{ "meta": { "title": "mijnoverheid.us — raw scan data", "description": "Volledige scan-output van BeforeYouMick over Nederlandse overheidssites. Open data onder CC0.", "scan_runs": [ "2026-05-04_overheid_v3.3.2", "2026-05-05_overheid_aanvulling_v3.3.2" ], "scanner": "BeforeYouMick v3.3.2", "generated": "2026-05-05T15:44:32+00:00", "total_sites": 536, "total_findings": 1629, "severity_breakdown": { "kritiek": 385, "ernstig": 1000, "let_op": 244 }, "schoon": 40, "license": "CC0 1.0 Universal — Public Domain Dedication", "license_url": "https://creativecommons.org/publicdomain/zero/1.0/", "source": "https://mijnoverheid.us/scan-data.json", "methodologie": "https://mijnoverheid.us/over", "auteur": "Mick Beer", "checksum_sha256_self": "e3db4d59d19d78165155a9ca13b905ccd2eba647088ab4fb9acb5a722e6b4ec8" }, "sites": [ { "domain": "2todrive.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "5minutenai.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "a2vonderenkerensheide.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.767df273-cf11-4d23-a014-3462191a3556.e84a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.767df273-cf11-4d23-a014-3462191a3556.e84a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "aanbiedersmedicijnen.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.03d0d7f4-4d40-4f52-9d4a-acc5174c3094.323e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.03d0d7f4-4d40-4f52-9d4a-acc5174c3094.323e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "aandeslagmetdeomgevingswet.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 8, "severity_counts": { "kritiek": 2, "ernstig": 5, "let_op": 1 }, "vendors_geclassificeerd": [ ".iplo.nl", "Google Analytics", "Google Tag Manager", "Piwik PRO", "Siteimprove Analytics", "iplo.nl" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": ".iplo.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_MNGT91YQGE", "vendor": ".iplo.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn, blijft na weigeren" }, { "name": "_pk_id.e12f181f-2c7e-4196-a257-715583535526.ccec", "vendor": "iplo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "_pk_ses.e12f181f-2c7e-4196-a257-715583535526.ccec", "vendor": "iplo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "iplo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "iplo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "iplo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" } ], "trackers": [ { "url_pattern": "6257784.global.siteimproveanalytics.io", "vendor": "Siteimprove Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-MNGT91YQGE&cx=c>m=4e64t1", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-M2HRZJG", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "siteimproveanalytics.com", "vendor": "Siteimprove Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "global.frcapi.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "iplo.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 7 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "7 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".iplo.nl", "iplo.nl" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "3 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "7 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "aaninhetdonker.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.bdb22cf9-5624-4cd4-9142-de99e876e220.934e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.bdb22cf9-5624-4cd4-9142-de99e876e220.934e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "aanpaklerarentekort.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.df2e97f2-00af-4775-8028-53f8196691b3.0100", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.df2e97f2-00af-4775-8028-53f8196691b3.0100", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "acceleratethechange.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 2 }, "vendors_geclassificeerd": [ ".nlplatform.com", "Piwik PRO", "nlplatform.com" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.50b56ef7-4f99-48ad-b1b0-52a9d483e97d.f7e9", "vendor": ".nlplatform.com", "lifetime": "1 jaar", "lifetime_days": 392, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_pk_ses.50b56ef7-4f99-48ad-b1b0-52a9d483e97d.f7e9", "vendor": ".nlplatform.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "nlplatform.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "nlplatform.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "nlplatform.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".nlplatform.com", "nlplatform.com" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "ads-noord-holland.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "adviescommissieweigerendeobservandi.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.75c04b2c-e0ab-4a57-a923-e5f8ba9c718d.cf10", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.75c04b2c-e0ab-4a57-a923-e5f8ba9c718d.cf10", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "aeriusproducten.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.6c025b7d-7c16-4815-b336-e87f61a6d080.5fd3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.6c025b7d-7c16-4815-b336-e87f61a6d080.5fd3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "agendastad.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Google Maps" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "maps.googleapis.com", "vendor": "Google Maps", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Maps" ], "mode": "noop" } ] }, { "domain": "agroberichtenbuitenland.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.1e2d9d9a-bc6f-4832-bd3d-050b1594af86.05c1", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.1e2d9d9a-bc6f-4832-bd3d-050b1594af86.05c1", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "aivd.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.a9e0c3d2-5d67-4938-b3df-389040c8b98d.cb06", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.a9e0c3d2-5d67-4938-b3df-389040c8b98d.cb06", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "algemenebestuursdienst.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.e4cd4a27-250c-4204-b8fa-e54607c56da7.d947", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.e4cd4a27-250c-4204-b8fa-e54607c56da7.d947", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "allesoverbiologisch.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.d3e655a5-1440-4805-9fde-18a69610dcb5.fe4e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.d3e655a5-1440-4805-9fde-18a69610dcb5.fe4e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "ambtelijkvakmanschap.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.a6d7b3bc-b78a-43a9-add2-a3aa3b1b6f78.1324", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.a6d7b3bc-b78a-43a9-add2-a3aa3b1b6f78.1324", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "amsterdam.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 2, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO", "Usabilla" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.68ea0831-286e-439e-a46b-42435ee6bc83.cdf7", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_id.f558164e-e388-49e0-864e-5f172552789c.cdf7", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.68ea0831-286e-439e-a46b-42435ee6bc83.cdf7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.f558164e-e388-49e0-864e-5f172552789c.cdf7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "dap.amsterdam.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" }, { "url_pattern": "w.usabilla.com", "vendor": "Usabilla", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "kritiek", "type": "first-party-cname-tracker", "wetsartikel": "Tw art. 11.7a + AVG art. 5 (transparantie)", "samenvatting": "1 first-party-gehoste tracker(s) geladen vóór consent — gepresenteerd als eigen infrastructuur maar daadwerkelijk tracking-software", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Usabilla" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "amsterdamairportcity.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "arboportaal.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.54f65f24-96bd-4edb-8674-a9d8df5dd8a0.2528", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.54f65f24-96bd-4edb-8674-a9d8df5dd8a0.2528", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "asbestvrijdak.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4f620a13-d606-403a-90b9-5779aeff4a0b.e4b6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.4f620a13-d606-403a-90b9-5779aeff4a0b.e4b6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "atkm.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.306031bc-ec01-4fd4-8ca4-0822dc360400.17fa", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.306031bc-ec01-4fd4-8ca4-0822dc360400.17fa", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "auditdienstrijk.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.1e380ef6-5c2c-4a82-84b7-45eed7f8f4a5.3d95", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.1e380ef6-5c2c-4a82-84b7-45eed7f8f4a5.3d95", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "autoriteitnvs.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.7a37b8db-ffcd-4655-8dc8-a395871d7942.9372", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.7a37b8db-ffcd-4655-8dc8-a395871d7942.9372", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "bankdataretrievalportal.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "basisinformatie-overstromingen.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "basisregistratieondergrond.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 1, "ernstig": 6, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.fcac735c-ac05-4aea-953b-440961ac7efc.fd10", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_pk_ses.fcac735c-ac05-4aea-953b-440961ac7efc.fd10", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "1 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "bcld-config.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "bedrijvenbeleidinbeeld.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.9aa34f5f-26e6-47de-9c1b-a2ab0be61696.8d5a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.9aa34f5f-26e6-47de-9c1b-a2ab0be61696.8d5a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "beheerdetoekomst.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.58c81ced-b8bc-49c4-a5ce-98c5c05f3738.7360", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.58c81ced-b8bc-49c4-a5ce-98c5c05f3738.7360", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "belangenbehartigerbt.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.e94afa29-6333-4c99-a738-6ff45420b8f4.a822", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.e94afa29-6333-4c99-a738-6ff45420b8f4.a822", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "belastingdienst-cn.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.c9c8d5ed-9bfe-4f35-a2d6-c47d9885f640.8c29", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.c9c8d5ed-9bfe-4f35-a2d6-c47d9885f640.8c29", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "belastingdienst.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "AB Tasty" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 7, "functional": 0 }, "cookies": [ { "name": "ABTasty", "vendor": null, "lifetime": "1 jaar", "lifetime_days": 395, "party": null, "classified": false, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "ABTastyData", "vendor": null, "lifetime": null, "lifetime_days": null, "party": null, "classified": false, "kind": "tracking", "context": "in localStorage" }, { "name": "ABTastySession", "vendor": null, "lifetime": null, "lifetime_days": null, "party": null, "classified": false, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "AMCV_6B4320E8637BE4D40A495FD6%40AdobeOrg", "vendor": null, "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": false, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "AMCVS_6B4320E8637BE4D40A495FD6%40AdobeOrg", "vendor": null, "lifetime": null, "lifetime_days": null, "party": null, "classified": false, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "s_cc", "vendor": null, "lifetime": null, "lifetime_days": null, "party": null, "classified": false, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "s_ecid", "vendor": null, "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": false, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "ariane.abtasty.com", "vendor": "AB Tasty", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "dcinfos-cache.abtasty.com", "vendor": "AB Tasty", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "try.abtasty.com", "vendor": "AB Tasty", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "6 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "AB Tasty" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "localstorage-tracking", "wetsartikel": "Tw art. 11.7a (analogie)", "samenvatting": "1 tracking-sleutel(s) in localStorage — kan cookie-walls omzeilen", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "beleefdenationaleparken.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 1, "ernstig": 4, "let_op": 2 }, "vendors_geclassificeerd": [ ".nationaleparken.nl", "Adobe Typekit", "Campaign Monitor", "Cookiebot", "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": ".nationaleparken.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_ga_ZMXDBVJY1S", "vendor": ".nationaleparken.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" } ], "trackers": [ { "url_pattern": "consent.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-ZMXDBVJY1S&cx=c>m=4e64u0", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-549NX9J4", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "js.createsend1.com", "vendor": "Campaign Monitor", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "p.typekit.net", "vendor": "Adobe Typekit", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "use.typekit.net", "vendor": "Adobe Typekit", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "nationaleparken.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "2 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".nationaleparken.nl" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "2 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "8 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "bereiknu.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "bewustbodemgebruik.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Analytics", "Google reCAPTCHA" ], "cookie_counts": { "tracking_classified": 3, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google reCAPTCHA" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "bigregister.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.109330db-dfdf-4259-9348-1ceb04353269.447b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.109330db-dfdf-4259-9348-1ceb04353269.447b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "binnenvaartemissielabel.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_TKHK4Z1202", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "bio-overheid.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.32.7d56", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.32.7d56", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "matomo.cip-overheid.nl", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Matomo" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "biogrondstoffen.com", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_1J904FJC5X", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_FGJWF9X3DS", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "biotechnologie.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 0, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Cookiebot", "Google AdSense", "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "//www.googletagmanager.com/gtm.js?id=GTM-NJNWNQW", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "consent.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=AW-936930745&cx=c>m=4e64t1", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-F7TFD18LBS&cx=c>m=4e64t1", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-NJNWNQW", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "pagead2.googlesyndication.com", "vendor": "Google AdSense", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google AdSense", "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "4 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "5 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "bistrotest.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "boerenbusinessinbalans.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Font Awesome", "Typotheque" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "fonts.typotheque.com", "vendor": "Typotheque", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "use.fontawesome.com", "vendor": "Font Awesome", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "mailings.noord-holland.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "3 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "braic.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.41a95c6b-bdda-4a56-b4d3-0e55429c635b.5fa1", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.41a95c6b-bdda-4a56-b4d3-0e55429c635b.5fa1", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "bronbeek.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.a2b439ca-07fc-4c0d-97d4-8403c3465e25.3cf6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.a2b439ca-07fc-4c0d-97d4-8403c3465e25.3cf6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "brzoplus.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 1, "ernstig": 6, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO", "seveso-plus.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.944ffab7-88ea-4d3e-8442-8c04860a6c00.7837", "vendor": "seveso-plus.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "_pk_ses.944ffab7-88ea-4d3e-8442-8c04860a6c00.7837", "vendor": "seveso-plus.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "seveso-plus.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "seveso-plus.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "seveso-plus.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "seveso-plus.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "seveso-plus.nl" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "2 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "buitenwoel-veendam.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "bureauncdr.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.3f0769f4-e7ea-437d-b901-f8b1327c4da4.e7a6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.3f0769f4-e7ea-437d-b901-f8b1327c4da4.e7a6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "bureautoetsinginvesteringen.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.119fe3df-b72e-449c-bf4b-c2fab44cea55.0f2e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.119fe3df-b72e-449c-bf4b-c2fab44cea55.0f2e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "bvacommunity.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "c2coe.org", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "cabinetspecialenvoy.com", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.860205af-d58e-4217-b5c4-ab06d4dc529e.6ba2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.860205af-d58e-4217-b5c4-ab06d4dc529e.6ba2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "campagnetoolkits.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.56801db2-e7c0-407b-84da-c298e4ebf33a.9868", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.56801db2-e7c0-407b-84da-c298e4ebf33a.9868", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "cannabisbureau.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.c58a76e4-6abc-4955-909e-b9bf019280f4.18bc", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.c58a76e4-6abc-4955-909e-b9bf019280f4.18bc", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "cbpbes.com", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Twitter/X Short URL Pixel" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "//seal.digicert.com/seals/cascade/?tag=NnewhCQN&referer=cbpb", "vendor": "Twitter/X Short URL Pixel", "classified": true, "kind": "tracker", "context": "in HTML" } ], "findings": [ { "severity": "ernstig", "type": "tracking-pixel", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracking pixel(s) gedetecteerd in HTML — laden zonder interactie", "vendors_betrokken": [ "Twitter/X Short URL Pixel" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "cbs.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 2 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.7cd61318-6d21-4775-b1b2-64ec78d416e1.bdac", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.7cd61318-6d21-4775-b1b2-64ec78d416e1.bdac", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "cbs.containers.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "cbs.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "2 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "cbsinuwbuurt.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Piwik PRO", "www.cbs.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.7cd61318-6d21-4775-b1b2-64ec78d416e1.bdac", "vendor": "www.cbs.nl", "lifetime": "1 jaar", "lifetime_days": 392, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_pk_ses.7cd61318-6d21-4775-b1b2-64ec78d416e1.bdac", "vendor": "www.cbs.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "www.cbs.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "www.cbs.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "www.cbs.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "cbs.containers.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "cbs.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "2 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "www.cbs.nl" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "centralecommissiedierproeven.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.b174d91d-f1d0-4a12-82b2-5ab950814786.9efd", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.b174d91d-f1d0-4a12-82b2-5ab950814786.9efd", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "checkklikbespaar.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 2, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.1.93fe", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.1.93fe", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "checkklikbespaar.nl", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "kritiek", "type": "first-party-cname-tracker", "wetsartikel": "Tw art. 11.7a + AVG art. 5 (transparantie)", "samenvatting": "1 first-party-gehoste tracker(s) geladen vóór consent — gepresenteerd als eigen infrastructuur maar daadwerkelijk tracking-software", "vendors_betrokken": [ "Matomo" ], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "cibbrina.eu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 9, "severity_counts": { "kritiek": 2, "ernstig": 4, "let_op": 3 }, "vendors_geclassificeerd": [ ".youtube.com", "Amazon AWS", "Cloudflare", "Google", "Google APIs", "Google Ads", "Google Analytics", "Google Fonts/CDN", "Google Tag Manager", "YouTube static" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_3GFBZ2GE1S", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "VISITOR_INFO1_LIVE", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "VISITOR_PRIVACY_METADATA", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "YSC", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" } ], "trackers": [ { "url_pattern": "cdnjs.cloudflare.com", "vendor": "Cloudflare", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "google.com", "vendor": "Google", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googleads.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick, blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=GT-PBNXXMG6", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "i.ytimg.com", "vendor": "YouTube static", "classified": true, "kind": "functional", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "jnn-pa.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "s3.amazonaws.com", "vendor": "Amazon AWS", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "static.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick, blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "5 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads", "Google Analytics", "Google Tag Manager", "YouTube static" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "3 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".youtube.com" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "11 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "weak-referrer-policy", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Referrer-Policy 'no-referrer-when-downgrade' deelt mogelijk URL-data met derde partijen", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "cibg.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.bfc518f2-debe-458d-9fb1-3e593ac817aa.2f07", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.bfc518f2-debe-458d-9fb1-3e593ac817aa.2f07", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "cip-overheid.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 2, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.31.a17a", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.31.a17a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "matomo.cip-overheid.nl", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "kritiek", "type": "first-party-cname-tracker", "wetsartikel": "Tw art. 11.7a + AVG art. 5 (transparantie)", "samenvatting": "1 first-party-gehoste tracker(s) geladen vóór consent — gepresenteerd als eigen infrastructuur maar daadwerkelijk tracking-software", "vendors_betrokken": [ "Matomo" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "circulairambachtscentrum.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 0, "ernstig": 4, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.203dfaf0-588e-4a32-868a-532147bb54a0.310a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig)" }, { "name": "_pk_ses.203dfaf0-588e-4a32-868a-532147bb54a0.310a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "no-refuse-button", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "Geen 'weigeren'-knop kunnen vinden ondanks aanwezige banner — mogelijk dark pattern of obscured opt-out", "vendors_betrokken": [], "mode": "refuse-detection" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "circulairmaterialenplan.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 2, "ernstig": 5, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.66398281-6c45-4078-a768-29b503679a7b.19c7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "_pk_ses.66398281-6c45-4078-a768-29b503679a7b.19c7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "global.frcapi.