Last updated: 26 October 2026. This policy explains how personal data is processed on mapcoords.com, in line with the EU General Data Protection Regulation (GDPR) and Portuguese law (Lei n.º 58/2019).
In short: the coordinates you enter are converted in your own browser and are never sent to us. Optional cookies — preferences, statistics, advertising and external media such as videos — are only used if you agree, per category, and you can change your mind at any time.
1. Who is responsible
The data controller is:
Uncovered World Unip. Lda
Rua da Pedreira 18
8375-009 São Bartolomeu de Messines
Portugal
Email: info@mapcoords.com
For any question about your data or to exercise your rights, write to the email address above. We have not appointed a Data Protection Officer, as we are not required to.
2. What we process, why, and for how long
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Coordinate conversion | The coordinates you type. They are processed only in your browser and never reach our server. | No processing by us | Not stored |
| Operating and securing the website | IP address, date and time, page requested, browser type (server logs kept by our host) | Art. 6(1)(f) — legitimate interest in a secure, working website | Short periods defined by the hosting provider for security |
| Showing the interactive map | Your IP address and the visible map area, sent by your browser to the map providers | Art. 6(1)(f) — legitimate interest in offering the map you request | Under the providers’ policies |
| Remembering your language, display and cookie choices | Cookies pll_language, mc_consent; local storage pcc-theme | Strictly necessary (Art. 5(3) ePrivacy Directive; Art. 6(1)(f) GDPR) | 1 year / 6 months / until you clear it |
| Proof of your cookie choices | Random consent ID, your choices, policy version, date — no IP address | Art. 6(1)(c) — legal obligation to demonstrate consent (Art. 7(1)) | 3 years |
| Optional preferences (only if you agree) | Settings you choose to have remembered | Art. 6(1)(a) — consent | Up to 1 year |
| Audience statistics (only if enabled and you agree) | Pseudonymous usage data via cookies | Art. 6(1)(a) — consent | 14 months |
| Advertising (only if enabled and you agree) | Cookie IDs, ad interactions, approximate location | Art. 6(1)(a) — consent | See cookie policy |
| External media such as videos (only if you agree or load an item) | IP address and cookies of the platform (e.g. YouTube, Vimeo) | Art. 6(1)(a) — consent | Under the platforms’ policies |
| Answering your emails | Your email address, name and message | Art. 6(1)(f) — legitimate interest in replying; Art. 6(1)(c) when exercising your rights | As long as needed to handle your request, then up to 3 years |
We do not sell personal data, do not create user profiles ourselves and do not take decisions based solely on automated processing that produce legal or similarly significant effects (Art. 22 GDPR). You are not obliged to provide any personal data to use the converter.
3. Who receives data
We share data only with the following providers, and only for the purposes described. The list shows the services that are currently active:
- Hostinger International Ltd. (hosting) — Hosts the website (Hostinger is established in the European Union) and processes technical server logs (IP address, date and time, requested page, browser) on our behalf as a processor, for security and operation.
- OpenStreetMap Foundation, OpenTopoMap, Direção-Geral do Território — Provide the map images. When the map is shown, your browser requests the images of the visible area directly from them, which reveals your IP address and that area. OpenStreetMap is based in the United Kingdom (EU adequacy decision); OpenTopoMap in Germany; DGT in Portugal.
- Google Maps — Receives the converted coordinates only if you click “Open in Google Maps”. Google’s privacy policy then applies.
- YouTube (Google Ireland Limited), Vimeo Inc. — Only if a page embeds a video and you allow “External media” (or load that video): the platform receives your IP address and may set cookies. YouTube videos are loaded from youtube-nocookie.com. Transfers to the USA under the EU–US Data Privacy Framework.
4. Transfers outside the European Economic Area
Some providers (Google, Meta) may transfer data to the United States. These transfers rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework (10 July 2023) for certified companies and, where applicable, on Standard Contractual Clauses (Art. 46 GDPR). Transfers to the United Kingdom rely on the Commission’s adequacy decision.
5. Cookies
Details of every cookie, its purpose and duration are in our cookie policy. You can change or withdraw your consent at any time: Cookie settings.
6. Your rights
Under the GDPR you have the right to:
- access your personal data and obtain a copy (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data erased (Art. 17);
- restrict processing (Art. 18);
- receive your data in a portable format (Art. 20);
- object at any time to processing based on legitimate interests (Art. 21);
- withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3)) — use “Cookie settings” at the bottom of any page.
Send your request to the email address in section 1. We will reply within one month (extendable by two months for complex requests, Art. 12(3)). If your request concerns cookie choices, it helps to include your consent ID, which is stored in the mc_consent cookie in your browser — without it we cannot link the anonymous record to you.
7. Right to complain
You may lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt, or with the authority of your country of residence or work.
8. Children
The website is not directed at children. Children under 13 should not give consent to optional cookies without the authorisation of a parent or guardian (Art. 8 GDPR and Art. 16 of Lei n.º 58/2019).
9. Security
The site is served only over HTTPS, applies a restrictive Content Security Policy, loads no optional third-party script before consent and keeps no account data for visitors.
10. Changes
We may update this policy when the website or the law changes. The date at the top shows the latest version. If a change requires new consent, we will ask you again.