Privacy policy

1. Scope of processing

This privacy policy explains which personal data may be processed when you visit this website, interact with its features, or use the protected administrator area.

The controller can be contacted using the public privacy email address stated above.

2. Server requests, hosting, and access data

• When pages are requested, the hosting environment may process technical access data such as IP address, date and time, requested resource, referrer, browser type, operating system, and HTTP status.
• The website is hosted through Hostinger, which may process these technical data as part of hosting and infrastructure delivery.
• This processing is typically required to deliver the website, preserve operational security, detect misuse, and troubleshoot faults.
• The legal basis is usually Article 6(1)(f) GDPR, based on the legitimate interest in secure and reliable website operation.

3. Local map data, optional Google Maps 3D Tiles, and attributions

• The map view uses local offline geodata prepared from OpenStreetMap-derived source data and rendered from files served by this application.
• During ordinary map use, the browser does not request live map tiles from OpenStreetMap servers.
• During ordinary map use, the browser also does not request Google Maps Platform map tiles.
• If you actively enable the optional textured 3D mode, the application first requests an activation payload from its own server. If the feature is available, that payload contains a browser API key for Google Maps Platform and activates the local CesiumJS renderer.
• After activation, the browser connects directly to `tile.googleapis.com` to request the Google Maps Platform Photorealistic 3D Tiles needed for the current scene. These requests can transmit technical request data such as IP address, date and time, requested URLs, browser and device metadata typically contained in HTTPS requests, and the tile or viewport parameters required to render the scene.
• The application does not use browser geolocation APIs for this feature. The public site-wide activation cap for textured 3D is implemented as a global daily counter and not as a public user account or profiling feature.
• CesiumJS renderer assets are served locally by this website. No separate Cesium cloud service is configured in the current public codebase.
• When textured 3D mode is active, Google Maps attribution, Google data-provider attribution, and Cesium credits must remain visible on screen.
• An OpenStreetMap attribution link is shown in the map interface. Attribution and legal links in the map or credit area connect to external provider sites only if you click them.

4. Optional third-party map content and legal basis

• The textured 3D mode is disabled by default and is only loaded after you actively switch it on in the 3D map interface.
• Where the GDPR applies, the optional loading of Google Maps Platform Photorealistic 3D Tiles is based on Article 6(1)(a) GDPR because the feature is loaded only after your deliberate activation of this optional third-party content.
• Google provides the 3D tiles under its own terms and privacy framework. Current reference URLs are Google's Privacy Policy (https://policies.google.com/privacy) and the Google Maps/Google Earth Additional Terms of Service (https://maps.google.com/help/terms_maps/).
• Google may process the request data needed for this feature outside the European Union or the European Economic Area. Details of Google's own processing should be taken from the Google documents linked above.
• You can stop further Google tile requests for this feature at any time by switching textured 3D off or leaving the map page.

5. Technically necessary storage on your device

• `bellcast-locale` is stored as a cookie for up to one year so the website can remember your language preference.
• `bellcast-theme` is stored in `localStorage` until you remove or change it, so the selected light or dark theme persists.
• `bellcast.interlog.expanded` is stored in `sessionStorage` for the current browser session to preserve the interLog expanded-view preference.
• `bellcast_admin_session` is stored as a cookie for up to 12 hours after successful administrator authentication to protect the restricted admin area.
• If no locale cookie is present, the website may read the browser's `Accept-Language` header to choose an initial language.
• Reading or storing these technically necessary settings occurs only where required to provide requested functionality or the secure operation of the website. For a Germany-based deployment, access to terminal equipment is based on Section 25(2) No. 2 TDDDG; any subsequent personal-data processing is generally based on Article 6(1)(f) GDPR.

6. External links

• The `/ext` section, the OpenStreetMap attribution link, and parts of the interface contain links to external publication pages and project websites.
• When you follow such a link, further data processing takes place under the responsibility of the respective external provider.
• The same applies to any Google, Cesium, or other provider links shown in the optional textured 3D credits.

7. Recipients and storage periods

• Technical data may be processed by Hostinger and the hosting or infrastructure environment to the extent necessary for secure delivery of the application.
• If you activate textured 3D mode, Google becomes an additional recipient for the technical request data required to deliver Google Maps Platform 3D tiles.
• No separate analytics providers, advertising networks, marketing tags, or consent-management platforms are used on the public-facing pages at present.
• The application does not permanently store Google Maps 3D tile content on its own servers for this public feature. Temporary handling of that content is governed by the browser, the renderer, and Google's applicable cache controls.
• Locale preferences remain stored until the cookie expires or is deleted manually.
• Theme preferences remain stored until you change the setting or clear browser storage.
• The interLog expanded-view preference is cleared automatically when the browser session ends.
• Admin session data expires after 12 hours at the latest.

8. Your rights

• Under the GDPR, you may have rights of access, rectification, erasure, restriction of processing, data portability, and objection.
• You may also lodge a complaint with a competent data protection supervisory authority.
• For privacy requests concerning this website, use the controller contact details stated above.
• If your request concerns data that Google processes directly when the optional textured 3D mode is loaded, Google's own privacy materials should also be consulted.