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "2 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "circularandfairictpact.com", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 0, "ernstig": 4, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO", "YouTube", "YouTube static" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.8363c09a-2835-4a55-b131-f0cede4a3559.dea9", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig)" }, { "name": "_pk_ses.8363c09a-2835-4a55-b131-f0cede4a3559.dea9", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig)" } ], "trackers": [ { "url_pattern": "i.ytimg.com", "vendor": "YouTube static", "classified": true, "kind": "functional", "context": "vóór consent" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" }, { "url_pattern": "youtube-nocookie.com", "vendor": "YouTube", "classified": true, "kind": "tracker", "context": "vóór consent, privacy mode" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO", "YouTube", "YouTube static" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "no-refuse-button", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "Geen 'weigeren'-knop kunnen vinden ondanks aanwezige banner — mogelijk dark pattern of obscured opt-out", "vendors_betrokken": [], "mode": "refuse-detection" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "ckmbo.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "climate4impact.eu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo Cloud" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "cdn.matomo.cloud", "vendor": "Matomo Cloud", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Matomo Cloud" ], "mode": "noop" } ] }, { "domain": "clinicaltrialregister.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "cocreatesa.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "codexalimentarius.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.98909572-eeb5-490b-a008-277cffdb2cf7.8b34", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.98909572-eeb5-490b-a008-277cffdb2cf7.8b34", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "collegevanrijksadviseurs.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.aff893bb-7a16-4a04-bfbf-b430aa692c99.7e02", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.aff893bb-7a16-4a04-bfbf-b430aa692c99.7e02", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "commabz.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "commissiebbv.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "commissiemijnbouwschade.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.a2b095d2-aff7-4d72-be0c-0991ff1c5aa1.c12c", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.a2b095d2-aff7-4d72-be0c-0991ff1c5aa1.c12c", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "commit2data.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "communicatiekompas.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.d0d73b6d-19e9-47c0-b1ed-8cb2774c1cf5.9b42", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.d0d73b6d-19e9-47c0-b1ed-8cb2774c1cf5.9b42", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "communicatierijk.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.1fa5688e-8b54-45cb-b953-6098aeec392a.05a0", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.1fa5688e-8b54-45cb-b953-6098aeec392a.05a0", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "community-gatewayreview.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Ads", "Google Analytics", "Google Analytics 4", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_9PC8Q3WQ38", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_J6M044Q2W1", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat_UA-194445443-1", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.analytics.google.com", "vendor": "Google Analytics 4", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "stats.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "5 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads", "Google Analytics", "Google Analytics 4", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "cparegister.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "cruksregister.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "kansspelautoriteit.containers.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "kansspelautoriteit.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "2 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "ctpveldzicht.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.998d9446-e71f-476b-a97a-2d8132d061d5.ba07", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.998d9446-e71f-476b-a97a-2d8132d061d5.ba07", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "cultureelerfgoed.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.e960e0c5-7d94-41d1-a4f6-21ca7299d864.cbee", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.e960e0c5-7d94-41d1-a4f6-21ca7299d864.cbee", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "cultuurparticipatie.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 8, "severity_counts": { "kritiek": 2, "ernstig": 6, "let_op": 0 }, "vendors_geclassificeerd": [ ".linkedin.com", "Cookiebot", "Facebook Pixel", "Google AdSense", "Google Analytics", "Google Tag Manager", "LinkedIn", "LinkedIn Ads", "LinkedIn Insight", "LinkedIn Pixel" ], "cookie_counts": { "tracking_classified": 3, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "bcookie", "vendor": ".linkedin.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "li_gc", "vendor": ".linkedin.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "lidc", "vendor": ".linkedin.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" } ], "trackers": [ { "url_pattern": "consent.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://px.ads.linkedin.com/collect/?pid=3616940&fmt=gif", "vendor": "LinkedIn Pixel", "classified": true, "kind": "tracker", "context": "in HTML" }, { "url_pattern": "https://snap.licdn.com/li.lms-analytics/insight.min.js", "vendor": "LinkedIn", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.facebook.com/tr?id=2514555625472827&ev=PageView&", "vendor": "Facebook Pixel", "classified": true, "kind": "tracker", "context": "in HTML" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=AW-629200910&cx=c>m=4e64u0", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-XEWXMN9PRJ&cx=c>m=4e64u0", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-WS276FG", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "pagead2.googlesyndication.com", "vendor": "Google AdSense", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "px.ads.linkedin.com", "vendor": "LinkedIn Ads", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "snap.licdn.com", "vendor": "LinkedIn Insight", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "bugherd.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fvcp.fra1.cdn.digitaloceanspaces.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "sidebar.bugherd.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 3 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "5 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google AdSense", "Google Analytics", "Google Tag Manager", "LinkedIn Ads", "LinkedIn Insight" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "3 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".linkedin.com" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-pixel", "wetsartikel": "Tw art. 11.7a", "samenvatting": "2 tracking pixel(s) gedetecteerd in HTML — laden zonder interactie", "vendors_betrokken": [ "Facebook Pixel", "LinkedIn Pixel" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "4 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "10 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "cultuursubsidie.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.df3694f2-6e24-4b6c-b718-8c14d092be04.48c1", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.df3694f2-6e24-4b6c-b718-8c14d092be04.48c1", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "dashboardduurzaamheid.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 0, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Piwik" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "matomo.wur.nl", "vendor": "Piwik", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "dashboardgroningen.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.febb814c-095a-40db-93ad-6a306995ec02.65f3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.febb814c-095a-40db-93ad-6a306995ec02.65f3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "dashboardklimaatbeleid.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piwik" ], "cookie_counts": { "tracking_classified": 4, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.305.8fe0", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_id.318.8fe0", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.305.8fe0", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.318.8fe0", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "matomo.swing.eu", "vendor": "Piwik", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" }, { "url_pattern": "matomoabf.westeurope.cloudapp.azure.com", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, ingest" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "4 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Matomo", "Piwik" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "daszogefietst.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.51a441f3-3d73-4367-8283-dafea28292c6.7385", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.51a441f3-3d73-4367-8283-dafea28292c6.7385", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "data-ecosysteem.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "dataservice.kvk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "datavoorgezondheid.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4751f253-f083-45cf-995e-a01982e27903.5b22", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.4751f253-f083-45cf-995e-a01982e27903.5b22", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "datawonen.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 8, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.57.5799", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_id.63c01057-90d2-4e8f-ae9d-80fff3009c60.5799", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_id.80.5799", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.63c01057-90d2-4e8f-ae9d-80fff3009c60.5799", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.80.5799", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "matomo.swing.eu", "vendor": "Piwik", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" }, { "url_pattern": "matomoabf.westeurope.cloudapp.azure.com", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, ingest" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "8 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Matomo", "Piwik", "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "dcc-ienw.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4bc06c29-7003-4ae3-b563-0e4d1d66359f.3422", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.4bc06c29-7003-4ae3-b563-0e4d1d66359f.3422", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "dcypher.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 2 }, "vendors_geclassificeerd": [ ".www.rvo.nl", "Piwik PRO", "www.rvo.nl" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.6019ef78-5c19-417c-adc3-a3dd550e0c0c.b4bd", "vendor": ".www.rvo.nl", "lifetime": "1 jaar", "lifetime_days": 392, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_pk_id.66bf624d-150f-45ef-b462-4b2bddfd4eba.b4bd", "vendor": ".www.rvo.nl", "lifetime": "1 jaar", "lifetime_days": 392, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_pk_ses.6019ef78-5c19-417c-adc3-a3dd550e0c0c.b4bd", "vendor": ".www.rvo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.66bf624d-150f-45ef-b462-4b2bddfd4eba.b4bd", "vendor": ".www.rvo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "www.rvo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "www.rvo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "www.rvo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "7 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".www.rvo.nl", "www.rvo.nl" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "deafsluitdijk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 8, "severity_counts": { "kritiek": 3, "ernstig": 4, "let_op": 1 }, "vendors_geclassificeerd": [ "Cloudflare", "Google APIs", "Google AdSense", "Google Ads", "Google Analytics", "Google Tag Manager", "Microsoft Clarity", "ReadSpeaker", "Vimeo" ], "cookie_counts": { "tracking_classified": 6, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_B9JRVYJFYM", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat_UA-52527105-1", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "gezet na weigeren" }, { "name": "_gcl_au", "vendor": "Google Ads", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gcl_ls", "vendor": "Google Ads", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "in localStorage" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "gezet na weigeren" } ], "trackers": [ { "url_pattern": "//www.googletagmanager.com/gtm.js?id=GTM-5DZWGCZ", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "ajax.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "cdn1.readspeaker.com", "vendor": "ReadSpeaker", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "cdnjs.cloudflare.com", "vendor": "Cloudflare", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "clarity.ms", "vendor": "Microsoft Clarity", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://scripts.clarity.ms/0.8.61/clarity.js", "vendor": "Microsoft Clarity", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.clarity.ms/tag/cdrtwd59ve?ref=gtm2", "vendor": "Microsoft Clarity", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.google-analytics.com/analytics.js", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=AW-11226290732", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-B9JRVYJFYM&cx=c>m=4e64t1", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "i.clarity.ms", "vendor": "Microsoft Clarity", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "pagead2.googlesyndication.com", "vendor": "Google AdSense", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "player.vimeo.com", "vendor": "Vimeo", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "scripts.clarity.ms", "vendor": "Microsoft Clarity", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "cookie-set-after-refuse", "wetsartikel": "AVG art. 6 — geen rechtsgrondslag", "samenvatting": "NIEUWE tracking cookie(s) gezet NA klikken op 'weigeren' — flagrant in strijd met de wet", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 1 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "7 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google AdSense", "Google Analytics", "Google Tag Manager", "Microsoft Clarity" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "6 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "localstorage-tracking", "wetsartikel": "Tw art. 11.7a (analogie)", "samenvatting": "1 tracking-sleutel(s) in localStorage — kan cookie-walls omzeilen", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "12 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "defensie.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.68444887-beba-4956-ac3a-bfad23d33955.d9e9", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.68444887-beba-4956-ac3a-bfad23d33955.d9e9", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "dekompanjie.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "delichtkogel.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 5, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.a5811462-a147-441e-b94a-755424b3c8fc.972b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_pk_ses.a5811462-a147-441e-b94a-755424b3c8fc.972b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "1 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "deltaflexjenvmobiliteitscentrum.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "dementieinkaart.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.a6e374c0-0c82-4eab-87b4-19cadf8317e3.c6d0", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.a6e374c0-0c82-4eab-87b4-19cadf8317e3.c6d0", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "demijnraad.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.3e53fce9-0a38-4489-99c9-295408d8b5f1.dce4", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.3e53fce9-0a38-4489-99c9-295408d8b5f1.dce4", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "derdekamer.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ ".youtube.com", "Google Ads", "Matomo", "YouTube static" ], "cookie_counts": { "tracking_classified": 3, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "VISITOR_INFO1_LIVE", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "VISITOR_PRIVACY_METADATA", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "YSC", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "googleads.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" }, { "url_pattern": "i.ytimg.com", "vendor": "YouTube static", "classified": true, "kind": "functional", "context": "vóór consent" }, { "url_pattern": "static.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" }, { "url_pattern": "stats.prodemos.nl", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "4 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads", "Matomo", "YouTube static" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "3 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".youtube.com" ], "mode": "noop" } ] }, { "domain": "deweekvandecirculaireeconomie.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 0, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Ads", "Google Analytics", "Google Analytics 4", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn" }, { "name": "_ga_GL9H8LQKHT", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.analytics.google.com", "vendor": "Google Analytics 4", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "stats.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads", "Google Analytics 4", "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "no-refuse-button", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "Geen 'weigeren'-knop kunnen vinden ondanks aanwezige banner — mogelijk dark pattern of obscured opt-out", "vendors_betrokken": [], "mode": "refuse-detection" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "dewolden.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 4, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager", "ReadSpeaker", "Siteimprove Analytics" ], "cookie_counts": { "tracking_classified": 6, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_D86MFVB9FQ", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_NE581T55XS", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn, blijft na weigeren" }, { "name": "_gat_gtag_UA_147065030_1", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_gat_UA-147065030-1", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "6006059.global.siteimproveanalytics.io", "vendor": "Siteimprove Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "cdn-eu.readspeaker.com", "vendor": "ReadSpeaker", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.google-analytics.com/analytics.js", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-D86MFVB9FQ&cx=c>m=4e64u0", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-NE581T55XS&cx=c>m=4e64u0", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=UA-147065030-1", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-N72RHG9", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "siteimproveanalytics.com", "vendor": "Siteimprove Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 6 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "6 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "5 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "6 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "dezi.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.b9663118-5c91-4033-99be-deb98191aa99.713b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.b9663118-5c91-4033-99be-deb98191aa99.713b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "dggf.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.c49c3289-6cf0-4221-bbed-6cbb32cd26b5.ff64", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.c49c3289-6cf0-4221-bbed-6cbb32cd26b5.ff64", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "dgv.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.082fb54f-cd87-4ca0-b85c-4c3542488432.1a78", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.082fb54f-cd87-4ca0-b85c-4c3542488432.1a78", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "dienstterugkeerenvertrek.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.2ae992e8-ce7e-4ee3-8190-1cc26f8f0a9f.4de5", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.2ae992e8-ce7e-4ee3-8190-1cc26f8f0a9f.4de5", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "diergeneeskunderegister.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.a73dc1b7-a9c9-4e6c-8087-93e5bb8cbf25.c4c6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.a73dc1b7-a9c9-4e6c-8087-93e5bb8cbf25.c4c6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "digicampus.tech", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ ".youtube.com", "Google Ads", "YouTube static" ], "cookie_counts": { "tracking_classified": 3, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "VISITOR_INFO1_LIVE", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "VISITOR_PRIVACY_METADATA", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "YSC", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "googleads.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" }, { "url_pattern": "i.ytimg.com", "vendor": "YouTube static", "classified": true, "kind": "functional", "context": "vóór consent" }, { "url_pattern": "static.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads", "YouTube static" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "3 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".youtube.com" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "digid.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 2, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.28.d667", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.28.d667", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.digid.nl", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "kritiek", "type": "first-party-cname-tracker", "wetsartikel": "Tw art. 11.7a + AVG art. 5 (transparantie)", "samenvatting": "1 first-party-gehoste tracker(s) geladen vóór consent — gepresenteerd als eigen infrastructuur maar daadwerkelijk tracking-software", "vendors_betrokken": [ "Matomo" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "digitalenoordzee.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.e57de4af-031f-4f50-9bf8-cfc057ee7d21.29a5", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.e57de4af-031f-4f50-9bf8-cfc057ee7d21.29a5", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "digitalnorthsea.eu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "digitalnorthsea.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.f6b5f771-10a2-420c-990b-067dbf1aa5f7.8986", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.f6b5f771-10a2-420c-990b-067dbf1aa5f7.8986", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "dji.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.7e88609e-aefd-4bed-b65b-2226467cb8e6.92f8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.7e88609e-aefd-4bed-b65b-2226467cb8e6.92f8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "dmi-ecosysteem.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "doeonbeperktmee.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.559bf5d9-34e8-4876-a6d2-8a1be6d31a66.16f6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.559bf5d9-34e8-4876-a6d2-8a1be6d31a66.16f6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "domeinenrz.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.2dbd27eb-fbe2-44a3-8e72-e884d2dc9b95.2404", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.2dbd27eb-fbe2-44a3-8e72-e884d2dc9b95.2404", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "donorregister.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.bbe64a5c-6b89-480a-83de-eb5d06036897.7053", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.bbe64a5c-6b89-480a-83de-eb5d06036897.7053", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "donorwise.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "draaiboekpsie.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.c16b3bc8-280e-4ca4-984d-fa79d73269ce.80f3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.c16b3bc8-280e-4ca4-984d-fa79d73269ce.80f3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "weak-referrer-policy", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Referrer-Policy 'no-referrer-when-downgrade' deelt mogelijk URL-data met derde partijen", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "dsta.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.0a0057c0-4885-481b-a58d-42a162e6ea4b.c4c9", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.0a0057c0-4885-481b-a58d-42a162e6ea4b.c4c9", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "dualusequickscan.com", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_35WYQK979P", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "dualusequickscan.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 3, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_L8111G88L7", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_SL14EDZ8ZP", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "duo.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Tag Manager", "Matomo", "Piwik" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.1.0569", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.1.0569", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "stats.duo.rijkscloud.nl", "vendor": "Piwik", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Tag Manager", "Piwik" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "durpswinkel.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Maps" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "maps.googleapis.com", "vendor": "Google Maps", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Maps" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "dus-i.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.1aa4984a-d259-4dae-87ea-e17695363b07.328f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.1aa4984a-d259-4dae-87ea-e17695363b07.328f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "dutchculturekorea.com", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "dutchdubai.com", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO", "www.netherlandsandyou.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.133fbf90-37d7-41c3-bdcd-a743e52f9125.6c2a", "vendor": "www.netherlandsandyou.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.133fbf90-37d7-41c3-bdcd-a743e52f9125.6c2a", "vendor": "www.netherlandsandyou.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "www.netherlandsandyou.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "www.netherlandsandyou.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "www.netherlandsandyou.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "www.netherlandsandyou.nl" ], "mode": "noop" } ] }, { "domain": "dutchncca.