Privacy policy
At Alpina, d.o.o. (hereinafter: “Alpina” or “controller”), we respect the privacy of individuals and strive to process personal data responsibly, lawfully and transparently.
This Privacy Policy explains which personal data we collect and process, for what purposes we use them, on which legal bases, to whom we may disclose them, how long we keep them and what rights you have in relation to the processing of your personal data.
This Privacy Policy applies to personal data processed by Alpina in connection with the alpina-footwear.com website and online store, when registering a user account, purchasing products, communicating with us, subscribing to newsletters or SMS/Viber notifications, taking part in prize games and in other related activities.
When processing personal data, we comply in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or GDPR) and with applicable Slovenian data protection legislation, in particular the Personal Data Protection Act (ZVOP-2).
1. Controller and Data Protection Officer
The controller of personal data is Alpina, d.o.o., Strojarska ulica 2, 4226 Žiri, Slovenia, email: alpina@alpina.si, phone: +386 4 51 58 000.
The Data Protection Officer is Nela Mlinar, email: vop@alpina.si, phone: +386 4 51 58 116
Your questions regarding this Privacy Policy, the confidentiality of your personal data or the manner of processing, as well as your requests to exercise your rights in relation to personal data, will be answered by the controller’s responsible person or the Data Protection Officer, who can be contacted using the contact details above.
2. Personal Data We Collect and Process
Alpina collects various data about you, including personal data by which you can be directly or indirectly identified, where you or others choose to share such personal data with Alpina. The scope of personal data depends on how you use our website and which services you use. We receive data in several ways, including through purchases in the online store, subscriptions to email notifications (direct marketing), registration of a user account in the online store and visits to Alpina’s websites.
Personal data we collect and process:
- basic personal data, such as first and last name, email address, residential or delivery address (street, house number, postcode, town, country), phone number and user account data, including the password, to ensure the security and use of our services;
- data on purchases and payment methods; where payment in the online store is made by credit card, the card details are not stored in Alpina’s databases;
- data you provide in the forms available on the website: withdrawal from the contract – exchange or return of a product, and complaints – non-conformity of a product;
- data you provide when communicating with us;
- data required to operate the Alpina loyalty programme or loyalty card;
- data you provide when subscribing to newsletters or SMS/Viber notifications;
- data related to your participation in prize games;
- the IP address of your browser, computer or mobile device and other technical data when you access the services of the Alpina online store website;
- data on website use collected through cookies and similar technologies.
We process only those personal data that are necessary for a specific processing purpose or for which there is an appropriate legal basis.
3. Purposes and Legal Bases for Processing Personal Data
Alpina collects, records, organises, stores, uses and otherwise processes the personal data it processes about individuals on various legal bases and for the purposes set out below.
Alpina processes personal data only to the extent necessary for a specific processing purpose and on an appropriate legal basis in accordance with the General Data Protection Regulation (GDPR) and other applicable legislation.
Providing your personal data may be voluntary or necessary, depending on the purpose and legal basis of the processing. Where data are necessary for concluding or performing a contract, processing an order, carrying out delivery, a return or an exchange, or fulfilling a legal obligation, the service or procedure cannot be carried out or provided without them. Where processing is based on consent, providing personal data is voluntary, and refusing or withdrawing consent generally does not affect the use of other services that do not depend on such processing.
3.1. Processing on the Basis of a Contract or Steps Taken at the Request of the Individual – Purposes
Alpina processes personal data to exercise rights and fulfil obligations under concluded contracts or to take steps at the request of the individual prior to entering into a contract.
In the context of the online store, this includes in particular the processing of personal data of:
- online store customers, regardless of whether they make a purchase as registered or unregistered users;
- registered users who use a user account or other Alpina online services;
- individuals who contact Alpina regarding an order, purchase, return, exchange, complaint or other request, where processing is necessary to handle and carry out their request.
