Last updated: 2026-01-02
Subject Matter of Data Processing
This Privacy Policy informs users about the nature, scope, and purpose of the processing of personal data on the website WorldHeritageExplorer.org, in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection law. The website can generally be used without actively providing personal data. Personal data is processed only insofar as this is necessary for the operation of the website or explicitly described below.
Controller pursuant to Art. 4(7) GDPR
Simon D. Kist
Dietkirchenstraße 40
53111 Bonn
Germany
Telephone: +49 228 963 997 31
Fax: +49 228 963 997 37
Email: info@worldheritageexplorer.org
Hosting and Server Log Files
When accessing this website, the hosting provider processes personal data that is technically required to deliver the website. This data is automatically recorded in server log files and may include:
- IP address
- Date and time of access
- Browser type and browser version
- Operating system
Purpose of processing:
- Technical provision of the website
- Ensuring security and operational stability
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest)
The controller’s legitimate interest lies in the secure and reliable operation of the website. Server log data is not combined with other data and is deleted in accordance with the retention periods specified by the hosting provider.
Communication by Email
If users contact the controller by email, the personal data transmitted with the email is processed. This may include:
- Email address
- Content of the communication
- Communication metadata
Purpose of processing:
Processing and responding to the inquiry
Legal basis:
Art. 6(1)(b) GDPR, insofar as the communication is related to pre-contractual measures or contractual obligations; otherwise Art. 6(1)(f) GDPR (legitimate interest in handling inquiries).
The data will be deleted once the request has been conclusively processed, unless statutory retention obligations require longer storage.
Cookies and Similar Technologies
This website does not use cookies or similar technologies within the meaning of § 25 TTDSG. Third-party services, such as MapTiler, may set strictly necessary cookies required for the technical operation of their services.
Integration of Third-Party Content
This website uses interactive maps provided by OpenStreetMap Foundation, Geoapify or MapTiler, which are based on data from OpenStreetMap.
1. Geoapify
When accessing a page containing an embedded map, the user's browser establishes a direct connection to servers operated by Geoapify. In this context, personal data, including the IP address and technical request data, may be transmitted to Geoapify.
Geoapify processes personal data as an independent controller within the meaning of Art. 4(7) GDPR.
Purpose of processing:
The provision and display of geographic map content on the website.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest).
The legitimate interest lies in the functional and informative presentation of geographic information on the website.
Further information on data processing by Geoapify can be found in Geoapify’s privacy policy.
2. MapTiler
Similarly, when accessing a page containing an embedded map, the user's browser may alternatively establish a connection to MapTiler's servers. Personal data, such as the IP address and technical request data, may be transmitted to MapTiler.
MapTiler processes personal data as an independent controller within the meaning of Art. 4(7) GDPR.
Purpose of processing:
The provision and display of geographic map content on the website.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest).
The legitimate interest lies in ensuring continued access to geographic map content and the functionality of the website.
Further information on data processing by MapTiler can be found in MapTiler's privacy policy.
3. OpenStreetMap Foundation
Similarly, when accessing a page containing an embedded map, the user's browser may alternatively establish a connection to OpenStreetMap Foundation's servers. Personal data, such as the IP address and technical request data, may be transmitted to OpenStreetMap.
OpenStreetMap processes personal data as an independent controller within the meaning of Art. 4(7) GDPR.
Purpose of processing:
The provision and display of geographic map content on the website.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest).
The legitimate interest lies in ensuring continued access to geographic map content and the functionality of the website.
Further information on data processing can be found in OpenStreetMap Foundation's privacy policy.
Attribution of Copyrighted Content
This website uses images and other media for which usage rights have been granted by the respective authors or copyright holders, including works published under Creative Commons licenses as well as works used on the basis of individual permissions.
In accordance with copyright law and the applicable license or permission terms, the name or username of the author or copyright holder may be displayed in connection with the respective work.
Processed personal data:
Name or username of the author or copyright holder, as provided for attribution purposes
Purpose of processing:
Compliance with copyright law and contractual or license obligations
Legal basis:
Art. 6(1)(c) GDPR (processing necessary for compliance with a legal obligation)
Only the personal data required for attribution is processed. No additional personal data is collected, combined, or published.
Rights of Data Subjects
Data subjects have the following rights under the GDPR:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to object pursuant to Art. 21 GDPR
Requests may be directed to the controller using the contact details provided above.
Right to Lodge a Complaint
Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.
In particular, data subjects may lodge a complaint with the supervisory authority of:
- their habitual residence,
- their place of work, or
- the place of the alleged infringement.
Amendment of This Privacy Policy
This Privacy Policy is valid as of the date stated above. The controller reserves the right to amend this Privacy Policy to ensure compliance with applicable legal requirements or to reflect changes in data processing.