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.14184c46-9f1e-411a-bbc9-beb192a2c62b.71d6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.14184c46-9f1e-411a-bbc9-beb192a2c62b.71d6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "duurzame-infra.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.e63c7487-79ee-416e-8118-f5723d2b6fa1.ac22", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.e63c7487-79ee-416e-8118-f5723d2b6fa1.ac22", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "dwangindezorg.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.78640bef-238e-435a-b020-4fecd32ff11d.f081", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.78640bef-238e-435a-b020-4fecd32ff11d.f081", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "e-cert.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 2 }, "vendors_geclassificeerd": [ "Matomo" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.54.6a2e", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.54.6a2e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "piwik.dtnr.nl", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Matomo" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "efsca.org", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "elearning.handreikingalcoholwet.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_ETQJ5NDZ4Q", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "elkeregiotelt.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.a13859bf-2409-4971-b085-8b55ce49d273.fbbd", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.a13859bf-2409-4971-b085-8b55ce49d273.fbbd", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "energieregionh.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager", "Google reCAPTCHA" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_4VPM17Y4E5", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Google reCAPTCHA" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "europeanpartnership-responsibleminerals.eu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ac052281-8a04-4ab5-8201-a66d4a542c11.c04c", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.ac052281-8a04-4ab5-8201-a66d4a542c11.c04c", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "evdata.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 2 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "weak-referrer-policy", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Referrer-Policy 'no-referrer-when-downgrade' deelt mogelijk URL-data met derde partijen", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "evocabulary.eu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "excellentescholen.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.d9402512-55eb-4ff7-9054-f2bbf240ae60.117f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.d9402512-55eb-4ff7-9054-f2bbf240ae60.117f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "expertisecentrummggz.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.fd0ae794-45f3-4d4e-bcc0-953897df2261.92e2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.fd0ae794-45f3-4d4e-bcc0-953897df2261.92e2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "farmatec.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ab54e244-c50a-4d47-9c4d-d65b2616a6d9.bb60", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.ab54e244-c50a-4d47-9c4d-d65b2616a6d9.bb60", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "farmingthefuture.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 2 }, "vendors_geclassificeerd": [ ".nlplatform.com", "Piwik PRO", "nlplatform.com" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.50b56ef7-4f99-48ad-b1b0-52a9d483e97d.f7e9", "vendor": ".nlplatform.com", "lifetime": "1 jaar", "lifetime_days": 392, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_pk_ses.50b56ef7-4f99-48ad-b1b0-52a9d483e97d.f7e9", "vendor": ".nlplatform.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "nlplatform.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "nlplatform.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "nlplatform.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".nlplatform.com", "nlplatform.com" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "federatieveservice.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO", "www.justid.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.56e0a7ff-e7eb-4778-bd97-478f313043bd.fdd0", "vendor": "www.justid.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.56e0a7ff-e7eb-4778-bd97-478f313043bd.fdd0", "vendor": "www.justid.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "www.justid.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "www.justid.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "www.justid.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "www.justid.nl" ], "mode": "noop" } ] }, { "domain": "filtertoolnww.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "findo.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Google reCAPTCHA", "Matomo", "Piwik" ], "cookie_counts": { "tracking_classified": 4, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.60.dc3b", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_id.83.dc3b", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.60.dc3b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.83.dc3b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "matomo.swing.eu", "vendor": "Piwik", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" }, { "url_pattern": "matomoabf.westeurope.cloudapp.azure.com", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, ingest" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "4 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google reCAPTCHA", "Matomo", "Piwik" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "fondspodiumkunsten.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 0, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Adobe Typekit", "Cookiebot", "Matomo", "Matomo Cloud" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "cdn.matomo.cloud", "vendor": "Matomo Cloud", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "consent.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fondspodiumkunsten.matomo.cloud", "vendor": "Matomo Cloud", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://cdn.matomo.cloud/fondspodiumkunsten.matomo.cloud/matomo.js", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "p.typekit.net", "vendor": "Adobe Typekit", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "use.typekit.net", "vendor": "Adobe Typekit", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Matomo Cloud" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "6 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "forenzischezorg.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "geobasisregistraties.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.b5210652-4536-4d5b-871b-069b62a905f3.58e3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.b5210652-4536-4d5b-871b-069b62a905f3.58e3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "geoforum.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "geschilleninstantieszorg.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.434377c1-c472-4f9e-94b0-d43539a50558.700f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.434377c1-c472-4f9e-94b0-d43539a50558.700f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "ggd.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 8, "severity_counts": { "kritiek": 2, "ernstig": 4, "let_op": 2 }, "vendors_geclassificeerd": [ "Cloudflare", "Font Awesome", "Google APIs", "Google Fonts/CDN", "Google Maps", "Google Tag Manager", "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.10ba5b24-4ab4-4829-8ecb-4a262b3bde79.1c7f", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_pk_ses.10ba5b24-4ab4-4829-8ecb-4a262b3bde79.1c7f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" } ], "trackers": [ { "url_pattern": "//www.googletagmanager.com/gtm.js?id=GTM-WMDVNMXW", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "cdnjs.cloudflare.com", "vendor": "Cloudflare", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "ggdghornl.containers.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "ggdghornl.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://ggdghornl.containers.piwik.pro/10ba5b24-4ab4-4829-8ecb-4a262b3bde79.js", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://ggdghornl.containers.piwik.pro/ppms.js", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://maps.googleapis.com/maps-api-v3/api/js/64/11d/intl/nl_ALL/common.js", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://maps.googleapis.com/maps-api-v3/api/js/64/11d/intl/nl_ALL/controls.js", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://maps.googleapis.com/maps-api-v3/api/js/64/11d/intl/nl_ALL/infowindow.js", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://maps.googleapis.com/maps-api-v3/api/js/64/11d/intl/nl_ALL/log.js", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://maps.googleapis.com/maps-api-v3/api/js/64/11d/intl/nl_ALL/map.js", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://maps.googleapis.com/maps-api-v3/api/js/64/11d/intl/nl_ALL/marker.js", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://maps.googleapis.com/maps-api-v3/api/js/64/11d/intl/nl_ALL/onion.js", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "ka-p.fontawesome.com", "vendor": "Font Awesome", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "maps.googleapis.com", "vendor": "Google Maps", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "consent.cookiebot.eu", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.eu", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "4 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Maps", "Google Tag Manager", "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "2 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "15 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "11 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "gir2.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "gladheiddata.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "gobiernodireino.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.17625a1c-94f3-43df-8dfa-977ac30b3f5b.21d6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.17625a1c-94f3-43df-8dfa-977ac30b3f5b.21d6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "gobiernudireino.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ae7f1f08-1728-4c29-9d22-f5c4f66786ce.f035", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.ae7f1f08-1728-4c29-9d22-f5c4f66786ce.f035", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "goedverhuurderschapsimpelveld.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "goudenpiramide.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.1bb675ed-44f3-496d-bdd5-5b09bfa409c6.7dd8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.1bb675ed-44f3-496d-bdd5-5b09bfa409c6.7dd8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "government.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.17953060-0014-4821-b579-e7b24c408376.9492", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.17953060-0014-4821-b579-e7b24c408376.9492", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "gratisvog.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.a3cf69a0-dcaf-4db8-8c5e-1c0aa12d5b66.d95c", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.a3cf69a0-dcaf-4db8-8c5e-1c0aa12d5b66.d95c", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "grensdata.eu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.502f4470-5816-4245-a2c3-5497d44ffbe1.4fcc", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.502f4470-5816-4245-a2c3-5497d44ffbe1.4fcc", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "cbs.containers.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "cbs.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "2 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "groeiennaarmorgen.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.f230e2a6-59cf-43c7-9cb9-cbe1b6710519.d651", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.f230e2a6-59cf-43c7-9cb9-cbe1b6710519.d651", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "groenekapstok.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "gwbeheergooi.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Analytics (legacy)" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "__utma", "vendor": "Google Analytics (legacy)", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "__utmb", "vendor": "Google Analytics (legacy)", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "__utmc", "vendor": "Google Analytics (legacy)", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "__utmt", "vendor": "Google Analytics (legacy)", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "__utmz", "vendor": "Google Analytics (legacy)", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "ssl.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "hansken.org", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Piwik PRO", "www.hansken.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.27334c5f-e4fb-4bbf-9cce-5e0d7b6e3826.05df", "vendor": "www.hansken.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.27334c5f-e4fb-4bbf-9cce-5e0d7b6e3826.05df", "vendor": "www.hansken.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "www.hansken.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "www.hansken.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "www.hansken.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "www.hansken.nl" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "hcaict.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 8, "severity_counts": { "kritiek": 2, "ernstig": 4, "let_op": 2 }, "vendors_geclassificeerd": [ ".digitaaltalentnederland.nl", ".linkedin.com", ".www.linkedin.com", "Google APIs", "Google Analytics", "Google Fonts/CDN", "Google Maps", "Google Tag Manager", "LinkedIn", "jsDelivr" ], "cookie_counts": { "tracking_classified": 6, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": ".digitaaltalentnederland.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_CM4MDPEEW9", "vendor": ".digitaaltalentnederland.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn, blijft na weigeren" }, { "name": "bcookie", "vendor": ".linkedin.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "bscookie", "vendor": ".www.linkedin.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "li_gc", "vendor": ".linkedin.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "lidc", "vendor": ".linkedin.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" } ], "trackers": [ { "url_pattern": "ajax.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "cdn.jsdelivr.net", "vendor": "jsDelivr", "classified": true, "kind": "cdn", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-W8TWT83N", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "linkedin.com", "vendor": "LinkedIn", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "maps.googleapis.com", "vendor": "Google Maps", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "client.protechts.net", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "collector-pxdojv695v.protechts.net", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "digitaaltalentnederland.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "li.protechts.net", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 6 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "6 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Maps", "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "6 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".digitaaltalentnederland.nl", ".linkedin.com", ".www.linkedin.com" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "17 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "herkomstgezocht.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4f3de70e-8869-4a56-9c0e-29034e59bea1.27f2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.4f3de70e-8869-4a56-9c0e-29034e59bea1.27f2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "hierradiokootwijk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "hollandnationalparks.com", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 1, "ernstig": 4, "let_op": 2 }, "vendors_geclassificeerd": [ ".nationaleparken.nl", "Adobe Typekit", "Campaign Monitor", "Cookiebot", "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": ".nationaleparken.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_ga_ZMXDBVJY1S", "vendor": ".nationaleparken.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" } ], "trackers": [ { "url_pattern": "consent.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-549NX9J4", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "js.createsend1.com", "vendor": "Campaign Monitor", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "p.typekit.net", "vendor": "Adobe Typekit", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "use.typekit.net", "vendor": "Adobe Typekit", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "nationaleparken.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "2 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".nationaleparken.nl" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "8 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "hoofddorp-centraal.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "hoogeveen.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 4, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager", "Siteimprove Analytics" ], "cookie_counts": { "tracking_classified": 6, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_M5E8ENZGZ7", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_XZ07VFCF9H", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn, blijft na weigeren" }, { "name": "_gat_gtag_UA_147068973_1", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_gat_UA-147068973-1", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "6006059.global.siteimproveanalytics.io", "vendor": "Siteimprove Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.google-analytics.com/analytics.js", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-M5E8ENZGZ7&cx=c>m=4e64u0", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-XZ07VFCF9H&cx=c>m=4e64u0", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=UA-147068973-1", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=UA-147068973-1&cx=c>m=4e64u0", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-K76MR6F", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "siteimproveanalytics.com", "vendor": "Siteimprove Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 6 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "6 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "6 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "5 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "hrcommunityrijk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.e5680f7d-4cf8-4cec-8549-eb65c0d12f4c.ef51", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.e5680f7d-4cf8-4cec-8549-eb65c0d12f4c.ef51", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "huiselijkgeweld.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ade02080-6b2a-4160-b5c5-43e5bf7d2412.4275", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.ade02080-6b2a-4160-b5c5-43e5bf7d2412.4275", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "huisvanhilde.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Tag Manager" ], "mode": "noop" } ] }, { "domain": "i-communityocw.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piwik" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.c92a4847-ddb4-4f6c-8165-eb0b928a8f07.561e", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.c92a4847-ddb4-4f6c-8165-eb0b928a8f07.561e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "icentrale.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "ienc-kennisportaal.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "igj.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.94b10ffb-8f48-4b6f-8d9c-7585149dc870.3600", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.94b10ffb-8f48-4b6f-8d9c-7585149dc870.3600", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "ilent.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.787d1142-5c83-409c-a671-c6fa739c0b22.6352", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.787d1142-5c83-409c-a671-c6fa739c0b22.6352", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "iltdag.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "implementatiecoachdi.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "impulssimpelveld.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-refuse-button", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "Geen 'weigeren'-knop kunnen vinden ondanks aanwezige banner — mogelijk dark pattern of obscured opt-out", "vendors_betrokken": [], "mode": "refuse-detection" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "in-made.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.2de5676e-1de9-45e2-b2d2-329fcea38fe8.30a2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.2de5676e-1de9-45e2-b2d2-329fcea38fe8.30a2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "in-made360.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Vimeo" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "f.vimeocdn.com", "vendor": "Vimeo", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "i.vimeocdn.com", "vendor": "Vimeo", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "player.vimeo.com", "vendor": "Vimeo", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "vimeo.com", "vendor": "Vimeo", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "vod-adaptive-ak.vimeocdn.com", "vendor": "Vimeo", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "youreka-virtualtours.be", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "6 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "ind.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 2, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.763bce05-4178-41c0-9f85-f0f2e6933527.7421", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_id.80ad7219-ce3b-45e3-afad-ea5cfa0ab3e0.7421", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.763bce05-4178-41c0-9f85-f0f2e6933527.7421", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.80ad7219-ce3b-45e3-afad-ea5cfa0ab3e0.7421", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistics.ind.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "kritiek", "type": "first-party-cname-tracker", "wetsartikel": "Tw art. 11.7a + AVG art. 5 (transparantie)", "samenvatting": "1 first-party-gehoste tracker(s) geladen vóór consent — gepresenteerd als eigen infrastructuur maar daadwerkelijk tracking-software", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "indiainnovation.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "infomilcn.com", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 5, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.8359eb83-e68e-4489-85bd-4c47240b999d.cfec", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_pk_ses.8359eb83-e68e-4489-85bd-4c47240b999d.cfec", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "1 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "informatiehuishouding.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.d07b1fee-ec58-4e9a-9e29-42be54175ca6.fb71", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.d07b1fee-ec58-4e9a-9e29-42be54175ca6.fb71", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "infra-web.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "inspectie-jenv.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.6338024f-f262-4ff2-a507-f37b7456dcb6.d273", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.6338024f-f262-4ff2-a507-f37b7456dcb6.d273", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "inspectie-oe.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.9c13bfe4-12e1-4830-a958-3f120d581b3a.0afb", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.9c13bfe4-12e1-4830-a958-3f120d581b3a.0afb", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "inspectiebtd.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.8de601e6-b2f5-4416-ac37-d524f9a84416.6c65", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.8de601e6-b2f5-4416-ac37-d524f9a84416.6c65", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "inspectielandschap.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "inspectieview.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "integraleaanpakonlinefraude.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "integriteitswijzer.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ ".huisvoorklokkenluiders.nl", "Google Analytics", "Google Tag Manager", "Google reCAPTCHA" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": ".huisvoorklokkenluiders.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_ga_NVGRGQ9CR7", "vendor": ".huisvoorklokkenluiders.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" } ], "trackers": [ { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Google reCAPTCHA" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "2 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".huisvoorklokkenluiders.nl" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "internationalerechtshulp.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.8ed7d7cd-fd48-4a75-a354-5daccc58c905.e66e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.8ed7d7cd-fd48-4a75-a354-5daccc58c905.e66e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "investeringsimpulsspv.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.6924d550-efa4-493d-998d-6cdd03f7b785.88b8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.6924d550-efa4-493d-998d-6cdd03f7b785.88b8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "investinholland.com", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ ".linkedin.com", "Google Ads", "Google Analytics", "Google Analytics 4", "Google Tag Manager", "LinkedIn Ads", "LinkedIn Insight" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_NPTG41DGVX", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gcl_au", "vendor": "Google Ads", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gcl_ls", "vendor": "Google Ads", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "in localStorage" }, { "name": "bcookie", "vendor": ".linkedin.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "li_gc", "vendor": ".linkedin.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "lidc", "vendor": ".linkedin.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "px.ads.linkedin.com", "vendor": "LinkedIn Ads", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.analytics.google.com", "vendor": "Google Analytics 4", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "snap.licdn.com", "vendor": "LinkedIn Insight", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "stats.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "6 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "5 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads", "Google Analytics 4", "Google Tag Manager", "LinkedIn Ads", "LinkedIn Insight" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "3 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".linkedin.com" ], "mode": "noop" }, { "severity": "ernstig", "type": "localstorage-tracking", "wetsartikel": "Tw art. 11.7a (analogie)", "samenvatting": "1 tracking-sleutel(s) in localStorage — kan cookie-walls omzeilen", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "iob-evaluatie.