Draft for review. Legal bases, recipients and retention arrangements must be confirmed before go-live.
VT Geoportal privacy notice
Version 2026-09-08.1
Who is responsible
Vantage Towers AG operates the VT Geoportal.
Privacy and Data Protection Officer contact: privacy@vantagetowers.com
Information we process and why
- Accounts and access: name, username, work email, optional phone number, password hash, roles, permissions, account dates, sign-in and multifactor authentication records. Used to provide and secure authorised access.
- Geo-analysis: uploaded files, saved layers, coordinates, addresses, analysis requests and results, ownership and sharing records. Used to evaluate and plan tower sites.
- Landlord matching: the landlord identification number is entered in the column labelled “Account Name”; this column contains an identifier, not the landlord’s name. Landlord names, contact details and other personal particulars are not entered as part of this workflow. The identifier is used with site locations to match contracted or interested landlords to sites and buildings. An identifier may still relate to an individual through records held outside VT Geoportal.
- Collaboration and engineering: project membership, assignments, comments, documents, images, uploaded plans and models, notifications and activity history. Used to coordinate work and engineering assessments.
- Technical data: IP addresses and request/device information processed by hosting, security and external map/content services. Used to deliver content and protect the service.
- Cookie choices: selected preference, notice version, time and a random receipt identifier. Used to respect and demonstrate your choice. Optional language and analysis-mode storage is used only with consent.
Legal bases
Optional browser preference storage relies on consent, which you may withdraw in Cookie settings. The proposed basis for access management, security, site planning and internal collaboration is legitimate interests in operating a secure business planning service (Article 6(1)(f) GDPR), subject to the operator's assessment. Any applicable employment, contractual or legal-obligation bases must be confirmed for the relevant users and datasets before this notice is approved.
Sources and recipients
Information comes from you, authorised colleagues and administrators, imported business datasets and public mapping/building sources. It is accessible to authorised users according to roles, country access and sharing permissions, and to service providers supporting the tool.
The code integrates Google hosting/storage and map services, Mapbox, Cesium, public geodata/geocoding services and external libraries delivered by CDNs. These services can receive IP addresses, browser/request details and, for map searches, coordinates or search terms. The deployed provider list, contractual recipients, processing locations and any international-transfer safeguards are pending verification. External map services are separate from the disabled Google Analytics integration.
Retention
Cookie choices last 180 days; see the Cookie policy for browser storage lifetimes. Account records, uploaded files, landlord records, saved analysis and collaboration history currently have no uniform automatic deletion schedule in the application. Transient analysis response cleanup is separately configurable. Approved business retention periods, security/access-log retention, consent-log retention, backup expiry and deletion responsibilities must be confirmed before go-live. We do not describe deletion as automatic where it has not been implemented.
Your rights
Subject to the applicable conditions, you may request access, correction, erasure, restriction and portability of your personal data, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting processing lawfully carried out before withdrawal. You may complain to a competent data protection supervisory authority. Use the privacy contact above to exercise your rights.
Account information is needed for authorised access; you can decline optional preference storage. Geo-analysis assists planning decisions; the operator must confirm any additional use involving automated decisions with legal or similarly significant effects before deployment.