Privacy policy
This is a translation for convenience. The German version is the legally binding one.
This page explains what personal data is processed when you visit this website. You don't need an account, and we use no analytics services or advertising.
1. Controller
geoSYS GmbHPflügerstr. 56, 12047 Berlin, Germany
Email: info@geosysnet.de
Phone: +49 30 82070657
You can reach our data protection officer at the same address or by email at datenschutz@geosysnet.de.
2. Visiting the website
To deliver the pages, our web server processes your IP address. Its log stores your IP address, the date and time, the page requested without any search terms or route details, the status code and the amount of data transferred.
This keeps the website running and secure. The legal basis is Art. 6(1)(f) GDPR. The logs are deleted after 14 days.
We operate the server ourselves. No outside hosting provider receives this data.
3. Background map from Mapbox
The background map comes from Mapbox, Inc., USA. To display the map, your browser loads the map images directly from Mapbox. For technical reasons, Mapbox receives your IP address, your browser's user agent, the time and the map area shown. Mapbox says it keeps IP addresses for 30 days, and longer in individual cases such as investigations.
The legal basis is Art. 6(1)(f) GDPR: our legitimate interest is a reliable map display. Because data may be transferred to the USA, we rely on Mapbox's certification under the EU-US Data Privacy Framework (Art. 45 GDPR). Details are in Mapbox's privacy policy.
4. Search and routes
The list of places, the address search and route calculation run on our own servers. Search terms and route points are processed for this and are not passed to outside providers. Address search results stay in a temporary cache for up to 24 hours, with no link to your IP address. If you enter your own address as a starting point, it is processed in this way. The website does not ask for your location.
The legal basis is Art. 6(1)(f) GDPR: our legitimate interest is providing the function you asked for.
5. Protection against misuse
To prevent overload, we count requests per IP address. These counters expire after about a minute. The legal basis is Art. 6(1)(f) GDPR: our legitimate interest is the security and availability of the website.
6. Cookies
We only use technically necessary cookies. Under section 25(2) no. 2 of the German TDDDG, these do not require consent.
| Cookie | Purpose | Lifetime |
|---|---|---|
csrftoken | Protects forms such as the language switch against misuse | 1 year |
django_language | Remembers your language, only after you switch it | Until you close the browser |
sessionid | Login to the administration area, for editors only | 2 weeks |
7. Administration area
This section only concerns editors. Login stores account details and, after failed attempts, the IP address, username and user agent, to protect accounts against password guessing. Five failed attempts block the IP address for 15 minutes. After that, these entries are removed at the next login. The legal basis is Art. 6(1)(f) GDPR.
8. Contacting us by email or phone
If you contact us, we process your details to answer your request. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for requests about a contract. We delete the details when they are no longer needed and no statutory retention period applies.
9. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).
Right to object: Where processing is based on Art. 6(1)(f) GDPR, you may object to it at any time on grounds relating to your particular situation (Art. 21 GDPR).
To exercise these rights, use the contact details above. You may also complain to a data protection supervisory authority (Art. 77 GDPR), such as the Berlin Commissioner for Data Protection and Freedom of Information.
Last updated: November 2026