In performing its contractual obligations, Alpina processes personal data in particular for:
- identifying the individual;
- taking steps prior to entering into a contract;
- concluding and performing the contract;
- processing and fulfilling the order;
- delivery or collection of ordered products;
- issuing and sending the invoice;
- processing payments and other procedures related to the order;
- communicating with the customer regarding the order, purchase and performance of the contract;
- handling and resolving customer requests, including requests to withdraw from the contract – return or exchange of products – and complaints;
- providing user support;
- managing the user account;
- enabling registered users to view their purchase history;
- enabling other functionalities related to the user account;
- other purposes directly related to the performance of the contract or order.
If, when registering or making a purchase, the individual also provides details of their Alpina loyalty card, these data may be processed for the purpose of providing the benefits arising from the loyalty programme and for purposes related to the operation of this programme.
3.2. Processing on the Basis of Legal Obligations – Purposes
Alpina also processes personal data to fulfil legal and other statutory obligations applicable to the company.
This includes in particular the processing of data for:
- fulfilling tax and accounting obligations;
- issuing, recording and retaining invoices and other business documentation;
- fulfilling consumer protection obligations;
- fulfilling obligations related to complaints, withdrawal from the contract and other customer requests;
- fulfilling other legal obligations applicable to Alpina;
- disclosing data to competent state authorities where required by law;
- retaining documentation for the periods laid down by applicable regulations.
Data that Alpina is required to retain by law may also be retained after the termination of the contractual relationship or the conclusion of a particular procedure.
3.3. Processing on the Basis of Legitimate Interests – Purposes
Alpina may process personal data on the basis of its legitimate interests or the legitimate interests of a third party, where the conditions laid down in the GDPR are met and where such interests are not overridden by the interests or fundamental rights and freedoms of the individual which require the protection of personal data.
On the basis of legitimate interests, Alpina may process personal data, to the extent necessary and proportionate, in particular for:
- ensuring the security and smooth operation of the website and online store;
- preventing unauthorised access to user accounts;
- preventing, detecting and dealing with fraud, abuse, security incidents and other unlawful conduct;
- protecting information systems and the network;
- ensuring and improving the quality of online services;
- carrying out statistical, business, technical and other analyses, where these are carried out in a manner compliant with the GDPR;
- managing and improving business processes;
- establishing, exercising and defending legal claims;
- participating in judicial, administrative and other proceedings;
- protecting Alpina’s assets, rights and legitimate interests;
- carrying out direct marketing, where the conditions for such processing laid down by the GDPR and other applicable regulations are met.
Where Alpina intends to further process personal data collected for a specific purpose for another purpose, it checks, before such further processing, whether it is compatible with the original purpose and whether there is an appropriate legal basis for it.
Where necessary, measures to reduce risks to individuals, including pseudonymisation or aggregation of data, are used in analyses and other forms of further processing.
3.4. Processing on the Basis of Consent – Purposes
Where the processing of personal data requires the individual’s consent, Alpina processes personal data on the basis of their freely given, specific, informed and unambiguous consent.
On the basis of consent, Alpina may process personal data in particular for:
- direct marketing – sending newsletters, SMS or Viber messages and other promotional notifications, where consent is required for such form of marketing;
- marketing analyses, user segmentation and the preparation of personalised offers, where consent is required for such processing;
- participation in prize games, where the rules of a particular prize game specify consent as the legal basis for certain processing;
- other purposes for which Alpina obtains the individual’s separate consent.
Depending on the type of consent, you may receive promotional messages by email, SMS or Viber messages or by another means for which you have given consent or which is permitted under applicable regulations.
You may withdraw your consent at any time as easily as you gave it, or in the manner stated in the individual message or other notification.
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
If consent includes the processing of personal data for the purposes of segmentation or personalisation of offers, Alpina will inform the individual accordingly and ensure all the rights to which they are entitled under the GDPR and other applicable legislation.
3.5. Direct Marketing
Alpina may use personal data for direct marketing purposes, whereby the legal basis and the manner of carrying out direct marketing are determined according to the type of communication, the existing relationship with the individual and applicable regulations.
Promotional messages may contain information about Alpina products and services, current offers, benefits, promotions, events, prize games, news and other content related to Alpina.
