1. Controller
The controller responsible for the processing described in this Privacy Policy is Maplify GmbH, trading as MapsExperts, Simmeringer Hauptstraße 16/6/20, 1110 Vienna, Austria. Company register number: FN 659017v. VAT ID: ATU82751639.
Privacy enquiries can be sent to contact@mapsexperts.com.
2. Website Hosting, Delivery and Security
The MapsExperts website and related MapsExperts subdomains, including partners.mapsexperts.com, are delivered using Cloudflare services. When you access the site, technical connection and request data may be processed, including IP address, date and time, requested URL, browser or user-agent information, device and network information, and security-related signals. This processing is used to deliver the website, maintain availability, prevent abuse and protect the service.
Where this processing is necessary for website operation and security, we rely on our legitimate interests under Article 6(1)(f) GDPR in providing a secure and reliable website. Where processing is required by law, Article 6(1)(c) GDPR may also apply.
The fonts used on our website are hosted locally by MapsExperts or served through MapsExperts infrastructure. Visiting the website does not require a browser request to Google Fonts.
3. Contact Forms, Partner Applications and Enquiries
When you contact us through the website, we process the information you submit so that we can respond. Depending on the form, this may include your name, email address, company or brand name, number of locations, a business or location name, address or Google Maps URL, the content of your message, and technical source information identifying the page or form used.
If you submit a partner application through partners.mapsexperts.com, we may also process the market or territory you identify, the partnership model and stage you select, the industry or client type you describe, additional context you provide, and an illustrative calculator scenario if you choose to apply after using the partner income calculator. We may also record campaign parameters and the referring page where available so that we can understand how the enquiry reached us.
Website enquiries and partner applications are delivered to MapsExperts using our website contact infrastructure and Resend, an email-delivery service operated by Plus Five Five, Inc. Information submitted through a form is therefore transmitted for the purpose of delivering and handling the enquiry at contact@mapsexperts.com.
Where your enquiry or partner application relates to a potential or existing business relationship, processing is based on Article 6(1)(b) GDPR. For general business communications, evaluation of potential partner relationships and efficient handling of enquiries, we may also rely on our legitimate interests under Article 6(1)(f) GDPR. Information required to meet legal obligations may be processed under Article 6(1)(c) GDPR.
Our forms also use a non-visible anti-spam field and server-side validation to reduce automated abuse. We do not require a third-party CAPTCHA for ordinary submissions at this time.
4. MapsExperts Location Check
The Location Check at mapsexperts.com/audit/ compares the business information published on a website with Google's public business information and, if you connect it, with a Google Business Profile. When you run a check, we fetch up to four publicly accessible pages of the website you enter — for example its homepage, contact page and one location page — and its robots.txt file. Before any page is fetched, the hostname you entered is resolved through DNS-over-HTTPS services operated by Cloudflare and Google so that we only contact public web servers. From the pages we extract business information such as name, address, phone numbers, opening hours, structured data and indexing directives. We store the extracted information and the findings, not the pages themselves, together with the time of the check and a pseudonymised identifier derived from your IP address that we use to limit misuse. This record is deleted automatically after 24 hours, or immediately when you choose to delete the check.
Google's public business information: after the website check, our servers send the business name you entered and the location you entered — or, if you left the location empty, the address found on the website — to Google (Google Maps Platform, Places API) to find the business's public Google listing, and then request the public details of the matching listing: name, address, phone number, website, opening hours, business status, category and Google Maps link. Your IP address is not sent to Google. We show this information to you during the check. Google's terms do not allow us to store it, so we keep only Google's identifier of the listing, our comparison results and the name and location you entered with the check; for repeated checks of the same business we keep a link between a keyed hash of the check inputs and that identifier for up to 30 days. If several listings could match, you choose one; we compare a listing only when the information on the website supports the match.
Optional Google connection: you can connect a Google account that manages a Google Business Profile. You sign in on Google's own page and decide there whether to grant access; we never see your Google password. With the access you grant (the Google permission “business.manage”, for which Google does not offer a read-only variant), we read and do not change the Business Profile data that this Google account is authorised to manage: the account names and types, the number of accessible locations, each location's name, store code and address, and — for the location you select — its phone numbers, website, regular and special opening hours, categories, opening status and Google's indicators of changes made by Google. We use this information only to show you the comparison with your website and to record the number of locations accessible to the account. We do not sell it, use it for advertising or use it to train AI models.
We request online access only, so Google does not issue us a long-lived refresh token. The access token is stored encrypted on our infrastructure, is linked to your browser by a necessary cookie and expires after one hour at the latest. When you disconnect, we revoke the token with Google and delete the connection and the compared Google data. You can also remove the access at any time in your Google account settings. The compared profile details are stored with your check and deleted with it after 24 hours at the latest.
Report by e-mail: if you request the report, we process your e-mail address, your company name and, if provided, your name to send the report through Resend, and we notify our team at contact@mapsexperts.com of the request together with the checked website and the number of issues found. To prevent misuse, we keep a pseudonymised identifier derived from your e-mail address for 30 days. Only if you separately agree that we may contact you about the results do we store your request as a business enquiry for up to 24 months, include the number of locations accessible to a connected Google account and a size category derived from it, and pass the enquiry to our internal sales systems. You can withdraw this agreement at any time with effect for the future by writing to contact@mapsexperts.com.
Follow-up request: if the comparison with Google's public information could not be completed during your check — for example because of a temporary usage limit or a temporary problem at Google — you can ask us to follow up about it. We then store your e-mail address, the business name and location you confirm, your name if provided, the checked website, a summary of the findings of your check, the reason why the comparison could not be completed and, if you connected a Google account, the number of locations accessible to it and a size category derived from it. We notify our team at contact@mapsexperts.com and pass the request to our internal systems so that we can answer it; where report e-mails are available, we also send you the website results through Resend. We use these details only to answer your request and delete them after 6 months, unless you separately agree that we may contact you about the results and related services — then we keep them as a business enquiry for up to 24 months.
