Privacy Policy

Effective March 3, 2026

This Privacy Policy describes how Alpha Boulder – Rock Shop Sagl (“we”, “our” or “us”) handles personal data in connection with the website https://www.alphaboulder.ch (the “Website”). We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data Controller

The entity responsible for the processing of your personal data is:

Alpha Boulder – Rock Shop Sagl

Address: Viale Stazione 19, 6512 Giubiasco, Switzerland
Email: info@alphaboulder.ch
Phone: +41 79 672 82 94

2. What Data We Collect

We limit the collection of personal data to what is strictly necessary for operating the Website.

a. Server log data

Each time you visit the Website, our server automatically records the following information for security and diagnostic purposes:

Your IP address
Date and time of the request
Browser type and version
Operating system
Referring page URL

This information is anonymized or removed shortly after collection and is not used to identify you personally.

b. Display preferences

We store your light/dark theme selection in your browser’s localStorage. This data never leaves your device and is not sent to our servers.

c. Analytics (Mixpanel)

We use the third‑party analytics service Mixpanel to better understand how visitors use the Website. Mixpanel is activated only after you provide explicit consent through our cookie consent banner.

Once enabled, Mixpanel may process the following:

Browsing behaviour (pages visited, interactions, session length, custom events)
Device and browser details
Approximate location based on your IP address
Pseudonymous tracking identifiers

We never transmit your name, email address, or any directly identifying information to Mixpanel. Data is stored within the EU/EEA through Mixpanel’s EU Data Residency option.

No analytics data is collected or transmitted before you give consent.

3. Why We Process Your Data

We rely on the following legal bases:

Server logs and display preferences – legitimate interest in keeping the Website secure and functional (Art. 31 para. 2 FADP; Art. 6(1)(f) GDPR where applicable).
Mixpanel analytics – your explicit consent (Art. 31 para. 1 FADP; Art. 6(1)(a) GDPR).

We do not use your data for marketing, profiling, or automated decision‑making.

4. Cookies and Similar Technologies

Essential – localStorage is used to remember your theme preference. No consent is required for this.
Analytics – Mixpanel sets cookies and uses localStorage for session handling and tracking identifiers. While Mixpanel loads on page start, it does not send any tracking data until you opt in via the cookie banner.

You can change or withdraw your consent at any time through the cookie settings link in the Website footer, or by clearing your browser data. Withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal.

Your personal data may be accessible to:

Authorized staff within Alpha Boulder – Rock Shop Sagl;
Mixpanel, Inc. (USA), acting as our data processor under a Data Processing Agreement that incorporates Standard Contractual Clauses (SCCs). Through Mixpanel’s EU Data Residency Program, data is processed and stored within the EU/EEA;
Infrastructure and hosting providers located in Switzerland or the EU/EEA, bound by appropriate data protection obligations.

We do not sell personal data. Where data is transferred outside Switzerland or the EU/EEA (e.g. Mixpanel US for support operations), adequate safeguards are in place (SCCs and, where relevant, Data Privacy Framework certification).

6. How Long We Keep Your Data

Server logs – retained briefly (typically a few months) for security purposes, then deleted or anonymized.
Analytics data – retained in accordance with our Mixpanel configuration.

7. Your Rights

Depending on applicable law, you may exercise the following rights in relation to your personal data:

Access your data
Correct inaccurate data
Request deletion of your data
Restrict or object to processing
Receive your data in a portable format (under GDPR)
Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at the details listed in Section 1. We will respond promptly and free of charge, unless requests are manifestly unfounded or excessive.

You may also file a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, with your local supervisory authority.

8. Security

We apply appropriate technical and organizational safeguards — including encryption in transit, access restrictions, and secure hosting — to protect personal data from unauthorized access, loss, or alteration.

9. Updates to This Policy

We may revise this Privacy Policy periodically. Any updated version will be posted on the Website with a revised effective date. We recommend checking this page from time to time.

10. Questions

For any inquiries regarding this Privacy Policy or how we handle your data, please reach out using the contact details in Section 1.