Privacy notice.

The controller responsible for processing personal data in connection with this website is:

KRP Energy
Owner: Jochen Kaminski
Ulricistraße 34
14109 Berlin-Wannsee
Germany

Email: info@krpenergy.com
Telephone: +49 177 8333555

This website runs on WordPress. WordPress is installed in STRATO’s hosting environment and is used to deliver and manage the website’s content.

The publicly accessible website offers no user accounts, public login area or commenting function. WordPress administration is restricted to authorised administrators.

Google Analytics 4 is used only with your prior consent. Real Cookie Banner manages your consent. Details are provided in the Cookies & analytics section. No social media tracking pixels or embedded external map or video services are used.

WhatsApp Business

KRP Energy uses WhatsApp Business for business communication. On this website, WhatsApp is accessible exclusively through an external link. Simply visiting the website does not load any embedded WhatsApp content or WhatsApp tracking pixels.

Opening the link takes you to the WhatsApp website or app. In particular, your IP address and device and connection information may be processed. During communication, telephone numbers, profile details, communication metadata and messages are also processed.

The provider for users in the European Region is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Communication is voluntary; alternatively, you can contact KRP Energy by email. Processing by KRP Energy is subject to the purposes and legal bases explained in the Communication section.

Address book access

WhatsApp Business has access to the phone address book on the device used for business purposes. Stored telephone numbers of people with whom no WhatsApp communication has yet taken place may also be matched. Contact management is used to associate and process business communication. It is distinct from the mere presence of a link on this website.

iCloud and chat backups

The phone address book is synchronised with Apple iCloud. Depending on the information stored, this includes names, telephone numbers, email addresses and other contact details. WhatsApp chat backups are also stored in iCloud.

WhatsApp chat backups are end-to-end encrypted and password-protected. This encryption applies to the chat backups, not automatically to all iCloud data. According to Apple, synchronised iCloud contacts are not end-to-end encrypted.

For users in the European Economic Area, Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, is the responsible Apple legal entity.

Managing business contact details, synchronising them and backing up data support reliable communication and protection against data loss. The legal basis is Article 6(1)(f) GDPR; the legitimate interests are orderly contact management, the availability of business communication and the ability to restore required data.

Processing outside the European Economic Area

WhatsApp and Apple may also process data outside the European Economic Area, particularly in the United States. For transfers covered by its Business Data Transfer Addendum, WhatsApp refers to the EU-US Data Privacy Framework and, where applicable, alternative permitted transfer mechanisms. Apple cites EU Standard Contractual Clauses for international transfers from the European Economic Area.

Further information on the respective processing activities and safeguards can be found in the WhatsApp Privacy Policy, the WhatsApp Business Data Processing Terms, the WhatsApp Business Data Transfer Addendum and the Apple Privacy Policy.

We use technically necessary functions for language selection and managing your privacy choice. Google Analytics 4 is loaded only if you consent to the “Statistics” category in the cookie banner. Without this consent, optional analytics remains disabled.

Consent management with Real Cookie Banner

We use Real Cookie Banner by devowl.io GmbH, Tannet 12, 94539 Grafling, Germany. The plugin records your choice, time, identifier and banner version on our website server. Consent data is not sent to the developer. Cookies beginning with real_cookie_banner store your choice in your browser.

In the current configuration, the choice remains valid for up to 365 days. Server-side consent records are deleted after 120 months. Additional storage of the full IP address in the consent record is disabled. Documentation fulfils our obligation to demonstrate consent under Article 6(1)(c) in conjunction with Article 7(1) GDPR. Necessary storage on your device is based on Section 25(2), point 2, of the German TDDDG. Further information from the developer.

Google Analytics 4

With your consent, we use Google Analytics 4 to analyse visits and interactions and improve the website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data processed and transmitted to Google includes pages visited, visit times, interactions, referring pages, browser and device information, approximate location and pseudonymous cookie identifiers.

The IP address is technically processed when the connection is established. For EU traffic, Google states that it uses the address to derive location and then discards it; Analytics does not log or store it. Google signals is not enabled for this property. This does not mean that all analytics data is fully anonymous.

