easyXplore

Privacy policy

This is a translation for convenience. The German version is the legally binding one.

This page explains what personal data is processed when you visit this website. You don't need an account, and we use no analytics services or advertising.

1. Controller

geoSYS GmbH
Pflügerstr. 56, 12047 Berlin, Germany
Email: info@geosysnet.de
Phone: +49 30 82070657

You can reach our data protection officer at the same address or by email at datenschutz@geosysnet.de.

2. Visiting the website

To deliver the pages, our web server processes your IP address. Its log stores your IP address, the date and time, the page requested without any search terms or route details, the status code and the amount of data transferred.

This keeps the website running and secure. The legal basis is Art. 6(1)(f) GDPR. The logs are deleted after 14 days.

We operate the server ourselves. No outside hosting provider receives this data.

3. Background map from Mapbox

The background map comes from Mapbox, Inc., USA. To display the map, your browser loads the map images directly from Mapbox. For technical reasons, Mapbox receives your IP address, your browser's user agent, the time and the map area shown. Mapbox says it keeps IP addresses for 30 days, and longer in individual cases such as investigations.

The legal basis is Art. 6(1)(f) GDPR: our legitimate interest is a reliable map display. Because data may be transferred to the USA, we rely on Mapbox's certification under the EU-US Data Privacy Framework (Art. 45 GDPR). Details are in Mapbox's privacy policy.

4. Search and routes

The list of places, the address search and route calculation run on our own servers. Search terms and route points are processed for this and are not passed to outside providers. Address search results stay in a temporary cache for up to 24 hours, with no link to your IP address. If you enter your own address as a starting point, it is processed in this way. The website does not ask for your location.

The legal basis is Art. 6(1)(f) GDPR: our legitimate interest is providing the function you asked for.

5. Protection against misuse

To prevent overload, we count requests per IP address. These counters expire after about a minute. The legal basis is Art. 6(1)(f) GDPR: our legitimate interest is the security and availability of the website.

6. Cookies

We only use technically necessary cookies. Under section 25(2) no. 2 of the German TDDDG, these do not require consent.

CookiePurposeLifetime
csrftokenProtects forms such as the language switch against misuse1 year
django_languageRemembers your language, only after you switch itUntil you close the browser
sessionidLogin to the administration area, for editors only2 weeks

7. Administration area

This section only concerns editors. Login stores account details and, after failed attempts, the IP address, username and user agent, to protect accounts against password guessing. Five failed attempts block the IP address for 15 minutes. After that, these entries are removed at the next login. The legal basis is Art. 6(1)(f) GDPR.

8. Contacting us by email or phone

If you contact us, we process your details to answer your request. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for requests about a contract. We delete the details when they are no longer needed and no statutory retention period applies.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).

Right to object: Where processing is based on Art. 6(1)(f) GDPR, you may object to it at any time on grounds relating to your particular situation (Art. 21 GDPR).

To exercise these rights, use the contact details above. You may also complain to a data protection supervisory authority (Art. 77 GDPR), such as the Berlin Commissioner for Data Protection and Freedom of Information.

Last updated: November 2026