The individual may at any time object to the use of their personal data for direct marketing purposes or unsubscribe from receiving promotional messages in the manner stated in each message.
3.6. Processing of Personal Data in Prize Games
When running a prize game, Alpina processes the personal data necessary to carry out the prize game, including the registration of participants, the draw or selection, notification of winners and the awarding of prizes.
A particular prize game may be subject to special rules or conditions setting out in more detail which personal data Alpina processes, for what purposes, on which legal basis and how long it retains them.
3.7. Automated Decision-Making and Profiling
Alpina does not use personal data for automated decision-making that would produce legal effects concerning the individual or similarly significantly affect them, unless the individual has been given appropriate notice of such processing and all the conditions laid down by the GDPR are met.
If Alpina uses profiling for the purposes of user segmentation, analysis of purchasing habits or personalisation of offers, such processing is carried out only on an appropriate legal basis and in accordance with the requirements of the GDPR.
4. Disclosure of Personal Data
Alpina discloses personal data, or grants access to them, only to those recipients who need them to carry out a specific processing purpose and who have an appropriate legal basis for such processing. We do not disclose personal data to unauthorised persons.
Depending on the purpose and legal basis of processing, personal data may be disclosed, or access to them may be granted, in particular to the following categories of recipients:
4.1. Processors
Alpina may disclose personal data to processors who carry out individual services or tasks for Alpina related to its business, the online store and the provision of services to users.
Processors may include in particular:
- providers of hosting, server and other IT infrastructure;
- providers of information systems, maintenance and technical support;
- providers of order processing and fulfilment support services;
- providers of payment and other support services;
- delivery services and other providers involved in the delivery of orders;
- providers of email, SMS or Viber marketing services;
- providers of analytics, statistical and other online services;
- marketing or advertising partners, where there is an appropriate legal basis for such processing;
- other service providers necessary for the operation of the online store, the provision of our services or the fulfilment of contractual and other obligations.
Processors have access only to those personal data that they strictly need to carry out their tasks for Alpina. They may not use personal data for other purposes and are obliged to protect them in accordance with applicable data protection regulations.
Appropriate data processing agreements have been concluded with external contractors who process personal data in the name and on behalf of Alpina, or other appropriate measures have been put in place as required by applicable regulations.
4.2. Other Business Partners and Joint Controllers
Depending on the specific processing purpose, we may also disclose personal data to other business partners or recipients where this is necessary to fulfil an order, provide a service, perform a contract or achieve another lawful processing purpose.
If we act together with another controller in a particular processing operation, personal data may also be disclosed to such a joint controller, but only to the extent and for the purposes for which there is an appropriate legal basis (e.g. a prize game run in cooperation with a supplier/partner).
4.3. Competent State and Other Public Authorities
We may disclose personal data to competent state authorities, courts, other public institutions or other persons where required by law or where disclosure is necessary for the establishment, exercise or defence of legal claims.
In such cases, we may disclose personal data in particular for the purposes of fulfilling legal obligations, conducting or participating in judicial, administrative or other proceedings, and preventing, detecting or dealing with possible infringements.
4.4. Changes in Corporate Status and Universal Legal Succession
In the event of a corporate transformation, merger, division, transfer of business, sale of part or all of the business, or other legal succession, personal data may be transferred to the legal successor or another person to whom Alpina’s rights and obligations are transferred, if such transfer is necessary and an appropriate legal basis is ensured for it.
4.5. Transfers of Personal Data to Countries Outside the EU or EEA
When online services are used outside EU Member States, data provided in order to deliver the online services may be transferred, stored or processed in third countries whose data protection legislation sets different standards than in EU or EEA Member States. By using the services in countries outside the EU, you agree that personal data may be transferred or disclosed to entities located in third countries. Alpina itself will not transfer your personal data to countries outside the EU or EEA.
5. Retention Period of Personal Data
We keep personal data for as long as necessary to fulfil the purpose for which they were collected or for which they are lawfully processed, or for as long as required by applicable regulations. The retention period depends mainly on the type of personal data, the purpose and legal basis of processing and any legal obligations of Alpina.