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.84c6e3af-6d3c-438b-be7f-7cb73c643226.be88", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.84c6e3af-6d3c-438b-be7f-7cb73c643226.be88", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "ipcei-hydrogen.eu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "jsDelivr" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "cdn.jsdelivr.net", "vendor": "jsDelivr", "classified": true, "kind": "cdn", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "cdn1.fpfis.tech.ec.europa.eu", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "observatory.clean-hydrogen.europa.eu", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "webtools.europa.eu", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "4 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "iplo.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 2, "ernstig": 4, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager", "Matomo", "Piano Analytics", "Piwik PRO", "Siteimprove Analytics" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_MNGT91YQGE", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_pk_id.e12f181f-2c7e-4196-a257-715583535526.ccec", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "_pk_ses.e12f181f-2c7e-4196-a257-715583535526.ccec", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" } ], "trackers": [ { "url_pattern": "6257784.global.siteimproveanalytics.io", "vendor": "Siteimprove Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-M2HRZJG", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "siteimproveanalytics.com", "vendor": "Siteimprove Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "global.frcapi.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 7 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "2 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "6 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "irealisatie.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "it-academieoverheid.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.581b2171-130f-4184-87c9-302d075a6ba8.57cf", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.581b2171-130f-4184-87c9-302d075a6ba8.57cf", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "ivd.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ec908f13-71b1-4b2a-8b27-12dc98632d2d.616c", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.ec908f13-71b1-4b2a-8b27-12dc98632d2d.616c", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "ivopzee.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "jaarverantwoordingzorg.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.08b24603-eef3-4124-abc8-8e9c5a6b95a9.a75e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.08b24603-eef3-4124-abc8-8e9c5a6b95a9.a75e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "jaarverslagrechtspraak.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "jenvacademie.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4469bd44-c00c-4bf8-804a-4b0bb11de73d.0bc3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.4469bd44-c00c-4bf8-804a-4b0bb11de73d.0bc3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "jenvbredewerkagenda.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "jenvconnect.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.91d64780-e262-4e7a-b25a-80e645d91a56.d75b", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.91d64780-e262-4e7a-b25a-80e645d91a56.d75b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "jouwbadhoevedorp.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "weak-referrer-policy", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Referrer-Policy 'no-referrer-when-downgrade' deelt mogelijk URL-data met derde partijen", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "justid.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.56e0a7ff-e7eb-4778-bd97-478f313043bd.fdd0", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.56e0a7ff-e7eb-4778-bd97-478f313043bd.fdd0", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "justitieleictorganisatie.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.cf2dc575-4b41-4a3a-8248-c8ffe400ad47.0441", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.cf2dc575-4b41-4a3a-8248-c8ffe400ad47.0441", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "kamerindeklas.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "stats.prodemos.nl", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Matomo" ], "mode": "noop" } ] }, { "domain": "kamervoordebinnenvisserij.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.d492fbc1-532b-4718-8722-386de3385b06.5cd8", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.d492fbc1-532b-4718-8722-386de3385b06.5cd8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "kansspelautoriteit.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "kansspelautoriteit.containers.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "kansspelautoriteit.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "2 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "kasteelgroeneveld.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 2 }, "vendors_geclassificeerd": [ ".staatsbosbeheer.nl", "Google Ads", "Google Analytics", "Google Analytics 4", "Google Tag Manager", "Hotjar" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": ".staatsbosbeheer.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_ga_EQ2P38VWEL", "vendor": ".staatsbosbeheer.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_ga_LFPGB9DR1Y", "vendor": ".staatsbosbeheer.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_gid", "vendor": ".staatsbosbeheer.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_hjSession_1216258", "vendor": ".staatsbosbeheer.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_hjSessionUser_1216258", "vendor": ".staatsbosbeheer.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_vwo_uuid_v2", "vendor": ".staatsbosbeheer.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.analytics.google.com", "vendor": "Google Analytics 4", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "script.hotjar.com", "vendor": "Hotjar", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "static.hotjar.com", "vendor": "Hotjar", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "stats.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "7 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads", "Google Analytics", "Google Analytics 4", "Google Tag Manager", "Hotjar" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "7 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".staatsbosbeheer.nl" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "kcb.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 0, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Cookiebot", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "consent.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-XFHBLD4KZ3", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "3 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "kemprogramma.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "kenniscentrum-oo.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 1, "ernstig": 6, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.fa10507e-0d2d-4566-a5df-5e7a59d54a88.66e4", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_pk_ses.fa10507e-0d2d-4566-a5df-5e7a59d54a88.66e4", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "1 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "kennisopenbaarbestuur.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.b3bb3e0b-0066-4cdc-88ff-d5f76fe2e025.64e8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.b3bb3e0b-0066-4cdc-88ff-d5f76fe2e025.64e8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "kennisplatformvhg.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "kennisvandeoverheid.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.e785cd16-0283-46d9-a20e-c79b3abe5e97.d446", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.e785cd16-0283-46d9-a20e-c79b3abe5e97.d446", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "kerkhofveendam.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "keurmerk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 0, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Google", "Google APIs", "Google Fonts/CDN", "Google reCAPTCHA" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "fonts.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.google.com/recaptcha/enterprise.js?render=6LekQp8sAAAAADfZqYV38_BDHY", "vendor": "Google", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google reCAPTCHA" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "4 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "kinderbescherming.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4e0a5018-f082-4c30-96c5-9a6bccb0383b.9974", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.4e0a5018-f082-4c30-96c5-9a6bccb0383b.9974", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "klimaatadaptatienederland.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 1, "ernstig": 5, "let_op": 1 }, "vendors_geclassificeerd": [ "Google", "Google APIs", "Google Analytics", "Google Fonts/CDN", "Google Tag Manager", "Matomo", "Piano Analytics", "Piwik PRO", "YouTube", "YouTube static" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_1Z7TF3Y8JP", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn, blijft na weigeren" }, { "name": "_pk_id.de36d53d-6dbf-4189-b794-ba8a8d56e152.3b53", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_pk_ses.de36d53d-6dbf-4189-b794-ba8a8d56e152.3b53", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "google.com", "vendor": "Google", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-1Z7TF3Y8JP&cx=c>m=4e64t1h1", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-52JBZ2G", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "i.ytimg.com", "vendor": "YouTube static", "classified": true, "kind": "functional", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "jnn-pa.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "youtube-nocookie.com", "vendor": "YouTube", "classified": true, "kind": "tracker", "context": "vóór consent, privacy mode, blijft na weigeren, actief na refuse" }, { "url_pattern": "global.frcapi.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 7 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "5 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Piwik PRO", "YouTube", "YouTube static" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "3 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "12 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "knmidata.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.6de20be2-5f9d-43c4-a6e5-41e412b226c2.6440", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.6de20be2-5f9d-43c4-a6e5-41e412b226c2.6440", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "knmiprojects.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.53924c2b-447f-4d99-825e-be158fa786d6.61f3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.53924c2b-447f-4d99-825e-be158fa786d6.61f3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "knooppunt-hoevelaken.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "koaportaal.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "komveiligthuis.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.da6b5e01-4e11-4885-9f56-a7bcfd62d688.298b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.da6b5e01-4e11-4885-9f56-a7bcfd62d688.298b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "koopoverheid.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.82b9aa9a-2618-44a1-ba83-41560ed5fb24.6019", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.82b9aa9a-2618-44a1-ba83-41560ed5fb24.6019", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "kpzss.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_1J4CK0ZJ8D", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "kvk.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Analytics 4", "Google Tag Manager", "Sentry" ], "cookie_counts": { "tracking_classified": 3, "tracking_unclassified": 1, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn" }, { "name": "_ga_26YX2JRENC", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn" }, { "name": "_ga_VMWVEXCMD8", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn" }, { "name": "FPLC", "vendor": null, "lifetime": null, "lifetime_days": null, "party": null, "classified": false, "kind": "tracking", "context": "vóór consent (banner aanwezig)" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "o302809.ingest.sentry.io", "vendor": "Sentry", "classified": true, "kind": "tracker", "context": "vóór consent, extern" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "sgtm.kvk.nl", "vendor": "Google Analytics 4", "classified": true, "kind": "tracker", "context": "vóór consent, ingest /g/collect" } ], "findings": [ { "severity": "kritiek", "type": "first-party-cname-tracker", "wetsartikel": "Tw art. 11.7a + AVG art. 5 (transparantie)", "samenvatting": "1 first-party-gehoste tracker(s) geladen vóór consent — gepresenteerd als eigen infrastructuur maar daadwerkelijk tracking-software", "vendors_betrokken": [ "Google Analytics 4" ], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Sentry" ], "mode": "noop" }, { "severity": "ernstig", "type": "no-refuse-button", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "Geen 'weigeren'-knop kunnen vinden ondanks aanwezige banner — mogelijk dark pattern of obscured opt-out", "vendors_betrokken": [], "mode": "refuse-detection" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "4 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "laadwerk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Google Tag Manager", "Piwik PRO", "Sentry" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "mra-e.containers.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "o292676.ingest.us.sentry.io", "vendor": "Sentry", "classified": true, "kind": "tracker", "context": "vóór consent, extern" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Tag Manager", "Piwik PRO", "Sentry" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "landelijkeadviescommissieplaatsing.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.158b78c1-5fc9-4032-9ab8-ec6d2cba9116.f1e7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.158b78c1-5fc9-4032-9ab8-ec6d2cba9116.f1e7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "lap3.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 5, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.008ca577-3bc5-4151-81ba-ee0c4be15b7d.9908", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_pk_ses.008ca577-3bc5-4151-81ba-ee0c4be15b7d.9908", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "1 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "ldentool.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "weak-referrer-policy-unsafe", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Referrer-Policy 'unsafe-url' deelt mogelijk URL-data met derde partijen", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "leefbaarenveilig.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.671f4cb1-6c11-4747-bc61-a98015c74485.b1ac", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.671f4cb1-6c11-4747-bc61-a98015c74485.b1ac", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "leerenontwikkelplein.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.b96bb0e4-e792-4322-b5b2-6cf05a505d99.c13e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.b96bb0e4-e792-4322-b5b2-6cf05a505d99.c13e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "leerhuisinformatiehuishouding.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.573c6109-bcde-4da2-9c72-e28d0556113a.efcd", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.573c6109-bcde-4da2-9c72-e28d0556113a.efcd", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "leeroverdeholocaust.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager", "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_FNYSTBNJE0", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_id.05b16565-46ae-4708-bf5b-3f66f8c99707.0eb9", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.05b16565-46ae-4708-bf5b-3f66f8c99707.0eb9", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "leerplatformmirt.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 5, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.35904676-d15b-47b5-af48-0a3df914ed55.4a20", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_pk_ses.35904676-d15b-47b5-af48-0a3df914ed55.4a20", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "global.frcapi.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "2 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "leidraadlc.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 0, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Google Analytics", "WordPress.com Stats" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "https://pixel.wp.com/g.gif?v=ext&blog=236030123&post=4&tz=2&", "vendor": "WordPress.com Stats", "classified": true, "kind": "functional", "context": "in HTML" }, { "url_pattern": "ssl.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-pixel", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracking pixel(s) gedetecteerd in HTML — laden zonder interactie", "vendors_betrokken": [ "WordPress.com Stats" ], "mode": "noop" } ] }, { "domain": "lerenvandecoronacrisis.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ ".youtube.com", "Google Ads" ], "cookie_counts": { "tracking_classified": 3, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "VISITOR_INFO1_LIVE", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "VISITOR_PRIVACY_METADATA", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "YSC", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "googleads.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" }, { "url_pattern": "static.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "3 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".youtube.com" ], "mode": "noop" } ] }, { "domain": "levjenv.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "life-ip-deltanatuur.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.182a39a8-e71c-4cfb-83e6-e1a859a9d546.3014", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.182a39a8-e71c-4cfb-83e6-e1a859a9d546.3014", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "liv.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "lokale-democratie.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "loketkennisveiligheid.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.33510e97-efd9-4dcc-ab79-5bef73f55c1e.62a8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.33510e97-efd9-4dcc-ab79-5bef73f55c1e.62a8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "luchtvaartindetoekomst.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.0b5579d7-7456-4d14-949d-5225539bb0fe.c856", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.0b5579d7-7456-4d14-949d-5225539bb0fe.c856", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "maakhetzeniettemakkelijk.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.15f581e7-353d-40ad-b219-e170a538f91c.80ee", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.15f581e7-353d-40ad-b219-e170a538f91c.80ee", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "maakjebedrijfweerbaar.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.dc5b1508-267c-4bc2-b054-969dd4e56f76.1d5c", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.dc5b1508-267c-4bc2-b054-969dd4e56f76.1d5c", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "maatschappelijkeonrust.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_04ENXWCWS0", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "maatschappelijkestabiliteit.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager", "Google reCAPTCHA" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_04S996H5YG", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_4P1JRQMERT", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat_UA-51192882-2", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "4 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Google reCAPTCHA" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "maatwerkmultiproblematiek.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4094f8ba-6829-4aff-9a0e-fd4e627ade58.799b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.4094f8ba-6829-4aff-9a0e-fd4e627ade58.799b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "maatwerkvoormensen.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.99fdc8da-8ec0-47da-8ce2-2f830b2d51c5.37fb", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.99fdc8da-8ec0-47da-8ce2-2f830b2d51c5.37fb", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "makingvitalityreality.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "manifestgroep.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-refuse-button", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "Geen 'weigeren'-knop kunnen vinden ondanks aanwezige banner — mogelijk dark pattern of obscured opt-out", "vendors_betrokken": [], "mode": "refuse-detection" } ] }, { "domain": "marechaussee.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.8f7be9a2-0ff3-4e0b-b322-b29bca7ac9e8.ada2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.8f7be9a2-0ff3-4e0b-b322-b29bca7ac9e8.ada2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "masterplanbasisvaardigheden.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.fb48e3c6-24d9-4a5c-854b-98bbbb5f7874.c812", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.fb48e3c6-24d9-4a5c-854b-98bbbb5f7874.c812", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "medicineshortagesdefects.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.c58a76e4-6abc-4955-909e-b9bf019280f4.e7c4", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.c58a76e4-6abc-4955-909e-b9bf019280f4.e7c4", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "meldpuntgeneesmiddelentekortendefecten.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.5aa24181-56a4-48a8-935f-9401a70423a5.c280", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.5aa24181-56a4-48a8-935f-9401a70423a5.c280", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "mensenmigratie.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.e3793fd6-8eac-41e9-a2b7-bdf03e2504e2.4e04", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.e3793fd6-8eac-41e9-a2b7-bdf03e2504e2.4e04", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "metelkaartrekkenwedegrens.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.777177b5-d751-41ca-be35-4676347a7731.d68e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.777177b5-d751-41ca-be35-4676347a7731.d68e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "metspoedbeschikbaar.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Cookiebot" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "consent.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "2 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "mi-cert.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "mijnbouwvergunningen.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.660ca044-3797-43f2-a815-63737286ae31.c034", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.660ca044-3797-43f2-a815-63737286ae31.c034", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "mijnoverheid.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piwik", "mijn.overheid.nl" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.6.a5fd", "vendor": "mijn.overheid.nl", "lifetime": "1 jaar", "lifetime_days": 392, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_pk_ses.6.a5fd", "vendor": "mijn.overheid.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "static.mijn.overheid.nl", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" }, { "url_pattern": "statistiek.mijn.overheid.nl", "vendor": "Piwik", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, ingest" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Matomo", "Piwik" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "2 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "mijn.overheid.nl" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "mindef-bbb.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "mindef-vio.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Google reCAPTCHA" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google reCAPTCHA" ], "mode": "noop" } ] }, { "domain": "minderwegwerpplastic.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 1, "ernstig": 6, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO", "afvalcirculair.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.13735f3c-ceef-46f7-b0f6-480dfaac4019.b277", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "_pk_ses.13735f3c-ceef-46f7-b0f6-480dfaac4019.b277", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "afvalcirculair.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "afvalcirculair.nl" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "2 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "mirtoverzicht.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.51378e73-4c6c-4810-a7b2-7d5f357415e6.eb81", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.51378e73-4c6c-4810-a7b2-7d5f357415e6.eb81", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "mobiliteitsscan-info.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 5, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.398072bd-2c66-48be-808f-cf4d154d77f3.518c", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_pk_ses.398072bd-2c66-48be-808f-cf4d154d77f3.518c", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "global.frcapi.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "2 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "mobilitylab.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "modalshiftprogramma.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_CT1ZDQE3Y4", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "monitor-nederlanddigitaal.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "monitorlangdurigezorg.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.c1885259-644b-4df3-869c-bdc8beaf1fbe.56b2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.c1885259-644b-4df3-869c-bdc8beaf1fbe.56b2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "mooibeweging.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 2, "ernstig": 5, "let_op": 0 }, "vendors_geclassificeerd": [ "Google Tag Manager", "Matomo", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4a413a2c-2ddb-49cd-8df5-adcb0cd0c807.7d92", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "_pk_ses.4a413a2c-2ddb-49cd-8df5-adcb0cd0c807.7d92", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://zonmw.piwik.pro/4a413a2c-2ddb-49cd-8df5-adcb0cd0c807.js", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://zonmw.piwik.pro/ppms.js", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "zonmw.