> How Amap (AutoNavi) relates to GDPR and ePrivacy when embedded on a European website: cookies, IP, geolocation, transfers to China and lawful embedding. > > Canonical: https://www.flowconsent.com/en/services/other/amap Other # Amap Preferences · [Official website](https://amap.com) Amap (高德地图, AutoNavi) is a Chinese mapping platform from the Alibaba Group that provides interactive maps, geocoding, routing and place search through a JavaScript SDK and REST APIs hosted in China. [Block Amap until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=other) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Other](https://www.flowconsent.com/en/services/other) - Consent Preferences - Prior consent Required - Documented cookies 4 - Third-party domains 5 - Servers China (mainland), operated by AutoNavi (Alibaba Group) Overview ## What does Amap do? Amap, known in Chinese as 高德地图 and operated by AutoNavi, is a leading mapping platform in mainland China and the default maps provider of the Alibaba ecosystem. It offers interactive map tiles, satellite imagery, geocoding, routing and points of interest search through a JavaScript SDK, native mobile SDKs, and REST APIs. European businesses that target Chinese travellers or local audiences often integrate Amap because Google Maps is not accessible from mainland China. ## **What Amap does** On a website, Amap is typically loaded as a JavaScript SDK from webapi.amap.com or restapi.amap.com. The SDK draws an interactive map, requests vector or raster tiles, performs geocoding and reverse geocoding, plots routes for driving, walking and public transport, and exposes search for points of interest. Each request is authenticated with an API key tied to your Amap developer account. ## **Cookies and data collected** Loading the Amap SDK can set cookies on amap.com and autonavi.com used for tile caching, fraud prevention, and visitor recognition. Amap servers receive the user IP, user agent, referrer, the coordinates or address looked up, and the bounding box of the displayed map. When the browser Geolocation API is used, precise GPS coordinates can be sent to Amap if the user authorises geolocation. ## **GDPR and ePrivacy implications** IP and geolocation are personal data under GDPR. The SDK loads a third party script and may set cookies that are not strictly necessary, which triggers Article 5(3) of the ePrivacy Directive and the corresponding national implementations. Prior consent is the safest legal basis. Amap acts as an independent controller for its own fraud and product improvement purposes, in addition to any processor role under your contract. ## **Data transfers to China** Amap is operated from mainland China. Every map tile, geocoding request, and routing call leaves the EU. China has no adequacy decision, and AutoNavi is subject to the Cybersecurity Law, the Data Security Law, and PIPL, which grant the Chinese state broad access powers. You need Standard Contractual Clauses signed with AutoNavi and a documented Transfer Impact Assessment to justify the transfer. ## **How to embed it compliantly** Block the Amap SDK by default in your Consent Management Platform and load it only after the visitor accepts the maps or embeds category. Replace the map with a click to load placeholder that mentions Amap, AutoNavi, China, and the transfer mechanism. List Amap in your privacy notice and record of processing activities. For European audiences, consider MapTiler, Mapbox EU, OpenStreetMap or HERE Maps to avoid the China transfer altogether. Compliance ## Amap and the GDPR Amap is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy Directive) - Risk level high - Applicable regulations GDPR, ePrivacy Directive, PIPL, Schrems II case law ### Impact assessment (DPIA) A DPIA is recommended for any deployment targeting European users. Amap processes IP and approximate geolocation, transfers data to China, and is operated by AutoNavi (Alibaba) which is subject to Chinese law enforcement powers. Document the legal basis, the SCCs, the Transfer Impact Assessment, and any supplementary measures such as proxying tile requests through an EU server. ### Sample text for your banner > We embed Amap to display interactive maps and routes. Amap is operated by AutoNavi (Alibaba) and processes your IP and approximate location on servers in China. We only load it after you accept the maps and embeds category in our cookie banner. Cookies and trackers ## What Amap sets and contacts - Tracking method JavaScript SDK and REST API, requests to amap.com with cookies - Server location China (mainland), operated by AutoNavi (Alibaba Group) - Data transferred outside the EU Amap (AutoNavi) is hosted in mainland China by Alibaba Group. Map tile requests, geolocation lookups and search queries are processed in China, which has no EU adequacy decision and is subject to broad state access powers under PIPL, the Cybersecurity Law and the Data Security Law. ### Cookies set (4) | Name | Type | Duration | Purpose | | ---- | ------------ | --------- | -------------------------------------------------------------------------------------------------------------- | | cna | http\_cookie | 13 months | Alibaba Group network cross site identifier dropped on .amap.com used for anti fraud and audience measurement. | | isg | http\_cookie | session | Session signature cookie used by Alibaba edge services to validate the request. | | key | http\_cookie | session | Authentication token issued by the Amap SDK to associate API calls with the developer key. | | l | http\_cookie | 3 months | Language and region preference cookie set when the user interacts with