General Data Protection Regulation (GDPR) uses cookies for statistics to monitor how visitors use the website. This information helps us improve the website, for example by making information clearer or making the website more user-friendly. Like any other website, we collect our visitors’ IP addresses for this purpose. These are then stored in ‘log files’. Log files are kept for 5 days on the web server so that they can be used by the web analytics program Piwik. They are then kept for another 90 days for security purposes, and they may only be consulted for this reason.

The Dutch Data Protection Authority (DPA) has measures in place to limit the traceability of visitors to our website as much as possible. Immediately after importing log files into Piwik, the last octet (group of eight bits) of each IP address is discarded. This takes place in a temporary memory, before the IP address is stored in Piwik.

We collect the following data in Piwik:

  • devices and software used (devices, browsers and operating system)
  • links used to reach our website
  • links used within the website

Piwik retrieves this data from the log files on the web server. These log files are kept in the Piwik database for 31 days, and are then deleted. All that remains is a single, aggregated log file, which provides an annual report on the site’s web traffic.

We never provide personal data to third parties unless we have to do so in order to report a criminal offence.

Telecommunications Act – cookies for web analytics

In general, websites must ask visitors for permission to use cookies. However, the Telecommunications Act makes an exception for cookies that are not privacy-sensitive, for example cookies that track visitor numbers. No visitor permission is required for cookies that have little or no impact on privacy. These are often cookies that make a website work better. All our analytic cookies fall into this category.