This policy explains what personal data we process, why, for how long and what your rights are, in accordance with the Swiss Federal Act on Data Protection (FADP, in force since 1 September 2023) and, where applicable to customers in the EU/EEA, Regulation (EU) 2016/679 (GDPR).
1. Data controller
ALPEN KAUF · ALPEN KAUF
Bahnhofstrasse 25 8001 Zürich
Schweiz · Email: kontakt@alpenkauf.com.
2. What data we process
- Purchase data: name, email, phone, billing and delivery addresses, UID/VAT number and company if you give them, products bought, amounts and payment method (never your full card details).
- Account data: email, encrypted password, saved address, favourites and preferences.
- Communications: messages you send via the contact form or by email.
- Newsletter: email, language and proof of your consent.
- Technical data: IP address and browsing data needed for website security and, if you accept them, statistics cookies.
3. Purposes and legal bases
We process your data in line with the principles of the FADP (lawfulness, good faith, proportionality and purpose limitation). For people in the EU/EEA, we also rely on the following GDPR legal bases:
| Purpose | Basis |
|---|---|
| Handling your order, payment, delivery, returns and warranty | Performance of the contract (Art. 6(1)(b) GDPR) |
| Issuing invoices and meeting accounting and tax obligations | Legal obligation (Art. 6(1)(c) GDPR) |
| Managing your customer account | Performance of the contract (Art. 6(1)(b) GDPR) |
| Answering your enquiries | Consent and legitimate interest (Art. 6(1)(a) and (f) GDPR) |
| Sending you the newsletter | Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time |
| Protecting the site against fraud and abuse | Legitimate interest (Art. 6(1)(f) GDPR) |
| Website usage statistics | Consent to statistics cookies |
4. Retention
We keep accounting records, vouchers and invoices for 10 years (art. 958f CO). Account data is kept until you delete your account, newsletter data until you unsubscribe, and messages for as long as needed to deal with them and then for any applicable limitation periods.
5. Recipients
We do not sell your data. We share it only with providers who help us deliver the service and are contractually bound to protect it: carriers, banks and payment providers, web hosting and email providers, and our fiduciary and tax advisers. Public authorities receive data only where the law requires it.
6. Transfers abroad
Some payment or technology providers may process data outside Switzerland. We transfer data abroad only to countries that offer adequate protection according to the Federal Council’s list, or with appropriate safeguards such as standard contractual clauses.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection to processing and data portability, and withdraw your consent, by writing to kontakt@alpenkauf.com. In “My account” you can also download your data and delete your account directly. You may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the EU/EEA, with the supervisory authority in your country.
8. Security
The site uses an encrypted connection (HTTPS), passwords are stored encrypted and access to data is limited to the people who need it.
9. Children
The shop is not aimed at children under 16 and we do not knowingly collect their data.
10. Cookies
Full details are in the cookie policy.