Privacy notice

Privacy notice (first version)

Last updated: 13 October 2026

The app at a glance

No account, no advertising, no usage analytics.

Your exact position is read only while the app is open and in use, to centre the map and compute distances; it is never stored or sent. No background location.

Location

To search for places the app uses an approximate centre, rounded to about 1.1 km. Only this centre is sent to the place services and stored on the device.

On Android the position may come from Google Play services, under Google's terms.

Maps, places and events

Map tiles come from tile.openstreetmap.org (OpenStreetMap Foundation).

Cultural places within 20 km of the approximate centre come, in Germany and Italy, from the Artistic Trip bridge server (bridge.artistic-trip.com); elsewhere, or if the bridge does not respond, from the Overpass API (overpass-api.de).

Cultural events come only from the bridge server, requested with the rectangle around the approximate centre and the chosen dates; they are not stored on the device. Source pages open in the browser only when you tap “Open the source page”.

These requests reveal the area displayed or searched, the device IP address and the app user agent to the operators of those services.

City search

Only when you confirm a search, the text you typed and the app language go to the bridge server, which forwards them to the place search service (currently OpenStreetMap's Nominatim) without the device IP address.

The bridge does not log the searched text and keeps recent searches (text, language and results, without IP) in memory for at most 6 hours, shared by all users. Nothing is sent while you type; neither your position nor the map centre is ever sent.

Bridge server

Operator: Francesco Capodanno. Server location: Germany, dogado VPS.

It receives the fixed map tiles (about 6 × 6 km, the same for everyone), the event rectangle rounded to about 1 km, the text of city searches and, as with any web request, the IP address and user agent. Never the exact position, no device or user identifier.

It logs time, path without query string or tile number, result, duration and a truncated IP address (IPv4 /24, IPv6 /48). Logs rotate (at most 3 files of 10 MB per service) and are usually overwritten within a few days.

The server database holds only public, openly licensed data: places from OpenStreetMap (ODbL), places from other open data sources when they are configured (the German tourism Knowledge Graph, DZT, under CC0, CC BY, CC BY-SA or DL-DE; places imported from Wikidata, CC0), each with its attribution, and public events. In separate tables it keeps the contact form messages and the event proposals sent from the website (see “Website forms”).

It holds no user data from the app: no positions, searches, IP addresses or accounts.

To find events the server reads the public pages of places' websites listed in OpenStreetMap, respecting robots.txt, and stores only structured event data. These visits come from the server and carry no user data.

External navigation

A maps app opens only after confirmation and receives only the chosen destination. A place's website opens in the browser only when you tap the “Programme” button.

Data on the device

Only downloaded places (for offline use), the approximate centres of searches and the tiles already downloaded are stored, so as not to repeat requests: centres and tiles for at most 7 days. The database is excluded from device backups.

This website

artistic-trip.com uses no cookies, no JavaScript, no analytics and no third-party resources (fonts, embedded maps, social media).

The server (Germany, dogado VPS, same operator) logs for each request the time, path without query string, result and a truncated IP address (IPv4 /24, IPv6 /48), without request headers. Logs rotate and are usually overwritten within a few days.

The contact form and the form for proposing an event send their data to the same server: see the next section.

Website forms: contact, event and place proposals

The contact form collects your name (optional), your e-mail address and your message. The “Propose an event” form collects the event details (title, dates, venue and address, link to the source, category, description) and, if you give one, an e-mail address. The “Suggest a place” form collects the details of the place (name, category, address, link to the source, description) and, if you give one, an e-mail address.

Purpose: replying to your message; checking the proposal and, if approved, showing the event or the place in the app. Legal basis: your request (Art. 6(1)(b) GDPR) and the legitimate interest in curating the events and places shown (Art. 6(1)(f)).

The data stays in the database of the bridge server (Germany, dogado VPS). A copy of every message and proposal is sent by e-mail to the operator's personal mailbox, at their e-mail provider, and stays there until the operator deletes it; otherwise the data is not passed on to third parties. E-mails written directly to info@artistic-trip.com are forwarded to the same mailbox; the server logs only sender, recipient, time and result, never the content. For an approved event or place only the details of the event or place are published, never the name or e-mail address of the person who proposed it. No proposal is published without a review.

Retention: messages and proposals are deleted automatically 6 months after they are sent (the server checks every hour). An approved proposal is kept, without the e-mail address, until the day after the event ends; the e-mail address is deleted on approval. An approved place proposal loses the e-mail address and the details of the place join the places shown in the app. Database backups, when enabled, rotate: the latest 14 are kept, then overwritten.

Deletion and your other rights (access, rectification, objection): write via the contact form or to info@artistic-trip.com; deletion is immediate. You may also contact a data protection supervisory authority.

The server does not store your IP address with the form data: to limit abuse it counts submissions per truncated IP address (IPv4 /24, IPv6 /48) in memory only, for at most one hour. The forms use no cookies and no JavaScript.

Contact

Data controller: Francesco Capodanno, Bruchweg 3, 32699 Extertal, Germany. E-mail info@artistic-trip.com or the contact form.