5.1. User Account
We keep personal data related to the user account until the account is closed or until the purpose for which they were collected has been fulfilled.
You can close your user account yourself in the user account settings or ask us to delete it. Closing the user account and deleting your personal data may take up to 10 working days from receipt of a complete request. Closing the user account does not in itself mean that all personal data are deleted immediately. Data related to purchases, orders, invoices, payments, complaints, withdrawals from the contract – exchanges or returns, exercise of rights or other business events already carried out may be kept even after the user account has been closed, where their retention is necessary to fulfil legal obligations or to establish, exercise or defend legal claims, or where there is another appropriate legal basis for their further retention.
5.2. Orders, Payments and Invoices
Data relating to the order and payment of a purchase in the online store, together with related contact details of individuals, may be kept for the purpose of fulfilling contractual obligations until full payment for the services or until the expiry of the limitation period for the individual claim, which may be up to five years by law.
In accordance with tax regulations, issued invoices are kept for 10 years after the end of the year in which the invoice was issued. After the statutory period has expired, we delete or anonymise them, unless there is another legal basis for their further retention.
5.3. Products non-conformity claims
We keep personal data processed in the course of handling products non-conformity claims for 2 years, in accordance with Alpina’s internal rules. After this period, we delete the personal data, unless there is another legal basis for their further retention, in particular where their retention is necessary to fulfil legal obligations or to establish, exercise or defend legal claims.
5.4. Personal Data Processed on the Basis of Consent
We generally keep personal data processed on the basis of your consent until consent is withdrawn or until the purpose for which consent was given has been fulfilled, unless applicable legislation provides otherwise or there is another appropriate legal basis for further retention. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
5.5. Legal Claims and Proceedings
Where necessary for the establishment, exercise or defence of legal claims, we may keep personal data even after the expiry of the period that would apply to their original processing purpose, namely until the final conclusion of the matter, until the expiry of the period within which such a claim may lawfully be asserted, or for as long as necessary to protect our rights and legal interests.
5.6. Deletion and Anonymisation
After the retention period has expired, we delete, destroy or anonymise personal data, unless there is another appropriate legal basis for their further retention.
Data that we no longer need for the original processing purpose may be anonymised and used for statistical, analytical or other lawful purposes, provided that, after anonymisation, the individual can no longer be identified or can no longer be identified by reasonable means.
Anonymised data are no longer considered personal data and may be used for statistical, business, analytical and other lawful purposes.
6. Protection of Personal Data
Alpina implements appropriate technical and organisational measures to ensure the security of personal data and to protect them against unauthorised access, loss, destruction, alteration, disclosure or other unlawful forms of processing.
The measures are implemented taking into account the nature, scope, context and purposes of processing and the risks posed by the processing of personal data. They include in particular measures to ensure the confidentiality, integrity, availability and resilience of information systems and to prevent unauthorised access to personal data.
Access to personal data is limited to employees and other persons who need them to perform their tasks. These persons are bound to keep personal data confidential and may process them only within their authorisations and for specified purposes.
We use appropriate security measures when transmitting and storing personal data and strive to ensure the security of personal data at all stages of processing. In doing so, Alpina works with processors who are obliged to ensure an appropriate level of security for our services and your personal data.
Despite the implementation of appropriate technical and organisational measures, complete security in the transmission and storage of data cannot be guaranteed. In particular, the use of the internet involves risks that are beyond our direct control.
6.1. User Account Security
Users can also help protect their data by adequately securing their mobile device or computer, protecting their username and password and using appropriate software (antivirus) protection on their electronic device, thereby preventing third parties from accessing their user account.
We recommend that you use a sufficiently strong and unique password, do not share it with others and ensure the appropriate security of the device from which you access your user account.
If you believe that there has been unauthorised access to your user account or another security incident, please notify us as soon as possible.
6.2. Online Store Security
Appropriate security mechanisms are used in the online store to protect data transmission. We recommend that users use up-to-date web browsers and adequately protected devices when providing personal data and heed their browser’s security warnings.
