Back

Privacy Policy

1. Controller

The controller within the meaning of the GDPR is Andreas Knoor. Contact details are listed in the Legal Notice.

2. Data collected and purposes

Location data

The “Nearby” feature uses the browser's Geolocation API to determine your current position. Coordinates are used solely for the search and are not stored permanently. Location access is only requested after your explicit consent.

Search queries

Search queries (location, category) are processed server-side and forwarded to external data services (see section 3). No search queries are stored permanently.

User preferences

Settings such as filter presets and display options are stored exclusively in local device storage (localStorage) and are not transmitted to any server.

Anonymous usage statistics

To recognise particularly active usage, a randomly generated identifier (UUID) is stored in local device storage (localStorage) on first launch. When the app is opened (at most once per calendar day) and with every search, this identifier, an open/search counter, the dates of the first and most recent visit (day only), and the app variant (iOS, Android, Web) are stored server-side. The identifier contains no device or personal characteristics; IP address, search terms, and location are not stored. Entries are deleted automatically 180 days after the last visit. You can disable the statistic at any time in the settings (“Anonymous usage statistics”) — this immediately deletes the identifier from your device.

3. External services

The app uses the following external services. With each search, the necessary data (location coordinates or place name, category) is transmitted to these services:

  • OpenStreetMap / Overpass API — querying accessibility data. Operator: OpenStreetMap Foundation, UK. Privacy policy
  • Nominatim / Photon (Komoot) — place search and address suggestions. Operators: OpenStreetMap Foundation and Komoot GmbH, Berlin. Komoot privacy policy
  • accessibility.cloud — accessibility data (incl. Wheelmap.org). Operator: Sozialhelden e.V., Berlin. Privacy policy
  • Ginto — accessibility data for Switzerland. Operator: Ginto AG, Switzerland. ginto.guide
  • Google Places API — supplementary venue data. Operator: Google Ireland Ltd., Dublin. Privacy policy
  • Vercel — hosting and infrastructure. Operator: Vercel Inc., San Francisco. Privacy policy
  • Vercel Analytics / Speed Insights — anonymous usage statistics and Core Web Vitals. No personal data is collected. Operator: Vercel Inc.
  • Umami — anonymous, cookieless usage statistics. No cookies are set and no personal data is stored; visitors are recognised via a hash that rotates daily, and IP addresses are not stored permanently. Operator: Umami Software, Inc. Privacy policy
  • Tally — feedback form. Operator: Tally BV, Belgium. Privacy policy

4. Map view

Map tiles are loaded from OpenStreetMap servers. Your IP address is transmitted to the respective tile server in the process.

5. Legal basis

Processing is based on Art. 6(1)(b) GDPR (performance of a contract / pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in a functional app). Location data is only processed on the basis of your explicit consent (Art. 6(1)(a) GDPR).

6. Your rights

You have the right to access, rectification, erasure, and restriction of processing, as well as the right to data portability and to object. Requests should be directed to the contact address listed in the Legal Notice. You also have the right to lodge a complaint with a data protection supervisory authority.

7. Changes

This privacy policy may be updated when necessary. The current version is always available at accessible-places.org/en/privacy.