Does your website keep its promises?

Your cookie banner and privacy statement tell visitors what happens to their data. In the website review we check whether your website lives up to that. Where it does not, you get the fix for each finding, ready for your web team.

A no-obligation 30-minute call.

Website review

  • Cookie banner
  • Cookies before consent
  • Data flows to third parties
Including 12 months of assurance

Three tests you can't run without technical know-how

We review several pages of your website and record what happens. Then we compare that with what your cookie banner promises.

Assessment frameworkWe assess against the GDPR and article 11.7a of the Dutch Telecommunications Act, following the guidelines of the Dutch Data Protection Authority and the EDPB.

  1. Cookie banner

    We check whether a cookie banner appears, and whether visitors can reject as easily as they can accept.

  2. Cookies before consent

    For every cookie, we record whether it is set before your visitor has made a choice, and which party it comes from.

  3. Data flows to third parties

    Your website sends data to other parties, such as IP addresses and browsing behaviour. We map out which parties those are and whether they are based outside the EU.

A report for you and your web team

The findings with the highest risk come first. Each finding has three parts.

Finding
What happens on your website.
Legal background
Which rule applies, with the source.
Technical fix
What needs to change, and how.
Example from a report
Finding

TikTok Pixel places cookies (such as _ttp) before consent

Legal background

Without consent, only functional cookies and analytics cookies with no or minimal privacy impact are allowed (Art. 11.7a(3) Dutch Telecommunications Act). TikTok uses the data for advertising and audiences, so that exemption does not apply here.

Technical fix

Only let the TikTok Pixel load after your visitor has agreed in the cookie banner. If the tag runs through a tag manager, link it to the consent status there.

Finding 1 of 4. TikTok Pixel places cookies (such as _ttp) before consent
Shortened version. Your own report gives the full explanation for every finding, with sources.

From intake to a year of assurance

You speak with us twice on a video call, at the intake and once the report is ready. We do the digging, and your web team or marketing agency makes the changes.

  1. Intake

    video call

    We discuss which websites we review, what role your marketing agency plays and which privacy statement applies.

  2. Website review

    three tests

    We run the three tests and record what we find on your website.

  3. Report

    sorted by risk

    You can keep it as proof that you're in control.

  4. Technical fix per finding

    ready for your web team

    Each fix is written for the person who carries it out, so nothing needs translating.

  5. Discussion: who needs to change what?

    video call

    We go through the report together and agree who picks up each finding.

  6. Recheck

    after the fix

    Once the changes are made, we review again. That tells you whether the fixes work.

  7. 12 months of assurance

    52 weekly checks

    After that, our platform checks your website automatically every week for a full year. If something changes, we let you know.

Good to know

Pim Kitzen

Go through the risk analysis with me.

In an intro call we go through which websites are involved and how the website review would work for you.

A no-obligation 30-minute call.