Privacy policy

Tapro, with its registered office at Strangeweg 5, 7731 GV Ommen, The Netherlands, collects and processes personal data in accordance with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act.

If you have any questions about this privacy policy or wish to exercise your rights, please contact us at support@tapro.com.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not use our services. Please note that if your employer provides us with your personal data, they are our customer and not you.

This privacy policy may be updated from time to time. You are responsible for checking this privacy policy periodically for any changes.

We process your personal data for the following reasons:

• You provided it to us directly;
• Your employer or a colleague provided it when creating an account for you on our platform.

In all cases, Tapro is the data controller of your personal data.

We only share your data when strictly necessary and under appropriate safeguards:

• Service providers (cloud infrastructure, analytics tools, email delivery services) under strict data processing agreements;
• Authorities if legally required under Dutch or EU law;
• Business successors (in case of a merger, acquisition, or transfer of assets).

We do not sell or rent your personal data to any third party.

If we transfer data outside the EU, we ensure adequate protection through Standard Contractual Clauses (SCCs) or ensure the receiving country provides adequate protection.

As a data subject, you have the following rights:

• Right to access – request a copy of your personal data;
• Right to rectification – correct inaccurate or incomplete data;
• Right to erasure – request deletion of your data ("right to be forgotten");
• Right to restrict processing – limit how your data is used;
• Right to object – object to processing based on legitimate interest;
• Right to data portability – receive your data in a machine-readable format;
• Right to withdraw consent – withdraw consent at any time (for example, marketing preferences).

To exercise these rights, please contact us at support@tapro.com. We will respond within 14 days.

We retain your data as long as necessary to:

• Deliver our services;
• Comply with legal and contractual obligations;
• Resolve disputes and enforce agreements.

Once retention periods expire, we securely delete or anonymize your data.

We take data protection seriously and implement appropriate technical and organizational measures:

• SSL encryption for all data in transit;
• Role-based access control;
• Logging, monitoring, and audit trails;
• Regular security updates and access reviews.

Our team is trained in data protection practices, and we work with vetted service providers.

We use cookies and similar technologies to:

• Authenticate users;
• Analyze usage and improve performance;
• Enable functionality and personalization.

You can manage cookie preferences through your browser settings. For more details, see our Cookie Policy.

Our services are intended for users aged 21 and above. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately so we can delete it.