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 2 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Tag Manager", "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "3 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "2 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "mvizet.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nas-adaptatietool.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_FK4GGLPZS0", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nationaalcoordinatorgroningen.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.3c7bcf31-1c65-42f7-ab32-0d9ab0a114ce.61fc", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.3c7bcf31-1c65-42f7-ab32-0d9ab0a114ce.61fc", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "nationaalgroeifonds.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.1f28bb17-b63d-4b83-a077-c40b36981f76.1e16", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.1f28bb17-b63d-4b83-a077-c40b36981f76.1e16", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "nationaalparkeerregister.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 3, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_ga_MT201V52D7", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nationaalwaterstofprogramma.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.9b7ac2fb-98b9-4b4a-91e3-42ef7d146085.d276", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.9b7ac2fb-98b9-4b4a-91e3-42ef7d146085.d276", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nau.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.7bdfebcd-7b95-4d09-995a-5b2e36fdac42.64bb", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.7bdfebcd-7b95-4d09-995a-5b2e36fdac42.64bb", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "nbso-brazil.com.br", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Maps", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 4, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_09X5BR4YCR", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "maps.googleapis.com", "vendor": "Google Maps", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "4 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "4 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Maps", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "ncab.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.3ed2234a-e15d-456f-97be-77f014826342.f078", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.3ed2234a-e15d-456f-97be-77f014826342.f078", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "ncpeh.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.eb1d47c4-ee00-4b24-a5be-846845e266e0.5235", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.eb1d47c4-ee00-4b24-a5be-846845e266e0.5235", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "nctv.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.058a665b-9da5-40e7-9d8e-913b65c8bea0.f273", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.058a665b-9da5-40e7-9d8e-913b65c8bea0.f273", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "nederlandcirculairin2050.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.e09a7cc0-2dd0-4e84-b321-0012b3e5331e.6340", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.e09a7cc0-2dd0-4e84-b321-0012b3e5331e.6340", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "nederlandtegengeorganiseerdemisdaad.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.e3042d7b-1fdd-41d4-8287-f0a537bee167.1f18", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.e3042d7b-1fdd-41d4-8287-f0a537bee167.1f18", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "nedmextrade.com", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 2, "ernstig": 3, "let_op": 2 }, "vendors_geclassificeerd": [ "Google APIs", "Google Analytics", "Google Fonts/CDN", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 4, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_3G7BVSE206", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_gat_gtag_UA_118749072_1", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" } ], "trackers": [ { "url_pattern": "fonts.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.google-analytics.com/analytics.js", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=UA-118749072-1", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 4 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "4 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "2 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "5 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "netherlandsinnovation.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 4, "let_op": 1 }, "vendors_geclassificeerd": [ ".youtube.com", "Google Ads", "WordPress.com Stats", "YouTube static" ], "cookie_counts": { "tracking_classified": 3, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "VISITOR_INFO1_LIVE", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "VISITOR_PRIVACY_METADATA", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "YSC", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "googleads.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" }, { "url_pattern": "https://pixel.wp.com/g.gif?v=ext&blog=176925523&post=2&tz=0&", "vendor": "WordPress.com Stats", "classified": true, "kind": "functional", "context": "in HTML" }, { "url_pattern": "i.ytimg.com", "vendor": "YouTube static", "classified": true, "kind": "functional", "context": "vóór consent" }, { "url_pattern": "static.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads", "YouTube static" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "3 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".youtube.com" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-pixel", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracking pixel(s) gedetecteerd in HTML — laden zonder interactie", "vendors_betrokken": [ "WordPress.com Stats" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nfitraining.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO", "www.forensischinstituut.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.90433a0c-1c26-4cff-98f4-14ad761b5577.c9fb", "vendor": "www.forensischinstituut.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.90433a0c-1c26-4cff-98f4-14ad761b5577.c9fb", "vendor": "www.forensischinstituut.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "www.forensischinstituut.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "www.forensischinstituut.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "www.forensischinstituut.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "www.forensischinstituut.nl" ], "mode": "noop" } ] }, { "domain": "nhbereikbaar.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "nhinzicht.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager", "Google reCAPTCHA" ], "cookie_counts": { "tracking_classified": 3, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_JGDYS67TGY", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_NF3VG9KZ6D", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Google reCAPTCHA" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nieuwesluisterneuzen.eu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 2 }, "vendors_geclassificeerd": [ ".abx03.sitearchief.nl", "Google Tag Manager", "abx03.sitearchief.nl" ], "cookie_counts": { "tracking_classified": 6, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": ".abx03.sitearchief.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_ga_0ZZCM8JLMV", "vendor": ".abx03.sitearchief.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_gat_UA-44940132-1", "vendor": ".abx03.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_gid", "vendor": ".abx03.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "CONSENT", "vendor": "abx03.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "PREF", "vendor": ".abx03.sitearchief.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" } ], "trackers": [ { "url_pattern": "abx03.sitearchief.nl", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, gtm.js" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "6 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "6 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".abx03.sitearchief.nl", "abx03.sitearchief.nl" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nieuwjaarstoost.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nieuwsenkennisportaalbzk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nifp.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.61829615-8198-46c0-8d1f-5c4427f0e03c.4bea", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.61829615-8198-46c0-8d1f-5c4427f0e03c.4bea", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "nipv.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 0, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Cookiebot", "Google", "Google APIs", "Google Fonts/CDN", "Google Maps", "Google reCAPTCHA", "MailPlus", "jQuery CDN", "jsDelivr" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "cdn.jsdelivr.net", "vendor": "jsDelivr", "classified": true, "kind": "cdn", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "code.jquery.com", "vendor": "jQuery CDN", "classified": true, "kind": "cdn", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consent.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://maps.googleapis.com/maps/api/js?key=AIzaSyCNTp2U03LqaFkHCgXvhEZA8Q755P7h", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.google.com/recaptcha/api.js?render=6LeE654pAAAAALLjyE8MO4a5xBIfv3Cqr", "vendor": "Google", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "m15.mailplus.nl", "vendor": "MailPlus", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "maps.googleapis.com", "vendor": "Google Maps", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Maps", "Google reCAPTCHA" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "2 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "11 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nivipcollections.eu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Google APIs", "Google Fonts/CDN" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "fonts.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "webservices.bio-aware.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "3 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nkw2023.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 1, "ernstig": 5, "let_op": 1 }, "vendors_geclassificeerd": [ ".klimaatweek.nl", "Cookiebot", "Google", "Google Ads", "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 4, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": ".klimaatweek.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_ga_QT8XG3FQ95", "vendor": ".klimaatweek.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_gcl_au", "vendor": ".klimaatweek.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_gcl_ls", "vendor": "Google Ads", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "in localStorage" } ], "trackers": [ { "url_pattern": "consent.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "google.com", "vendor": "Google", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-PWT9Z4N7", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "klimaatweek.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "3 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".klimaatweek.nl" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "localstorage-tracking", "wetsartikel": "Tw art. 11.7a (analogie)", "samenvatting": "1 tracking-sleutel(s) in localStorage — kan cookie-walls omzeilen", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "6 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nl-works.com", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.e69fe5c5-1ad0-43f1-85a5-fd6f5b26a1e8.c960", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.e69fe5c5-1ad0-43f1-85a5-fd6f5b26a1e8.c960", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "nladag.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nlarbeidsinspectie.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.dbe5156e-8216-4e84-8d12-fec5c416703f.d008", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.dbe5156e-8216-4e84-8d12-fec5c416703f.d008", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "nlbds.net", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nlflag.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.c62daa0b-b14b-4ad8-899b-47a98280178c.7c07", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.c62daa0b-b14b-4ad8-899b-47a98280178c.7c07", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "rijksoverheid.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "nllabourauthority.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.269fe24c-6a97-4d20-9064-220430802958.3127", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.269fe24c-6a97-4d20-9064-220430802958.3127", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "nlmaps.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "noord-holland-evenementen.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Sentry" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "o4506298473709568.ingest.sentry.io", "vendor": "Sentry", "classified": true, "kind": "tracker", "context": "vóór consent, extern" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Sentry" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "noord-holland.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Google reCAPTCHA" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google reCAPTCHA" ], "mode": "noop" } ] }, { "domain": "noordhollandpad.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 4, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_3DQMTX8GVY", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat_gtag_UA_105251100_7", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "4 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "noordhollandsenorm.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "northseaportal.eu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ ".sitearchief.nl", "Google Analytics", "Google Tag Manager", "Piwik PRO", "rijkswaterstaat.sitearchief.nl" ], "cookie_counts": { "tracking_classified": 9, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": ".sitearchief.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_ga_634L0KET7G", "vendor": ".sitearchief.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_gat", "vendor": ".sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_gid", "vendor": ".sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_id.4ce6abe8-7973-4e60-a50a-65bc5efb0621.fdd0", "vendor": "rijkswaterstaat.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.4ce6abe8-7973-4e60-a50a-65bc5efb0621.fdd0", "vendor": "rijkswaterstaat.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "rijkswaterstaat.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "rijkswaterstaat.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "rijkswaterstaat.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "9 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "4 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "9 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".sitearchief.nl", "rijkswaterstaat.sitearchief.nl" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "novum.nu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "npde.org", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nponderwijs.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.f319e3b3-c4a5-4b06-92fe-d2142625a02e.3941", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.f319e3b3-c4a5-4b06-92fe-d2142625a02e.3941", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "nsp-toekomstglb.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "nvwa.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.2a29c6c3-69ab-47de-be33-273a72df42c5.4008", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.2a29c6c3-69ab-47de-be33-273a72df42c5.4008", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "ocw-verhalen.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.770bf87e-0dfe-495d-8088-c32ad04bc43b.eb55", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.770bf87e-0dfe-495d-8088-c32ad04bc43b.eb55", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "ocwincijfers.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.aa6548be-461a-46cb-b4a5-d212fbd1eda0.8fc8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.aa6548be-461a-46cb-b4a5-d212fbd1eda0.8fc8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "ocwnieuws.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 0, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "OneSignal Push" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "api.onesignal.com", "vendor": "OneSignal Push", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "cdn.onesignal.com", "vendor": "OneSignal Push", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "OneSignal Push" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "oidji.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.52a97fed-9855-4022-9ffb-5a1d6ff837b7.0fda", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.52a97fed-9855-4022-9ffb-5a1d6ff837b7.0fda", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "om.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.c0ab5aba-add6-44ed-aba9-de3a3bf51785.c0df", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.c0ab5aba-add6-44ed-aba9-de3a3bf51785.c0df", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "on2013.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 1, "ernstig": 6, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO", "connectiviteitrijk.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.933253bf-b043-468a-8afc-f8fc918757b4.2f77", "vendor": "connectiviteitrijk.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "_pk_ses.933253bf-b043-468a-8afc-f8fc918757b4.2f77", "vendor": "connectiviteitrijk.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "connectiviteitrijk.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "connectiviteitrijk.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "connectiviteitrijk.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "connectiviteitrijk.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "connectiviteitrijk.nl" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "2 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "onbeperktindepolitiek.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "onbeperkttoegankelijk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "onderwijsinspectie.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.9874aedc-9188-4b16-808b-a2291f292474.ed27", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.9874aedc-9188-4b16-808b-a2291f292474.ed27", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "onderwijsregio.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.bc209d14-15ea-41f5-87e1-d399c5a4e911.da4a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.bc209d14-15ea-41f5-87e1-d399c5a4e911.da4a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "oostvaarderskliniek.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.a7882522-06c5-4334-a599-76865257a802.108a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.a7882522-06c5-4334-a599-76865257a802.108a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "open-overheid.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.7af415af-6f5f-4ef7-b294-0c5bf84a9508.1b9c", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.7af415af-6f5f-4ef7-b294-0c5bf84a9508.1b9c", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "openkat.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "opensourcewerken.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-refuse-button", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "Geen 'weigeren'-knop kunnen vinden ondanks aanwezige banner — mogelijk dark pattern of obscured opt-out", "vendors_betrokken": [], "mode": "refuse-detection" } ] }, { "domain": "oprijk.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.de8d09ed-0db5-438e-b6e9-40192b3504ba.3c72", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.de8d09ed-0db5-438e-b6e9-40192b3504ba.3c72", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "opwegmetwaterstof.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "ordz.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.263627a8-d82e-4144-b468-95f8dc8cc1ff.316d", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.263627a8-d82e-4144-b468-95f8dc8cc1ff.316d", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "overalsnelinternet.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.d025fb37-aad0-4911-bcd0-53b85043a287.9504", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.d025fb37-aad0-4911-bcd0-53b85043a287.9504", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "overdedouane.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ ".douane.nl", "Piwik PRO", "www.douane.nl" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ec52bf38-456d-4691-8005-fe12042d9d38.c9fb", "vendor": "www.douane.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.ec52bf38-456d-4691-8005-fe12042d9d38.c9fb", "vendor": "www.douane.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "s_cc", "vendor": ".douane.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "s_fid", "vendor": ".douane.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "stg_last_interaction", "vendor": "www.douane.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "www.douane.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "www.douane.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "2 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "7 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".douane.nl", "www.douane.nl" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "overheid.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.042a8a3e-7692-4e18-8abf-c3034df672d0.340a", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_id.3563c399-95ab-4851-b79b-4d4d85b6df10.340a", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.042a8a3e-7692-4e18-8abf-c3034df672d0.340a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.3563c399-95ab-4851-b79b-4d4d85b6df10.340a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "koop.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "overheidsbredeloketten.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "overkernenergie.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.086f0501-15aa-4e03-a8fa-d2676adef6c7.3add", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.086f0501-15aa-4e03-a8fa-d2676adef6c7.3add", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "overstroomik.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.44161f1e-5143-46f6-838d-d81a8eaf657f.8fce", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.44161f1e-5143-46f6-838d-d81a8eaf657f.8fce", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "p-direkt.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.c24d81ce-8c9e-4a15-8567-529e1ea17e38.dff0", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.c24d81ce-8c9e-4a15-8567-529e1ea17e38.dff0", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "pagw.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.9eaa9cc9-d870-45f1-9162-a52d4865f831.c127", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.9eaa9cc9-d870-45f1-9162-a52d4865f831.c127", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "parlement.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.44.4413", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.44.4413", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "pwk.tweedekamer.nl", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Matomo" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "partnersforwater.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 2, "ernstig": 3, "let_op": 2 }, "vendors_geclassificeerd": [ "Adobe Typekit", "ContentSquare", "Google Fonts/CDN", "Mapbox", "Matomo", "Matomo Cloud", "WordPress.com", "jsDelivr" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_cs_c", "vendor": "ContentSquare", "lifetime": "1 jaar", "lifetime_days": 395, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_cs_id", "vendor": "ContentSquare", "lifetime": "1 jaar", "lifetime_days": 395, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_cs_s", "vendor": "ContentSquare", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "_pk_id.1.ccdc", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_pk_ses.1.ccdc", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" } ], "trackers": [ { "url_pattern": "api.mapbox.com", "vendor": "Mapbox", "classified": true, "kind": "functional", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "api.tiles.mapbox.com", "vendor": "Mapbox", "classified": true, "kind": "functional", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "c.ba.contentsquare.net", "vendor": "ContentSquare", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "cdn.jsdelivr.net", "vendor": "jsDelivr", "classified": true, "kind": "cdn", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "cdn.matomo.cloud", "vendor": "Matomo Cloud", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://api.tiles.mapbox.com/mapbox-gl-js/v2.13.0/mapbox-gl.js", "vendor": "Mapbox", "classified": true, "kind": "functional", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://cdn.matomo.cloud/partnersforwater.matomo.cloud/matomo.js", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://t.contentsquare.net/uxa/bc85d16a3f13a.js", "vendor": "ContentSquare", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "i0.wp.com", "vendor": "WordPress.com", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "p.typekit.net", "vendor": "Adobe Typekit", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "partnersforwater.matomo.cloud", "vendor": "Matomo Cloud", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "t.contentsquare.net", "vendor": "ContentSquare", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "6 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "ContentSquare", "Mapbox", "Matomo Cloud" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "3 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "11 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "passendexaminerenvo.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.b50229fb-18dd-49eb-9b51-9fc08bddad10.43ee", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.b50229fb-18dd-49eb-9b51-9fc08bddad10.43ee", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "peppolautoriteit.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ec285033-8fb4-475b-8e61-4015fec63291.77f6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.ec285033-8fb4-475b-8e61-4015fec63291.77f6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "pgdi.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "pimnh.