Legal
Effective 25 August 2026 · Last updated 25 August 2026
The Globe Map is operated by Evan Faure, operating under the business name “The Globe Map”, at Schillerstraße 41, 80336 Munich, Bavaria, Germany. Evan Faure is the controller of the personal data described in this Privacy Notice when he decides why and how it is processed.
Privacy contact: theglobemap@gmail.com or the contact form. No data protection officer has been appointed. The controller is established in Germany and therefore does not require an EU representative.
This Notice applies to theglobemap.com, user accounts, profiles, saved places, itinerary creation and sharing, community functions, contact forms and related communications. A third-party booking provider processes a booking under its own privacy notice.
Map views and selected places include geographic coordinates, but these do not necessarily reveal your device's location. If you choose a “use my location” feature, we request your device location only after clear, specific, prior and revocable permission. You can refuse or later revoke permission and enter or select a place manually.
We receive or license place details, images, ratings, review excerpts, prices and activity information from sources such as Google Places, Mapbox, GetYourGuide, Viator, venues and activity providers. A review excerpt may include a generic source label or a minimised public display name where necessary. We do not display full reviewer names unless this is necessary, permitted by the applicable licence and lawful. We process third-party content only where our licence and applicable law permit.
The legal bases below refer to Article 6 GDPR where it applies.
| Purpose | Typical data | Legal basis |
|---|---|---|
| Create and secure an account | Account, authentication and security data | Performance of a contract; legitimate interests in security |
| Build, save and modify itineraries | Profile, preferences, trip and place data | Performance of a contract or steps requested by you |
| Personalise recommendations and calculate personas | Quiz answers, interest scores and trip constraints | Performance of the requested service; legitimate interests in improving relevance where compatible with your rights |
| Publish or share an itinerary according to the selected setting | User Content, profile display data, visibility and engagement | Performance of the sharing function you request; legitimate interests in operating public community features |
| Enable collaboration, likes and saved places | Account and interaction data | Performance of a contract |
| Respond to contact, support and rights requests | Contact and communication data | Steps requested by you; legitimate interests in support and record keeping; legal obligation where applicable |
| Prevent fraud, abuse and security incidents | Technical, account and log data | Legitimate interests in protecting the Service and users; legal obligation where applicable |
| Measure and improve the Service | Usage and diagnostic data | Legitimate interests for strictly necessary or suitably privacy-preserving measurement; consent where non-essential storage or tracking requires it |
| Display affiliate content and measure qualifying referrals | Page context, affiliate parameters and click data | Legitimate interests in funding the Service where no consent-required tracking occurs; consent where required for non-essential identifiers |
| Send marketing communications | Email and communication preferences | Consent, or another basis only where expressly permitted by local law |
| Comply with law and defend claims | Relevant account, communication and transaction records | Legal obligation; legitimate interests in establishing, exercising or defending legal claims |
Where we rely on legitimate interests, we assess the necessity of the processing and its impact on users. You may object as described below.
The Globe Map uses automated rules and scoring to adapt recommendations. For example, quiz answers may generate a primary persona and secondary personas, while direct constraints such as dates, pace, budget and traveller group are given priority when they conflict with persona tendencies. Spot relevance, opening information, travel time and feasibility may also be considered. Affiliate eligibility may help distinguish otherwise suitable bookable options but does not override explicit preferences or itinerary feasibility.
This processing is intended to help plan a trip. It does not produce a decision with legal or similarly significant effects about you. You can modify the generated itinerary, change answers, skip optional profile elements where available, or create a classic itinerary.
We do not use sensitive categories such as health, religion, political opinions or sexual orientation to create personas. Do not enter sensitive personal information in free-text fields.
Before publishing, avoid including home addresses, booking references, passport information, live location, children's details or another person's travel information without permission. Changing visibility cannot retrieve copies previously saved by other people or immediately remove search-engine caches.
We disclose data only as reasonably necessary to the following categories:
| Recipient/category | Role and purpose | Data potentially involved |
|---|---|---|
| Supabase | Database, authentication, storage and backend services | Account, profile, trip, content and technical data |
| Vercel | Hosting, content delivery, logs and security | IP address, requests, technical data and content served |
| Mapbox | Interactive maps and map requests | IP address, device/map request data; device location only if enabled and authorised |
| Google Places / Google Maps Platform | Place details, photos, attribution and, where used, map or location features | Search terms, place requests and technical data depending on implementation |
| GetYourGuide and Viator | Affiliate content, widgets, outbound referrals and bookings on their sites | Referral parameters and data they collect after interaction |
| Google (Gmail) | Receive and manage messages sent to the published contact address or forwarded from the contact form | Name, email address, message content and related correspondence |
| Professional advisers and authorities | Legal, accounting, insurance, claims and lawful requests | Data relevant to the request or obligation |
| Business successor | Merger, financing, acquisition or asset transfer subject to safeguards | Relevant business records |
GetYourGuide, Viator, Google and Mapbox may also act as independent controllers for their own processing. Their notices govern those activities.
