1. Data Controller Identification
The data controller responsible for the processing of personal data via this website is:
Tallystackbuddiesb Alpine Expeditions Ltd
Company Registration Number: 14892018
Registered Office Address: 48 St. Gotthard Pass Way, Alpine House, EC2A 4NE, London, United Kingdom
Official Contact Email: [email protected]
2. Personal Data We Collect
We adhere strictly to the principle of data minimization as outlined under Article 5 of the UK General Data Protection Regulation (UK GDPR) and EU Regulation 2016/679. We only collect information that is strictly necessary for fulfilling your requests and maintaining operational functionality.
- Directly Supplied Data: When you complete our contact or field inquiry forms, we capture your name, email address, selected alpine territory, and message contents.
- Technical & Log Information: Your web browser automatically transmits server log data, including anonymized IP address, browser type and version, language preference, operating system, referencing URL, and timestamp.
- Preference Data: Local storage settings relating to your cookie preferences, preventing repeated display of notice dialogs upon page reload.
3. Legal Bases for Processing
Under GDPR Article 6, we process personal information exclusively under the following lawful grounds:
- Consent (Art. 6(1)(a)): Where you explicitly submit your details via our contact interface or affirmatively accept analytical cookies.
- Contractual Necessity (Art. 6(1)(b)): Where processing is required to answer specific service questions or furnish requested documentation.
- Legitimate Interests (Art. 6(1)(f)): To maintain web application security, prevent distributed denial-of-service (DDoS) incidents, and resolve server communication anomalies.
4. Third-Party Processors & Data Transfers
We do not sell, rent, lease, or monetize user data under any circumstances. External service processors are bound by rigorous Data Processing Agreements (DPAs) and are limited strictly to:
- Hosting infrastructure providers maintaining secure European data centers.
- Direct email routing mechanisms utilized solely to transmit administrative notices from our contact endpoints.
Any cross-border transfers outside the United Kingdom or European Economic Area (EEA) rely on standard contractual clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO) and European Commission.
5. Data Retention Periods
Inquiries transmitted through our contact form are retained for no longer than twenty-four (24) months from the date of final resolution, after which all identifying information is permanently deleted from server archives. System security logs are rotated automatically on a thirty (30) day rolling cycle.
6. Your Statutory Rights (GDPR & CCPA)
Under applicable data protection legislation, you are entitled to exercise the following rights without cost or prejudice:
- Right of Access: The right to obtain confirmation and copies of personal data held about you.
- Right to Rectification: The right to correct inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten"): The right to demand deletion of personal data where retention lacks lawful grounds.
- Right to Restriction: The right to limit data processing under contested accuracy conditions.
- Right to Data Portability: The right to receive your personal data in a structured, machine-readable format.
- Right to Object: The right to object at any time to processing based on legitimate interests.
To exercise any of these protections, please contact our Data Protection Officer at [email protected]. We respond to verified requests within thirty (30) calendar days.
7. Supervisory Authority Oversight
If you consider that our processing violates privacy standards, you have the right to lodge a formal complaint with the relevant supervisory body, including the UK Information Commissioner's Office (ICO) at ico.org.uk or your local European Data Protection Authority.