Privacy statement

This website asks nothing of you. There is no form, no input field, no account and no booking system. You can read the entire site without leaving anything behind.

The premises are a different matter: there are cameras in and around the building. Most of this page is about those.

The controller is the operator of ’t Poortje, Lange Begijnestraat 1, 2011 HH Haarlem, registered with the Dutch chamber of commerce under number 27156623. You can reach us in the ways listed on the contact page. The full company name will be added here once it is known.

There are cameras in and around the building.

Why. The footage is there for the safety of the women who work here, of visitors and of staff, and to be able to establish what happened if something goes wrong. It is used for nothing else: not to recognise visitors, not to keep track of who comes in, and it is not shared with third parties unless the police request it as part of a specific investigation.

On what basis. Legitimate interest: the safety of people in an enclosed space outweighs the interest in walking down a corridor unfilmed, provided the surveillance stays limited to what that requires and people know it is there. Which is why it is on the door and in the house rules.

For how long. Footage is kept no longer than the purpose above requires, and is overwritten after that. If you have a question about the period we apply, you can ask it using the details on the contact page.

Who looks. Only the management on site, and only when there is a reason to. Nobody sits watching a screen.

Nothing traceable to you, unless you give permission yourself.

The site is static. There is no database, no login, no contact form and no input field of any kind. Nothing is booked, arranged or brokered through this site, so no payment and no personal data pass through it.

There are no external components in the pages quietly watching along either. The fonts are on our own server, there is no embedded Google Maps, no YouTube or Vimeo player and no social media button. If you tap the directions link you go to Google Maps at that moment and not before, and that is an ordinary link you press yourself.

Cookies and browser storage

Three things, and no more:

• poortje_consent, a cookie holding your choice about statistics. It is the only cookie the site sets itself. It lasts 180 days and does not travel to other websites
• leeftijd in local storage, so the notice that the premises are 21 and over does not reappear on every page. Only the value “ok”, no identifier
• poort in session storage, so the opening effect on the homepage plays once per visit rather than every time. Gone the moment you close the tab

None of the three says anything about who you are, and none of them is sent anywhere.

Statistics, only with your permission

If and only if you click “accept” in the cookie notice, we load Google Analytics 4. Before that click nothing happens: no script is loaded and no request goes to Google.

What is then measured: which pages are visited, in which language, and whether the phone, WhatsApp or directions button was clicked. That comes with a randomly generated number so we can tell whether two page views came from the same browser. That number says nothing about who you are and we cannot tie a person to it.

What does not happen: ad personalisation is off, Google Signals is off, and no data is shared with advertisers. There is no Meta pixel on this site.

You can change your choice at any time. “Cookie preferences” at the bottom of every page brings the notice back and lets you withdraw your consent. If you withdraw it, the page reloads so the measurement script is genuinely gone.

The server

The site runs on Cloudflare. Like any web server it sees your IP address and browser type at the moment you request a page, and uses those to deliver the page and to fend off attacks. We do not store that ourselves and there is no visitor statistic in it.

• No names, profiles or recognisable photographs of the women who work here
• No sale, rental or exchange of data with third parties
• No visitor profiles, no advertising audiences, no retargeting
• No asking for data we do not need, which on this site means all of it

You have the right to ask what data exists about you, to have it corrected or deleted, and to object to the camera surveillance in your specific case.

In practice that mainly means something for the CCTV footage: if you want to know whether you are on camera and have it deleted, you can request that. Give the day and time as precisely as you can, otherwise it cannot be found. We can only show you footage in which nobody else is recognisable, because those others have the same right.

If we cannot resolve it together, you can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

If what we record changes, this page changes with it. The date it was last updated is at the bottom.