The new privacy law came into force on 25 May 2018. It concerns the General Data Protection Regulation (GDPR). This law applies everywhere in the EU. The law revolves around your personal data. Personal data must be protected to guarantee privacy. You need to know which data organizations store and for what purpose.

The new privacy law came into force on 25 May 2018. It concerns the General Data Protection Regulation (GDPR). This law applies everywhere in the EU. The law revolves around your personal data. Personal data must be protected to guarantee privacy. You need to know which data organizations store and for what purpose.

Personal data

Personal data goes beyond name, address and e-mail. Did you know that an IP address, cookies and, for example, a UserID are also personal data? The new law stipulates that Web stores must let you know what they store and for how long. In addition, you have the right to “oblivion. This means that organizations must delete data upon request. We have been applying this right to oblivion since our inception. We delete your data automatically, and after 14 days. After that time, you can no longer be found in our system. But what else do we do when it comes to privacy?

Privacy is responsible for the processing of personal data as reflected in this privacy statement.

Our information

We are Openlab B.V. The company behind Located at Boschdijk 1119, 5626AG, Eindhoven. Questions about your privacy? Please contact us at

Personal data processes your personal data because you use our online store, and because you provide these data to us yourself. Below you will find an overview of the personal data we process:

  • First and last name
  • Address details
  • Email address

We only process personal data in our web store. No personal data are used when analyzing body material in the laboratory. The analysis is performed on the basis of a code. In the laboratory, our users remain unknown. There is no exchange of personal data between the laboratory and

You have the right to correct the personal data provided. But please know that after 14 days your data is deleted from our database.

Use of personal data

We use your data for the following purposes:

  • Handling your payment
  • Shipping your order

We do not automatically send newsletters or assessment visits. Unless you specify otherwise. We never send invoices or advertising to physical addresses, nor will we send reminders for uncompleted orders. Mail or app conversations are actively deleted.

You request results yourself. We do not send an e-mail for this either. Unless you indicate otherwise. We do not make decisions based on automated processing about things that can affect individuals. We are actively working on a database that is as empty as possible. So not only when you ask for it. We delete data automatically.

Retain data?

Your personal data is automatically deleted after 14 days. Those 14 days we are obliged to keep data because you need to be able to return the test. After those 14 days – when the right of return has expired – data are deleted. Your name, address and e-mail will no longer appear in our system.

Within those 14 days, personal data can be removed upon request. This automatically implies a waiver of the right of return. Do you want to remove your data within 14 days? Send an email from the email address you used to order to with your request for deletion. You will receive a reply within 4 hours (working days).

Of course, within those 14 days you have the right to inspect your data.

Particular data

Our platform does not intend to collect data on website visitors under the age of 16. Unless they have parental or guardian consent. However, we cannot verify whether a visitor is older than 16. If you are convinced that we have collected personal data about a minor without consent, please contact us. We will then delete this data.

Sharing data

Of course, we never sell your data to third parties. Data will only be shared if necessary for the execution of our agreement with you, or to comply with a legal obligation. With companies that process your data on our behalf, we have processing agreements to ensure the same level of security and confidentiality. remains responsible for this processing.

We have processing agreements with a DHL distribution center for shipping orders. We have an agreement with a Payment Service Provider for processing payments. We have also signed such an agreement with our hosting provider.

Measuring website traffic

We measure how our website is used through Google Analytics. We also measure how effective’s Google Ads ads are with Google Analytics. The data obtained is stored on Google servers in the United States. Please read Google’s privacy policy for more information.

Google uses this information to track how our website is used, to provide reports and to provide its advertisers with information about the effectiveness of their campaigns. Google may provide this information to third parties if Google is legally required to do so, or insofar as these third parties process the information on Google’s behalf. We have no influence on this. has not given Google permission to use the obtained data for other Google services.

IP addresses are anonymized. User IDs are turned off. Do you use ‘DoNotTrack’ in your web browser? Then your visit is not recorded.

Data Security takes the protection of your data seriously and takes appropriate measures to prevent abuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. We have taken the following measures, among others:

  • DNSSEC is enabled
  • Dedicated managed hosting (ISO27001 and NEN7510 certified)
  • Firewall to protect ports such as SSH and FTP
  • 24/7 monitoring of server
  • Two-factor authentication
  • Whitelist IPs for access

If you have the impression that your data is not properly secured, please contact


Browser Settings

If you do not want websites to place cookies on your computer at all, you can adjust your browser settings so that you receive a warning before cookies are placed. You can also adjust the settings so that your browser refuses all cookies, or only third-party cookies. In addition, you can delete cookies already placed on your computer. Please note that you must adjust the settings separately for each browser and computer you use.

How to adjust your settings varies by browser. If necessary, consult the help function of your browser. If you want to disable cookies from specific parties, you can do so at

Other cookies

Due to the way the Internet and websites work, we may not always have insight into the cookies placed by third parties through our Website. This is particularly the case if our web pages contain so-called embedded elements; these are texts, documents, images or videos that are stored with another party, but displayed on, in or through our Website.

If you come across any cookies on this website that fall into this category that we have not mentioned above, please let us know. You can also contact the third party directly and ask what cookies they set, the reason for it, the cookie’s lifetime and how they have guaranteed your privacy.

Latest revision: 06-12-2022

Shopping Basket