Privacy notice

Updated: 20 October 2026

This notice applies to the website www.kastrox.com. factory.kastrox.com has its own notice.

1. Controller

KASTROX Premium Systems L.L.C.
Magj. Prishtinë–Ferizaj, Km 10
10500 Graçanicë
Kosovo
Phone: +383 43 851 880
Represented by Hakif Hajdari, Managing Director.

2. Visiting the website

When you visit the website, our servers process technically necessary connection data, in particular IP address, time, requested address and browser information, to deliver the pages and keep the service secure. We do not keep access logs containing IP addresses.

If a technical error occurs while a page is delivered, for example when the website is briefly unavailable, the upstream web server (reverse proxy) may write an error entry containing the IP address, the requested address and browser information. We use these entries only to find and fix errors.

To protect the enquiry form and our internal inbox against abuse, we derive a pseudonymous check value from the IP address using a secret key (HMAC), for IPv6 addresses only from the network part (/64). The value is held in memory only, is never stored with an enquiry and is deleted after 25 hours at the latest, or after 20 minutes at the latest for failed sign-ins to the inbox.

The website sets no cookies, uses no analytics or advertising services and loads no fonts, scripts or images from third-party servers.

3. Enquiry form

When you send the form, we store your details on our server: name, phone number and/or email address, project location, requested system, dimensions, message, preferred way of reply, the page language, any calculation you included, and the date and time. You receive a reference number. We use these details only to handle your enquiry, ask follow-up questions and prepare an offer.

To recognise automated submissions we check a field that is invisible to people, the time since the page was loaded and the number of enquiries from the same connection. Suspicious enquiries are stored with a note; we do not discard them.

The legal basis is taking steps at your request prior to entering into a contract under Article 5(1.2) of Kosovo Law No. 06/L-082 on the Protection of Personal Data and, where the GDPR applies, Article 6(1)(b) GDPR. For abuse prevention and fixing errors we rely on our legitimate interest in secure operation (Article 5(1.6) of Law No. 06/L-082 and, where applicable, Article 6(1)(f) GDPR).

Only authorised people at KASTROX have access. Data is passed on to third parties only where an order requires it or we are legally obliged to. We do not sell enquiry data.

4. WhatsApp and phone

If you use a WhatsApp link on this website, WhatsApp opens with a prepared message. We receive it only once you send it. WhatsApp is operated by Meta; WhatsApp’s privacy terms apply and processing may also take place outside the EU. You can also reach us by phone or through the form.

5. Hosting and location

The hosting provider is Hostinger International Ltd., 61 Lordou Vironos Street, Larnaca 6023, Cyprus. According to our server account, the server is located in Vilnius, Lithuania. Hostinger provides a data processing addendum for the server. KASTROX is based in Kosovo; we therefore cannot guarantee that processing takes place exclusively within the EU.

6. Retention

We keep enquiries for as long as we need them to handle them. An enquiry that we mark as closed in our inbox is deleted automatically 90 days later, and submissions flagged as suspected spam 30 days after receipt. If an order results, we keep the data it requires for as long as the order, open claims, warranty cases or statutory retention duties require. We keep web server error entries only for as long as we need them to fix errors.

7. Your rights

Subject to the applicable conditions you can request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. Contact us by phone or WhatsApp at +383 43 851 880, in writing at the address above or through the enquiry form. You can lodge a complaint with the Information and Privacy Agency (Agjencia për Informim dhe Privatësi) in Kosovo; other applicable rights, such as complaining to a supervisory authority in the EU, remain unaffected.