PRIVACY POLICY
Data controller
The data administrator is Alpine Crown (Europe) Ltd., with its registered office at Office 325b, Building 3, North London Business Park, Oakleigh Road South, London, N11 1NP, United Kingdom, entered into the register of companies under Company Registration Number 9451578, VAT Registration Number 223 1434 53, hereinafter referred to as the “Administrator”.
Contact details of the administrator
The Administrator has appointed a Personal Data Protection Coordinator – Kishin Gulrajani, whom you can contact in all matters related to the processing of personal data, using the e-mail address – by sending an e-mail to the following address: kishin@alpine-crown.com, or in the form of traditional correspondence addressed to: Alpine Crown (Europe) Ltd. Office 325b, Building 3 North London Business Park Oakleigh Road South London, N11 1NP United Kingdom
In matters concerning personal data, you may contact the Administrator at the address indicated above. You may also contact us by email at: info@alpine-crown.com
Purposes of personal data processing and basis for data processing
Your personal data, including name, surname, address, email, are processed for the following purposes and on the following grounds:
- sending requests for an opinion – based on your consent – Article 6(1)(a) of the GDPR,
- in order to take steps at the request of the data subject prior to entering into a contract – Article 6(1)(b) of the GDPR,
- execution of orders placed by you, including consideration of possible complaints or proceeding with withdrawals from the contract (returns) – Article 6 (1) (b) of the GDPR
maintain Accounts in which you can check the history of your orders and the status of current orders – Article 6(1)(b) of the GDPR,
- implementation of legal requirements in the field of tax and accounting regulations, in particular specified by the provisions of the Act of 11 March 2004 on the tax on goods and services (VAT), the Act of 15 February 1992 on corporate income tax and the Act of 29 September 1994 on accounting regulations applicable in the United Kingdom and the European Union – Article 6 paragraph 1 letter c of the GDPR,
- direct marketing of the Administrator’s services, including sending the newsletter and running social media of the Alpine Crown Military brand – Article 6 paragraph 1 letter f) of the GDPR,
- possible determination or pursuit of claims or defense against claims – the legal basis for processing is the legitimate interest of the Administrator – Article 6 paragraph 1 letter f) of the GDPR; the legitimate interest consists in enabling the Administrator to investigate or defend against claims.
In addition, the IP address of the device you use when browsing the store’s website will be used by the Controller to indicate the suggested payment currency and shipping country.
Period of data processing
Due to the specificity of our business, including the type of products offered and your rights (complaints), and the obligations imposed on the Administrator as a business entity, including tax law, your data will be stored and processed, as a rule, for the duration of conducting service or order or accounting or until the consent is withdrawn or an effective objection to data processing is raised in cases in which the legal basis for data processing is the legitimate interest of the Administrator.
The time of data processing may be extended if the processing is necessary to establish, pursue or defend against possible claims, and after that time only in the case and to the extent required by law. After the end of the processing period, the data is irreversibly deleted or anonymized.
Your rights in relation to your personal data
You have the right at any time to:
- withdraw your consent (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal)
- request access to your personal data,
- rectify, delete, or restrict processing,
- object to the processing, and,
- data portability,
- lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom or another competent supervisory authority within the European Union.
If you have an account in our online store, you can update your data by logging in to your account and making appropriate changes to it.
Providing personal data is voluntary, but necessary to fulfill orders and conduct services. At the stage of placing orders, your data is processed by the entities through which the payment is made, and at the delivery stage – by the companies through which the delivery is made.
Data recipients
The recipients of your personal data are entities to which the Administrator commissions the performance of activities involving the need to process personal data, in particular in the scope of obtaining opinions about the Administrator’s activities and products, handling your inquiries, marketing, courier services, payment handling, ICT services, hosting, IT, analytical services, administrative services, legal or advisory services. The recipients of your personal data may also be entities and bodies authorized to receive your data, but only in justified cases and on the basis of generally applicable law.
The administrator may transfer personal data to third countries, i.e. countries located outside the European Economic Area (EEA) and the United Kingdom. Your data may only be transferred to third countries or entities in relation to which an adequate level of data protection has been established by the decision of the European Commission. The list of countries for which the European Commission has issued a decision confirming that a third country provides an adequate level of protection can be found at this link.
In the absence of an adequacy decision of the European Commission as set out in Article 45(3) of the GDPR, your personal data may only be transferred to a third country on the basis of: binding corporate rules, standard data protection clauses adopted by the European Commission, standard data protection clauses adopted by UK supervisory authority and approved by the Commission, an approved code of conduct or an approved mechanism certification (Article 46 of the GDPR).
In the absence of an adequacy decision of the European Commission as defined in Article 45(3) of the GDPR, or in the absence of appropriate safeguards as set out in Article 46 of the GDPR, including binding corporate rules, we will ask you for your explicit consent to such transfer to a third country or an international organisation, informing you of the previous risks associated with such a transfer pursuant to Article 49(1)(a) of the GDPR.
In connection with the transfer of data outside the EEA or the United Kingdom, you can request information about the safeguards applied in this respect, obtain a copy of these safeguards or information about the place where they are made available by contacting us at the address indicated above.
Social media
The alpine-crown.com brand has its own social media accounts (Facebook, Instagram, Twitter, YouTube), which we hope you already follow. If so, we kindly inform you that your data is processed by the Administrator in order to maintain those social media accounts, including for the purpose of informing you about brand activities and promoting various types of events, services and products, as well as for communication with you through functionalities available in social media and for analytical purposes. The legal basis for the processing of personal data by the Administrator for these purposes is his legitimate interest (Article 6 (1) (f) of the GDPR) consisting in promoting his own brand and building and maintaining a community related to the brand.