What we keep,and why.
No legal smokescreen. Below, per kind of data: what we record, what we use it for, how long it stays and who gets to see it.
Who is responsible
Operations Labs, KVK number 91162467, Albatroslaan 156, 8241 CJ Lelystad, the Netherlands, is responsible for processing the data that reaches us through this website.
Questions about your data, or a request to see or delete it: email briefing@operationslabs.nl or call +31 320 33 90 00. We respond within thirty days, usually much sooner.
What we record about you
What you give us, what the website technically needs and, only after your choice, statistics or marketing measurement.
Contact form
Your name, email address, optionally your company and phone number, and your message. We use this to answer your question and follow up. We store the landing page, campaign labels and referring website with the lead to see which campaign results in contact.
Conversations with our AI assistant
The questions you ask and the answers you get. We read those back to improve the assistant and our knowledge base, and to see which questions we answer badly.
Contact details from a conversation
If you leave your name, email or phone number in the chat because you want to be called or emailed, that goes into our together with your question and the conversation.
Business contacts and public sources
If we meet you in a business context, at a trade fair, through a scanned badge, a business card or by email, we record your name, role, company and business contact details in our . We supplement them with what is public: your employer’s website and other public web pages, such as a news item or the address of your LinkedIn profile. This covers business data only: your role, your work and your business phone number and email address. We do not look up private data, such as your home address or private number, or sensitive data. We note the source of what we find. We do this on the basis of our legitimate interest in following up business contacts properly.
Technical data
Our hosting provider briefly records the IP address and the page requested, to keep the site running and to stop abuse. We do not use that to follow you around.
Website visits
Statistics and marketing measurement are separate choices. If you allow statistics, Google Analytics measures pages visited, timing, duration, device type and broad region. If you also allow marketing, Google Ads, Meta, TikTok and LinkedIn may recognise your visit and a submitted form for campaign measurement and retargeting. We never send your name, email address, phone number or message with these events, and we do not sell your data.
What we put on your device
Your language choice, your conversation and, after consent, measurement cookies. You can clear all of them.
Your language choice
A small cookie remembering whether you read the site in Dutch or English, so you do not have to choose again on every page.
Your conversation with the assistant
If you open the chat, that conversation stays in your own browser so it does not vanish when you click through or refresh. It expires by itself, and the New conversation button clears it instantly. It lives on your device, not in a profile of you at our end.
Measurement and marketing cookies
After your choice, Google Analytics may set _ga cookies for visits and sessions. Only with marketing consent may Google Ads (_gcl), Meta (_fbp/_fbc), TikTok (_ttp) and LinkedIn (li_fat_id) use similar identifiers. Your choice is stored in your browser. If you reject a category, its tags do not load.
How long it stays
A retention period is only real if something actually clears up. Ours is a scheduled task that runs on its own.
Conversations with the assistant
Ninety days, then they are deleted automatically. If a conversation led to contact, the enquiry itself stays as part of the client relationship.
Enquiries and contact details
For as long as we are talking or working together, and after that for as long as the law requires us to keep records.
In your browser
Your conversation expires there by itself, and sooner if you press New conversation or clear your browser data.
Measurement
Your choice and accessible statistics and marketing cookies expire no later than 180 days after your first choice or visit. You can withdraw consent just as easily through Cookies. We then remove accessible cookies and reload the page without the withdrawn tags. Advertising platforms may use different retention periods for their own data; these are configured in the relevant account.
Parties we work with
We make data-protection arrangements with these parties. Advertising platforms also process data under their own terms and your account settings.
Who sees it at our end
Only our own people, after logging in. Our internal assistant can read the so that whoever calls you back knows what it was about. The assistant on this website cannot.
Hosting
Vercel runs this website. Our functions run in the Frankfurt region.
Database
Neon stores our data, in a data centre in Frankfurt.
Resend delivers the confirmations and notifications that come out of this site.
AI models
OpenRouter gives us access to the language model behind the assistant. The content of your conversation passes through that service to produce an answer. We pick providers that do not retain your data to train models. To look up public business data, a search query with your name and company goes through the same service to a search engine.
Website analytics and campaign attribution
After statistics consent, Google processes visit statistics through Google Analytics. Only after separate marketing consent do Google Ads, Meta, TikTok and LinkedIn use page, browser and technical request data for conversion measurement, audiences and retargeting. These parties may process data outside the EEA and, where required, use appropriate transfer mechanisms.
What you can ask for
One email to briefing@operationslabs.nl is enough. We will ask you to confirm it is really you.
Access
You may ask what data we hold about you.
Correction
If something is wrong, we fix it.
Deletion
You may ask us to erase your data, unless the law requires us to keep it.
Objection
You may object to us using your data for our own follow-up, and to us supplementing it from public sources. We will then stop looking you up and stop contacting you.
Complaint
You can complain to the Dutch Data Protection Authority. We would rather hear it first and put it right.
Rather just talk to someone?
For anything to do with your data you can reach us directly. You get a person, not a form.