Legal

Privacy Policy

In accordance with GDPR (EU) 2016/679, Swiss nDSG, and applicable international data protection standards.

1. Controller / Data Responsible Party

Alpine Trade Group GmbH

Switzerland

Contact for data protection enquiries:
info@alpinetradegroup.ch

2. Overview

We take the protection of your personal data very seriously. This Privacy Policy explains what personal data we collect, how we use it, on what legal basis, and what rights you have with regard to your data.

This policy applies to all personal data processed through our website, services, and business interactions. It complies with:

  • EU General Data Protection Regulation (GDPR) 2016/679
  • Swiss Federal Act on Data Protection (nDSG / revDSG), in force from September 2023
  • Applicable laws of countries in which we operate

3. Data We Collect

a) When you contact us or submit a form:

  • Full name
  • Email address
  • Company name
  • Message content and any attachments you provide
  • IP address and browser metadata (for security and fraud prevention)

b) When you visit our website:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Date and time of access
  • Pages visited

We do not use tracking cookies or third-party analytics by default. Where we do use any third-party services, these are identified below.

4. Legal Basis for Processing (GDPR Art. 6)

We process your personal data only where a legal basis exists:

  • Art. 6(1)(b) GDPR – processing is necessary to perform a contract or take pre-contractual steps at your request (e.g. responding to an RFQ or enquiry)
  • Art. 6(1)(c) GDPR – processing is required to comply with a legal obligation (e.g. accounting, invoicing)
  • Art. 6(1)(f) GDPR – processing is necessary for our legitimate business interests (e.g. IT security, fraud prevention, improving our services), where these are not overridden by your rights
  • Art. 6(1)(a) GDPR – where you have given explicit consent (e.g. subscribing to updates)

5. How We Use Your Data

  • To respond to enquiries, quotation requests, and messages
  • To fulfil contractual obligations and manage business relationships
  • To send relevant commercial communications (only where permitted or consented)
  • To comply with legal and regulatory requirements
  • To protect the security and integrity of our systems
  • To improve the performance and content of our website

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

6. Data Sharing & Third Parties

We may share your data with trusted service providers acting as data processors on our behalf, solely for the purposes described in this policy, including:

  • Cloud hosting and infrastructure providers
  • Email delivery services
  • Payment processors (for transactional purposes)
  • Legal, tax, and compliance advisors where required by law

All third-party processors are contractually bound to handle your data in accordance with applicable data protection law, including through Data Processing Agreements (DPAs) where required.

We may also disclose your data to competent authorities if required by law or a legally enforceable order.

7. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA) or Switzerland, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions by the European Commission or the Swiss Federal Council
  • Other legally recognised transfer mechanisms

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

  • Enquiry and contact data: up to 3 years after the last interaction, unless an ongoing business relationship exists
  • Contract and invoice data: retained for the duration required by applicable tax and commercial law (typically 10 years in Switzerland and the EU)
  • Website access logs: typically 30–90 days for security purposes

After the applicable retention period, data is securely deleted or anonymised.

9. Your Rights

Under GDPR (and equivalent Swiss law), you have the following rights with respect to your personal data:

  • Right of access (Art. 15 GDPR) – to obtain confirmation of whether we process your data and a copy of it
  • Right to rectification (Art. 16 GDPR) – to have inaccurate data corrected
  • Right to erasure / 'right to be forgotten' (Art. 17 GDPR) – to request deletion of your data where legally permissible
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR) – to object to processing based on legitimate interests
  • Right to withdraw consent at any time, where processing is based on consent
  • Right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at info@alpinetradegroup.ch. We will respond within 30 days.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. Depending on your location, the relevant authority may be:

  • Switzerland: Federal Data Protection and Information Commissioner (FDPIC) – www.edoeb.admin.ch
  • EU: Your local national data protection authority (e.g. BfDI in Germany, CNIL in France, ICO in the UK)

11. Cookies & Tracking

Our website uses only technically necessary functionality to operate. We do not use advertising cookies, behavioural tracking, or third-party analytics by default.

If cookies or tracking technologies are introduced in the future, we will update this policy and obtain your consent as required under applicable law (including ePrivacy Directive 2002/58/EC and its national implementations).

12. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include encryption in transit, access controls, and secure hosting infrastructure.

In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority in accordance with Art. 33–34 GDPR.

13. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The current version is always published on this page with the date of last update. Where changes are material, we will notify you by email or a prominent notice on our website.

Last updated: September 2026

We use cookies to improve your experience and analyse site performance. By continuing to use this site you consent to our use of cookies in accordance with our Privacy Policy. This site is operated in compliance with the EU GDPR and the Swiss nDSG.