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 2, "ernstig": 4, "let_op": 0 }, "vendors_geclassificeerd": [ ".youtube.com", "Cookiebot", "Google", "Google APIs", "Google Ads", "Google Fonts/CDN", "Google Tag Manager", "Mailchimp", "Squarespace", "Squarespace CDN", "YouTube static" ], "cookie_counts": { "tracking_classified": 3, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "VISITOR_INFO1_LIVE", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "VISITOR_PRIVACY_METADATA", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "YSC", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" } ], "trackers": [ { "url_pattern": "assets.squarespace.com", "vendor": "Squarespace", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "chimpstatic.com", "vendor": "Mailchimp", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "clanker-events.squarespace.com", "vendor": "Squarespace", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consent.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "definitions.sqspcdn.com", "vendor": "Squarespace CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "google.com", "vendor": "Google", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googleads.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick, blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "https://www.googletagmanager.com/gtag/destination?id=AW-16556944176&cx=c>m=4e6", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-68EFFK4HCS&cx=c>m=4e64u0", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-TLQR9VW", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "i.ytimg.com", "vendor": "YouTube static", "classified": true, "kind": "functional", "context": "vóór consent" }, { "url_pattern": "static.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 3 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "4 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads", "Google Tag Manager", "YouTube static" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "3 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".youtube.com" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "3 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "20 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "platformrijksoverheidonline.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.b7abcbb0-3d4b-4f83-8c85-2479fd4ee16b.470f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.b7abcbb0-3d4b-4f83-8c85-2479fd4ee16b.470f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "platformwow.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_5CLD83S0VY", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gat_UA-72600035-3", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "pleinbzk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.d0b9bb79-5a8d-4b5e-89f3-9fc050790925.e240", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.d0b9bb79-5a8d-4b5e-89f3-9fc050790925.e240", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "pleinienw.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.19fc30d8-ac7f-4a81-af04-99127ab83e67.eb28", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.19fc30d8-ac7f-4a81-af04-99127ab83e67.eb28", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "pleio.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "politie.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 2, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.1.df1e", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.1.df1e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": "first-party-via-CNAME", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "politie.nl", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "kritiek", "type": "first-party-cname-tracker", "wetsartikel": "Tw art. 11.7a + AVG art. 5 (transparantie)", "samenvatting": "1 first-party-gehoste tracker(s) geladen vóór consent — gepresenteerd als eigen infrastructuur maar daadwerkelijk tracking-software", "vendors_betrokken": [ "Matomo" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "politiekeambtsdragers.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ff3c35cf-98a9-4ff0-8f93-5df9fc1c6ef5.c023", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.ff3c35cf-98a9-4ff0-8f93-5df9fc1c6ef5.c023", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "politieorkest.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "politieplanner.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "ppackennisplein.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "processierups.nu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_60TJ9H304F", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "processinnovation.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "projectdoen.nu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "pvrr-loket.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "q-bankplants.eu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 2, "ernstig": 3, "let_op": 2 }, "vendors_geclassificeerd": [ "Google APIs", "Google Analytics", "Google Fonts/CDN", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 4, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_60Z6RCBY66", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_gat_gtag_UA_19705652_8", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" } ], "trackers": [ { "url_pattern": "fonts.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.google-analytics.com/analytics.js", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-60Z6RCBY66&cx=c>m=4e64u0", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=UA-19705652-8", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "webservices.bio-aware.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 4 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "4 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "3 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "6 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "radiokootwijk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "rapporteurverslavingen.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.28223fc3-70e1-4c51-94df-4a3aa920072e.7e43", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.28223fc3-70e1-4c51-94df-4a3aa920072e.7e43", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rcgog.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.10bd6c85-30bc-47a1-af47-06543bb223be.6ed6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.10bd6c85-30bc-47a1-af47-06543bb223be.6ed6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rdi.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.0fe717c2-e050-452f-986b-89dd1d96ff43.036a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.0fe717c2-e050-452f-986b-89dd1d96ff43.036a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rdobeheer.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "rdw.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_MZT6XELXR1", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "reactiemeterienw.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "realisatieibds.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Tag Manager" ], "mode": "noop" } ] }, { "domain": "rechtvaardig.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.cd4a1f9f-411b-4f82-80ee-57392797c52e.7a0f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.cd4a1f9f-411b-4f82-80ee-57392797c52e.7a0f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rechtwijzer.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 5, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.8b050d41-ace8-45a1-87a4-c9370e30b3ca.de00", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_pk_ses.8b050d41-ace8-45a1-87a4-c9370e30b3ca.de00", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "https://rvr.containers.piwik.pro/8b050d41-ace8-45a1-87a4-c9370e30b3ca.js", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://rvr.containers.piwik.pro/ppms.js", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "rvr.containers.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "rvr.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 2 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "2 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "2 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "2 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "regeldrukmonitor.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.2c32a7b7-56cc-4b38-8f3c-45c427604f4c.cef9", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.2c32a7b7-56cc-4b38-8f3c-45c427604f4c.cef9", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "regelhulp.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.609c4412-387b-4691-8fa3-1b6903ea2fc6.c0d8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.609c4412-387b-4691-8fa3-1b6903ea2fc6.c0d8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "registersocialehygiene.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ee330a40-b52e-44a7-be4c-a81198cda821.9b5f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.ee330a40-b52e-44a7-be4c-a81198cda821.9b5f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "riecis.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "rijbewijs.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "rijkcirculair.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.77349b49-6a2b-4d65-ae85-0204d57b69c7.2b31", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.77349b49-6a2b-4d65-ae85-0204d57b69c7.2b31", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rijkewaddenzee.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Ads", "Google Analytics", "Google Analytics 4", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_474F0FGDBN", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gat_UA-26138405-1", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.analytics.google.com", "vendor": "Google Analytics 4", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "stats.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "4 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads", "Google Analytics", "Google Analytics 4", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "rijksafspraakplanner.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "rijksdienstcn.com", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ec190a91-f2ca-4148-a657-06dea971788f.cdb8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.ec190a91-f2ca-4148-a657-06dea971788f.cdb8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rijksinkoopsamenwerking.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.8bff4eaa-a0ec-4190-9d2d-4f7b297c5bf9.adf7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.8bff4eaa-a0ec-4190-9d2d-4f7b297c5bf9.adf7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rijksinspecties.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.cd48b04f-edce-430d-94d5-47a7f489770f.4270", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.cd48b04f-edce-430d-94d5-47a7f489770f.4270", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rijksorganisatiebeveiligingenlogistiek.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.21e3dbf9-2671-4af4-85db-d9d11ce138f4.6d13", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.21e3dbf9-2671-4af4-85db-d9d11ce138f4.6d13", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rijksorganisatieodi.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.2a3e700d-ce7e-4ca5-82fa-74f29801e24b.d212", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.2a3e700d-ce7e-4ca5-82fa-74f29801e24b.d212", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rijksoverheid.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 2, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.bf9c05f0-c13f-4e22-80c7-e603d39fc616.e7da", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.bf9c05f0-c13f-4e22-80c7-e603d39fc616.e7da", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "kritiek", "type": "first-party-cname-tracker", "wetsartikel": "Tw art. 11.7a + AVG art. 5 (transparantie)", "samenvatting": "1 first-party-gehoste tracker(s) geladen vóór consent — gepresenteerd als eigen infrastructuur maar daadwerkelijk tracking-software", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rijksroosteren.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "rijksschoonmaak.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.714553c7-082c-4309-9210-876238dda743.f2f2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.714553c7-082c-4309-9210-876238dda743.f2f2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rijksvaccinatieprogramma.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.0a548899-c0ac-4547-85af-82a31576a5ef.4f57", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.0a548899-c0ac-4547-85af-82a31576a5ef.4f57", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "weak-referrer-policy", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Referrer-Policy 'no-referrer-when-downgrade' deelt mogelijk URL-data met derde partijen", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "rijksvastgoedbedrijf.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.26fdb79d-2a9c-4c88-8047-89333e019025.7309", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.26fdb79d-2a9c-4c88-8047-89333e019025.7309", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rijkswaterstaatdata.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 5, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ebdc9269-b6b7-45f2-b93b-7aab50ed708d.2421", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_pk_ses.ebdc9269-b6b7-45f2-b93b-7aab50ed708d.2421", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "1 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "rivm.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.c4aa3d73-954f-43c9-a9db-1d0e67ee1135.1de9", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.c4aa3d73-954f-43c9-a9db-1d0e67ee1135.1de9", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "row-minvws.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.eeb9a678-5bc3-49ee-bcb3-69958b7fc4fe.1e3b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.eeb9a678-5bc3-49ee-bcb3-69958b7fc4fe.1e3b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "ruimtelijkeordening.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4c0b2535-5c7d-4652-8101-de48b9d08485.26da", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.4c0b2535-5c7d-4652-8101-de48b9d08485.26da", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rvblink.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "rvdkraadsnet.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.3a3fa3ff-ac5e-4bca-af38-02db9b9fcdfb.d3cb", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.3a3fa3ff-ac5e-4bca-af38-02db9b9fcdfb.d3cb", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "rvihh.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ecbaf44d-a2ab-4b40-a128-3d01f2c5da84.04fc", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.ecbaf44d-a2ab-4b40-a128-3d01f2c5da84.04fc", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rvo.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 2, "ernstig": 1, "let_op": 2 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.6019ef78-5c19-417c-adc3-a3dd550e0c0c.b4bd", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_id.66bf624d-150f-45ef-b462-4b2bddfd4eba.b4bd", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.6019ef78-5c19-417c-adc3-a3dd550e0c0c.b4bd", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.66bf624d-150f-45ef-b462-4b2bddfd4eba.b4bd", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "kritiek", "type": "first-party-cname-tracker", "wetsartikel": "Tw art. 11.7a + AVG art. 5 (transparantie)", "samenvatting": "1 first-party-gehoste tracker(s) geladen vóór consent — gepresenteerd als eigen infrastructuur maar daadwerkelijk tracking-software", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "rwsduurzamemobiliteit.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO", "archief39.sitearchief.nl", "rijkswaterstaat.sitearchief.nl" ], "cookie_counts": { "tracking_classified": 8, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4ce6abe8-7973-4e60-a50a-65bc5efb0621.fdd0", "vendor": "rijkswaterstaat.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_id.d3d7d39f-37c2-4dfd-82f7-3602d1dee2cf.5e38", "vendor": "archief39.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.4ce6abe8-7973-4e60-a50a-65bc5efb0621.fdd0", "vendor": "rijkswaterstaat.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.d3d7d39f-37c2-4dfd-82f7-3602d1dee2cf.5e38", "vendor": "archief39.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_externalReferrer", "vendor": "archief39.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "archief39.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "archief39.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "rijkswaterstaat.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "11 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "11 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "archief39.sitearchief.nl", "rijkswaterstaat.sitearchief.nl" ], "mode": "noop" } ] }, { "domain": "rwseconomie.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.99c4371a-94e3-4d47-97f5-045d214019d9.c640", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.99c4371a-94e3-4d47-97f5-045d214019d9.c640", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "rwsenvironment.eu", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO", "rijkswaterstaat.sitearchief.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4ce6abe8-7973-4e60-a50a-65bc5efb0621.fdd0", "vendor": "rijkswaterstaat.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.4ce6abe8-7973-4e60-a50a-65bc5efb0621.fdd0", "vendor": "rijkswaterstaat.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "rijkswaterstaat.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "rijkswaterstaat.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "rijkswaterstaat.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "rijkswaterstaat.sitearchief.nl" ], "mode": "noop" } ] }, { "domain": "rwsgolfdag.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_6J8VJS8Y8B", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "rwsinbeweging.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "rwsinnoveert.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 5, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.94a03bfa-65bf-4aab-a9f3-0f07456220d9.1b97", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_pk_ses.94a03bfa-65bf-4aab-a9f3-0f07456220d9.1b97", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "global.frcapi.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "2 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "samenbeterdoejemee.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.28c22b6b-584d-4416-9098-473b58a3cb42.3d74", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.28c22b6b-584d-4416-9098-473b58a3cb42.3d74", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "samenwerkingrijknoord.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.2b693c21-3efc-4a5b-aae8-a4aeb791ed52.46d7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.2b693c21-3efc-4a5b-aae8-a4aeb791ed52.46d7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "samenwerkingsplatform-dienstengww.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "sawa-vth.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "sbr-wonen.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 2 }, "vendors_geclassificeerd": [ ".youtube.com", "Google Ads", "Google Analytics", "Google Tag Manager", "YouTube static" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_LY6H05MSZD", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat_gtag_UA_2915677_45", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "VISITOR_INFO1_LIVE", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "VISITOR_PRIVACY_METADATA", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "YSC", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googleads.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "i.ytimg.com", "vendor": "YouTube static", "classified": true, "kind": "functional", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "static.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "6 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads", "Google Analytics", "Google Tag Manager", "YouTube static" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "3 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".youtube.com" ], "mode": "noop" }, { "severity": "let_op", "type": "weak-referrer-policy", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Referrer-Policy 'no-referrer-when-downgrade' deelt mogelijk URL-data met derde partijen", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "sbv-z.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.8270eae1-057f-4217-8f28-71c95b1d78e6.2dd7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.8270eae1-057f-4217-8f28-71c95b1d78e6.2dd7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "scankompas.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO", "dienstverleningskompas.venster.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.57636cfd-143d-49d1-9603-33e48f1d306e.c8ad", "vendor": "dienstverleningskompas.venster.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.57636cfd-143d-49d1-9603-33e48f1d306e.c8ad", "vendor": "dienstverleningskompas.venster.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "dienstverleningskompas.venster.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "dienstverleningskompas.venster.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "dienstverleningskompas.venster.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "dienstverleningskompas.venster.nl" ], "mode": "noop" } ] }, { "domain": "schakeldagen.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 8, "severity_counts": { "kritiek": 2, "ernstig": 5, "let_op": 1 }, "vendors_geclassificeerd": [ ".iplo.nl", "Google Analytics", "Google Tag Manager", "Piwik PRO", "Siteimprove Analytics", "iplo.nl" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": ".iplo.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_MNGT91YQGE", "vendor": ".iplo.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn, blijft na weigeren" }, { "name": "_pk_id.e12f181f-2c7e-4196-a257-715583535526.ccec", "vendor": "iplo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "_pk_ses.e12f181f-2c7e-4196-a257-715583535526.ccec", "vendor": "iplo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "iplo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "iplo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "iplo.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" } ], "trackers": [ { "url_pattern": "6257784.global.siteimproveanalytics.io", "vendor": "Siteimprove Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-MNGT91YQGE&cx=c>m=4e64u0", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-M2HRZJG", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "siteimproveanalytics.com", "vendor": "Siteimprove Analytics", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "global.frcapi.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "iplo.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 7 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "7 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".iplo.nl", "iplo.nl" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "3 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "7 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "schoudersonderschoon.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 1, "ernstig": 6, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO", "afvalcirculair.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.13735f3c-ceef-46f7-b0f6-480dfaac4019.b277", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "_pk_ses.13735f3c-ceef-46f7-b0f6-480dfaac4019.b277", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "afvalcirculair.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "afvalcirculair.nl" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "2 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "scp.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ef41f368-8f67-439e-bbac-daddc63e6409.1640", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.ef41f368-8f67-439e-bbac-daddc63e6409.1640", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "sekswerkgoedgeregeld.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "seveso-plus.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 5, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.944ffab7-88ea-4d3e-8442-8c04860a6c00.7837", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_pk_ses.944ffab7-88ea-4d3e-8442-8c04860a6c00.7837", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "1 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "shvw.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "signaleringleefomgevingengezondheid.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Piwik PRO", "www.signalenleefomgeving.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.b8dbf66e-44d7-4cd0-8dc2-3861e9d04c34.7818", "vendor": "www.signalenleefomgeving.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.b8dbf66e-44d7-4cd0-8dc2-3861e9d04c34.7818", "vendor": "www.signalenleefomgeving.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "www.signalenleefomgeving.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "www.signalenleefomgeving.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "www.signalenleefomgeving.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "www.signalenleefomgeving.nl" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "simpelveld.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piwik" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.2.4740", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.2.4740", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "simpelveld.logging.simanalytics.nl", "vendor": "Piwik", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "skc-oc.org", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "slmmicrosoftrijk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "slotcoordination.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager", "Google reCAPTCHA", "WordPress.com Stats" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "https://pixel.wp.com/g.gif?v=ext&blog=127325376&post=2&tz=2&", "vendor": "WordPress.com Stats", "classified": true, "kind": "functional", "context": "in HTML" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Google reCAPTCHA" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-pixel", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracking pixel(s) gedetecteerd in HTML — laden zonder interactie", "vendors_betrokken": [ "WordPress.com Stats" ], "mode": "noop" } ] }, { "domain": "socialestabiliteit.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.7bd6b20a-f214-4dda-99e4-fd363dd15d6f.55e8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.7bd6b20a-f214-4dda-99e4-fd363dd15d6f.55e8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "socialeveiligheidrijk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "sodm.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.97f925c5-2028-4f9f-be41-ec35e23e9e4b.35a7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.97f925c5-2028-4f9f-be41-ec35e23e9e4b.35a7", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "sportdagjenv.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "ssc-ict.