Privacy policy

[OWNER: have this draft legally reviewed before launch. It describes the system truthfully as built, but a GDPR policy is a legal document — controller identity, retention periods and any future analytics/payment providers must be confirmed.]

Who is responsible

Controller: [OWNER: legal name and address — same as the imprint]. Contact: schmidtpaolo@gmail.com.

What we process, and why

Browsing & the configurator

Using the configurator requires no account and no email. Our server processes the technical minimum (IP address, request data) to deliver the site and to proxy map searches. Server logs are kept short-term for operations and security.

Place search & map data

Place searches are forwarded server-side to OpenStreetMap's Nominatim service (rate-limited and cached by us); elevation tiles come from the AWS Terrain Tiles open dataset; building, street and water shapes from Overpass API instances. Your searched terms and framed coordinates are sent to these services as needed to build your preview — never with your name or email attached.

Saved designs & email capture

"Email me this design" stores your design (frame, settings) and, if you provide it, your email address, so your link works and we can send it to you. Legal basis: performing the service you asked for (Art. 6(1)(b) GDPR). Waitlist emails are stored to notify you once — you can request deletion anytime.

Orders

An order stores your name, address, email, the ordered configurations and the generated print files (Art. 6(1)(b) GDPR; statutory retention where applicable). Note: while Orograph is in preview, checkout is a demo — no payment data exists because no payments are processed.

What we don't do

No advertising trackers, no analytics without prior consent, no sale or sharing of personal data. If analytics are enabled in the future, they will run only after opt-in via a consent banner (EU consent-mode).

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at). Email us and we'll act on it.