency (AIP) recognises countries covered by an EU adequacy decision. Where possible we choose EU server regions.

Contact-form messages and correspondence: [24 months] after the last contact, unless the enquiry leads to a project — then for as long as the contract and the law require (for example, tax obligations).

Technical server data: according to Vercel’s policy, usually a few days.

Rate-limit identifier: up to 10 minutes.

Local storage: as described in the Cookie policy; you can delete it from your browser at any time.

You have the right to access your data and to have it rectified or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing.

To exercise these rights, email info@prok-ks.com. We will reply without undue delay and within 30 days at the latest.

If you believe the processing of your data breaks the law, you have the right to lodge a complaint with the Information and Privacy Agency (AIP) of the Republic of Kosovo — aip.rks-gov.net.

If you live in the European Union, you can also complain to the supervisory authority in the country where you live, work, or where the infringement took place.

The site is served over HTTPS only, with strict security headers (HSTS, Content-Security-Policy). The form is validated on the server and protected against spam and excessive requests; logs contain no personal data. We keep no database of your messages.

Our site and services are aimed at adults. We do not knowingly collect data from children under 16.

We may update this policy when our services or the law change. The current version is always on this page, with the date of the last update above. If a change affects your consent, we will ask you again.