Privacy statement

This website is fully static: it has no registration form, no contact form and no database. This site itself does not collect, store or process any personal data on its own servers.

Where you see a 'Register' or email link, clicking it simply opens your own email programme with a pre-filled address and subject line. The website itself never receives, stores or forwards that message — it goes straight from your device to our mailbox, where the usual rules for business correspondence apply.

We use one functional cookie, NEXT_LOCALE, to remember your language choice so the site doesn't ask again on every visit. It is placed regardless of consent — it is strictly necessary for the requested functionality — and is valid for one year.

If Google Analytics and/or Microsoft Clarity are active on this site, we also place a second functional cookie, cookie-consent, that records your choice in the cookie banner for about 180 days.

While an event announcement is running, we place a third functional cookie (its name starts with hwc-notice-) that remembers you have already seen that message, so it does not reappear on every page; it expires after 90 days. Such an announcement is sometimes meant only for visitors in a particular country. To determine that, our hosting provider Vercel derives the country from your IP address; we receive only that country code (for example NL), store it nowhere and link it to nothing. Your IP address itself never reaches us. The legal basis is our legitimate interest in showing a relevant announcement once (Article 6(1)(f) GDPR).

Only after your explicit consent via the cookie banner do we place statistics cookies from Google Analytics (cookie names such as _ga and _ga_*) to see how the site is used; IP addresses are anonymised. You can change or withdraw your choice at any time via 'Cookie settings' in the footer — withdrawing removes the Google Analytics cookies and reloads the page.

Only after your explicit consent via the cookie banner, we also use Microsoft Clarity to see how visitors use the site. Clarity records mouse movements, clicks, scrolling behaviour and screen dimensions, and turns this into heatmaps and a visual reconstruction of the visit, so we can see where visitors run into trouble and make the site more user-friendly.

Text you type into form fields is masked: it is never captured or sent to Microsoft.

The legal basis is your consent (Article 6(1)(a) GDPR); you can withdraw it at any time via 'Cookie settings' in the footer. The processor is Microsoft Corporation; where data is processed outside the EEA, this happens on the basis of the European Commission's standard contractual clauses.

Clarity places the cookies _clck (1 year) and _clsk (1 day). Microsoft retains session recordings for 30 days by default.

The language cookie serves the site in your preferred language; this is necessary for the functionality you request. Google Analytics and Microsoft Clarity, used only after your explicit consent, help us understand how the site is used so we can improve it (Article 6(1)(a) GDPR).

We share data only where necessary: with Vercel, which hosts this website, and — only after your consent — with Google for website statistics (Google Analytics) and with Microsoft for session recordings and heatmaps (Microsoft Clarity). We never sell your data.

Processing takes place within the European Economic Area where possible; where a service could process data outside the EEA, this happens on the basis of the European Commission's standard contractual clauses.

Because this site collects no personal data of its own, there is no separate retention period for visitor data beyond the cookies described above. The language cookie expires automatically after one year and the cookie-consent choice after about 180 days. Google Analytics cookies are retained and processed by Google under its own privacy policy. For Google Analytics we have set the retention period to 14 months; after that, Google deletes the underlying event and user data. Microsoft Clarity has its own retention periods, set out in the Microsoft Clarity section above.

We take appropriate technical and organisational measures to protect this website. It is served entirely over a secure connection (HTTPS).

Because this site does not itself collect personal data, there is generally nothing on file about you to access, correct or delete beyond the cookies stored in your own browser, which you control directly — including via 'Cookie settings' in the footer. If you have emailed us and want to exercise a right under the GDPR regarding that correspondence — access, rectification, erasure or objection — contact us at info@lasinstituut.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We may update this privacy statement from time to time. The current version is always available on this page.