Privacy statement

Own Your Spot, an initiative of the municipality of Leeuwarden and reachable via oys@leeuwarden.nl, attaches great importance to the protection of your personal data and complies with the General Data Protection Regulation (GDPR). In this privacy statement we inform you about how we handle personal data.

What data do we collect?

Via email, phone or WhatsApp: your name, email address or phone number and the content of your message.

Via Google Analytics: data about search behaviour on our website.

Please note: not providing certain data may mean we cannot fully process your request (for example, getting in touch).

Purpose of data processing and legal grounds

We process your personal data for the following purposes and on the following legal grounds:

Contact via email, phone or WhatsApp. Purpose: to contact you and respond to your messages. Legal ground: consent — you contact us yourself and thereby give consent to use your data to respond.

Google Analytics. Purpose: to gain insight into our visitors' search behaviour and to improve our website. Legal ground: consent via the cookie banner and legitimate interest (website improvement).

Google Analytics and Google Tag Manager

We use Google Analytics to collect data about search behaviour on our website. This includes:

• Internal searches.
• Number of users using the search function.
• Session statistics.
• Approximate geolocation.
• Browser and device data.

We take measures to protect your privacy, such as IP anonymisation.

We use Google Tag Manager to manage technical scripts (such as Google Analytics) on our website. Google Tag Manager does not collect personal data itself, but facilitates placing and managing cookies and tracking tools.

Webflow

Our website is built with Webflow. Webflow may collect and process certain data as part of its services. For more information about their data processing, see their privacy policy.

Retention period

We do not keep your data longer than necessary:

• Contact details: up to 1 year after the last contact.
• Google Analytics data: up to 26 months.

Sharing data

We do not share data outside the EU, except as described under 'Third parties'.

We do not use automated decision-making or profiling.

Your rights

You have the right to:

• Access, correct and delete your data.
• Restrict processing.
• Data portability.
• Object to processing.
• Withdraw consent (where applicable).

How? Send a request to oys@leeuwarden.nl. We will respond as soon as possible.

Complaints

Do you have a complaint about the processing of your data? Contact us via oys@leeuwarden.nl. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via www.autoriteitpersoonsgegevens.nl.

Cookies

We use a Finsweet cookie bot for cookie compliance. You can adjust your preferences via the cookie banner. We use the following categories of cookies:

• Functional cookies: necessary for the basic functionality of the website. Consent required: no, these cookies are essential for the website to function.
• Analytical cookies: for analysing website use and improving our services. Consent required: yes, via the cookie banner.
• Marketing cookies: for marketing purposes and ad personalisation. Consent required: yes, via the cookie banner.

Specifically, we place the following cookies: an essential cookie from our cookie banner that remembers your cookie preferences, and — only after you have given consent — the analytical cookies from Google Analytics (_ga and _ga_ followed by a code; provider: Google; purpose: anonymised visitor statistics; retention period: up to 2 years).

We do not use personalisation cookies on our website. Via Google Tag Manager, cookies and scripts are placed for analytical purposes (e.g. Google Analytics) and marketing purposes (where applicable). You can accept or refuse these cookies via our cookie banner, and adjust your preferences at any time.

Security

We take appropriate measures to protect your data:

• Encryption of data traffic (HTTPS).
• Access control to systems.
• Secure storage with third parties (Webflow).

Third parties

We use Google Tag Manager to manage third-party scripts (such as Google Analytics). These parties may process data outside the EU. Google complies with the EU-US Data Privacy Framework, which provides an adequate level of protection for data transfers to the US.

The WhatsApp community is subject to the privacy policy of WhatsApp (Meta). Participation is voluntary.

Changes

We reserve the right to amend this privacy statement. The current version is always available on our website.

Last updated: 27 August 2026