Limitation of liability
Alpina is committed to and strives to ensure a high level of security for the online store and personal data; however, no internet connection can be 100% secure, and due to the nature of electronic communications and the use of the internet, it cannot be guaranteed that data transmission will always be completely secure.
7. Cookies and Similar Technologies
The alpina-footwear.com website uses cookies and other similar technologies to ensure the proper functioning of the website, provide individual functionalities, improve the user experience and, where an appropriate legal basis exists, to analyse website use, personalise content and carry out advertising or other functions.
More detailed information on the individual cookies and other similar technologies we use, including their purpose, provider, type, duration and legal basis, is available in the Cookie Policy or in the cookie settings available on the website.
8. Links to Other Websites
Our website may contain links to third-party websites or services.
This Privacy Policy applies to the processing of personal data by Alpina. The processing of personal data on third-party websites or services is governed by their own privacy policies.
Before providing personal data to third parties, we recommend that you review their privacy information.
9. Rights of Individuals
In accordance with the GDPR and under the conditions laid down by applicable regulations, you, as the data subject, have the following rights:
- right of access to personal data – the right to obtain confirmation as to whether personal data concerning you are being processed and, where that is the case, access to those personal data and information about the processing, such as the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the envisaged retention period and other information specified by the GDPR;
- right to rectification and completion – the right to request the rectification of inaccurate personal data and the completion of incomplete personal data – registered users can do this in their user account settings in the online store;
- right to erasure of personal data – the right to request the erasure of personal data where the conditions laid down in the GDPR and applicable legislation are met;
- right to restriction of processing – the right to request the restriction of processing of personal data where the conditions laid down in the GDPR and applicable legislation are met. During the restriction of processing, we may in some cases be unable to provide all services to the same extent;
- right to data portability – the right to receive the personal data concerning you that you have provided to Alpina in a structured, commonly used and machine-readable format and, where the conditions laid down in the GDPR are met and it is technically feasible, to request their transmission to another controller;
- right to object – where the processing of personal data is based on Alpina’s legitimate interest, you have the right, in the cases specified by the GDPR, to object to such processing. In such a case, we will stop the processing unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims;
- right to object to processing for direct marketing purposes – where we process your personal data for direct marketing purposes, you have the right to object to such processing at any time. You can also exercise your objection by following the unsubscribe instructions provided in each email or other marketing communication;
- right to withdraw consent – where the processing of personal data is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
The rights of individuals are not absolute and may in some cases be exercised only under the conditions and subject to the limitations laid down by the GDPR and applicable legislation.
You can send a request to exercise your rights to the email address: support@alpina-footwear.com or to the email address of the Data Protection Officer: vop@alpina.si or by post to Alpina, d.o.o., Strojarska ulica 2, 4226 Žiri, Slovenia, marked “Personal Data Protection”.
When handling a request, we may verify your identity in order to ensure the security of personal data and prevent their unauthorised disclosure. If the request is not sent from the email address associated with your user account, we may ask you for appropriate proof of identity or other information necessary to verify that the request is being made by the entitled person.
We will respond to your request without undue delay and within the time limits laid down by the GDPR and applicable legislation. If we do not grant your request, we will inform you of the reasons for the refusal and of your rights regarding further action.
If you believe that the processing of your personal data infringes the GDPR or other applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority. Complaints can be lodged with: Information Commissioner of the Republic of Slovenia
Dunajska cesta 22, 1000 Ljubljana, Slovenia, email: gp.ip@ip-rs.si, phone: +386 1 230 97 30, website: www.ip-rs.si.
10. Changes to the Privacy Policy
Alpina reserves the right to amend and update this Privacy Policy from time to time, in particular due to changes in applicable data protection legislation and regulations, changes to our services, the manner or purposes of processing personal data, the introduction of new services or other circumstances affecting the processing of personal data.
We will inform you in advance of any changes to the processing of your personal data and/or changes or updates to the Privacy Policy. Changes to the Privacy Policy will also be published in good time on our website alpina-footwear.com.
If you do not agree with the Privacy Policy, please stop using our online services and close your user account or withdraw the consents you have given.
This Privacy Policy was last updated on 30 September 2026
