Privacy Policy

This English translation is provided for your information. The German version (Datenschutzerklärung) is legally binding.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for data processing on this website is:

Sven Schröter
Benediktinerstraße 32a
54292 Trier
Germany
E-mail: kulturdatenbank@gmx.de

The Kulturdatenbank der Region Trier is a purely private, volunteer-run and exclusively non-commercial service. No data protection officer has been appointed, as there is no legal obligation to do so.

Summary

  • You can use the Kulturdatenbank without registering and without providing any personal data.
  • There is no advertising, no audience measurement, no tracking and no third-party analytics.
  • The public pages do not set any cookies.
  • Connections to third-party servers are made only for map tiles and, if you explicitly request it, for 3D models, translation by Google and links to other websites.

General information

The controller treats your personal data confidentially and in accordance with the statutory data protection regulations (in particular the GDPR, the German Federal Data Protection Act and the German Telecommunications Digital Services Data Protection Act – TDDDG). This policy informs you about the nature, scope and purpose of the processing of personal data on this website.

Personal data is any information relating to an identified or identifiable natural person, such as a name, e-mail address or IP address.

This website uses TLS encryption to secure data transmission (recognisable by “https://” in the address bar). When communicating by e-mail, however, complete protection against access by third parties is not possible.

Hosting and server log files

The website is operated by a hosting provider that processes the data on our behalf and according to our instructions (Art. 28 GDPR). Each time a page is requested, your browser transmits data for technical reasons, which the web server stores in so-called server log files:

  • the requested address (including any search terms and filters it contains)
  • date and time of access
  • HTTP status code and amount of data transferred
  • the previously visited page (referrer), if your browser transmits it
  • browser type and version, operating system
  • IP address

The legal basis is Art. 6(1)(f) GDPR. The controller has a legitimate interest in the technically error-free delivery, stability and security of the website (e.g. defence against attacks) and in a statistical evaluation of access figures without reference to individuals.

This data is not combined with other data sources. The log files are evaluated only if there are specific indications of unlawful use, and are deleted after 60 days at the latest unless they are needed for longer to investigate a specific incident.

To protect against overload and misuse, our server limits how often a visitor can request resource-intensive functions within one hour (address search, generation of map sections and PDF fact sheets, very large data requests via the interface). For this purpose it stores an irreversible hash of the IP address (for IPv6 only the network part) together with a counter; these entries are deleted after one hour. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable and secure operation).

Cookies and browser storage

The public pages of the Kulturdatenbank do not set any cookies. So that the website remembers your settings, it merely stores two values in your browser’s storage; they are not transmitted to us:

  • kdb-grundkarte-aus (Session Storage): the time at which the base map could not be reached, so that further pages show the substitute map straight away for five minutes; deleted when you close the browser;
  • kdb-standort (Local Storage): your location display settings (follow, rotate in direction of travel, keep screen on), no positions, until you clear your browser storage;
  • kdb-einzeln (Local Storage): your choice to show objects on the map individually instead of grouped, until you switch grouping back on or clear your browser storage;
  • kdb-aufnahme, kdb-spuren-an (Local Storage) and kdb-spuren (IndexedDB): the current recording and your saved tracks (positions with time) and the tours you have drawn, until you delete them or clear your browser storage;
  • kdb-route (Local Storage): a hiking or cycling route loaded on the map (simplified line, name, length), so that it is kept when you open an object page, for at most 14 days or until you remove it. The route file is only read in your browser and is not transmitted to us;
  • kdb-theme (local storage): your choice between the light and dark colour scheme, until you clear your browser storage;
  • kdb-umgebung-ansicht (session storage): whether you want to see “Nearby” objects as a list or a map; the value is deleted when you close the browser window.

So that the website can also be used without an internet connection and installed as an app, your browser additionally stores the design, program files, the most recently visited pages (up to 80) and images (up to 400) in its cache (service worker). This data also remains on your device and is not transmitted to us; you can remove it at any time in your browser settings (clear site data).

Only in the non-public administration area (see below) is a session cookie (kdb_backend) set after login. It applies exclusively to that area and becomes invalid on logout, after 120 minutes of inactivity or when the browser is closed.

This storage is strictly necessary for the function you request (Section 25(2) No. 2 TDDDG); no consent is required. You can clear your browser storage at any time in your browser settings.

Maps and geodata services

On pages with a map (e.g. object pages, the map view of the search, the large map), your browser loads the map tiles directly from the servers of the respective provider. For technical reasons, your IP address is transmitted to that provider, together with the displayed map section and browser data. By default, the basemap.de map of the Federal Agency for Cartography and Geodesy (Bundesamt für Kartographie und Geodäsie, Richard-Strauss-Allee 11, 60598 Frankfurt am Main, Germany) is loaded. Only if you select a different base map or an additional layer in the map menu is data also loaded from

  • the Federal Agency for Cartography and Geodesy for TopPlusOpen,
  • the State Office for Surveying and Geobasis Information Rhineland-Palatinate (Landesamt für Vermessung und Geobasisinformation Rheinland-Pfalz, Von-Kuhl-Straße 49, 56070 Koblenz, Germany) for the aerial image, topographic and historical maps, contour lines and hillshade,
  • the Kulturdatenbank server (kulturdb.de) for the historical maps (e.g. Saar-Moselle wine-growing map 1868, geological map, old town plans of Trier), or
  • the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom) for the OpenStreetMap map. An adequacy decision of the European Commission exists for the United Kingdom.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a clear presentation of the location of the cultural assets). The controller has no influence on further processing by these bodies; their privacy policies apply.

