OpenStreetMap
Badge: ⬜ No badge
This work is licensed under CC BY-SA 4.0
OpenStreetMap
| Feld | Wert |
|---|---|
| Group / Parent Service | Mapping |
| Badge | ⬜ No badge |
| Service Type | Parent service |
| Sub-service / Relationship Note | [not documented] |
| Infrastructure Only? | No |
| Contact (DPO / Privacy) | data@osmfoundation.org |
| Assessment Date | 06/08/2026 |
| Version | v2 (06/08/2026) | v1: 22/06/2026 |
Badge & Risk Assessment
- Badge: ⬜ No badge
- Red Flags:
- Keine
- Risk Indicators:
- No DPA available (independent controller relationship); incomplete GDPR compliance documentation
Reasoning & Sources
Key Facts: OpenStreetMap is operated by the OpenStreetMap Foundation (OSMF), a UK nonprofit. No advertising model exists and no commercial profiling occurs — strongly positive. However, OSMF is an independent controller for tile service users — a DPA relationship between the embedding website and OSMF is legally unavailable. OSMF acknowledged in its 2024 State of the Map conference that its GDPR compliance 'has lagged behind requirements in some respects' and is under remediation. Sub-processor and CDN chain not fully publicly documented. UK post-Brexit adequacy decision applies to UK-based processing; some infrastructure nodes are outside EEA.
Quellen:
- OSMF Privacy Policy (osmfoundation.org/wiki/Privacy_Policy)
- OSMF Tiles Usage Policy (operations.osmfoundation.org/policies/tiles)
- OSMF GDPR wiki page
- SotM 2024 GDPR/compliance talk (State of the Map 2024).
Processing Purposes (Consenter)
- Unlock additional website features
Notification & Objection Status
- TPP Notified?: Not yet notified
- Decision Contested?: [not documented]
Review Required
No review required.
Shape Consenter Together
Consenter is built on an open and participatory process that grows through community collaboration. Whether you share feedback, improve the documentation, or contribute to the Risk Configuration Guides or Technical Integration Guides, your expertise helps make Consenter more privacy-friendly, interoperable, and useful for everyone—including your own users and services: Get finally your benefits and control the risks when sharing personal data.
Last updated on