We take the privacy of AlpineBerryTale.com users seriously and take care to protect personal data in accordance with applicable law. (GDPR and national data protection law). The following describes the purpose, scope and manner of the processing of personal data and your rights in relation to it.

Personal Data Controller

The controller of the personal data collected on the AlpineBerryTale.com website is Luka Novak s.p. (hereinafter referred to as Provider). The Provider guarantees to process the collected data lawfully, fairly and transparently, and to ensure adequate security and confidentiality of the data.

What data we collect

When you purchase or register in our online shop, we collect only the necessary personal data that we need to process your order and deliver your products successfully:

• Buyer's contact details: name, email address and phone number.

• Address details for delivery: the street address, house number, post code, place and country of delivery of the products ordered.

• Order details: the products ordered, the payment method chosen, the delivery method and any comments the customer may have made at the time of ordering.

You provide this information voluntarily when you place your order and without it, the purchase cannot be completed. Credit cards or bank accounts not stored on our servers - card payment data is processed directly through the secure payment gateways of the card payment service provider, so we do not have access to the card number.

Purpose and use of personal data

We use the personal data collected solely for the following purposes:

• Order processing and delivery: We use your personal data to confirm your order, invoice, package and deliver the products to your address. For successful delivery, we will provide your name, surname, delivery address, telephone number and email address to the delivery service you have chosen (Post of Slovenia or GLS courier) so that they can notify you of the delivery and successfully deliver the package.

• Communication with customers: We may use your contact details to communicate with you about your order (e.g. to provide you with notifications about the status of your order or to resolve any problems or questions you may have about your order). If you have given us your explicit consent, we may also occasionally notify you about new products, special offers or promotions in our shop - you will receive such e-notifications to the e-mail address you have provided and you can unsubscribe from receiving them at any time.

• Statistical analysis of website traffic: We anonymously monitor visits and usage to improve the performance of the website. We use a tool Independent Analytics for visit analytics, which does not use cookies and does not store personally identifiable information, and visit data are not transmitted to external servers. This means that the analytics tool records basic information about your visit (e.g. number of visitors, pages viewed) without collecting or sharing your personal data. This privacy-friendly solution also no need to show annoying cookie pop-upsas analytics does not interfere with your privacy.

Your personal data we do not use for any other purpose incompatible with those purposes. We will not sell, lend or otherwise disclose it to unauthorised third parties without your consent, unless we are required to do so by law or by a competent authority (e.g. under a court order).

Legal basis for processing

We process personal data on the basis of Contracts (purchase of products - fulfilment of the purchase contract), legal obligations (e.g. keeping accounting records for purchases) and on the basis of your consent for processing where it is necessary (e.g. to inform you about news if you have subscribed to a newsletter). In any case, we take care to process only the data that is strictly necessary to achieve the specific purpose.

Transmission of data to third parties

Your data may be shared contractual partnerswho are involved in the performance of the contract, but only to the extent necessary for the performance of their service. This includes those already mentioned delivery services (e.g. Posta Slovenije, GLS), to whom we entrust the delivery details, and the payment service providers (e.g. banks, payment gateway providers) through which you make a payment by credit card or bank transfer. All such partners are obliged to comply with the provisions of the GDPR and to keep your data confidential.

For example: delivery services only receive the data necessary for delivery (your name, address, contact details), while the payment service provider only receives the data necessary to make the payment. Z other third parties We do not share your personal data unless required to do so by law.

Cookies

AlpineBerryTale.com uses only the following information to operate its website strictly necessary cookiesthat ensure the functioning of the online shop (e.g. storing the contents of the shopping basket, logging into your account, etc.) These cookies do not contain personal data and the website may not function properly without them. We do not use analytical or advertising cookies. As mentioned above, visit analytics is done without cookies using Independent Analytics. You will therefore not receive a cookie warning when you first visit the site, as our method of tracking your visit does not interfere with your privacy and is GDPR compliant. Of course, the website also allows you to set cookies via your browser settings - there you can control, delete or block cookies to your liking.

Data security and storage

We are committed to protecting your personal data from unauthorised access, disclosure or misuse. We use appropriate organisational and technical measures data protection, such as secured servers, up-to-date software, encrypted data transmission (SSL certificate) and controlled access to data only by authorised persons (e.g. employees or contract processors who need access to fulfil an order). Where data is processed by contractors (e.g. delivery services, payment providers), we require the same standards of data protection and confidentiality from them.

We keep personal data only for as long as is necessary to fulfil the purposes for which they were collected or in accordance with legal retention obligations. We are obliged to keep data on invoices issued for 10 years from the date of issue (in accordance with tax law) and we generally keep data on your orders for 5 years from the date of fulfilment of the order, unless there is a dispute in relation to the order (in which case the retention may last until the dispute is finally settled). Data collected on the basis of consent (e.g. for the purpose of newsletter notifications) is kept until the consent is withdrawn. After the retention period has expired or the purpose has been fulfilled securely deleted or anonymisedso that you can no longer be identified from them.

Individual rights

In accordance with the applicable data protection legislation, you have the following rights in relation to your personal data the following rights:

• Right of access: You can ask us at any time to confirm whether we are processing your personal data and to see and obtain a copy of your personal data.

• Right to rectification: You may request at any time the correction of inaccurate or incomplete personal data we hold about you.

• Right to erasure: You can request that we delete your personal data when we no longer need it or if required to do so by law (so-called "erasure"). right to be forgottenPlease note that there are legal obligations (e.g. retention of invoices) that may oblige us not to delete certain data immediately.

• Right to restriction of processing: in certain cases, you may request that we temporarily restrict the processing of your data (e.g. if you contest the accuracy of the data - pending verification, or if the processing is unlawful and you request a restriction of use instead of deletion).

• Right to data portability: you have the right to request that we transmit the personal data you have provided to us in a structured, commonly used and machine-readable format or directly to another controller where this is technically feasible (this applies to data processed by automated means on the basis of your consent or a contract).

• Right to object: You have the right to object to the processing of your personal data based on the legitimate interests of the controller or of a third party - in such a case, we will stop the processing unless we can demonstrate compelling legitimate grounds for the processing which override your interests. If we use your data for direct marketing purposes (e.g. newsletters), you may object to such processing at any time and we will stop using your data for that purpose.

To enforce any of these rights you can send your request by email to info@alpineberrytale.com or by contacting us via the contact form on our website (if available). We may request additional information from you (e.g. order number or other identifying information) for the purpose of reliable identification in the event that you exercise your rights, and we will act in accordance with the law - we will respond to your request no later than one month after receipt.

If you think your data protection rights violated, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (the data protection authority) or with a supervisory authority in the EU Member State where you are resident or where the alleged infringement took place. However, we will be happy if you contact us before doing so, so that we can first try to resolve the possible infringement amicably.

Contact

We can be contacted for any questions, requests or exercise of rights in relation to personal data at info@alpineberrytale.com. We will do our best to respond promptly and help you to exercise your rights or resolve any confusion about our privacy policy.

This Privacy Policy is effective from the date of publication on the Website and may be updated from time to time. Any changes will be posted here in due course. Your continued use of the website following any changes to the policy will be deemed to be your acceptance of the updates.