Legal · Privacy
We collect what a file needs. This page says who else sees it.
Preparing an EPR registration means sending a company’s details to a national register, in that company’s name. That is what this data is for, and it is the only reason we ask for any of it.
Draft · not published
One company decides what happens to your data.
The company named on the legal notice decides what happens to the data described here: To be completedlegal name of the publisher, at To be completedregistered office.
Data requests go to one address, and a person answers them:
To be completedthe address a data request goes to
This page is written to the General Data Protection Regulation — Regulation (EU) 2016/679.
We collect what a register asks for.
Everything below is asked for because a register asks for it. The clearest case is packaging weight: a register wants weight per material, so we ask for weight per material, and not for a total that we would have to guess our way back from.
- Company identity
- Legal name, country of establishment, registration number, and your VAT or local tax number.
- Where you sell
- Every country you ship to, including the ones you sell little in. Most obligations start at the first unit placed on the market.
- How you sell
- Marketplace, your own store, a local reseller, or a mix. This is what decides who carries the obligation.
- What you ship
- Packaging, WEEE, batteries, textiles. Each stream is filed separately, with its own register and its own scheme.
- Packaging and product data
- Weight per material, per country, over a year. Cardboard, plastic, glass, metal and wood counted apart, not as one total.
- Documents
- Your company registration extract, and any form a scheme requires signed. The vault names each one and its state, so nothing is outstanding without you knowing.
Two more, which come from you rather than from a register: the answers you give the free scope check, and the email address you ask us to send its result to. Neither needs an account, and the scope check asks for no password.
And what you write to us. A message about a file stays attached to that file.
Everything we hold has one reason to be here.
Four reasons, and nothing is held for a fifth:
- To work out what you owe. The scope check turns your answers into an indicative map of country and stream.
- To write you a quote. A person reads the answers first — that is why an answer takes hours rather than seconds.
- To prepare and submit your files. This is the part that leaves us, and it goes where the next section says.
- To hold your calendar. Each country sets its own declaration date, and a missed one costs money.
Which legal basis covers which of those four is a reading of the law, not a writer’s call:
To be completedthe basis we rely on for each purpose
Your file goes to the register and the scheme.
Your file goes to the register and the scheme of the country it concerns — MASE, CONAI, MITECO, Ecoembes, APA, SILiAmb, EDM register, EAK, VKS, EPRiBEL, Fost Plus, Valipac, Recupel, Bebat, ADEME, SYDEREP, Refashion, ZSVR, LUCID, Stiftung EAR, Rijkswaterstaat, Verpact, National (W)EEE Register, Stichting Batterijen, UPV Textiel, Mazowieckie Marshal, BDO, EOAN and EMPA — in your name. That transfer is not a side effect of the service, it is the service, and a registration that stayed with us would be worth nothing.
We do not sell data. We do not send anything to a marketplace on your behalf. Nothing about you is passed to another seller, and there is no advertising network on this site to pass it to.
Who else touches the data on our behalf — hosting, email, storage, support — is a list that has to be exact, and one of its entries is still an open decision:
To be completedthe processors that handle your data for us
We name where your data sits.
Where the site is served from is on the legal notice: To be completedname of the company that hosts this site, at To be completedaddress of the host.
Every email we send already carries a line about servers in the European Union and encryption in transit and at rest. This page does not repeat that line until it has been checked against what is actually running — a security claim that nobody verified is the kind of sentence that only gets read after something has gone wrong.
To be completedthe security measures we can state
To be completedwhether anything leaves the EU, and what covers it
We say how long we keep each thing.
The session that keeps you signed in and protects submitted forms lasts 2 hours. The cookies page describes it.
Accounts, country files, document versions, invoices, agreements and their audit evidence are now stored in the dashboard. Clean business files stay untouched while the legally required retention periods are still being validated. Only abandoned uploads, malicious quarantine objects and expirable technical deduplication records follow a scheduled lifecycle.
The exact business retention periods remain an open legal fact and will be published here before any scheduled business-data purge is enabled:
To be completedhow long we keep each of them
You can ask what we hold, and we answer.
Under the GDPR you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or to stop a particular use, and ask for it in a portable form. You can also object to a use we have based on a legitimate interest.
You ask at the address in section 01, and a person answers — the same person who would have prepared your file. If a request touches something already filed with a register, we will tell you plainly what we can undo on our side and what only that register can.
And if our answer does not satisfy you, a complaint goes above us:
To be completedthe authority a complaint goes to
Cookies have their own page.
This site sets two cookies, both of them needed to serve a page and to protect a form you post. There is no analytics, no pixel and no third-party font. The cookies page lists them one by one, read from the configuration that sets them.