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.6d5ae083-8559-443a-81d2-faca063d0f4f.4243", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.6d5ae083-8559-443a-81d2-faca063d0f4f.4243", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "sso3w.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.20a9ff08-53c3-4545-bde7-e176015bf7e8.a05e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.20a9ff08-53c3-4545-bde7-e176015bf7e8.a05e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "ssr.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 2 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.09f29d85-34c4-49fe-a835-1c0d884378a1.288e", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.09f29d85-34c4-49fe-a835-1c0d884378a1.288e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rechtspraak.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "weak-referrer-policy", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Referrer-Policy 'no-referrer-when-downgrade' deelt mogelijk URL-data met derde partijen", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "staatsexamensnt2.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.6a1387e2-8a9b-4941-b6a4-78dd0f48c321.de3b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.6a1387e2-8a9b-4941-b6a4-78dd0f48c321.de3b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "staatspublicaties.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "staatvandeuitvoering.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Google reCAPTCHA", "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.687f40cc-97c7-4761-a61a-51b3261ade8c.a740", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.687f40cc-97c7-4761-a61a-51b3261ade8c.a740", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google reCAPTCHA", "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "staatvanhetbestuurdashboard.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_2Y4TKKYFZ1", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "startmetdelen.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.c5714ab5-4a33-4fec-be65-7ede1aa246af.a649", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.c5714ab5-4a33-4fec-be65-7ede1aa246af.a649", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "stimuleringsfonds.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 2, "ernstig": 4, "let_op": 1 }, "vendors_geclassificeerd": [ "Bugsnag", "Google Analytics", "Google Tag Manager", "Hotjar" ], "cookie_counts": { "tracking_classified": 4, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_7MY9VJWGS1", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_hjSession_2214927", "vendor": "Hotjar", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "_hjSessionUser_2214927", "vendor": "Hotjar", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://script.hotjar.com/modules.6a0f3932cb1341a35c18.js", "vendor": "Hotjar", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://static.hotjar.com/c/hotjar-2214927.js?sv=7", "vendor": "Hotjar", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-7MY9VJWGS1&cx=c>m=4e64u0", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-P99BTLD", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "script.hotjar.com", "vendor": "Hotjar", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "sessions.bugsnag.com", "vendor": "Bugsnag", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "static.hotjar.com", "vendor": "Hotjar", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 4 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "4 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "5 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Bugsnag", "Google Analytics", "Google Tag Manager", "Hotjar" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "4 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "5 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "summercourt.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager", "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 9, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_VQCMCVMXSE", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat_gtag_UA_44455221_3", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_id.7351b6a2-bc7e-4079-ac44-f202a3c5f0dc.602f", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.7351b6a2-bc7e-4079-ac44-f202a3c5f0dc.602f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "statistiek.rechtspraak.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "9 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "4 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "supportschonesport.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager", "Google reCAPTCHA", "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 9, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_5WCQ82H32M", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat_UA-85174831-31", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_id.f4f28c77-86c0-4415-95c1-a994b87afd78.703f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.f4f28c77-86c0-4415-95c1-a994b87afd78.703f", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "9 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "5 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager", "Google reCAPTCHA", "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "svb.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "AB Tasty", "Matomo", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 3, "functional": 0 }, "cookies": [ { "name": "_pk_id.8bda5495-3d5b-40c3-a4ac-3636b5895400.d8ba", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.8bda5495-3d5b-40c3-a4ac-3636b5895400.d8ba", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "ABTasty", "vendor": null, "lifetime": null, "lifetime_days": null, "party": null, "classified": false, "kind": "tracking", "context": "in localStorage" }, { "name": "ABTastyData", "vendor": null, "lifetime": null, "lifetime_days": null, "party": null, "classified": false, "kind": "tracking", "context": "in localStorage" }, { "name": "ABTastySession", "vendor": null, "lifetime": null, "lifetime_days": null, "party": null, "classified": false, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "ariane.abtasty.com", "vendor": "AB Tasty", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "dcinfos-cache.abtasty.com", "vendor": "AB Tasty", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "svb.containers.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "svb.piwik.pro", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "try.abtasty.com", "vendor": "AB Tasty", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "5 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "AB Tasty", "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "2 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "localstorage-tracking", "wetsartikel": "Tw art. 11.7a (analogie)", "samenvatting": "2 tracking-sleutel(s) in localStorage — kan cookie-walls omzeilen", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "symbolenbank.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "szwwerkt.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piwik" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.d35ac367-05d1-4267-8519-a15a3446f65a.1da2", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.d35ac367-05d1-4267-8519-a15a3446f65a.1da2", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "taskforce-riec-brabantzeeland.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 0, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Twitter/X Short URL Pixel" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "https://data-image.sociablekit.com/sources/linkedin-page-pos", "vendor": "Twitter/X Short URL Pixel", "classified": true, "kind": "tracker", "context": "in HTML" }, { "url_pattern": "https://images.sociablekit.com/sources/linkedin-page-posts/r", "vendor": "Twitter/X Short URL Pixel", "classified": true, "kind": "tracker", "context": "in HTML" } ], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-pixel", "wetsartikel": "Tw art. 11.7a", "samenvatting": "7 tracking pixel(s) gedetecteerd in HTML — laden zonder interactie", "vendors_betrokken": [ "Twitter/X Short URL Pixel" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "tcbb.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "tegengaanradicalisering.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.f269b247-fec0-4c09-aa9f-4e7fc4b0a9e3.0386", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.f269b247-fec0-4c09-aa9f-4e7fc4b0a9e3.0386", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "temis.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "thuisarts.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 2, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piwik" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.1.d0aa", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.1.d0aa", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "stats.thuisarts.nl", "vendor": "Piwik", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, ingest" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "kritiek", "type": "first-party-cname-tracker", "wetsartikel": "Tw art. 11.7a + AVG art. 5 (transparantie)", "samenvatting": "1 first-party-gehoste tracker(s) geladen vóór consent — gepresenteerd als eigen infrastructuur maar daadwerkelijk tracking-software", "vendors_betrokken": [ "Piwik" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "thuisindestreek.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "tlokb.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.da63b0ed-785e-436a-9aa1-2b7bda1f4153.2b2a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.da63b0ed-785e-436a-9aa1-2b7bda1f4153.2b2a", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "toegangtotdeoverheid.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "toelatinguitleenmarkt.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.d17942c6-a801-4b24-9b15-3a19f9eba8d6.593d", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.d17942c6-a801-4b24-9b15-3a19f9eba8d6.593d", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "toeristischsimpelveld.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 2 }, "vendors_geclassificeerd": [ "Google AdSense", "Google Analytics", "Google Tag Manager", "Hotjar", "Microsoft Clarity" ], "cookie_counts": { "tracking_classified": 6, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_clck", "vendor": "Microsoft Clarity", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_clsk", "vendor": "Microsoft Clarity", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_EEFYT8XKCP", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_hjSession_20458", "vendor": "Hotjar", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_hjSessionUser_20458", "vendor": "Hotjar", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "clarity.ms", "vendor": "Microsoft Clarity", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "i.clarity.ms", "vendor": "Microsoft Clarity", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "pagead2.googlesyndication.com", "vendor": "Google AdSense", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "script.hotjar.com", "vendor": "Hotjar", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "scripts.clarity.ms", "vendor": "Microsoft Clarity", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "static.hotjar.com", "vendor": "Hotjar", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "6 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "8 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google AdSense", "Google Analytics", "Google Tag Manager", "Hotjar", "Microsoft Clarity" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "toeslagen.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 4, "let_op": 1 }, "vendors_geclassificeerd": [ ".belastingdienst.nl", "AB Tasty", "YouTube", "YouTube static" ], "cookie_counts": { "tracking_classified": 6, "tracking_unclassified": 1, "functional": 0 }, "cookies": [ { "name": "ABTasty", "vendor": ".belastingdienst.nl", "lifetime": "1 jaar", "lifetime_days": 395, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "ABTastySession", "vendor": ".belastingdienst.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "AMCV_6B4320E8637BE4D40A495FD6%40AdobeOrg", "vendor": ".belastingdienst.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "AMCVS_6B4320E8637BE4D40A495FD6%40AdobeOrg", "vendor": ".belastingdienst.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "s_cc", "vendor": ".belastingdienst.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "s_ecid", "vendor": ".belastingdienst.nl", "lifetime": "1 jaar", "lifetime_days": 399, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "ABTastyData", "vendor": null, "lifetime": null, "lifetime_days": null, "party": null, "classified": false, "kind": "tracking", "context": "in localStorage" } ], "trackers": [ { "url_pattern": "ariane.abtasty.com", "vendor": "AB Tasty", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "dcinfos-cache.abtasty.com", "vendor": "AB Tasty", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "i.ytimg.com", "vendor": "YouTube static", "classified": true, "kind": "functional", "context": "vóór consent" }, { "url_pattern": "try.abtasty.com", "vendor": "AB Tasty", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "youtube-nocookie.com", "vendor": "YouTube", "classified": true, "kind": "tracker", "context": "vóór consent, privacy mode" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "6 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "5 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "AB Tasty", "YouTube", "YouTube static" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "6 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".belastingdienst.nl" ], "mode": "noop" }, { "severity": "ernstig", "type": "localstorage-tracking", "wetsartikel": "Tw art. 11.7a (analogie)", "samenvatting": "1 tracking-sleutel(s) in localStorage — kan cookie-walls omzeilen", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "toetredingzorgaanbieders.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.9cfe7b2c-0be3-4686-8278-fb43b43dcc17.1a46", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.9cfe7b2c-0be3-4686-8278-fb43b43dcc17.1a46", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "toetsingscommissievp.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.459ce3d7-1b0d-4eb1-bcf1-217fec95dd33.90f6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.459ce3d7-1b0d-4eb1-bcf1-217fec95dd33.90f6", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "toezichtsociaaldomein.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.227e74a8-a02a-4a84-b6c5-5f5ef01595d4.ce86", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.227e74a8-a02a-4a84-b6c5-5f5ef01595d4.ce86", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "toolkithoudmisdaaduitjebuurt.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.f03ef0a4-c681-4b1b-ad31-68e509e6e2c1.49bf", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.f03ef0a4-c681-4b1b-ad31-68e509e6e2c1.49bf", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "topinkomens.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.2957ef9c-8e82-44e2-a5d1-5ffcfd535e65.d797", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.2957ef9c-8e82-44e2-a5d1-5ffcfd535e65.d797", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "topsectoragrifood.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Google APIs", "Google Fonts/CDN" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "ajax.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "3 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "traconoffice.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.de29fba6-461e-43df-9dc6-35c60bf6ba25.7b12", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.de29fba6-461e-43df-9dc6-35c60bf6ba25.7b12", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "tradeandinnovate.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.7039a0fb-6d5e-4afb-90e6-2312d409e16e.7e8b", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.7039a0fb-6d5e-4afb-90e6-2312d409e16e.7e8b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "tradewithnl.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 2 }, "vendors_geclassificeerd": [ ".nlplatform.com", "Piwik PRO", "nlplatform.com" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.50b56ef7-4f99-48ad-b1b0-52a9d483e97d.f7e9", "vendor": ".nlplatform.com", "lifetime": "1 jaar", "lifetime_days": 392, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn" }, { "name": "_pk_ses.50b56ef7-4f99-48ad-b1b0-52a9d483e97d.f7e9", "vendor": ".nlplatform.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "nlplatform.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "nlplatform.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "nlplatform.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".nlplatform.com", "nlplatform.com" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "transitieagendakunststoffen.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 1, "ernstig": 6, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO", "afvalcirculair.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.13735f3c-ceef-46f7-b0f6-480dfaac4019.b277", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "_pk_ses.13735f3c-ceef-46f7-b0f6-480dfaac4019.b277", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "afvalcirculair.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "afvalcirculair.nl" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "2 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "tropiqua.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 3, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_B4WVFNHE89", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_P0TGEX16DW", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "tst-rds.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "uboregistertrusts.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.5da7f689-0037-4bbc-b65b-fe390043eca1.0e4b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.5da7f689-0037-4bbc-b65b-fe390043eca1.0e4b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "uitelkaarmetkinderen.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.dda3cc17-f2d5-42b0-9991-f8aa4e9c8ef4.ee5e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.dda3cc17-f2d5-42b0-9991-f8aa4e9c8ef4.ee5e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "uwbeslagvrijevoet.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.a5b1ceed-bf25-4af9-8383-c710ebc18372.3499", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.a5b1ceed-bf25-4af9-8383-c710ebc18372.3499", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "uwv.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 2, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Amazon CloudFront", "Mapp Intelligence", "Usabilla" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 3, "functional": 0 }, "cookies": [ { "name": "wt3_eid", "vendor": null, "lifetime": null, "lifetime_days": null, "party": null, "classified": false, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "wt3_sid", "vendor": null, "lifetime": null, "lifetime_days": null, "party": null, "classified": false, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" }, { "name": "wt_rla", "vendor": null, "lifetime": null, "lifetime_days": null, "party": null, "classified": false, "kind": "tracking", "context": "vóór consent (geen banner), blijft na weigeren" } ], "trackers": [ { "url_pattern": "d6tizftlrpuof.cloudfront.net", "vendor": "Amazon CloudFront", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "uwv01.wt-eu02.net", "vendor": "Mapp Intelligence", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "w.usabilla.com", "vendor": "Usabilla", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "api.ipify.org", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 3 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Mapp Intelligence", "Usabilla" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "4 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "uziregister.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.2e937371-545c-4735-8447-c7a24de02edc.34bc", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.2e937371-545c-4735-8447-c7a24de02edc.34bc", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "valuingwaterinitiative.org", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "vanberesteyn.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Google Tag Manager", "Google reCAPTCHA" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Tag Manager", "Google reCAPTCHA" ], "mode": "noop" } ] }, { "domain": "vangbuitenshuis.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 7, "severity_counts": { "kritiek": 1, "ernstig": 6, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO", "afvalcirculair.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.13735f3c-ceef-46f7-b0f6-480dfaac4019.b277", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "_pk_ses.13735f3c-ceef-46f7-b0f6-480dfaac4019.b277", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "afvalcirculair.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), vóór consent, blijft na weigeren" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "afvalcirculair.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "afvalcirculair.nl" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "2 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "veendam.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "veendambeweegt.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Maps", "Google Tag Manager", "Google reCAPTCHA" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_14HSQ2EKL5", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "maps.googleapis.com", "vendor": "Google Maps", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "4 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Maps", "Google Tag Manager", "Google reCAPTCHA" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "veiligepubliekedienstverlening.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.ca75ca21-0503-4c26-b9d5-6b4caf6dc9a9.f7cf", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.ca75ca21-0503-4c26-b9d5-6b4caf6dc9a9.f7cf", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "vera-2r.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.f67e5102-7b12-420b-9b02-4616bdc8e37d.2160", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.f67e5102-7b12-420b-9b02-4616bdc8e37d.2160", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "verduursamen2030.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 0, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piwik" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.2.39e9", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), lange bewaartermijn" }, { "name": "_pk_ses.2.39e9", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig)" } ], "trackers": [ { "url_pattern": "bergen.logging.simanalytics.nl", "vendor": "Piwik", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik" ], "mode": "noop" }, { "severity": "ernstig", "type": "no-refuse-button", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "Geen 'weigeren'-knop kunnen vinden ondanks aanwezige banner — mogelijk dark pattern of obscured opt-out", "vendors_betrokken": [], "mode": "refuse-detection" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "verlofadviescollege.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.fb632315-0d52-441c-8fc3-b08c5d9631a6.8cc0", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.fb632315-0d52-441c-8fc3-b08c5d9631a6.8cc0", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "versnellingshuisce.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Google reCAPTCHA" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google reCAPTCHA" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "versterkenweerbaarheid.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.afdbd614-9912-46fd-9a2f-6373041eb6ea.51c5", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.afdbd614-9912-46fd-9a2f-6373041eb6ea.51c5", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "versterkingvth.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "New Relic", "Piwik PRO", "minienw.sitearchief.nl" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4ce6abe8-7973-4e60-a50a-65bc5efb0621.da54", "vendor": "minienw.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.4ce6abe8-7973-4e60-a50a-65bc5efb0621.da54", "vendor": "minienw.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "minienw.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "minienw.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "minienw.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "bam.nr-data.net", "vendor": "New Relic", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "js-agent.newrelic.com", "vendor": "New Relic", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "New Relic", "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "minienw.sitearchief.nl" ], "mode": "noop" } ] }, { "domain": "verwijzingsportaalbankgegevens.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "veva.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ ".youtube.com", "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 8, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_KJ439382MH", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_QEHJ078XXK", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat_UA-28769218-1", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "VISITOR_INFO1_LIVE", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "VISITOR_PRIVACY_METADATA", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "YSC", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "8 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "3 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".youtube.com" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "virtuele-tour-rechtspraak.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "visinhetho.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "visithaarlemmermeer.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 0, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [] }, { "domain": "visserijinnovatienetwerk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 4, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.931b1ab0-6be8-4588-a861-7e0e0873261b.1257", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "4 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "vnacs.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.cf77be12-b24e-4cfb-9b82-845065d5ac91.8592", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.cf77be12-b24e-4cfb-9b82-845065d5ac91.8592", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "volkshuisvestingnederland.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.562f58b4-457e-46a3-b549-8fcdc1421196.ee97", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.562f58b4-457e-46a3-b549-8fcdc1421196.ee97", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "vveladen.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 2 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "weak-referrer-policy", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Referrer-Policy 'no-referrer-when-downgrade' deelt mogelijk URL-data met derde partijen", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "waarborg.