Privacy

Transparency about what is stored – and what is not.

Privacy Policy

This is a courtesy translation. In case of any discrepancy, the German version prevails.

1. Controller

The controller within the meaning of Article 4 (7) GDPR is:

Manuel Gruda c/o StickerMap.de Sandstraße 26 57072 Siegen Germany Email: info@stickermap.de

(No data protection officer has been appointed, as the conditions of Section 38 BDSG are not met.)

2. Principle

StickerMap is designed around data minimisation: there are no user accounts, no login function, no tracking cookies and no analytics. Reports are received anonymously. Operating a web service entirely without processing personal data is technically impossible, however; the data that does arise is set out below.

3. Server log files

When you access the website, your IP address is necessarily processed, as no connection can be established without it. It is used transiently for delivering the page only and is not stored in log files.

Only access data without any personal reference is stored: date and time, the resource requested, the HTTP status code and the volume of data transferred.

  • Purpose: delivering the site, technical error diagnosis, defence against attacks and abuse

  • Legal basis: Article 6 (1) (f) GDPR (legitimate interest in secure and uninterrupted operation)

  • Retention: a maximum of 7 days, followed by automatic deletion

  • This data is not combined with submitted reports.

4. Reports and uploaded photos

When a report is submitted, the content provided by the reporting person is stored: location, category, description and, if attached, a photo. No registration or contact details are required.

  • Purpose: documentation and display on the map

  • Legal basis: Article 6 (1) (f) GDPR (legitimate interest in documenting inhumane symbolism in public space and in public education)

  • Retention: until the entry is removed by the editorial team or upon a substantiated request

Note on photos: photos should not show or make individuals identifiable. Metadata (EXIF, in particular GPS coordinates and device information) is removed automatically on upload. If a photo nevertheless shows individuals, vehicle registration plates or other identifying features, it is removed or obscured – including at the request of an affected person sent to info@stickermap.de.

By uploading, the submitting person grants the operator a non-exclusive, unlimited right to make the photo publicly available within the platform. Only photos taken by the person uploading them may be submitted.

5. Hosting

The website runs on a server administered by us and operated by STRATO AG, Pascalstraße 10, 10587 Berlin, Germany. The server is located in Germany. STRATO provides the infrastructure and acts as a processor in that respect; an agreement pursuant to Article 28 GDPR is in place. No transfer to third countries takes place.

Legal basis: Article 6 (1) (f) GDPR

6. Map display (Leaflet, Esri)

The map uses the open source library Leaflet. It is served from our own server, so no connection to third parties arises from it.

The map tiles are obtained from Esri (Environmental Systems Research Institute, Inc., 380 New York Street, Redlands, CA 92373, USA). When the map loads, your browser establishes a direct connection to Esri's servers. In doing so, your IP address, the map section selected and technical information about your browser and operating system are transmitted to Esri. We have no influence over this processing.

  • Purpose: displaying the base map

  • Legal basis: Article 6 (1) (f) GDPR (legitimate interest in a functioning map application)

  • Third-country transfer: processing in the USA is possible. Esri, Inc. is certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses apply in addition.

  • Esri's privacy information: https://www.esri.com/en-us/privacy/overview

Map tiles are only loaded once you open the map view.

7. Your rights

You have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20), as well as a right to object under Article 21 GDPR to processing based on Article 6 (1) (f) GDPR.

An informal message to info@stickermap.de is sufficient to exercise these rights.

You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). The competent authority is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Kavalleriestraße 2–4 40213 Düsseldorf Germany

8. Version

Last updated: 2 August 2026

Only needed if you want a reply. Deleted after processing.

Min. 10, max. 2000 characters. Please use understandable words.