← Home

Privacy Policy

Data Controller

The data controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Timo Braun

Cookies, Tracking and Local Storage

The App does not use cookies or tracking. Only local storage (localStorage) in the browser is used for functionality, such as the language setting, the last searched location and the most recently determined position (see “Location Data and Emergency Feature”). This data never leaves your device.

Your Rights as a Data Subject

You may exercise the following rights at any time by contacting us using the contact details provided:

  • Access to your personal data stored by us and information about its processing (Art. 15 GDPR),
  • Rectification of inaccurate personal data (Art. 16 GDPR),
  • Erasure of your personal data stored by us (Art. 17 GDPR),
  • Restriction of processing, where we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data by us (Art. 21 GDPR), and
  • Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us consent, you may withdraw it at any time with effect for the future.

You may at any time lodge a complaint with a supervisory authority, for example the competent supervisory authority of the federal state of your residence or the authority responsible for us as the data controller.

A list of supervisory authorities (for the non-public sector) with addresses is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Processing Activities

Collection of General Information When Visiting Our Website

Nature and Purpose of Processing

When you access our website — that is, when you do not register or otherwise submit information — information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and similar data.

For the interfaces your location is transmitted to — weather forecast and location search — we do not log the coordinates. The access logs of these interfaces contain only the requested path, without the parameters passed to it.

This data is processed in particular for the following purposes:

  • Ensuring a smooth connection to the website
  • Ensuring a smooth use of the website
  • Ensuring and evaluating system security and stability, in particular for abuse detection
  • Technically correct display and optimisation of the website

We do not use your data to draw conclusions about your person. However, we reserve the right to subsequently review server log files if there are concrete indications of unlawful use.

Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website and ensuring system security and abuse detection.

Recipients

Recipients of the data may include technical service providers acting as data processors for the operation and maintenance of our website.

Retention Period

Data is stored in server log files in a form that permits identification of data subjects for a maximum of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack).

In the event of such an incident, server log files are retained until the security-relevant event has been resolved and fully investigated.

Provision Required or Necessary

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may be unavailable or limited.

Right to Object

Please see the information about your right to object under Art. 21 GDPR below.

Contact

Nature and Purpose of Processing

You may contact us via the email addresses provided. In this case, the personal data transmitted with the email will be stored. This includes the date and time the email was sent, the email address, IP addresses, and information about the servers involved in the email communication.

We collect the content of your enquiry. Your data is stored for the purpose of individual communication with you.

Processing is carried out on the basis of a legitimate interest (Art. 6(1)(f) GDPR).

Our legitimate interest in processing your data is to facilitate straightforward contact.

If you contact us to request a quote, processing is carried out for the performance of pre-contractual measures (Art. 6(1)(b) GDPR).

Recipients

Recipients of the data may include technical service providers acting as data processors for the operation and maintenance of our website.

Retention Period

Data is deleted no later than 6 months after the enquiry has been processed.

If a contractual relationship is established, we are subject to the statutory retention periods, which are generally 6 or 10 years for reasons of proper bookkeeping and tax requirements.

Provision Required or Necessary

The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with the necessary data and the reason for your enquiry.

Right to Object

Please see the information about your right to object under Art. 21 GDPR below.

Location Data and Emergency Feature

Nature and Purpose of Processing

At your request, the application determines the position of your device via its location services — for example to centre the map on your location, to navigate during a tour, or to display your position in the emergency feature in several coordinate notations.

The most recently determined position is stored locally on your device (localStorage): latitude and longitude, altitude, accuracy and the time of the fix. Its sole purpose is the emergency feature, which shows a coordinate immediately when opened instead of waiting for a new GPS fix.

The last position stored on your device does not leave it. For individual features, however, coordinates are transmitted to our own servers and processed there to answer the request: to our place-name service when you use the location button to determine the name of where you are, or when the emergency feature looks for a named terrain feature near you; to our elevation service for elevation lookups; to our map server when map tiles are loaded, which thereby learns which section of the map you are viewing. These requests are only made when you use the respective feature. No location data is transmitted to third parties.

The core of the emergency feature works without a network connection: both the display of the coordinates and the assignment of emergency numbers to an area happen on your device. Where a network connection exists, the application additionally asks our place-name service for a named terrain feature near you when the sheet is opened; the position is rounded to three decimal places (roughly 100 metres) before it is sent. Without a network, or without an answer, only that one line is omitted. The application does not place an emergency call and does not transmit location data to control rooms or rescue organisations. If you copy, share or text the coordinates yourself, you alone decide on the recipient and the moment.

Processing takes place pursuant to Art. 6 (1) (b) GDPR in order to provide the feature you have requested. Access to the location services additionally requires your permission at operating system level, which you can revoke there at any time with effect for the future.

Recipients

The operator, insofar as coordinates are transmitted to its own servers (api.topoalpin.app, basemap.topoalpin.app) for the features named above. These servers are operated by the operator itself; no data is passed on to third parties. The last position stored on the device is not transmitted.

Retention Period

The stored position is replaced by each newer one and discarded once it is more than 24 hours old. You can remove it yourself at any time by clearing the website data in your browser or the app’s data in your operating system.

Provision Required or Necessary

Provision is voluntary. Without location permission, the location-based features — including the position display in the emergency feature — are unavailable; all other features remain usable.

Error Reporting and Crash Analysis (Sentry)

Nature and Purpose of Processing

To detect and fix errors, we use the service Sentry (Functional Software, Inc., 132 Hawthorne Street, San Francisco, CA 94107, USA). When the app crashes or a runtime error occurs, the following data is automatically transmitted to Sentry:

  • Error message and stack trace
  • Device type, operating system and app version
  • Time of the error
  • In the event of an error: a session replay to reproduce the problem. This records DOM interactions (clicks, scrolls, page navigation); all text content and input fields are automatically masked. Regular sessions without errors are not recorded.

No personal data such as name, email address or location is transmitted. The data is not linked to your person and is not used for advertising purposes.

Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in the stability and reliability of the app.

Recipients

The recipient of the data is Functional Software, Inc. (Sentry), USA. A data processing agreement pursuant to Art. 28 GDPR is in place with Sentry. An adequacy decision of the EU Commission exists for the USA (EU-US Data Privacy Framework).

Retention Period

Crash data is stored by Sentry for 90 days and then automatically deleted.

Information About Your Right to Object Under Art. 21 GDPR

Case-Specific Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR (processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Recipient of an Objection

Timo Braun
Pforzheimer Str. 140
76275 Ettlingen
info@topoalpin.app

Changes to This Privacy Policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services, for example when introducing new features. The updated privacy policy will apply to your next visit.

Questions About Data Protection

If you have any questions about data protection, please send an email to the data controller named above.

This privacy policy was created with the assistance of activeMind AG — the experts for external data protection officers (Version #2024-10-25).