Data Protection Statement

Last updated: 21 August 2026

This Data Protection Statement supplements our Privacy Policy with the information required under the EU General Data Protection Regulation (“GDPR”) for visitors from the European Economic Area and follows the structure used across the InterAlpen group websites.

1. Controller

2. General Information on Data Processing

We process personal data only where this is necessary to provide a functional website, to respond to enquiries or to comply with legal obligations. This website is deliberately built to be data-minimising: it uses no third-party tracking services, no advertising technology and no externally loaded fonts or scripts.

3. Hosting and Server Log Files

This website is hosted by Asia Registry (Instra Corporation, part of Team Internet Group). The server is located in London, United Kingdom.

When you visit the website, the web server automatically records technical information in so-called server log files: IP address, date and time of the request, requested resource, HTTP status, transferred data volume, referrer URL and browser/operating system identification. This data is required to deliver the website reliably, to ensure stability and security and to analyse technical faults. It is not merged with other data sources.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website). Log files are automatically deleted within the short retention periods configured by the hosting provider.

4. SSL/TLS Encryption

All traffic between your browser and this website is encrypted using SSL/TLS. Unencrypted requests are automatically redirected to the encrypted connection. You can recognise the encrypted connection by the “https://” prefix and the lock symbol in your browser.

5. Cookies and Similar Technologies

This website only uses cookies that are technically necessary for its operation. No tracking, advertising or third-party cookies are set. Details are described in our Cookie Policy.

6. Consent Management (Complianz)

We use the WordPress plugin Complianz (Complianz B.V., Netherlands) to manage legal documents and — where activated — cookie consent. Complianz runs locally on our server and does not transmit personal data to third parties. If a consent banner is active, your consent decision is stored in a cookie on your device so that it can be remembered. Legal basis: Art. 6(1)(c) and (f) GDPR (compliance with legal obligations and their verifiable implementation).

7. Contact Form and Enquiries

If you contact us via the enquiry form, we process the details you provide (name, email address and, where provided, company, telephone number, subject and your message) to handle your enquiry. The data is transmitted to us by email and is not stored in the website database.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

8. Protection of the Contact Form Against Misuse

The enquiry form is protected against automated misuse by a technical honeypot field that remains invisible to human visitors. No third-party captcha service is used, so no data is transferred to third parties for this purpose.

9. Retention of Enquiry Data

Enquiry correspondence is retained for as long as necessary to handle the enquiry and any follow-up, and thereafter only to the extent required by statutory retention obligations. It is then deleted.

10. Communication by Email and Telephone

If you contact us directly by email or telephone, we process your contact details and the content of the communication to deal with your matter. Please note that unencrypted email communication may not be fully secure; for confidential matters we recommend requesting an alternative channel.

11. Locally Hosted Fonts, Scripts and Design Assets

All fonts (Inter, Instrument Serif), scripts (including the GSAP animation library), stylesheets, images and the frame-based hero animation are hosted locally on our own server. No connection to third-party content delivery networks, font services or external servers is established when you visit this website.

12. Images and Media

All images and media files displayed on this website are served from our own server. No third-party media embeds (such as video platforms or social media widgets) are used.

13. Privacy-Friendly Visitor Statistics (WP Statistics)

We use the WordPress plugin WP Statistics to obtain basic, aggregated information about the use of our website (such as page views and visitor numbers). WP Statistics runs entirely on our own server: no data is transmitted to third parties, no tracking cookies are set and IP addresses are anonymised/hashed before storage. Individual visitors cannot be identified by us on this basis.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the statistical analysis and improvement of our website in a privacy-friendly manner).

14. No Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

15. Recipients of Personal Data

Within our organisation, access to personal data is limited to the persons who need it to fulfil the purposes described above. External recipients are only engaged where necessary — in particular our hosting provider (server operation), IT service providers and professional advisers — and, where required, on the basis of data processing agreements.

16. Data Transfers to Third Countries

Our web server is located in the United Kingdom, for which an adequacy decision of the European Commission exists. As the controller is established in Hong Kong, personal data (for example enquiry emails) may also be processed in Hong Kong. Where personal data of EEA visitors is transferred to countries without an adequacy decision, we take reasonable steps to protect it in accordance with Chapter V GDPR, and such transfers are limited to what is necessary to handle your enquiry or business relationship.

17. Legal Bases of Processing

Unless stated otherwise above, processing is based on Art. 6(1)(b) GDPR (contract and pre-contractual steps), Art. 6(1)(c) GDPR (legal obligations) and Art. 6(1)(f) GDPR (legitimate interests in the secure operation of the website and the handling of business communication). Where we ask for consent, Art. 6(1)(a) GDPR applies.

18. Storage Duration

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. Thereafter the data is deleted or anonymised.

19. Withdrawal of Consent and Right to Object

Where processing is based on consent, you may withdraw that consent at any time with effect for the future. Where processing is based on legitimate interests, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

20. Your Rights as a Data Subject

Under the GDPR you have, subject to its conditions, the right to:

• access the personal data we hold about you (Art. 15);
• rectification of inaccurate data (Art. 16);
• erasure (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing (Art. 21); and
• withdraw consent at any time (Art. 7(3)).

To exercise these rights, please contact info@interalpencapital.com.hk. For visitors from Hong Kong, the rights under the Personal Data (Privacy) Ordinance described in our Privacy Policy apply in addition.

21. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence or place of work.

22. Obligation to Provide Data

You are not legally or contractually obliged to provide personal data on this website. However, without the necessary contact details we may be unable to respond to your enquiry.

23. Security of Processing

We use appropriate technical and organisational measures — including TLS encryption, access restrictions, hardened login protection and regular backups — to protect personal data against unauthorised access, loss or misuse.

24. Changes to This Statement

We may update this Data Protection Statement to reflect changes in our website, our services or legal requirements. The current version, together with the date of the last revision, is published on this page.