This privacy policy applies to all personal data that Devapo processes from its customers.
If you register with Devapo or provide personal data to Devapo for any other reason, you expressly consent to the processing of your personal data in line with this privacy policy.
We advise you to read the privacy policy carefully and keep a copy of it for your own records.


1. Responsible

The following is responsible for the processing of personal data:
Devapo B.V.
Stikker 28
5721VD Asten (The Netherlands)
+31 88 088 4600
KvK 17.113.593

2. Which data does Devapo process and for what purpose

2.1 The following personal data are processed in the context of your registration:

a) Gender
b) First and last name
c) Address data
d) E-mail address
e) Date of birth
f) Telephone number
g) Preferred newsletter
h) Business (company name) or private
i) Personally chosen password (encrypted)
j) Shopping and purchasing behavior in the form of order data

2.2 Devapo processes the mentioned personal data for the following purposes:

Your gender, first and last name, address details, e-mail address and date of birth will be used for contact about the account and any cancellation thereof, for the provision of the information requested by you or for handling the information obtained from you.
Your name, gender, date of birth, address and e-mail address will be used to send invitations and information about the services, activities and surveys organized by the organization in the context of membership.
Your gender, first and last name, address details, e-mail address, telephone number and possibly company name uses Devapo to fulfill the services desired by the customer. For the use of this data, Devapo relies on the basis “necessary for entering into an agreement”.

We use the Leadinfo service to measure the business use of our website. This service shows us company names and addresses based on the IP addresses of our visitors. The IP address is not included here.

Only if you have given permission for this, Devapo will use your name and e-mail address to send you its monthly e-mail newsletter with information about activities, services and other interesting information about membership of the organization. Optionally, order data is used to coordinate the newsletter so that it is as interesting and up-to-date as possible for the customer. You can unsubscribe from this mailing at any time via the unsubscribe link at the bottom of the mailing or on your profile page.

We make use of cookies on this website. A cookie is a simple small file that is sent along with pages from this website and stored by your browser on the hard drive of your computer. We use cookies to improve the use of our website. You can disable these cookies via your browser, but this can negatively affect the functioning of our website.

A cookie is placed via our website from the American company Google, as part of the “Analytics” service. We use this service to keep track of and to get reports on how visitors use the website. Google may provide this information to third parties if Google is legally obliged to do so, or insofar as third parties process the information on behalf of Google. We have no influence on this.

The information that Google collects is anonymized as much as possible. Your IP address is emphatically not given. The information is transferred to and stored by Google on servers in the United States.

IP addresses
Devapo stores IP addresses and links them to orders. This is because when fraud is detected (by one of our processors), it can be traced and measures can be taken in the form of a blacklist. More information about our processors can be found in topic 4.2.

2.3 Our website and / or service does not intend to collect data about website visitors under the age of 16, unless they have permission from their parents or guardian. However, we cannot check whether a visitor is older than 16 years. We therefore advise parents to be involved in the online activities of their children, in order to prevent data about children from being collected without parental consent. If you are convinced that we have collected personal information about a minor without this permission, please contact us via

2.4 Devapo can anonymize the personal data and then use it at an aggregated and anonymous level for research purposes and to optimize its range of services and activities. The aggregated and anonymized data can never be traced back to you as an individual.

3. Retention periods

Devapo processes and stores your personal data for the duration of your membership. Immediately after the aforementioned retention period, Devapo will destroy and / or anonymize the personal data, unless it is obliged by law (for example under tax legislation) to keep certain personal data longer. In the latter case, only these specific personal data will be retained during the legal retention period.

4. Security measures and processors

4.1 Devapo has taken appropriate technical and organizational measures to protect your personal data. This protects your personal data against unauthorized or unlawful processing and against accidental loss, destruction or damage.

4.2 For the processing of personal data, Devapo uses services of third parties, so-called processors. These processors only process the personal data on behalf of Devapo. Devapo has entered into a processor agreement with the processors in which the processor is obliged to comply with all obligations under the General Data Protection Regulation and this Privacy Policy. A list of our processors can be requested from the data protection officer.

4.3 Devapo keeps track of who can access the personal data, and has an overview of the internal processors and associated accounts. Devapo does not process special personal data and changes to personal data are not incidental. For this reason, Devapo should not take into account a register of processing activities.

4.4 In the event of a data breach, Devapo will register and document this and also report the breach in question to the Dutch Data Protection Authority as soon as possible. Should sensitive information such as address details and passwords be leaked, customers will be notified immediately.

5. Right of inspection, removal and request for complaints

5.1 Via the membership administration you can submit a request to view, receive (right to data portability) or change your personal data. To delete your data, please contact Devapo will always deal with your request immediately and will inform you within one month of the follow-up given to the request. Suppose Devapo rejects your request, she will always explain it further.

5.2 If you want to object to the (further) processing of your personal data as referred to in Article 2, you can also contact customer service. Devapo will immediately process the objection and delete the relevant personal data, unless it is obliged to keep the relevant personal data on the basis of a legal obligation. If the latter is the case, Devapo will notify you.

5.3 If you have complaints about the way in which Devapo processes your personal data or handles your requests, you can contact Can’t we work it out together? You can always use your right to file a complaint with the Dutch Data Protection Authority ( or to appeal to the competent court.

5.4Any other questions or comments about this privacy policy can be directed to

6. Wijzigingen

This Privacy Policy is subject to change. The changes will be announced via the Website. We advise you to regularly view the privacy policy.

7. College Bescherming Persoonsgegevens

Devapo is registered with the College Bescherming Persoonsgegevens in the Netherlands. This is a public register. This register can be consulted by anyone. Your personal data will be processed in accordance with the Personal Data Protection Act.