At the date of this Notice, The Globe Map does not use an analytics service, Google or Apple social login, or reCAPTCHA. The Privacy Notice and Cookie Notice will be updated, and any required consent controls deployed, before any such service is activated.
We do not sell personal data for money or share it for cross-context behavioural advertising.
Some providers or their subprocessors operate outside the European Economic Area or the United Kingdom. Where required, we use an adequacy decision, the EU Standard Contractual Clauses, the UK transfer addendum or another lawful safeguard, together with supplementary measures where appropriate. Provider participation in an applicable Data Privacy Framework may also be relevant.
Contact us to request further information about the transfer safeguard applicable to your data.
We keep personal data only for as long as necessary for the stated purpose, including security, legal and dispute requirements.
| Data | Retention rule |
|---|---|
| Account, profile, saved places and active itineraries | While the account is active, then deletion or anonymisation from active systems within 30 days after a valid deletion request |
| Deleted content in backups | Until the relevant encrypted rolling backup is automatically overwritten under the production provider's rotation schedule; backup copies are not restored except for disaster recovery or security purposes |
| Public itineraries | Until deleted, made non-public or the account is closed; public access and sitemap eligibility are removed promptly, subject to rolling backups and third-party caches |
| “Anyone with the link” itineraries | Until deleted or the account is closed |
| Inactive accounts | 24 months after the last activity, following at least 30 days' advance warning |
| Contact and support messages | 24 months after resolution, unless needed longer for a claim |
| Security and access logs controlled by The Globe Map | 12 months, unless an incident or legal obligation requires longer preservation |
| Cookie choices and consent records | A renewed choice is requested after 6 months; minimal evidence of the last consent choice is retained for 3 years |
| Affiliate reporting | Identifiable records controlled by The Globe Map for 12 months, then aggregated or anonymised where possible; financial records are retained for the statutory period |
| Content reports, moderation decisions and privacy requests | 3 years after closure, unless a dispute requires longer preservation |
| Legal and accounting records | For the period required by applicable law |
We may retain a minimal suppression record to honour an opt-out and evidence compliance.
Depending on applicable law, you may have the right to:
To exercise a right, use our contact form or email theglobemap@gmail.com. We may request proportionate information to verify your identity. We normally respond within one month under the GDPR, subject to lawful extensions.
Our competent supervisory authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht — BayLDA), Promenade 18, 91522 Ansbach, Germany — https://www.lda.bayern.de/. You may also contact the authority where you live or work, or where an alleged infringement occurred.
You can manage non-essential technologies through the “Cookie settings” link available from the footer. Withdrawing consent is as easy as giving it. Essential authentication and security storage cannot be disabled through the preference centre because the requested logged-in service cannot function without it.
Marketing email, if introduced, will include an unsubscribe method. Service and security messages are not marketing and may still be sent while an account remains active.
We use measures designed to protect personal data, such as encrypted transport, access controls, least-privilege permissions, secure authentication, environment-secret separation, backups and monitoring appropriate to the risk. No online service can guarantee absolute security. Contact theglobemap@gmail.com if you suspect a vulnerability or unauthorised account access.
The Service is not directed to people under 18 and they may not create or operate an account. Family itinerary features describe traveller groups; they do not require a child to create a profile. Do not enter a child's full name, contact details, school, live location or other unnecessary data in an itinerary. If you believe a child has provided data unlawfully, contact us so we can investigate and delete it where appropriate.
When you follow a link to a venue, map, GetYourGuide, Viator or another external site, that provider controls its own collection and use of data. Review its privacy and cookie information before booking or providing personal data.
We may update this Notice when the Service, providers or legal requirements change. We will post the updated version and date. We will provide additional notice where a change materially affects registered users or where consent must be renewed.
Evan Faure, operating under the business name The Globe Map
Schillerstraße 41, 80336 Munich, Bavaria, Germany
theglobemap@gmail.com
+49 160 1136952
Questions about this page? Contact us.