the map UI. | ### Third-party domains contacted (5) - `webapi.amap.com` - `restapi.amap.com` - `tile.amap.com` - `dlweb.sogoucdn.com` - `autonavi.com` Questions ## Frequently asked questions about Amap Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Amap set? Loading the Amap SDK can set authentication and session cookies on the amap.com and autonavi.com domains, used for tile caching, anti-fraud and visitor recognition. The exact list depends on the SDK version and the user's prior interactions with Alibaba services. All cookies are third party from the perspective of a European publisher. ### Does Amap require GDPR consent? Yes. Amap is a third party embed that processes IP addresses and potentially precise geolocation, and may set non strictly necessary cookies. Under Article 5(3) of the ePrivacy Directive and Article 6(1)(a) GDPR, prior consent is required before the SDK is loaded. ### What is the legal basis for processing? Consent under Article 6(1)(a) GDPR is the safest legal basis for embedding Amap on a European site. Legitimate interest is hard to defend because Amap acts as an independent controller for fraud prevention and product improvement, and the data flows to China. ### Are data transferred outside the EU? Yes. All requests reach AutoNavi servers in mainland China. China is not on the EU adequacy list. You need Standard Contractual Clauses with AutoNavi and a Transfer Impact Assessment that accounts for Chinese state access powers under PIPL, the Cybersecurity Law and the Data Security Law. ### Do I need a DPIA? A DPIA is recommended whenever Amap is used at scale, on geolocation use cases, or alongside other tracking that profiles users. Document the categories of data, the China transfer, the legal basis, and the proportionality of using Amap rather than an EU based provider. ### How do I embed Amap compliantly? Use a click to load placeholder mentioning Amap, AutoNavi and the China transfer. Block the SDK by default in your CMP. Trigger loading only after the visitor opts in to the maps or embeds category. Disclose Amap in your privacy notice with retention and recipients, and link to the AutoNavi privacy policy. ### Are there alternatives to Amap? For European audiences, consider Mapbox (EU region), MapTiler, OpenStreetMap, HERE Maps or self hosted vector tiles. These options keep the data inside the EU and avoid the Schrems II issues of a China transfer. Reserve Amap for use cases that genuinely require mainland China coverage. ### How do I update my cookie policy for Amap? Add Amap or AutoNavi to your cookie table with the relevant cookies, lifetimes and purposes. Mark the entries as third party. Add a section explaining the international transfer to China, the legal mechanism used, and how the user can withdraw consent at any time. Same category ## More services: Other [See the whole category](https://www.flowconsent.com/en/services/other) ### [Cal.com](https://www.flowconsent.com/en/services/other/cal-com) [Cal.com is a user preference and personalization service that helps websites deliver customized experiences based on individual visitor settings and choices. It manages preferences for content display, communication channels, and interaction styles. Cal.com integrates with website platforms to remember and apply user choices consistently across sessions. With privacy-compliant preference storage, Cal.com enhances satisfaction by ensuring tailored browsing experiences for every visitor.](https://www.flowconsent.com/en/services/other/cal-com) [Preferences](https://www.flowconsent.com/en/services/other/cal-com) · ### [Teamtailor](https://www.flowconsent.com/en/services/other/teamtailor) [Teamtailor is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Teamtailor integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Teamtailor helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/other/teamtailor) [Preferences](https://www.flowconsent.com/en/services/other/teamtailor) · ### [Gravatar](https://www.flowconsent.com/en/services/other/gravatar) [Gravatar is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Gravatar is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Gravatar offers reliable solutions that scale with organizational needs and evolving web standards.](https://www.flowconsent.com/en/services/other/gravatar) [Essential](https://www.flowconsent.com/en/services/other/gravatar) · ### [Libravatar](https://www.flowconsent.com/en/services/other/libravatar) [Libravatar is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Libravatar is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Libravatar offers reliable solutions that scale with organizational needs and evolving web standards.](https://www.flowconsent.com/en/services/other/libravatar) [Essential](https://www.flowconsent.com/en/services/other/libravatar) · ### [Bugzilla](https://www.flowconsent.com/en/services/other/bugzilla) [Bugzilla is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Bugzilla integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Bugzilla helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/other/bugzilla) [Preferences](https://www.flowconsent.com/en/services/other/bugzilla) · ### [Microsoft Excel](https://www.flowconsent.com/en/services/other/microsoft-excel) [Microsoft Excel is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Microsoft Excel supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Microsoft Excel ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/other/microsoft-excel) [Other](https://www.flowconsent.com/en/services/other/microsoft-excel) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)