For objects without a photo, the object page shows sections of historical maps (Prussian survey map, Tranchot survey of the Rhineland) around the location. Our server retrieves these sections once from the State Office for Surveying and Geobasis Information Rhineland-Palatinate and stores them; your browser loads them from our server, so your IP address is not transmitted to the State Office.

Images, fonts, icons, the elevation model for relief and 3D terrain, and program libraries are delivered exclusively from our own server.

Location

The maps offer a “Show my location” button. Only when you click it does your browser ask for permission to determine your location. The position is used only in your browser to move the map there; it is not transmitted to or stored on our server. Only the map tiles for that section are loaded from the map provider. If you record a track, your positions with time are stored continuously in your browser’s storage and are not transmitted to us. Only you can pass on a track as a GPX file or delete it; recording continues on other pages of this website as long as the red badge is visible. If you let the map follow your position, this applies continuously to the section shown until you stop the location display. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in your browser settings.

Address search on the map

To search for addresses and places on the map, our server forwards the search text you enter to the search service (gazetteer) of the Geoportal Rhineland-Palatinate (Landesamt für Vermessung und Geobasisinformation Rheinland-Pfalz). The request is made by our server; your IP address is not transmitted to the Geoportal. To reduce the load on the service, results are cached on our server for up to 24 hours, without any reference to you. Please enter only addresses or place names in the search field. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in finding cultural assets near an address).

Machine translation (English, French and Dutch versions)

The English, French and Dutch object pages contain a link “Translate with Google”, “Traduire avec Google” or “Vertalen met Google”. It opens the page in a new window in the Google Translate service (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Only when you click this link are the address of the page and, for technical reasons, your IP address and browser data transmitted to Google; a transfer to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework, is possible. Google’s privacy policy applies. Without a click, no connection to Google is made.

3D models (Sketchfab)

Some pages can display 3D models from the Sketchfab service (Sketchfab Inc., USA, a company of Epic Games Inc.). The models are only loaded when you explicitly request this by clicking “Load 3D model”. Only then is a connection to Sketchfab’s servers established, transmitting, among other things, your IP address to the USA; Sketchfab may set its own cookies. The legal basis is your consent given by the click (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which also covers the transfer to the USA (Art. 49(1)(a) GDPR). The USA may not offer a level of data protection equivalent to EU law; in particular, authorities may access the data. Further information can be found in Sketchfab’s privacy policy.

Links to other services

The object pages contain links such as “Plan a route” (Google Maps) and “Open in OpenStreetMap”. Only when you click such a link do you leave this website; the provider then receives the coordinates of the object as well as your IP address and browser data, and its privacy policy applies. The “Share” and “Send by e-mail” functions pass the address of the page to your device’s share function or to your e-mail program; nothing is transmitted to us.

Handling of contact data

If you contact the controller by e-mail (e.g. via “Write a message” or “Submit a picture”), the information you provide is stored for the purpose of processing and answering your enquiry. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering the enquiry and maintaining the database). This data is not passed on to third parties without your consent and is deleted as soon as it is no longer required for the purpose and no statutory retention obligations apply.

Publication of contributions and acknowledgements

If you provide the Kulturdatenbank with texts or images, these will be published as part of the service. If you agree, your name will be given as the author or mentioned in the acknowledgements. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw this consent at any time with effect for the future; please contact the address given above.

Administration area (editorial team only)

There is a non-public, password-protected administration area for the volunteer editorial team. For each account, the user name, display name, e-mail address, role, the password exclusively as an irreversible hash and the time of the last login are stored. To protect against password guessing, every login attempt is logged with the time, the user name entered, IP address, browser identifier and result; these entries are deleted automatically after 90 days. Changes to objects, images, 3D models and accounts are logged with the time and account so that they remain traceable and reversible. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security of the system and the traceability of the content). Accounts are deleted when someone stops contributing; log entries then lose their link to the account.

Rights of the data subject

With regard to your personal data, you have the following rights vis-à-vis the controller:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out until then remains unaffected

An informal message to the controller named above is sufficient to exercise these rights. Information is provided free of charge.

Right to object

Where processing is based on Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). The controller will then no longer process the data unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can object informally using the contact address given above.

Further information

You are under no legal or contractual obligation to provide personal data; however, the website cannot be delivered without the data transmitted for technical reasons (e.g. IP address). There is no automated decision-making, including profiling (Art. 22 GDPR).

Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR. The supervisory authority responsible for the controller is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz
Telefon: +49 6131 8920-0
E-Mail: poststelle@datenschutz.rlp.de
Web: www.datenschutz.rlp.de

Last updated: October 2026