Privacy

The short version

We collect what you type into the request form or the chat window, and what you give us when you pay, and nothing else about you. There are no advertising cookies, no analytics scripts, no tracking pixels and no third-party fonts. Your details are never sold; they only go to the service providers named on this page.

Who is responsible

Umbolement UG (haftungsbeschränkt), Ulmenweg 10, 85221 Dachau, Germany. Email info@prowna.com. This is the controller under Article 4(7) GDPR.

The request form

The form asks for your name, business name, email address, trade, working area, and optionally a phone number, your current website and free-text notes. We use these only to build the website you asked for and to write back to you about it. Along with the request we also store the time it arrived and the IP address it came from — solely to spot and stop abuse of the form (Art. 6(1)(f) GDPR). Both are deleted together with the request.

The legal basis is Article 6(1)(b) GDPR — steps taken at your request before entering into a contract. Providing the data is voluntary, but without it we cannot build anything.

Payment

If you keep a website with us, you pay on a Stripe payment page. Stripe (Stripe Payments Europe, Limited, Dublin, Ireland; processing also in the USA) collects your name, email address, billing address and payment details. Card details go straight to Stripe; we never see or store them. Stripe tells us about the payment, the amount and your contact details so that we can hand over your website. Legal basis: Article 6(1)(b) and (c) GDPR. Orders and payment records are kept for ten years, as German tax law requires.

How long it is kept

If you become a customer, for as long as the contract runs plus the retention periods German commercial and tax law imposes. If you do not, we delete the request within twelve months. You can ask us to delete it sooner and we will.

Server logs

Our web server keeps no access log for this site. To deliver a page it has to process your IP address, the time, the requested address and your browser's identifier, but it does not store them (Art. 6(1)(f) GDPR). Technical error messages from our own services go into the server's system log, which overwrites itself by size and keeps nothing longer than three months. It is not combined with any other data and not used to profile anyone.

Hosting

The site runs on a server in the USA (St. Louis), operated for us by Contabo; our contract partner is Contabo GmbH, Munich, Germany, with a data processing agreement under Article 28 GDPR. Everything this page describes as stored, such as requests, chat records and emails, therefore lies in the USA. For this transfer we rely on the European Commission's standard contractual clauses or, where the recipient is certified, on the EU–US Data Privacy Framework.

Cookies and tracking

We set no cookies for advertising or analytics, so there is no consent banner to click away. Your browser stores two small items that never leave your device and are not cookies: pw_lang in local storage, the language you chose, so that we do not override it on your next visit; and pw_site in session storage, the web address you typed into the short form on our home page, which is carried over to the request form and deleted once it has been used or when you close the tab.

Fonts and external content

Typefaces are served from our own server. Nothing on this site is loaded from Google Fonts, a content delivery network or any other third party, so no request carrying your IP address goes anywhere except to us.

Email

If you write to us, your message and address are stored so we can answer and follow up. Mail to info@prowna.com arrives on our server (see Hosting), and a copy is forwarded to the Gmail mailbox (Google) we work from. Notices about new requests, with the details you entered and the IP address the request came from, also reach us there. Legal basis: Article 6(1)(b) or (f) GDPR depending on the subject.

Chat window

On our pages you can open a chat window and ask questions about our offer. Your message and the page's language code are sent to our server and from there to an AI service that produces the answer: Alibaba Cloud (Singapore). This is a transfer to a third country.

For each message we store the time, the language, your question, the answer, the amount of computation used and a pseudonymous visitor identifier. That identifier is a salted hash of your IP address; we do not store the IP address itself. We use this only to limit abuse and to trace and correct wrong answers. These records are deleted after 30 days.

The legal basis is Art. 6(1)(f) UK GDPR — our legitimate interest in answering prospective customers' questions and protecting the service from abuse. Using the chat is voluntary; you can get the same information through the contact form. Please do not enter personal data in the chat — use the request form for your enquiry.

Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21). Write to info@prowna.com and we will act on it. You also have the right to complain to a supervisory authority; for us that is the Bayerisches Landesamt für Datenschutzaufsicht.