Privacy policy.

Privacy policy

This privacy policy applies to all personal data that Devapo processes from its customers.

If you register with Devapo or provide personal information to Devapo for any other reason, you give your explicit permission to process your personal information in accordance with this privacy policy.

We advise you to read the privacy policy carefully and to keep a copy thereof for your own records.

1. Responsible

The following is responsible for processing personal data:

Devapo B.V.
Stikker 28
5721VD Asten
088 – 088 4600
Chamber of Commerce 17.113.593

2. Which data does Parfumswinkel process and for what purpose

2.1 The following personal data will be processed in the context of your registration:
a) Gender
b) First and last name
c) Address details
d) Email address
e) Date of birth
f) Telephone number
g) Preferred newsletter
h) Business (company name) or private person
i) Personally chosen password (encrypted)
j) Shopping and purchasing behavior in the form of order data

2.2 Devapo processes the said personal data for the following purposes:

Your gender, first and last name, address, e-mail address and date of birth will be used for contact about the account and its possible cancellation, for providing the information you have requested or for processing the information obtained from you.

Your name, gender, date of birth, address and e-mail address is used to send invitations and information about the services, activities and surveys organized by the organization in the context of membership.

Parfumswinkel uses your gender, first and last name, address, e-mail address, telephone number and possibly company name to be able to provide the services desired by the customer. For the use of this data Parfumswinkel relies on the basis “necessary for entering into an agreement”.

Only if you have given your permission, will Devapo use your name and email address to send you its monthly newsletter with information about activities, services and other interesting information about membership of the organization. Optionally, order data is used to coordinate the newsletter so that it is as interesting and current as possible for the customer. You can unsubscribe from this mailing at any time via the unsubscribe link at the bottom of the mailing or on your profile page.

Because Devapo uses tracking cookies, the organization must realize an opt-in for this. Article 11.7a of the Tw stipulates that the use of cookies – except in exceptional cases – is only permitted if the user concerned is 1) provided with clear and complete information, and 2) has given permission for this.

When visiting the Devapo website, the customer will also receive a notification.

IP addresses
Devapo stores IP addresses and links them to orders. The reason for this is that when fraud is detected (by one of our processors), it can be traced back and measures can be taken in the form of a blacklist. You can find more information about our editors under topic 4.2.

2.3 Our website and / or service does not intend to collect data about website visitors who are younger than 16 years of age, unless they have permission from parents or guardian. However, we cannot check whether a visitor is older than 16 years. We therefore advise parents to be involved in the online activities of their children, to prevent data about children being collected without parental consent. If you are convinced that we have collected personal information about a minor without that permission, please contact us at

2.3 Devapo can anonymize the personal data and then use it at an aggregated and anonymous level for research purposes and to optimize its range of services and activities. The aggregated and anonymous data can never be traced back to you as an individual.

3. Retention periods

3.1 Devapo processes and stores your personal data for the duration of your membership. Immediately after the aforementioned retention period, Devapo will destroy and / or anonymize the personal data, unless it is required by law (for example under tax legislation) to retain certain personal data for longer. In the latter case, only this specific personal data will be retained during the legal retention period.

4. Security measures and processors

4.1 Devapo has taken the appropriate technical and organizational measures to protect your personal data. This protects your personal data against unauthorized or unlawful processing and against accidental loss, destruction or damage.

4.2 Devapo uses the services of third parties, so-called processors, to process the personal data. These processors only process the personal data on behalf of Devapo. Devapo has concluded a processor agreement with the processors in which the processor is required to comply with all obligations under the General Data Protection Regulation and this Privacy Policy. A list of our processors can be requested via the data protection officer.

4.3 Devapo keeps track of who can access the personal data, and has an overview of the internal processors and associated accounts. Devapo does not process special personal data and changes to personal data do not occur incidentally. For this reason Devapo should not take into account a register of processing activities.

4.4 In the event of a data breach, Devapo will register and document this and also report the relevant leak to the Dutch Data Protection Authority as soon as possible. Should sensitive information such as address details and passwords be leaked, customers will be notified immediately.

5. Right of inspection, removal and request for complaints

5.1 Via the member administration you can submit a request to view, receive (change to data portability) your personal data. To delete your data you can contact Devapo will always process your request immediately and at least within a month inform you of the action taken on the request. Suppose Devapo rejects your request, it will always explain this further.

5.2 If you wish to object to the (further) processing of your personal data as referred to in Article 2, you can also contact customer service. Devapo will immediately process the objection and remove the relevant personal data, unless it is required by law to retain the personal data concerned. If the latter is the case, Devapo will inform you of this.

5.3 If you have complaints about the way in which Devapo processes your personal data or handles your requests, you can contact Can we not work it out together? You can always make use of your right to submit a complaint to the Dutch Data Protection Authority (www.autoriteit or to appeal to the competent court.

5.4 Any other questions or comments about this privacy policy can be directed to

6. Changes

This Privacy Policy can be changed. The changes are announced via the Website. We advise you to regularly review the privacy policy.

7. Dutch Data Protection Authority

Devapo is registered with the Dutch Data Protection Authority in the Netherlands. This is a public register. This register can be consulted by everyone. Your personal data is processed in accordance with the Personal Data Protection Act.

Malfunction? +31(0)88-0884670
Follow us.