Privacy Policy

1. Data Controller

Controller: ALPINALUZ S.L. · NIF/VAT: ESB56717093 · Registered office/fiscal address: Calle Albéniz 16, Nave 4, 08440 Cardedeu, Barcelona, Spain · Email: info@alpinaluz.com · Phone: +34 658 122 333.

2. What data we process

• Identification and contact data: first name, last name, email, phone, delivery and billing address.
• Order and commercial relationship data: products, amount, returns, incidents, invoices, and communications.
• Professional data when a B2B account is requested: company, NIF/VAT, activity, website, city, and references of interest.
• Technical and navigation data: IP address, device, browser, identifiers, and cookies according to consent preferences.
• Data necessary for fraud prevention, security, and compliance with legal obligations.

3. Purposes and legal bases

• Manage orders, payments, deliveries, returns, warranty, and customer service: execution of the contract and pre-contractual measures.
• Issue invoices, comply with tax, accounting, and regulatory obligations: compliance with legal obligations.
• Manage professional account requests, quotes, and projects: pre-contractual measures and, where applicable, execution of the commercial relationship.
• Prevent fraud, abuse, security incidents, and protect the store: legitimate interest and/or legal compliance, as applicable.
• Send commercial communications: consent when necessary. The user may withdraw their consent at any time.
• Non-essential analytical, personalization, or marketing cookies: consent according to the configuration chosen by the user.

4. Recipients and providers

To provide the service, data may be processed by providers acting on behalf of Alpinaluz or as independent controllers depending on the service: e-commerce platform and hosting (including Shopify), payment providers (Shopify Payments, PayPal and Klarna), logistics and shipping management tools (e.g., Sendcloud), carriers (SEUR, DPD, UPS, or others depending on the destination), mail providers, support, analytics, security, tax/accounting advisory, and authorities when there is a legal obligation.

5. International transfers

Some technology providers may process data outside the European Economic Area. Where applicable, such transfers will be carried out using mechanisms recognized by the regulations, such as adequacy decisions, standard contractual clauses, or other appropriate safeguards.

6. Retention

We will retain data for the time necessary to manage the relationship with the customer and, subsequently, for the periods required to meet legal, tax, accounting, contractual obligations, or defense against claims. Data processed solely based on consent will be retained until its withdrawal, unless there is another legitimate basis to maintain them.

7. Rights

The user may request access, rectification, deletion, objection, restriction of processing, portability, and withdrawal of consent by writing to info@alpinaluz.com and indicating the corresponding request. They may also file a complaint with the Spanish Data Protection Agency (AEPD) or the competent supervisory authority in their country when applicable.

8. Automated decisions and fraud prevention

Payment providers, Shopify, or other security providers may apply automated fraud prevention or risk assessment tools according to their own policies. Alpinaluz does not intend to make decisions based solely on automated processing that produce significant legal effects for the user, except when necessary and permitted by regulations.

9. Security and minors

We apply reasonable measures to protect information against unauthorized access, loss, alteration, or disclosure. The store is not specifically directed at minors, and we do not knowingly request data from minors without a valid basis.

10. Changes to the policy

We may update this Privacy Policy to adapt it to legal, technical, or service changes. The current version will be the one published in the store, with its update date.