Cookie statement

Cookies, and the things that are not cookies

Strictly speaking, this site sets no cookies of its own. What it stores is a local storage entry — a small piece of text that stays in your browser and, unlike a cookie, is never attached to a request or sent to us. Dutch and European law treat both the same way: if we put something on your device, or read something from it, we have to tell you and, unless it is strictly necessary, ask first. That is what this page and the consent banner are for.

What is stored on your device

The record of your choice

When you answer the banner, we write one entry to your browser’s local storage under the key lv-consent. It is set by this site only — it is first-party, it has no identifier in it, and it never leaves your device. It holds three things: a version number for the record, the date and time you answered, and one yes or no for each of the four categories below. Functional is always recorded as yes, because that category is what makes the site work at all.

If your browser blocks storage, nothing breaks. Your choice simply is not remembered, and the banner asks again next time.

Google Analytics — GT-WBTCR2CL

If — and only if — you allow statistics, we load Google Analytics from www.googletagmanager.com under the measurement ID GT-WBTCR2CL, and it sets its own cookies (typically named _ga and _ga_…) to tell one visit from the next. We ask Google to truncate IP addresses. We use it to count page views and see which pages people actually read; we do not use it for advertising and we do not join it to anything else.

Before any of that can happen, we set Google’s Consent Mode v2 defaults to denied — for analytics storage, ad storage, ad user data and ad personalisation alike. Those defaults are registered as the site boots, before any Google tag can be requested, which means that even if a tag were to fire early it would have nothing to store. The Analytics script itself is not merely disabled before consent; it is never requested at all.

The four categories

These are the choices the banner offers, and what each one really controls on this site. Two of them currently switch nothing on — we still ask, so that your answer is on record if that ever changes.

What this site does not do

• No fonts from Google. Our two typefaces are served from our own domain, so loading a page makes no request to Google Fonts and hands over no IP address.
• No embedded third-party frames. Video lives on YouTube and our vacancies live on a recruitment platform; we link out to both instead of embedding them, so their cookies only ever reach you if you choose to follow the link.
• No advertising or social tracking pixels. None, in any category.
• No silent exceptions. The site ships a content security policy that allows scripts from our own domain and from Google’s tag host, and network calls to Google’s analytics endpoints, and to nowhere else. Anything not described on this page could not load even if someone added it by mistake.

Changing or withdrawing your consent

At the bottom of every page there is a Cookie preferences button. It reopens the same panel with your current answers filled in, so you can turn a category off as easily as you turned it on. There is no penalty for saying no, and no part of this site stops working if you do.

Withdrawal takes effect immediately: we tell Google straight away that consent is gone, and it stops storing anything from that moment. The script that was already loaded during your visit disappears on your next full page load. If you would rather not rely on us at all, clearing site data for lionsville.nl in your browser removes the stored choice and any Analytics cookies together.

How long your choice is kept

The lv-consent entry has no expiry date of its own. It stays on your device until one of three things happens: you change your answer, you clear your browser’s storage for this site, or we change what we ask for. In that last case the stored record no longer matches the current version, your old answer is discarded, and the banner asks you again — consent is never carried over to something you have not seen.

Data collected by Google Analytics, if you allowed it, is held by Google under Google’s own retention settings rather than ours.

The law this follows

In the Netherlands, storing information on your device or reading information from it is governed by article 11.7a of the Telecommunicatiewet, the Dutch implementation of the European ePrivacy Directive. It requires clear information and prior consent for anything that is not strictly necessary to deliver the service you asked for. That is why the functional category is always active while the other three are off until you turn them on.

Where that storage involves personal data, the General Data Protection Regulation (GDPR) applies as well. Our legal basis for the optional categories is your consent, under article 6(1)(a). You may withdraw it at any time under article 7(3), and withdrawing must be as easy as giving it — hence the button in the footer. Your broader rights, and how to exercise them, are set out in our privacy statement.

Who is responsible

The controller for the processing described on this page is Lionsville B.V.:

Questions about cookies, consent or anything else on this page can go to info@lionsville.nl, or through our contact page. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.