Privacy and cookie statement

The Verpact Foundation (“Verpact”) attaches great importance to the protection of your personal data and transparency regarding this matter. This privacy statement describes how Verpact, as the “data controller”, collects, shares, uses and/or otherwise processes data relating to you or that identifies you (“personal data”), all in accordance with the General Data Protection Regulation (“GDPR”).

Identity and contact details

Verpact Foundation, located at Henri Faasdreef 312, 2492 JP The Hague.

Personal data and purposes of processing

Verpact processes personal data only if and insofar as there is a legal basis for doing so, such as the data subject’s consent, the performance of an agreement, a legal obligation, or a legitimate interest.

Packtool & packaging waste management contribution

Verpact processes personal data in the context of reporting and declaring the Packaging Waste Management Contribution. For this purpose, you must register, on behalf of your company, via the Verpact website for a Packtool account, which enables you to submit and declare the Packaging Waste Management Contribution.

In the context of registration, declarations and payments of the Packaging Waste Management Contribution, as well as related communication, Verpact may process the following personal data: first and last name, gender, (business and/or mobile) phone number, and email address.

The processing of this personal data is necessary for the performance of the Packaging Waste Management Contribution Agreement and to comply with legal obligations imposed on Verpact.

Contact & customer service

Via the Verpact website you can also contact Verpact staff (by email or phone) with questions. In this context, it may be necessary for Verpact to process your name, email address and/or phone number, and any personal data in email correspondence relating to your question and communication in that respect.

In our email communication, we use a so-called tracking pixel. This is a small, invisible image included in HTML emails. It allows us to receive technical information such as:

• whether and when an email has been opened;
• the type of email program or device used to open it;
• any interactions with links in the email.

We use this information solely to analyze and improve the effectiveness of our communication. You can limit the use of tracking pixels by disabling the automatic loading of images in your email program.

Newsletter

You can also subscribe to our newsletter using your email address. In this context, Verpact may process your name, email address and technical data related to the sending and opening of newsletters.

The processing of your personal data for sending the newsletter takes place solely on the basis of your consent, which you can withdraw at any time by unsubscribing via a link in the relevant email.

Website and cookies

During your visit to the Verpact website, we store the Internet Protocol (IP) address of your computer, as well as the type of operating system, internet browser used and the web pages visited on the Verpact website, by means of functional or limited analytical cookies. Cookies are small text files that are placed on your computer or mobile device when you visit our website.

This technical information is used to manage the website, keep it secure, provide all functionalities, and to resolve technical issues or improve accessibility of certain parts of the website. These cookies have no or minimal impact on your privacy. Therefore, we do not require your consent to place them.

We also use:

• Preference cookies, which allow our website to remember information affecting its behavior and design;
• Reporting cookies, which provide insight into general visitor behavior on our website, enabling us to improve the user experience;
• Marketing and advertising cookies, which make it possible to measure results and advertise more effectively. We never share customer data with third parties.

When you visit the Verpact website, you can use the cookie banner settings to choose your cookie preferences and disable optional cookies. You may also adjust your browser settings to manage cookies. Please note that removing or disabling certain cookies may affect your user experience and some parts of the website may no longer function properly.

Deposit return app

When you use our Deposit Return app, we process a limited amount of (technical) personal data. The app can be used without creating an account or logging in. We do not process data that directly identifies you as an individual, such as your name or contact details.

When using the app, we process the following categories of data:

• Technical and usage data, such as information on app usage (e.g. opening the app, viewed screens, technical error messages) and device data (e.g. device type, operating system, language settings);
• Location data, if you have given permission via your device settings. This is used to show locations near you;
• Technical identifiers, such as an app installation ID, used to analyze app use at an aggregated level.

We use this data for:

• Delivering app functionality;
• Managing and maintaining the app;
• Improving and optimizing the app;
• Sending push notifications (optional, based on consent).

We process this data on the basis of Verpact’s legitimate interest in providing a well-functioning, secure and user-friendly app, and improving it. Where required (e.g. for location data), we rely on your consent.

Games of chance

If you participate in promotional games of chance offered by us, personal data such as your name, phone number and bank account number may be processed. Gameplay and playing behavior also qualify as personal data. We may also ask you to confirm that you are of legal age.

If you wish to claim a prize, we verify whether you are 18 years or older, using tools such as iDIN. In this context, your date of birth, email address and citizen service number (BSN) are processed, as well as your name if it appears in your email address. If automatic verification is not possible, manual verification may follow. Without age verification, you cannot claim the prize.

Participation is voluntary. Processing is necessary for the performance of the agreement, improving our services, and compliance with legal obligations.

Retention periods

Verpact does not retain personal data longer than necessary for the purpose for which it was collected or as legally permitted or required.

• Data related to the Packaging Waste Management Contribution is retained as long as necessary under the applicable agreement.
• Data for promotional games is retained up to one year after your last participation.
• Newsletter data is deleted as soon as reasonably possible after unsubscribing.
• Technical data such as IP address and browser data is retained for no longer than one month.

Who has access to your data?

We may share your data with third parties where necessary for service provision or where legally required. We ensure that processors enter into agreements guaranteeing appropriate security and confidentiality. Verpact remains responsible and processes data within the European Economic Area where possible.

Automated decision-making

Verpact does not use automated decision-making, including profiling.

Data security

Your personal data is treated confidentially. Verpact has appropriate technical and organizational measures in place, including secure servers, firewalls, encryption and physical safeguards.

Access to personal data is limited to those who need it. Regular risk analyses are conducted.

Links to other websites

Our website and app may contain links to external websites. Verpact is not responsible for their content or data processing practices.

Your privacy rights

Under the GDPR, you have rights including access, rectification, erasure, restriction and data portability. You can also withdraw consent or object to processing.

You can submit requests via info@Verpact.nl or by post. Verpact will respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority.

Applicable law

This privacy statement is governed exclusively by Dutch law. Changes We reserve the right to amend this privacy statement. Please consult it regularly.

This privacy and cookie statement is dated June 2026.