KF Prime Logistics
Owner: Abdul Karim Rajaby
Königsberger Ring 11
36205 Sontra
Germany
Phone: +49 160 1090734
Email: kfprimelogistics@web.de
When this website is accessed, technically necessary connection and log data is processed. This may include, in particular, the IP address, date and time of access, the requested page or file, amount of data transferred, referrer information, browser and device information, and technical status or error data. This data arises from communication between your browser and the web server and is required to deliver, stabilise and secure the website. The legal basis is Article 6(1)(f) GDPR. The specific retention period for general server logs depends on the technical configuration of the hosting environment and on the periods operationally required for security and troubleshooting.
If you use the quote form, we process the information you enter. This may include customer type, requested service, first and last name, company, contact person, telephone number, email address, pickup and destination location, requested date and pickup time, moving or shipment details, B2B requirements, route/frequency, your message, and any attachments you choose to upload. Required fields are requested only where they are technically or substantively necessary to handle the enquiry. The checkbox confirming that you have read the privacy information records that you have been informed about this processing; it is not consent to processing that is necessary to handle your enquiry. Where your request concerns entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR; otherwise, processing is based on our legitimate interest in handling business enquiries under Article 6(1)(f) GDPR.
Form enquiries are processed on the server and sent to KF Prime Logistics by email. If processing succeeds, an automatic receipt confirmation is sent to the email address you provide. Uploaded attachments are technically handled as temporary upload files during submission and attached to the internal email; the application does not additionally store the enquiry content or attachments as a permanent public enquiry archive or in a public database. To protect the form against automated abuse, a hidden honeypot field is used. In addition, the application limits quote submissions by IP address to no more than five attempts within a 30-minute period. For this purpose, the IP address is processed in a private rate-limit file together with the start time and number of attempts; expired entries are removed from that file during later checks. Rejected honeypot or rate-limit events may also be recorded in a private security log with timestamp, IP address and event type. The application code currently defines no fixed automatic deletion period for this security log; operational retention must therefore be limited to what is necessary for security, abuse prevention and troubleshooting. The legal basis for this security processing is Article 6(1)(f) GDPR.
Under the current implementation, the public website does not use analytics, advertising or marketing tracking services such as Google Analytics or comparable tracking pixels and does not set tracking or marketing cookies for those purposes. The website code does not provide a general session cookie for public visitors. The protected administrator area uses a technically necessary PHP session for authentication and security of admin access. Its session cookie is configured as Secure, HttpOnly and SameSite=Strict and generally ends with the browser session. This admin session is not used to analyse public visitor behaviour or for advertising. If consent-requiring analytics, marketing or other technologies are introduced in the future, this privacy notice and, where necessary, the consent mechanism must be updated before or when those technologies are introduced.
The website and the SMTP delivery used by the quote form are connected to Hostinger in the current technical configuration. When an enquiry is submitted, Hostinger infrastructure processes the data and metadata required for hosting, form processing and email delivery. The internal recipient address kfprimelogistics@web.de is a WEB.DE mailbox; WEB.DE is operated by 1&1 Mail & Media GmbH, so enquiry content and attachments delivered to that mailbox are also processed there. Service providers receive personal data only to the extent necessary for their respective tasks. Hostinger states in its current privacy and data-processing information that, depending on the service selected, subprocessors and processing outside the EEA may be involved; the applicable data-protection safeguards apply to such processing. The exact contractual and data-centre configuration of the production hosting account is not part of the website code and must be kept operationally consistent with this information.
Personal data is not retained longer than necessary for the relevant purpose. The website application does not maintain an additional permanent public database of quote enquiries. Enquiry content and attachments are, however, processed by email; retention of those emails and any resulting business records depends on handling and following up the enquiry, any resulting contractual or business relationship, and applicable commercial or tax-law retention obligations. The technical rate-limit counter for the quote form operates on a 30-minute window and removes expired counter entries during later checks. For the separate security logs used for form abuse prevention, the application code currently specifies no fixed automatic deletion period. Such logs must be deleted operationally once they are no longer required for security, abuse prevention or troubleshooting and no legal reason requires continued retention.
Subject to the applicable legal requirements, you have in particular the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and the right to object to processing based on legitimate interests (Article 21). Where processing is based on consent, consent may be withdrawn for the future. Under Article 77 GDPR, you also have the right to lodge a complaint with a competent data protection supervisory authority.
This website is intended to be provided exclusively over HTTPS. This encrypts data transmitted between your browser and the web server. Please note that absolute security of data transmission over the internet cannot be technically guaranteed.
Last updated: 7 October 2026. This privacy notice was reviewed against the website functions currently implemented and the technical configuration available here. Changes to hosting, email infrastructure, form processing, external content, analytics or marketing services, or any other data-processing activity may require this notice to be updated and may also require additional consent or information mechanisms.