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 4, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_Q1GWM6K97Y", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat_gtag_UA_109264123_1", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "4 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "waarzitwatin.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.917d1bd8-19f7-47aa-a9bf-8f020eb2008f.95f5", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.917d1bd8-19f7-47aa-a9bf-8f020eb2008f.95f5", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "wabes.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "waterasleverage.org", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "waterkwaliteitscheck.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.364381ea-3bc2-4cae-a304-edb52660bebc.4e2e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.364381ea-3bc2-4cae-a304-edb52660bebc.4e2e", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "waterveiligheidsportaal.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4a4389ae-4558-4949-b53f-a23cb8327e83.0bb1", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.4a4389ae-4558-4949-b53f-a23cb8327e83.0bb1", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "watwerktvooronsrijk.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ "Piwik PRO", "abx03.sitearchief.nl", "minbzk.sitearchief.nl" ], "cookie_counts": { "tracking_classified": 7, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.4317c378-1cf9-4216-8753-595f867b3b4f.6ece", "vendor": "abx03.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_id.4ce6abe8-7973-4e60-a50a-65bc5efb0621.5dc4", "vendor": "minbzk.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.4317c378-1cf9-4216-8753-595f867b3b4f.6ece", "vendor": "abx03.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "_pk_ses.4ce6abe8-7973-4e60-a50a-65bc5efb0621.5dc4", "vendor": "minbzk.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_last_interaction", "vendor": "abx03.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_returning_visitor", "vendor": "abx03.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "stg_traffic_source_priority", "vendor": "abx03.sitearchief.nl", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "abx03.sitearchief.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "10 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "10 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "abx03.sitearchief.nl", "minbzk.sitearchief.nl" ], "mode": "noop" } ] }, { "domain": "weerbareoverheid.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "werkcentrumregioamersfoort.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Cloudflare", "Cookiebot", "Google APIs", "Google Fonts/CDN", "ReadSpeaker", "Vimeo" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "cdn-na.readspeaker.com", "vendor": "ReadSpeaker", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "cdnjs.cloudflare.com", "vendor": "Cloudflare", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consent.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "player.vimeo.com", "vendor": "Vimeo", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "7 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "werkcentrumrijnmond.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Cloudflare", "Cookiebot", "Google APIs", "Google Fonts/CDN", "ReadSpeaker" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "cdn-na.readspeaker.com", "vendor": "ReadSpeaker", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "cdnjs.cloudflare.com", "vendor": "Cloudflare", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consent.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "6 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "werkcentrumzuidkennemerlandenijmond.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 0, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Cookiebot", "Google", "Google APIs", "Google AdSense", "Google Analytics", "Google Fonts/CDN", "Google Tag Manager", "Google reCAPTCHA" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "ajax.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consent.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "consentcdn.cookiebot.com", "vendor": "Cookiebot", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.google.com/recaptcha/api.js?render=6LcuXNMrAAAAAHDwnZMSpnnvUHVtOuHG8", "vendor": "Google", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-WVEFP3R70L&cx=c>m=4e64u0", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-P3L6PV6C", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "pagead2.googlesyndication.com", "vendor": "Google AdSense", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "plannen.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "4 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google AdSense", "Google Analytics", "Google Tag Manager", "Google reCAPTCHA" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "3 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "11 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "werkenbijcbg.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [ "Google Maps", "Google reCAPTCHA" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "maps.googleapis.com", "vendor": "Google Maps", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Maps", "Google reCAPTCHA" ], "mode": "noop" } ] }, { "domain": "werkenbijdefensie.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 9, "severity_counts": { "kritiek": 3, "ernstig": 5, "let_op": 1 }, "vendors_geclassificeerd": [ "Adform", "Adition", "Adobe Audience Manager", "AppNexus", "BidSwitch", "Casale Media", "Eyeota", "Google", "Google Ads", "Google Ads (DoubleClick)", "Google Analytics", "Google Tag Manager", "Google reCAPTCHA", "ID5", "Improve Digital", "LiveRamp", "Matomo", "OnAudience", "OpenX", "PubMatic", "Rubicon Project", "Smaato", "Smart AdServer", "The Trade Desk", "Yieldlab" ], "cookie_counts": { "tracking_classified": 9, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_ga_CXNMQEENS0", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn, blijft na weigeren" }, { "name": "_pk_id.1.25e3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "gezet na weigeren" }, { "name": "_pk_ses.1.25e3", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "gezet na weigeren" }, { "name": "CMID", "vendor": "Casale Media", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "CMPS", "vendor": "Casale Media", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "demdex", "vendor": "Adobe Audience Manager", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "dpm", "vendor": "Adobe Audience Manager", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "IDE", "vendor": "Google Ads (DoubleClick)", "lifetime": "1 jaar", "lifetime_days": 389, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, lange bewaartermijn, blijft na weigeren" } ], "trackers": [ { "url_pattern": "ad.360yield.com", "vendor": "Improve Digital", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "ad.yieldlab.net", "vendor": "Yieldlab", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "c1.adform.net", "vendor": "Adform", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "cm.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick, blijft na weigeren, actief na refuse" }, { "url_pattern": "dpm.demdex.net", "vendor": "Adobe Audience Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "dsp.adfarm1.adition.com", "vendor": "Adition", "classified": true, "kind": "tracker", "context": "vóór consent, Virtual Minds" }, { "url_pattern": "dsum-sec.casalemedia.com", "vendor": "Casale Media", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "eu-u.openx.net", "vendor": "OpenX", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "google.com", "vendor": "Google reCAPTCHA", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "https://track.adform.net/serving/scripts/trackpoint/async/", "vendor": "Adform", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://track.adform.net/Serving/TrackPoint/?CC=1&pm=2258031&ADFPageName=maxi_we", "vendor": "Adform", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://track.adform.net/Serving/TrackPoint/?pm=2258031&ADFPageName=maxi_werkenb", "vendor": "Adform", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.google.com/recaptcha/enterprise.js?render=6LdmYhYrAAAAANtIfHw51iaXdU", "vendor": "Google", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtag/js?id=G-CXNMQEENS0&cx=c>m=4e64t1", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-5NCWLXL", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "id5-sync.com", "vendor": "ID5", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "idsync.rlcdn.com", "vendor": "LiveRamp", "classified": true, "kind": "tracker", "context": "vóór consent, RampID" }, { "url_pattern": "match.adsrvr.org", "vendor": "The Trade Desk", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "pixel.onaudience.com", "vendor": "OnAudience", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "ps.eyeota.net", "vendor": "Eyeota", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "rtb-csync.smartadserver.com", "vendor": "Smart AdServer", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "s.ad.smaato.net", "vendor": "Smaato", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "s2.adform.net", "vendor": "Adform", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "secure.adnxs.com", "vendor": "AppNexus", "classified": true, "kind": "tracker", "context": "vóór consent, Xandr" }, { "url_pattern": "simage2.pubmatic.com", "vendor": "PubMatic", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "token.rubiconproject.com", "vendor": "Rubicon Project", "classified": true, "kind": "tracker", "context": "vóór consent, Magnite" }, { "url_pattern": "track.adform.net", "vendor": "Adform", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "x.bidswitch.net", "vendor": "BidSwitch", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "a.audrte.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "aa.agkn.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "ads.smartstream.tv", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "cm.adsafety.net", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "cookie-matching.mediarithmics.com", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "cookie-set-after-refuse", "wetsartikel": "AVG art. 6 — geen rechtsgrondslag", "samenvatting": "NIEUWE tracking cookie(s) gezet NA klikken op 'weigeren' — flagrant in strijd met de wet", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 7 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "7 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "24 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Adform", "Adition", "Adobe Audience Manager", "AppNexus", "BidSwitch", "Casale Media", "Eyeota", "Google Ads", "Google Analytics", "Google Tag Manager", "Google reCAPTCHA", "ID5", "Improve Digital", "LiveRamp", "OnAudience", "OpenX", "PubMatic", "Rubicon Project", "Smaato", "Smart AdServer", "The Trade Desk", "Yieldlab" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "2 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "5 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ "Adobe Audience Manager", "Casale Media", "Google Ads (DoubleClick)" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "6 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "49 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "3 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "werkenbijderaadvanstate.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "werkenbijdesvb.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 2 }, "vendors_geclassificeerd": [ ".youtube.com", "Google Ads", "Google Analytics", "Google Analytics (legacy)", "Google Tag Manager", "YouTube static" ], "cookie_counts": { "tracking_classified": 8, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "__utmz", "vendor": "Google Analytics (legacy)", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_LBW0Y9YGL1", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_gat_UA-167203858-1", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_gid", "vendor": "Google Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "VISITOR_INFO1_LIVE", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "VISITOR_PRIVACY_METADATA", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" }, { "name": "YSC", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent" } ], "trackers": [ { "url_pattern": "google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "googleads.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "i.ytimg.com", "vendor": "YouTube static", "classified": true, "kind": "functional", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "static.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "8 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "6 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads", "Google Analytics", "Google Tag Manager", "YouTube static" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "3 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".youtube.com" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "werkenbijdkh.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 0, "ernstig": 3, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Tag Manager", "Matomo", "Matomo Cloud" ], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "//cdn.matomo.cloud/werkenbijdkh.matomo.cloud/matomo.js", "vendor": "Matomo", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "cdn.matomo.cloud", "vendor": "Matomo Cloud", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "https://www.googletagmanager.com/gtm.js?id=GTM-P9KWCBF", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "blijft na weigeren, script blijft" }, { "url_pattern": "werkenbijdkh.matomo.cloud", "vendor": "Matomo Cloud", "classified": true, "kind": "tracker", "context": "vóór consent, blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Tag Manager", "Matomo Cloud" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "2 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "3 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "let_op", "type": "missing-csp-frame-ancestors", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "CSP mist frame-ancestors directive (clickjacking-risico)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "werkenbijhaarlemmermeer.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "cdn.tsf.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "1 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "werkenbijhetcak.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "werkenbijhetcjib.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "werkenbijschadefonds.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_LC4E1YYFDW", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "werkenvoorgroningen.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [ { "url_pattern": "cdn.tsf.nl", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "1 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "werkplaatsvoorlandbouwennatuur.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 5, "severity_counts": { "kritiek": 2, "ernstig": 3, "let_op": 0 }, "vendors_geclassificeerd": [ ".youtube.com", "Google", "Google APIs", "Google Ads", "Google Fonts/CDN", "YouTube (Google)", "YouTube static" ], "cookie_counts": { "tracking_classified": 3, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "VISITOR_INFO1_LIVE", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "VISITOR_PRIVACY_METADATA", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" }, { "name": "YSC", "vendor": ".youtube.com", "lifetime": null, "lifetime_days": null, "party": "third-party", "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), vóór consent, blijft na weigeren" } ], "trackers": [ { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "google.com", "vendor": "Google", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "googleads.g.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick, blijft na weigeren, actief na refuse" }, { "url_pattern": "i.ytimg.com", "vendor": "YouTube static", "classified": true, "kind": "functional", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "jnn-pa.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "static.doubleclick.net", "vendor": "Google Ads", "classified": true, "kind": "tracker", "context": "vóór consent, DoubleClick, blijft na weigeren, actief na refuse" }, { "url_pattern": "youtube.com", "vendor": "YouTube (Google)", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 3 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "3 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Ads", "YouTube static" ], "mode": "noop" }, { "severity": "ernstig", "type": "third-party-cookie-on-load", "wetsartikel": "AVG art. 6 + Tw art. 11.7a", "samenvatting": "3 third-party tracking cookie(s) direct bij paginalaad — vereist expliciete toestemming", "vendors_betrokken": [ ".youtube.com" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "7 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "wiegebruiktmijngegevens.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "wijsimpelveld.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 3, "let_op": 2 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager", "Twitter/X Short URL Pixel" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_F88X5NVZ05", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "https://wijkconnect.com/uploads/wijken/partners/Logo%20WijSi", "vendor": "Twitter/X Short URL Pixel", "classified": true, "kind": "tracker", "context": "in HTML" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "ernstig", "type": "tracking-pixel", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracking pixel(s) gedetecteerd in HTML — laden zonder interactie", "vendors_betrokken": [ "Twitter/X Short URL Pixel" ], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "windopzee.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 6, "severity_counts": { "kritiek": 1, "ernstig": 5, "let_op": 0 }, "vendors_geclassificeerd": [ "Google", "Google APIs", "Google Fonts/CDN", "Matomo", "Piano Analytics", "Piwik PRO", "YouTube", "YouTube (Google)", "YouTube static" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.a3d3b189-9f6f-4f78-b0ff-5dfd2b4c5e05.42b8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "_pk_ses.a3d3b189-9f6f-4f78-b0ff-5dfd2b4c5e05.42b8", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (banner aanwezig), blijft na weigeren" } ], "trackers": [ { "url_pattern": "fonts.gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "google.com", "vendor": "Google", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "gstatic.com", "vendor": "Google Fonts/CDN", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "i.ytimg.com", "vendor": "YouTube static", "classified": true, "kind": "functional", "context": "vóór consent, blijft na weigeren, actief na refuse" }, { "url_pattern": "jnn-pa.googleapis.com", "vendor": "Google APIs", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted, blijft na weigeren, actief na refuse" }, { "url_pattern": "youtube-nocookie.com", "vendor": "YouTube", "classified": true, "kind": "tracker", "context": "vóór consent, privacy mode, blijft na weigeren, actief na refuse" }, { "url_pattern": "youtube.com", "vendor": "YouTube (Google)", "classified": true, "kind": "tracker", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "yt3.ggpht.com", "vendor": "YouTube (Google)", "classified": true, "kind": "functional", "context": "blijft na weigeren, actief na refuse" }, { "url_pattern": "https://statistiek.rijksoverheid.nl/ppms.js", "vendor": null, "classified": false, "kind": "tracker", "context": "blijft na weigeren, script blijft" } ], "findings": [ { "severity": "kritiek", "type": "refuse-not-honored", "wetsartikel": "AVG art. 7(3) — recht op intrekking", "samenvatting": "WEIGEREN WERKT NIET: 5 tracking cookie(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "3 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO", "YouTube", "YouTube static" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "ernstig", "type": "tracking-cookie-pre-consent", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — banner aanwezig maar tracking begint vóór klik", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "tracker-script-after-refuse", "wetsartikel": "Tw art. 11.7a", "samenvatting": "1 tracker-script(s) blijven geladen na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" }, { "severity": "ernstig", "type": "tracker-active-after-refuse", "wetsartikel": "Tw art. 11.7a + AVG art. 7(3)", "samenvatting": "9 bekende tracker(s) blijven actief na klikken op 'weigeren'", "vendors_betrokken": [], "mode": "refuse-delta" } ] }, { "domain": "wkotool.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.485de1a1-66a6-4d28-9fa6-eec9e1a6eb41.d2ea", "vendor": "Matomo", "lifetime": "1 jaar", "lifetime_days": 392, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_pk_ses.485de1a1-66a6-4d28-9fa6-eec9e1a6eb41.d2ea", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rvo.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "1 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "wodc.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.1442f3d9-2bde-4674-9b7a-090751b8c261.4f6b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.1442f3d9-2bde-4674-9b7a-090751b8c261.4f6b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "woneninhetriet.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "wozep.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 0 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "youthatheart.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.644320a0-02fc-439e-8676-65c9d0a1e781.df65", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.644320a0-02fc-439e-8676-65c9d0a1e781.df65", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "zeeweringen.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "zeroemissiedoelgroepenvervoer.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 1, "severity_counts": { "kritiek": 0, "ernstig": 0, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "zetjefietshelmop.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.86cd302b-3310-4f2b-871c-824635bc4cd2.f41b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.86cd302b-3310-4f2b-871c-824635bc4cd2.f41b", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "zichtoprekenkamers.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "zichtopwijken.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 4, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 1 }, "vendors_geclassificeerd": [ "Google Analytics", "Google Tag Manager" ], "cookie_counts": { "tracking_classified": 2, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_ga", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" }, { "name": "_ga_TXC5TRTTCL", "vendor": "Google Analytics", "lifetime": "1 jaar", "lifetime_days": 399, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner), lange bewaartermijn" } ], "trackers": [ { "url_pattern": "googletagmanager.com", "vendor": "Google Tag Manager", "classified": true, "kind": "tracker", "context": "vóór consent" }, { "url_pattern": "region1.google-analytics.com", "vendor": "Google Analytics", "classified": true, "kind": "tracker", "context": "vóór consent" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "2 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "2 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Google Analytics", "Google Tag Manager" ], "mode": "noop" }, { "severity": "let_op", "type": "long-lifetime-cookie", "wetsartikel": "AVG art. 5(1)(e) — opslagbeperking", "samenvatting": "2 tracking cookie(s) met bewaartermijn van meer dan een jaar", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "zonmw-jeugdmagazines.nl", "scan_date": "2026-05-04", "scanner_version": "3.3.2", "totaal_bevindingen": 2, "severity_counts": { "kritiek": 0, "ernstig": 1, "let_op": 1 }, "vendors_geclassificeerd": [], "cookie_counts": { "tracking_classified": 0, "tracking_unclassified": 0, "functional": 0 }, "cookies": [], "trackers": [], "findings": [ { "severity": "ernstig", "type": "no-privacy-policy", "wetsartikel": "AVG art. 13 — informatieplicht", "samenvatting": "Geen privacyverklaring gevonden via linkanalyse op de homepage", "vendors_betrokken": [], "mode": "noop" }, { "severity": "let_op", "type": "missing-hsts", "wetsartikel": "AVG art. 32 — beveiliging", "samenvatting": "Geen Strict-Transport-Security header (HSTS ontbreekt)", "vendors_betrokken": [], "mode": "noop" } ] }, { "domain": "zorgenjeugdcn.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.d87dbcaf-f058-472b-b1a3-c0aea1383b72.1490", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.d87dbcaf-f058-472b-b1a3-c0aea1383b72.1490", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "zorginstituutnederland.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.63ae2147-5846-4c1b-99be-f1db0a44bd77.f3d1", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.63ae2147-5846-4c1b-99be-f1db0a44bd77.f3d1", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] }, { "domain": "zovar.nl", "scan_date": "2026-05-05", "scanner_version": "3.3.2", "totaal_bevindingen": 3, "severity_counts": { "kritiek": 1, "ernstig": 2, "let_op": 0 }, "vendors_geclassificeerd": [ "Matomo", "Piano Analytics", "Piwik PRO" ], "cookie_counts": { "tracking_classified": 5, "tracking_unclassified": 0, "functional": 0 }, "cookies": [ { "name": "_pk_id.819460ee-5563-4a78-a33d-428516c38a68.cb19", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "_pk_ses.819460ee-5563-4a78-a33d-428516c38a68.cb19", "vendor": "Matomo", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_last_interaction", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_returning_visitor", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" }, { "name": "stg_traffic_source_priority", "vendor": "Piano Analytics", "lifetime": null, "lifetime_days": null, "party": null, "classified": true, "kind": "tracking", "context": "vóór consent (geen banner)" } ], "trackers": [ { "url_pattern": "statistiek.rijksoverheid.nl", "vendor": "Piwik PRO", "classified": true, "kind": "tracker", "context": "vóór consent, first-party hosted" } ], "findings": [ { "severity": "kritiek", "type": "tracking-cookie-pre-consent-no-banner", "wetsartikel": "Telecommunicatiewet art. 11.7a", "samenvatting": "5 tracking cookie(s) gezet vóór toestemming — GEEN cookiebanner gedetecteerd", "vendors_betrokken": [], "mode": "noop" }, { "severity": "ernstig", "type": "external-tracker-pre-consent", "wetsartikel": "AVG art. 28 + Tw art. 11.7a", "samenvatting": "1 bekende externe tracker(s) geladen vóór consent", "vendors_betrokken": [ "Piwik PRO" ], "mode": "noop" }, { "severity": "ernstig", "type": "cname-cloaking", "wetsartikel": "AVG art. 5(1)(a) — transparantie + AVG art. 13", "samenvatting": "1 CNAME-cloaking bevinding(en): first-party camouflage van tracking — omzeilt browser-bescherming en ad-blockers op domeinnaam", "vendors_betrokken": [], "mode": "all" } ] } ] }