Privacy Policy
Last updated: September 2026
1. Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Top-O-Map TOM GmbH
Sonnenstrasse 31
97225 Zellingen
Germany
Email: otm@top-o-map.com
Authorized representatives: Thomas Stark, Melanie Schäffer, address as stated above.
2. Data Collection by the Server / Hosting Provider
Our website is hosted by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. Whenever our website is accessed, the web server automatically stores the following data:
- IP address of the requesting device
- Date and time of access
- Address (URL) of the page accessed or of the selected map area
- Address (URL) of the previously visited page, if transmitted by the browser
- Amount of data transferred and status of the request
- Name and version of the browser used
- Operating system used
This data is stored for the following purposes:
- Providing the online maps. This is the primary purpose for collecting the aforementioned data.
- Ensuring the proper operation of our IT systems
- Detecting and preventing attacks and misuse
The legal basis is Art. 6 (1)(f) GDPR. Our legitimate interest lies in ensuring the technically reliable and secure operation of this website. The log files are deleted after 7 days. Individual entries are retained for longer only if they are needed to investigate a specific attack or instance of misuse; they are deleted as soon as the incident has been fully investigated. netcup processes the data on our behalf as part of the hosting service. A data processing agreement pursuant to Art. 28 GDPR has been concluded with netcup GmbH. Server location: within the European Union.
3. Map Display and Location Search
The maps on this website consist of individual map tiles that your browser loads directly from the following servers while you use the website:
- tile.top-o-map.com – topographic map, relief map, and 3D map, operated by Top-O-Map TOM GmbH
- tile.openstreetmap.org – the OpenStreetMap map, operated by the OpenStreetMap Foundation
- tile.waymarkedtrails.org – hiking and cycling trail layers, operated by the Waymarked Trails project
- tiles.mapterhorn.com – the elevation model for displaying the 3D map is provided by Mapterhorn.com
When you use the location search, your search query is additionally transmitted to nominatim.openstreetmap.org, the search service of the OpenStreetMap Foundation.
For each of these requests, your browser technically transmits your IP address and the requested map location to the respective server. The data stored there is governed by the privacy policies of the respective operator. Without this transmission, the maps cannot be displayed. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the map display, which is the primary purpose of this website. The sources of the map data are listed on the Data Sources page.
4. Contacting Us by Email
If you contact us by email, we process your email address, your name if provided, and the content of your message. We use this data solely to process and respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to a contract or the initiation of a contractual relationship. Otherwise, the legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in responding to inquiries.
5. Consent and Consent Management
We use Google's Consent Management Platform ("Google CMP") on our website to obtain and manage consent for the use of cookies and similar technologies, as well as for the processing of personal data by the Google services we use. Google CMP is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Through the Google CMP, you can in particular decide whether you consent to the processing of your data for purposes of personalized advertising and to the use of cookies and similar technologies. Your choice is stored and taken into account for your further use of our website. Google CMP is integrated into the IAB Transparency and Consent Framework (TCF) and is registered under TCF CMP ID 300. You can change or withdraw your consent at any time, with effect for the future, via the privacy settings available on our website. Where consent is required, the respective processing is carried out on the basis of your consent pursuant to Art. 6 (1)(a) GDPR and the applicable provisions of the TDDDG (German Telecommunications-Digital Services Data Protection Act).
6. First-Party Cookies
Cookies are small text files that a website stores on your device. This website uses the following first-party cookies for the map functionality:
- map – stores the most recently displayed map area so that the map opens at the same location on your next visit. Storage period: 30 days.
The storage of your consent decision by the consent management system itself is technically necessary in order to remember your selection and is carried out independently of consent. The legal basis for this is Section 25(2) No. 2 TDDDG. The cookies used by the services listed in Section 7 are only set after you have given your consent through the consent management system. The legal basis for this is Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.
You can delete cookies in your browser settings and prevent their storage. The map will continue to function, but it will open at the default starting position each time you visit instead of the location last viewed. Without technically necessary cookies, the usability of our services may be limited.
7. Other Cookies – Advertising and Analytics
7.1 Google AdSense
We use Google AdSense on our website to display and deliver advertisements. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google AdSense uses cookies and similar technologies to deliver advertisements, measure the delivery and display of advertisements, and, for example, limit the frequency with which certain advertisements are shown. In connection with the delivery of advertisements, the IP address, information about the device and browser used, pages visited, and other technical information may be processed. Google and providers involved in the delivery of advertisements may store or read cookies in your browser and use web beacons, pixels, local storage technologies, similar technologies, and other identifiers to collect and process information in connection with the delivery of advertisements. Google and its partners may use information about previous visits to this or other websites to provide personalized advertising. Advertisements may therefore be selected based on previous activities or visits to websites or other services. Approximate location data and demographic information may also be taken into account. Where no consent for personalized advertising has been given, non-personalized advertisements may be displayed. For non-personalized advertisements, selection is based primarily on contextual information, such as the content of the website currently being viewed. Where consent is required, processing for personalized advertising purposes and the associated use of cookies and similar technologies are based on your consent pursuant to Art. 6(1)(a) GDPR and the applicable provisions of the TDDDG. Consent is obtained through our Google CMP and transmitted to the participating Google services. You can change or withdraw your consent at any time via our privacy settings. Further information about the technologies used by Google and Google's use of data when using websites and apps on or in which Google services are used can be found in Google's Privacy Policy.
7.2 Google Analytics 4
We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics 4 is used to analyze the use of our website. In particular, information about the use of our website, pages visited, interactions, technical information about the device and browser used, and the IP address may be processed. A client ID is stored in the "_ga" cookie to recognize your browser within a session. Google Analytics 4 uses cookies and similar technologies. The use of Google Analytics 4 is carried out on the basis of your consent pursuant to Art. 6 (1)(a) GDPR and the applicable provisions of the TDDDG. Consent is obtained through our Google CMP. The choice you make is transmitted to and taken into account by the Google services via Google Consent Mode. If you do not consent to the use of analytics technologies, the corresponding analytics functions will be restricted or not activated. You can change or withdraw your consent at any time via our website's privacy settings. Further information on data processing by Google Analytics can be found in Google's Privacy Policy, as well as in Google's information on the use of data in connection with the use of websites and apps in or on which Google services are used.
7.3 Legal Basis and Transfer to the USA
The legal basis for both services (Sections 7.1 and 7.2) is your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Without your consent, none of this processing takes place. You can withdraw your consent at any time via the "Privacy Settings" link in the footer.
Our contractual partner is Google Ireland Limited. Google transfers data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
8. Fonts
The fonts used on this website – Space Grotesk, Inter, and IBM Plex Mono – are loaded from our own server. No connection to third-party servers is established, and no data is transmitted to font providers.
9. No Registration or User Accounts
This website does not provide for registration or user accounts. No user data is made visible to other users.
10. Disclosure to Third Parties
Personal data is not sold or rented out. Data is only disclosed to the entities specified in Sections 2, 3, 5, 7 (for 7 only where consent has been given), or where we are legally required to do so or you have expressly consented to such disclosure.
11. Your Rights
Under the GDPR, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21) of your personal data. You may withdraw any consent given at any time with effect for the future. To do so, please contact: widerruf@top-o-map.com
12. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection authority if you believe that the processing of your personal data infringes applicable data protection law. The data protection authority competent for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht – BayLDA), Promenade 18, 91522 Ansbach, Germany, Phone: +49 981 53-1300, E-mail: poststelle@lda.bayern.de. In addition, you have the right to lodge a complaint with any other data protection authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
13. Currency of this Policy
This Privacy Policy was last updated in September 2026.