Privacy notice

27 September 2026

Who processes your data?

PrepTag, Chamber of Commerce 75016486, is responsible for its own account management, customer contact, security and shop. Correspondence address: Westhaag 58, 5346 LA Oss, the Netherlands (not a visitor address). Privacy enquiries: contact@preptag.eu or +31 6 20907937.

For personal data entered by customers in labels or print jobs, the customer determines the purpose of processing. PrepTag processes that data on the customer's behalf to provide the service. The corresponding processing arrangements must be recorded in a separate data processing agreement.

What data and why?

Accounts and service: login email address, company name, contact person, contact details, customer number, roles and settings for access, support and performance of the agreement. For business customers' contacts, the legitimate interest is maintaining and performing that business relationship.

Orders: items, quantities, payment status and reference, contact, billing and shipping details, company and VAT details and any notes. These are needed for orders, delivery, communication and administration. PrepTag does not receive full payment card details through the shop.

Usage and security: session identifiers, technical connection data, security and administration logs, and printer and print-job information. The purpose and legitimate interest are secure, reliable services, troubleshooting and preventing abuse.

Labels: product details, any names and printing information entered by customers to execute print jobs. Do not enter special-category personal data if it is not needed for the service.

Statutory administration: data necessary for tax and other legal obligations is processed on that legal basis.

Who receives data?

D-rct provides hosting and technical management. Resend sends login and order emails and receives the required recipient and message data. Mollie processes payments and receives the necessary transaction data. Cloudflare Turnstile processes technical data for login security. Necessary address and order details are shared with the relevant delivery or fulfilment provider. Authorised customer and technical administrators have access for their duties; data may also be disclosed where required by law.

Processing outside the EEA

External providers may also process data outside the European Economic Area. The GDPR requires an appropriate basis for such transfers, for example an adequacy decision or appropriate safeguards such as European standard contractual clauses, with additional measures where necessary. Contact contact@preptag.eu for information on the parties, countries and applicable safeguards involved with your data. This notice is not consent to international transfers.

Retention and deletion

Account and customer data is retained as long as needed for the business relationship, services and handling requests or disputes. Administrative records are retained to the extent and for as long as statutory retention duties require. The need for further retention is assessed when a customer relationship ends and on a deletion request; we do not promise automatic deletion that the system does not perform.

Temporarily saved labels expire after the customer's configured period, 96 hours by default. This does not automatically delete separate print jobs, orders or backups. Administration logs are cleaned according to configured log retention, after at most 14 days. Backups support recovery and have a separate retention schedule. Other technical logs are retained as needed for security and troubleshooting, taking incidents and legal obligations into account. Request the current schedule for your environment at contact@preptag.eu.

Security

PrepTag uses HTTPS, restricted accounts and roles, temporary sessions and login protection, among other measures. Customers manage access rights and security for their own local network and equipment. No system can guarantee absolute security; report suspected incidents to contact@preptag.eu.

Your privacy rights

You can request access, correction, deletion, restriction or portability of your personal data where the relevant right applies. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Send requests to contact@preptag.eu. We may ask for appropriate verification of your identity; do not send a full copy of an identity document unsolicited. In principle, we respond within one month. For complex requests, the statutory period may be extended; you will be informed within the first month. You may complain to the Dutch Data Protection Authority or another competent supervisory authority. For data your employer or client processes through PrepTag, you may also contact that organisation.

Visitors outside the EU

PrepTag targets business customers in the European Union. Visiting from another country does not mean PrepTag offers services there. Being outside the EU does not exclude applicable GDPR rights or other mandatory protection. This notice therefore contains no general exemption from responsibility for visitors outside the EU.

Cookies and changes

Read the cookie policy for cookies and browser storage. If processing changes, we update this notice and inform affected people where necessary.