Privacy Policy

Effective Date: January 1, 2026 • Version: 2.4-NL

1. Data Controller Identification

The data controller responsible for personal information processed through this website is Alpine Operations Logistics Europe B.V., a reference operational entity established under the laws of the Netherlands with registered office at Spuistraat 112A, 1012 VA Amsterdam, Netherlands, registered with the Dutch Chamber of Commerce (KVK) under registration number 73918204.

For all data protection inquiries, access requests, or supervisory correspondence, you may contact our designated Data Protection Officer via email at [email protected].

2. Scope and Information We Collect

We adhere strictly to the principle of data minimization under Article 5(1)(c) of the General Data Protection Regulation (EU) 2016/679 (GDPR). We collect personal data exclusively through two main vectors:

• Direct Communications (Contact Enquiries): When you send a query through our contact form, we collect your full name, business or individual email address, chosen subject heading, message content, and explicit affirmative consent timestamp.
• Technical Server Telemetry: When loading our resources, our web server temporarily processes standard HTTP server request logs, including your internet protocol (IP) address (which is truncated and anonymized), user-agent string, operating system type, referring URL, and exact timestamp of request.

3. Lawful Bases for Processing

Every processing activity conducted by Alpine Operations Logistics Europe B.V. is founded on established statutory bases under Article 6 of the GDPR:

• Article 6(1)(a) Consent: Applies when you voluntarily submit your contact details via our enquiry form and affirmatively tick the explicit consent checkbox.
• Article 6(1)(f) Legitimate Interests: Applies to the processing of technical server access logs to guarantee server resilience, mitigate brute-force cyber threats, prevent denial-of-service abuse, and maintain site stability.
• Article 6(1)(c) Legal Obligation: Applies where statutory European business compliance, commercial recordkeeping, or regulatory disclosure is mandated by law.

4. Storage, Retention, and Disposal

We do not retain information longer than strictly necessary. Contact form enquiries are held within secured administrative mailboxes for a maximum duration of twelve (12) months following the resolution of the corresponding correspondence, after which records are permanently purged.

Technical server connection logs are maintained for a rolling retention period of thirty (30) days for operational diagnostic purposes, after which they are systematically overwritten or destroyed.

5. Cookies and Local Storage

Our web platform avoids invasive third-party cross-site trackers and commercial advertising pixels. We utilize basic local storage and essential session cookies strictly to preserve your interface preferences (such as your chosen cookie consent tier). For full details and category controls, please consult our dedicated Cookie Policy.

6. Third-Party Data Processors and Transfers

We do not sell, lease, or monetize your contact details to third parties. Technical infrastructure hosting is provisioned through European-located enterprise data centers that adhere to strict ISO/IEC 27001 security certifications and European Standard Contractual Clauses (SCCs). Where any sub-processor operates outside the European Economic Area (EEA), transfers are governed by appropriate adequacy decisions or binding corporate agreements.

7. Your Statutory Rights Under the GDPR

As a data subject located within the European Economic Area, the United Kingdom, or applicable jurisdictions, you hold comprehensive rights regarding your personal data:

• Right of Access (Article 15): Obtain confirmation as to whether your personal data is being processed and receive a copy.
• Right to Rectification (Article 16): Require the correction of inaccurate or incomplete personal data without undue delay.
• Right to Erasure / "Right to be Forgotten" (Article 17): Request the permanent deletion of your data where statutory grounds exist.
• Right to Restriction of Processing (Article 18): Restrict processing under specified legal contesting circumstances.
• Right to Data Portability (Article 20): Receive your submitted data in a structured, commonly used, and machine-readable format.
• Right to Object (Article 21): Object at any time to processing based on legitimate interests.
• Right to Withdraw Consent (Article 7(3)): Withdraw prior consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these protections, submit your request to [email protected]. We respond to all formal requests within thirty (30) calendar days as required by law. You also have the right to lodge a complaint with your local supervisory authority (in the Netherlands, the Autoriteit Persoonsgegevens).

8. California and International Visitor Notice (CCPA/CPRA)

While our primary audience is European ski operators, for visitors residing in California or international jurisdictions, we confirm that we do not sell or share personal information as defined by the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

9. Policy Revisions

We reserve the right to amend this Privacy Policy periodically to reflect technological changes, operational adjustments, or statutory updates. Any revisions will be published here with an updated effective timestamp.