RU EN
www.
Technical audit · 16.06.2026

rechtspraak.nl

Website of the Dutch judiciary
NL

Rechtspraak.nl is the website of the Dutch judiciary, the official portal for the courts. Homepage scan: 32 requests, 5 domains. The configuration is exemplary. The judiciary runs its web statistics on its own Piwik PRO engine, deployed on its own subdomain, and the policy explicitly states that the statistics are collected without storing behavior or personal data such as IP address. Additionally, a functional survey widget and an image-delivery network run. The scan shows no Google Analytics, no Facebook, no advertising, no session recording, and no third-party commercial trackers. Not a single cookie was set during the session. No violations were recorded.

Request timeline

623 ms · own statistics on its own subdomain
The judiciary's own web statistics load, built on the Piwik PRO platform, deployed on its own subdomain.
643 ms · survey widget
A functional survey widget loads for collecting feedback.
1169 ms · pageview sent
The statistics tool sends pageview data without parameters tied to a visitor identifier. This is consistent with the anonymized mode described in the policy.
1243 ms · theme images from CDN
Styling images load from a content delivery network — functional page resources.
statistics anonymized, no cookie set
The policy explicitly states that the statistics are collected without storing behavior or personal data such as the user's IP address, and are therefore exempt from consent. Not a single cookie was set during the session.

Declared versus actual

✓ Piwik (statistics, anonymized) — declared
✓ Surveys — declared

Detected trackers

Context

www.rechtspraak.nl is the website of the Dutch judiciary: information on the courts, procedures, rulings, forms, and services for parties to proceedings. The data controller is the Council for the Judiciary (Raad voor de rechtspraak). The site is informational and service-oriented.

Scan: 32 requests to 5 domains, homepage, captured in a clean Edge browser without a VPN or ad blocker. The technical stack is restrained.

Who receives the data

There are no third-party commercial recipients.

The judiciary runs its web statistics on its own Piwik PRO engine, deployed on its own subdomain. Additionally, a functional survey widget and an image-delivery network run. The scan shows no Google Analytics, no advertising networks, no social media pixels, and no session recording.

A full banner for the statistics is not required here. The policy explicitly states that the statistics are collected without storing behavior or personal data such as the user’s IP address, and that personal data is not processed without unambiguous, explicit consent. This is consistent with an anonymized mode exempt from consent. Not a single cookie was set during the entire session.

Only anonymized in-house statistics and functional elements. Before any interaction, web statistics on the site’s own subdomain, without a visitor identifier, the survey widget, and image delivery all fire. The scan contains no Google analytics, no advertising domains, no social plugins, and no session recording.

Conclusion

Rechtspraak.nl is a model of a restrained configuration for the judiciary. Web statistics run on the site’s own engine on its own subdomain, with the policy explicitly describing an anonymized mode — without storing behavior or IP address — while the remaining external elements are functional: a survey widget and image delivery. There is no third-party advertising, no Google analytics, no social media pixels, and no session recording whatsoever, and no cookies are set. It’s worth separately noting that the detailed policy honestly describes what data is collected and that IP is not stored for statistics. The key takeaway for the reader: the judiciary can manage with its own anonymized statistics, and here that is achieved without a single third-party commercial tracker and is backed by a transparent policy. No violations were recorded.

Evidence

How to verify: download the file and compute its checksum — sha256sum file.har (Linux, macOS) or certutil -hashfile file.har SHA256 (Windows); it must match the one shown. The conclusions apply to the scope of this measurement — see the limitations of the method.

Original (audit)
HAR file: nl/rechtspraak-nl-2026-06-16.har
SHA-256: 5c3af938809d666d17fe1a82128bdfd91c0813df5d3b327bea097509474c39d5
HAR files are stored on EU infrastructure (Proton Drive). SHA-256 is published for integrity verification.
Want a response from the company about this audit? → Open the tool

Fill in once — it will be inserted into every letter below:

All fields are required to print the document — this is a formal requirement of the letter itself (the particulars of an official submission), not data collection: nothing is sent or saved anywhere, it all stays in your browser and disappears when you close the page. See the methodology for details.

Step 1. Data access request (GDPR Art. 15)

Send this letter directly to the company first — before contacting the regulator it has the right to respond (GDPR Art. 12(3) — 30 days).

Subject: Data access request (GDPR Art. 15) — rechtspraak.nl

To: [insert the company's address — DPO / support / legal department]
From: [Your name], [contact email]

I request access to my personal data processed in connection with the website rechtspraak.nl.

1. Categories of data and purposes of processing (Art. 15(1)(a)-(c))
I request information on all categories, purposes, and recipients of my data processed on this site — regardless of whether any non-compliance has been identified to date.

2. Recipients, retention periods, and transfers outside the EEA (Art. 15(1)(c)-(d), 46)
I also request the full list of third-party recipients, the applicable retention period for each category, and the legal basis for any transfer of data outside the EEA. The full technical audit with evidence (saved network log, SHA-256 checksum) is published at: https://gdpru.eu/en/audits/nl-rechtspraak-nl/

3. Automated processing and profiling (Art. 15(1)(h))
Please state whether I am subject to automated decision-making or profiling, and if so, disclose the logic involved.

Sincerely,

[Your name]
[contact email]
[Country]


[Date]