Tennet.eu is the website of the high-voltage grid operator (a state-owned company responsible for high-voltage electricity transmission). Homepage scan: 43 requests, 4 domains. The configuration is exemplary in terms of consent. Only the tag-manager container loads on the page, but it deploys no trackers whatsoever: no Google Analytics, no advertising, no social media pixels fire in the clean, no-consent session. The policy explicitly states that analytics only connects after consent — and the scan confirms this. Not a single cookie was set during the session. No violations were recorded.
Timeline of the leak
Declared versus actual
Detected trackers
- Google Tag Manager (container; trackers gated on consent)
Context
www.tennet.eu is the website of TenneT, a high-voltage grid operator (a state-owned company responsible for high-voltage electricity transmission in the Netherlands and part of Germany). The data controller is TenneT. The site is informational.
Scan: 43 requests to 4 domains, homepage, captured in a clean Edge browser without a VPN or ad blocker. The technical stack is minimal.
Who receives the data
There are no third-party data recipients in this session.
The tag-manager container loads on the page, but it deploys no trackers whatsoever. Per policy, Google Analytics only connects after consent — and it did not fire in the clean, no-consent session. Additionally, the content-management system’s own cloud asset storage runs. The scan contains no advertising networks, no social media pixels, and no session recording.
Was there a consent banner
Analytics on the site is set up correctly from a consent standpoint: the policy explicitly states that external content and analytics only connect after consent, while consent is not required for functional and necessary cookies. In the clean, no-consent session, analytics correctly did not launch — the tag manager loaded, but deployed no trackers whatsoever. Not a single cookie was set during the entire session.
What fires before consent
Only the tag-manager container and the site’s own asset storage. Before consent, the tag-manager container — which on its own deploys no trackers — and functional assets from the site’s own storage load. The scan contains no Google analytics, no advertising domains, no social plugins, and no session recording.
Conclusion
Tennet.eu is a model of correct consent handling. The tag manager loads on the page but holds analytics back until consent: in the clean, no-consent session, not a single tracker fired, which the policy also confirms, explicitly classifying analytics as only connecting after consent. There is no third-party advertising, no social media pixels, and no session recording whatsoever, and no cookies are set. The key takeaway for the reader: this is the model to aim for — measurement tools wait for consent, and nothing non-functional fires before it. No violations were recorded.
7d82e397e241725e42327a5f09b9a1a1117d9d2e7486508306fc613f7b6e209a