Privacy Policy of European Refund Providers Association (ERPA)

Who we are

The European Refund Providers Association (ERPA) is an association with full legal capacity (Vereniging met volledige rechtsbevoegdheid), registered under statutory name European Refund Providers Association at the Dutch Chamber of Commerce (KVK: 94563853) with RSIN 866820784. Its statutory seat is in the Municipality of Utrecht, The Netherlands, and its visiting address is Stadsplateau 10, 3521 AZ Utrecht.  

ERPA represents the collective interests of its members regarding cross-border VAT and excise duty refunds and related issues. 

You can contact us via: communications@erpa.eu

For the purposes of the General Data Protection Regulation (“GDPR”), ERPA is the data controller of personal data processed via this website.

What personal data we collect

We only collect personal data that you voluntarily provide when contacting ERPA via:

  • the website contact form; or
  • email correspondence.

The personal data processed may include:

  • First name and last name
  • Company or organisation name
  • Email address
  • Message content

We do not intentionally collect special categories of personal data.

Purpose of processing

Personal data submitted via this website is processed exclusively for the purpose of responding to enquiries sent to ERPA.

We do not use personal data for marketing, newsletters, profiling, or any other unrelated purposes.

Legal basis for processing

The processing of personal data is based on ERPA’s legitimate interest within the meaning of Article 6(1)(f) GDPR, namely the need to respond to enquiries related to the association and its activities.

Recipients of personal data

Personal data is accessed only by ERPA Board members, acting in their official capacity on behalf of the association.

Enquiries submitted via the website or by email are received at: communications@erpa.eu

Personal data is not shared with third parties.

Data retention

Personal data is retained only for as long as necessary to respond to the relevant enquiry and any related follow‑up correspondence.

Once the communication has been completed, personal data is deleted or anonymised, unless a longer retention period is required by law.

Cookies

This website does not use cookies or similar tracking technologies.

Transfers outside the EU/EEA

Personal data processed via this website is not transferred outside the European Union or the European Economic Area.

Your rights

Under the GDPR, you have the following rights:

  • right of access;
  • right to rectification;
  • right to erasure;
  • right to restriction of processing;
  • right to object to processing.

To exercise your rights, you may contact ERPA at: communications@erpa.eu

You also have the right to lodge a complaint with the competent supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

Changes to this Privacy Policy

ERPA may update this Privacy Policy from time to time. Any changes will be published on this website together with an updated revision date.

Last updated: 11 May 2026