Your data.
Our restraint.

Governance, applied to ourselves.

Privacy is not the absence of data. It is conscious choices, transparently documented. We only measure what we actually use to improve the site — and you decide whether you participate.

• 01ProportionalOnly data we use to make decisions. Nothing more.
• 02Consent as foundationAnalytics are only activated after your explicit choice.
• 03No advertising economyNo data sold to third parties. Marketing pixels only after explicit consent, inactive today.
• 04Transparently documentedEvery processor, every purpose, every retention period. Below and per category in your cookie preferences.

Four categories, transparent per component.

What we load today, what is prepared, and to what extent. The choices you see here are reflected in your cookie preferences.

The minimum the site needs to work.

Without these, the site cannot be served, no language can be selected, no session can be maintained.

InfrastructureCloudflare hosting & geo-routing

Page delivery, DDoS protection and edge cache. We do not place cookies and store no personal data.

Analytics (cookieless)Cloudflare Web Analytics

Aggregated page visits without cookies. Not subject to consent under the GDPR because no individual tracking takes place.More information →

Language preferenceOne functional cookie: NEXT_LOCALE

A single cookie with the value "nl" or "en", valid for one year. Read by our edge router to serve you the correct language version on your next visit. No personal data, no IP addresses, no third parties.Removable via your browser settings, at any time.

Language detectionAutomatic language detection

On your first visit, our edge router reads the Accept-Language header of your browser and uses a Cloudflare geo indicator if needed. Not stored, not logged, not shared.

Two tools that complement each other.

Activated only after you choose in the banner or cookie preferences. Text input is masked in both tools.

PostHogPostHog (EU)

Page analytics: which pages are visited, where visitors get stuck, how long sessions last. Hosted in the European Union.Retention: maximum twelve months.

Microsoft ClarityMicrosoft Clarity

In addition to PostHog: heatmaps and anonymized session recordings. Processing by Microsoft Corporation under Standard Contractual Clauses.Retention: maximum thirteen months (Microsoft default).

Who processes what, and where.

Under the GDPR, we are responsible for your data. When we have parts of it processed by others, you can read here who and for what purpose.

Four fields, one purpose.

When you fill in the contact form, we process only the following data — nothing more, nothing less.

This data is sent via a secure connection to our infrastructure (via Cloudflare Workers). We use this information exclusively to contact you and process your request.

Four rights. Without conditions.

Under the GDPR you have concrete rights regarding your data. We honour these rights — without forms in triplicate.

• 01Right to accessKnow what data we hold about you.
• 02Right to correctionHave incorrect data amended.
• 03Right to deletionHave your data permanently erased.
• 04Right to objectObject to the processing of your data.

As short as possible, as long as necessary.

We retain contact details for as long as necessary to handle your request, and thereafter for a maximum of twelve months for reasonable follow-up. After that they are deleted from our systems.

Want earlier deletion? Send one email and it is arranged — within five working days, with confirmation.

Unclear? Write to us directly.

For questions about this policy, requests regarding your data, or when something is not right — write to us. We respond personally.