Analytics uses, in particular, _ga to distinguish visitors and _ga_6WCJWP85XH to store session state. Google specifies a default lifetime of two years for each; browsers may limit this. The legal basis is your consent under Article 6(1)(a) GDPR and, for storage or access on your device, Section 25(1) TDDDG.

Analytics retention and international transfers

The current Analytics configuration retains event data for 2 months and user data for 14 months. New user activity resets the user-data retention period. These periods apply to the corresponding detailed data, not aggregated standard reports. Cookie lifetimes and server-side retention periods are separate.

Processing by Google LLC and other Google companies outside the European Economic Area, particularly in the USA, is possible. Google refers to the EU-US Data Privacy Framework and, where necessary, EU standard contractual clauses for international transfers. Details of these safeguards are provided in Google’s data transfer frameworks and data processing terms. Further information is available in the Google Analytics privacy information.

Changing or withdrawing consent

You can use the website without optional analytics. The “Cookie settings”, “Consent history” and “Withdraw consent” links in the footer of every page let you change your choice, view recorded decisions or withdraw consent at any time with future effect. Withdrawal disables optional analytics and removes the related Analytics cookies. It does not affect the lawfulness of processing carried out before withdrawal.

Language selection with Polylang

Polylang is used to provide the website in multiple languages. Depending on its configuration, Polylang may set the pll_language cookie to store the language last used and take it into account on subsequent visits. It contains a language code, not an advertising ID. The default lifetime specified by the developer is one year; the website configuration can shorten it or disable the cookie.

Administration area

WordPress uses login and preference cookies for authorised administrators in the protected administration area. These enable login and website management and are not used for advertising tracking of ordinary website visitors.

Legal bases for other technical functions

Where storage or access on your device is strictly necessary to provide a digital service expressly requested by you, Section 25(2), point 2, TDDDG applies. Personal data processing for other necessary functions is based on Article 6(1)(f) GDPR; the legitimate interest is the functional and secure delivery of the website. Other storage or access requiring consent must be preceded by consent under Section 25(1) TDDDG; consent-based processing relies on Article 6(1)(a) GDPR.

Purposes, data and recipients

To process business enquiries and initiate commodity transactions, KRP Energy transfers necessary personal contact details and enquiry information to the refineries and sellers involved. Recipients also include business partners in Kazakhstan.

Depending on the enquiry, this includes names and business contact details, the function or role in the enquiry, and personal information in correspondence and submitted documents. Disclosure is limited to the information necessary for the respective matter.

Where processing is necessary for a contract with you as the data subject or for pre-contractual steps you have requested, Article 6(1)(b) GDPR applies. For company contact persons and other business communication, processing is based on Article 6(1)(f) GDPR. The legitimate interest is to assess and coordinate business enquiries and to initiate and conduct business relationships.

Transfers to Kazakhstan

There is no European Commission adequacy decision for Kazakhstan. Transfers are based on the EU Standard Contractual Clauses agreed with the respective recipients in accordance with Article 46(2)© GDPR.

The level of protection is assessed for each transfer; supplementary safeguards are used where necessary. You can request a copy of the relevant safeguards by contacting info@krpenergy.com. Necessary redactions may be made to protect confidential information.

Subject to the applicable legal conditions, you may have the following rights:

• access to your personal data under Article 15 GDPR,
• rectification of inaccurate data under Article 16 GDPR,
• erasure under Article 17 GDPR,
• restriction of processing under Article 18 GDPR,
• data portability under Article 20 GDPR, and
• objection to processing under Article 21 GDPR.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.

Objection to processing based on legitimate interests

Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. Processing will then cease unless compelling legitimate grounds are demonstrated that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

To exercise your rights, please contact: info@krpenergy.com .

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for the location of the controller’s registered office is:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany

Email: mailbox@datenschutz-berlin.de
Website: www.datenschutz-berlin.de

This privacy notice may be updated if the website, its services or applicable legal requirements change. The current version will be published on this page.