Jump to: content, navigation, search

Navigation menu

Services and tile users privacy FAQ: Difference between revisions

Couple of improvements
No edit summary
(Couple of improvements)
Other map layers, routing services and the "query" function visible on openstreetmap.org are not operated by the OSMF and you need to contact the respective operators directly.
 
All information on this page is subject to change without notice, please check it regularly for updates.
 
== Can you sign a Data Processing Agreement (DPA) with me/my organisation? ==
 
No. There is no Data Controller - Data Processor relationship between you and the OSMF and using our services does not create such a relationship. The OSMF operates as an independent Data Controller and is not processing personal data on your behalf. You or your organisation have no control over our data processing nor do you have access to any such data collected by us.
 
== Where are your servers located? ==
== What should I add to the Data Protection Statement for my website when I am using OSMF services? ==
 
The OSMF cannot dispense legal advice and you need to consult with your legal counsel for information tailored to your specific situation. However we believe that a statement as follows should serve well if you are using map tiles from the OSMF:
 
<blockquote>
''This website utilizes map services provided by the OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands B72 1JU, United Kingdom (short OSMF). Your Internet browser or application will connect to servers operated by the OSMF located in the United Kingdom and in other countries. The operator of this site has no control over such connections and processing of your data by the OSMF. You can find more information on the processing of user data by the OSMF in the <A HREF="https://wiki.osmfoundation.org/wiki/Privacy_Policy">OSMFsOSMF privacy policy</A>.''</blockquote>
 
You may further want to add text indicating why you are using the OSMF services and that doing so is a "legitimate interest" as defined in [https://gdpr-info.eu/art-6-gdpr/ article 6.1f of the GDPR]. Further if you are actually using your own cache or proxy server and do actually handle your clients connections to OSMF services you will need to adapt the text to reflect such a setup.
544

edits