We carry out the website check, the comparison with Google's public information, the Business Profile comparison, the report delivery and the answer to a follow-up request at your request (Article 6(1)(b) GDPR) and in our legitimate interest in offering a secure, useful free tool and preventing misuse (Article 6(1)(f) GDPR). Contact about the results and related services beyond a follow-up you requested is based on your consent (Article 6(1)(a) GDPR). Please only check websites and connect Google accounts that you are entitled to use for this purpose.
6. Google Tag Manager and Google Analytics 4
With your consent to the Analytics category, we use Google Tag Manager container GTM-M6G47CF8 to load our Google Analytics 4 setup on mapsexperts.com and, where enabled, related MapsExperts subdomains. These tools help us understand how the website is used and how pages perform. Analytics may process information such as page views, interactions, browser and device characteristics, approximate geographic information and technical identifiers generated by Google Analytics.
On the partner-program site, analytics events may include interactions such as opening or submitting a partner application, using calculator presets, choosing a product scenario and following links to MapsExperts product pages. These events are only sent after Analytics consent.
Google states that, for traffic collected in the EU, individual IP addresses are not logged or stored in Google Analytics; IP information is used to derive approximate location information and is then deleted before further processing. The exact data available to us depends on our Google Analytics configuration and Google's service settings.
We use a consent-first implementation: Google Tag Manager and Google Analytics are not loaded before Analytics consent. Our consent configuration keeps advertising-related consent signals, including ad_storage, ad_user_data and ad_personalization, denied. The legal basis for the optional analytics processing described here is your consent under Article 6(1)(a) GDPR.
If you later withdraw Analytics consent, the website removes common Google Analytics cookies where technically possible and reloads the page so that the previously loaded tag environment is no longer active.
7. Google Maps
Pages that show our Vienna location can embed Google Maps as part of the page content. The map is not controlled by the optional Analytics consent setting and may load when the relevant page is displayed.
When the embedded map loads, your browser connects to Google. Google may process technical information such as your IP address, browser and device information, referrer information and interactions with the map, and may use cookies or similar storage in accordance with Google's own terms and privacy information.
We use the embedded map to make our business location and directions easier to find. For our decision to provide this location functionality, we rely on our legitimate interest under Article 6(1)(f) GDPR in providing practical business and contact information. Google's own processing is governed by its applicable privacy terms and legal bases.
8. Service Providers and International Transfers
We use service providers where necessary to operate the website and communications. Relevant providers for the website currently include Cloudflare, Inc. for website delivery and security, Plus Five Five, Inc. (Resend) for delivery of contact-form, partner-application and Location Check emails, and Google entities for Google Tag Manager and Google Analytics after Analytics consent, for Google Maps when an embedded map is displayed, for the Google Maps Platform (Places API) that provides the public business information compared in the Location Check, and for the optional Google sign-in and Google Business Profile APIs in the Location Check. To check the website addresses entered in the Location Check, hostnames are resolved through DNS-over-HTTPS services of Cloudflare and Google.
Some providers are based in or may process data in countries outside the European Economic Area, including the United States. Where personal data is transferred internationally, we rely on the transfer mechanisms made available under applicable data-protection law, such as an adequacy decision where available, contractual safeguards including Standard Contractual Clauses, or another lawful transfer mechanism used by the relevant provider.
We do not sell or rent personal data to advertisers or data brokers.
9. Data Retention
We keep personal data only for as long as it is needed for the relevant purpose or to satisfy legal, accounting, contractual or dispute-related obligations.
General enquiries and partner applications that do not lead to an ongoing engagement are normally retained for no longer than 24 months after the last substantive communication, unless a longer period is required for a specific legal or evidentiary reason. If an enquiry becomes part of a client or partner relationship, the relevant business and legal retention periods may apply instead.
Technical security and delivery data is retained according to our operational needs and the applicable settings and retention periods of our infrastructure providers. Analytics data is retained according to our Google Analytics property settings and applicable Google controls. Consent preferences are stored for up to 182 days unless you change them sooner.
Location Check results are deleted after 24 hours, Google connections after one hour at the latest, links between check inputs and Google listing identifiers after 30 days, the pseudonymised identifiers used to prevent misuse of report e-mails after 30 days, follow-up requests made without that consent after 6 months, and Location Check enquiries stored with your consent after 24 months at the latest.
10. Your Data Protection Rights
Subject to the conditions of the GDPR, you may have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests.
Where processing is based on consent, you may withdraw that consent at any time with effect for the future. For website Analytics consent, use Cookie Settings in the relevant footer. For other privacy requests, contact contact@mapsexperts.com.
We may need to verify your identity before responding to a rights request where this is necessary to protect personal data from unauthorized disclosure.
11. Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a competent supervisory authority. In Austria, the supervisory authority is the Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, Austria, email: dsb@dsb.gv.at.
12. Data Security
We use technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration and disclosure. These measures include secure transport, access controls, infrastructure security controls, request validation and restricted handling of service credentials.
No internet-based system can be guaranteed to be completely secure. We review our measures as the website and service stack change.
13. Changes and Contact
We may update this Privacy Policy when our website, subdomains, providers, analytics configuration, partner-program workflows or legal obligations change. The current version and its last-updated date are published on this page.
For questions about this Privacy Policy or the processing of your personal data, contact MapsExperts / Maplify GmbH at contact@mapsexperts.com.