Privacy statement

Last updated: September 2026

This is a translation of the Dutch original. In the event of any discrepancy between this translation and the Dutch text, the Dutch version prevails.

In this privacy statement, we explain which personal data RAP processes, why we do so, with whom we share data, how long we keep it and what rights you have.

1. Who is responsible?

RAP Elektrische Fietsen, trading under the name RAP Webshop, is the controller for the personal data described in this privacy statement. RAP is located at Dr. Hub van Doorneweg 157-12, 5026 RC Tilburg and is registered with the Dutch Chamber of Commerce under number 51436701.

You can send questions about privacy to info@rap-webshop.nl or ask them by phone on 013-2032048.

2. What personal data do we process?

We only process personal data that is necessary for our webshop, services, marketing and administration. Depending on your contact with us, this includes:

• name, address, e-mail address and telephone number;
• order, payment, invoice, shipping and return data;
• correspondence and data from contact, service or warranty requests;
• product and bicycle data, such as date of purchase, invoice number, serial number, barcode or frame number;
• photos, documents and other information you provide to us via a form, e-mail or WhatsApp;
• technical and usage data, such as IP address, browser and device data, cookie identifiers and data about the use of our website.

Our services are not intended for children under the age of 16. If you believe we have received data from a minor without the required consent, please contact us. We will assess the request and delete the data where legally required.

3. For what purposes and on what legal basis do we use data?

We only process personal data when there is a valid legal basis for this under the GDPR. The main processing activities are:

• performance of the agreement: for ordering, payment, delivery, returns, warranty, customer service, technical advice and support;
• legal obligations: in particular for our tax and administrative retention obligations;
• legitimate interest: for securing our website and systems, fraud prevention, improving our services, careful relationship management, analysing the use of our website and collecting customer reviews, to the extent that your privacy interest does not outweigh this;
• consent: for newsletters, marketing, remarketing and non-essential cookies where consent is legally required. You can withdraw your consent at any time.

For service requests, we may ask for product or bicycle data, photos and technical information in order to assess the problem, determine the right solution and handle any warranty or follow-up service.

4. Marketing, analytics and profiling

If you sign up for a newsletter or other commercial messages, we use your contact details for that purpose. Every newsletter contains an option to unsubscribe easily.

With your consent, we may use Google Analytics, Google Ads and similar services for statistics, conversion tracking, remarketing and displaying or evaluating relevant advertisements. Online identifiers and data about website use may be processed in this context. This processing may lead to limited profiling for advertising purposes, but RAP does not take decisions based solely on automated processing that have significant or similar effects for you.

In addition, with your consent we use Microsoft Clarity to see how visitors use our website, so that we can improve it. Clarity records how you navigate the website, such as clicks, scrolling and mouse movements, and uses this to create session recordings and heatmaps. Online identifiers, device and browser data and data about website use are processed in this context. We do not load Clarity without your consent.

5. How long do we keep data?

We do not keep personal data longer than necessary for the purpose for which it was collected. Data that forms part of our tax records is in principle kept for 7 years. Order, service, warranty and customer contact data is kept for as long as reasonably necessary for the performance of the agreement, warranty, service, disputes or follow-up questions. Data for newsletters is kept until you unsubscribe. Cookie and consent data is kept in accordance with the periods stated in the cookie settings. After that, we delete or anonymise the data, unless a legal obligation requires longer retention.

6. With whom do we share personal data?

We never sell personal data. We only share data that is necessary with parties that help us provide our services. These include:

• carriers, such as PostNL and DPD;
• payment providers and banks;
• accounting and administrative service providers, including SnelStart;
• hosting, webshop, e-mail, security and other IT service providers;
• Google for website analytics, conversion tracking and advertising, where consent has been given for this;
• Microsoft for insight into how our website is used (Microsoft Clarity), where consent has been given for this;
• Meta/WhatsApp when you communicate with us via WhatsApp;
• WebwinkelKeur for review invitations and the verification of customer reviews;
• professional advisers and government authorities where this is necessary or legally required.

Parties that process data exclusively on our behalf may only use it for the agreed purpose and must take appropriate security measures.

7. Transfers outside the European Economic Area

Some service providers, including Google, Microsoft and Meta/WhatsApp, may process personal data in countries outside the European Economic Area. Where no adequacy decision applies to such a country, we ensure appropriate safeguards where required, such as the standard contractual clauses adopted by the European Commission. You can contact us for more information about the applicable safeguards.

8. Reviews via WebwinkelKeur

We collect customer reviews via WebwinkelKeur. When we invite you to post a review, we share the necessary data for this purpose, such as your name, e-mail address and, where necessary, your order or customer number, with WebwinkelKeur. We do this on the basis of our legitimate interest in assessing the quality of our services and collecting the experiences of genuine customers. You can object to further review invitations at any time.

If you leave a review, WebwinkelKeur processes the data you provide there and the name you choose may be published with the review. WebwinkelKeur may engage sub-processors for its services. The privacy policy of WebwinkelKeur also applies to the processing by WebwinkelKeur.

9. Contact via WhatsApp

When you contact us via WhatsApp, we process your telephone number, profile data, messages and any photos or documents you send in order to answer your question and provide service. WhatsApp and Meta also process personal data in accordance with their own privacy policies. Using WhatsApp is voluntary; you can also reach RAP by e-mail, by phone or via the contact form.

10. Cookies

Our website uses essential cookies to function properly. Analytical and marketing cookies are only used to the extent permitted by law and, where required, after you have given your consent.

In the cookie settings on our website, you can see which categories of cookies are used, for what purposes, by which parties and for what periods. There you can change your preferences or withdraw your consent at any time. You can also delete or block cookies via your browser.

View or change cookie preferences: rap-webshop.nl

11. Security

We take appropriate technical and organisational measures against loss, misuse, unauthorised access, unwanted disclosure and unauthorised alteration of personal data. Access is restricted to persons and service providers who need the data for their work. If you suspect a security problem, please report it via info@rap-webshop.nl.

12. Your privacy rights

To the extent that the GDPR grants you this right in your situation, you can ask us for access to, rectification, erasure, restriction of processing or portability of your personal data. You can object to processing based on a legitimate interest and withdraw consent previously given. Withdrawal does not affect the lawfulness of the processing before the withdrawal.

You can send a request to info@rap-webshop.nl. We may ask for additional information if this is necessary to verify your identity, and we will respond within the statutory period. If a redacted copy of an identity document is genuinely necessary, we will ask you to make irrelevant data illegible, including your passport photo, MRZ, document number and BSN (citizen service number).

13. Automated decision-making and complaints

RAP does not take decisions that have significant or similar effects for you and that are based solely on automated processing.

If you have a complaint about our processing of personal data, please contact us first. You can also make use of the complaint or mediation options offered by WebwinkelKeur. You always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

14. Changes

We may amend this privacy statement when our services, working methods or legislation change. The most recent version is published on rap-webshop.nl.