FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Other

Mapline

PreferencesOfficial website

Mapline is a US-based data visualisation and mapping platform that allows businesses to create interactive maps from spreadsheet data for territory management, location analysis, and reporting. While it primarily processes business data rather than consumer personal data, any maps containing location or address data linked to individuals are subject to GDPR. The platform processes data on US infrastructure with SCCs as the transfer mechanism.

Block Mapline until consentScan my site
Overview

What does Mapline do?

What is Mapline?

Mapline is a cloud-based data mapping and territory management platform that allows businesses to visualise spreadsheet data on interactive maps. Typical use cases include sales territory planning, store location analysis, customer distribution mapping, logistics route optimisation, and field team management. Users upload data from Excel, CSV, or CRM exports, and Mapline geocodes addresses to plot locations on the map.

What data does Mapline process?

Mapline processes the data uploaded by users, which may include customer names and addresses, employee locations, client contact details, and any other data in the uploaded spreadsheet. It also collects IP addresses and browser information from users accessing the Mapline application. If maps are embedded on public websites, visitor IP addresses are also logged.

GDPR implications

GDPR applies when Mapline is used to process personal data, which occurs when maps include data linked to identifiable individuals such as customer addresses, employee locations, or named contacts. The organisation uploading the data is the data controller and Mapline acts as a data processor. The US transfer requires SCCs. If maps are embedded publicly, the embedding itself may expose personal data, requiring appropriate disclosure.

Consent requirements

For the Mapline application used by internal team members, consent is not typically required as the processing basis is legitimate interest or contract performance. For embedded public maps that set cookies, ePrivacy consent is required. Individuals whose data is included in Mapline maps must be informed of the processing in the privacy policy.

Data transfers outside the EU

Mapline is a US company and processes all data on US infrastructure. Standard Contractual Clauses apply. Sign Mapline's DPA and document the transfer in your RoPA.

Practical compliance steps

Sign a DPA with Mapline. Update your privacy policy to describe Mapline as a processor for location and mapping data. For embedded maps, obtain ePrivacy consent. Minimise personal data in maps where possible. Document the US transfer in your RoPA. For employee location mapping, ensure individuals are informed and a lawful basis is documented.

Compliance

Mapline and the GDPR

Mapline is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR) for non-essential tracking cookies. Contract performance (Art. 6(1)(b)) for map data processing as part of a Mapline subscription.
Risk level
low
Applicable regulations
GDPR, ePrivacy Directive, UK GDPR, CCPA

Impact assessment (DPIA)

A DPIA is advisable when Mapline is used to map personal data linked to identifiable individuals at scale, such as customer location data, employee location tracking, or geographically referenced personal information in regulated sectors.

Sample text for your banner

This map is powered by Mapline (United States). Mapline processes the map data displayed here on US servers. If this map contains personal location data, please see our privacy policy for full details.
Cookies and trackers

What Mapline sets and contacts

Tracking method
JavaScript mapping widget, first-party cookies, server-side map data and user data processing
Server location
United States (Mapline infrastructure)
Data transferred outside the EU
Mapline is a US-based data visualisation and mapping platform. All map data and user account data is processed on US infrastructure. Transfers rely on Standard Contractual Clauses under GDPR Article 46.

Cookies set (1)

NameTypeDurationPurpose
ml_sessionsessionSessionSession identifier for the Mapline application and embedded map widgets

Third-party domains contacted (3)

  • mapline.com
  • app.mapline.com
  • api.mapline.com
Questions

Frequently asked questions about Mapline

Can't find your question? Write to us, we answer fast.

What cookies does Mapline set?

Mapline sets session and functional cookies for users of the Mapline application. If maps are embedded on public websites, the embed script may set cookies on visitor browsers. These require ePrivacy consent before the embed script loads.

Does Mapline require a GDPR consent banner?

For internal use, no public-facing consent banner is required. If maps are embedded on public websites, ePrivacy consent is required for non-essential cookies. Individuals whose personal data appears in maps must be informed in the privacy policy.

What is the legal basis for using Mapline with personal data?

Legitimate interest (Art. 6(1)(f)) or contract performance (Art. 6(1)(b)) typically applies for internal business mapping. For employee location mapping, a specific lawful basis and transparency obligation must be documented separately.

Does Mapline transfer data outside the EU?

Yes. Mapline is a US company and processes all data on US infrastructure. Standard Contractual Clauses apply. Sign Mapline's DPA and document the US transfer in your Records of Processing Activities.

Do I need a DPIA for Mapline?

A DPIA is advisable when Mapline is used to map personal data at large scale, particularly employee location data or customer geolocation in regulated sectors.

How do I use Mapline compliantly with GDPR?

Only include data for which you have a lawful basis. Sign a DPA with Mapline. Update your privacy policy describing Mapline as a processor. For embedded public maps, obtain ePrivacy consent. Minimise personal data in maps where possible.

Are there EU-hosted alternatives to Mapline?

Datawrapper (Germany) and CARTO offer EU data residency for data visualisation and mapping. OpenStreetMap-based tools like Leaflet.js self-hosted on EU infrastructure keep all data on your own servers.

Can I include customer addresses in Mapline maps?

Yes, but you must have a lawful basis and inform customers in your privacy policy. The Mapline DPA must be in place. Minimise data by excluding unnecessary identifiers from the map data.

Same category

More services: Other

See the whole category

Mapbox

Mapbox is a user preference and personalization service that helps websites deliver customized experiences based on individual visitor settings and choices. It manages preferences for content display, communication channels, and interaction styles. Mapbox integrates with website platforms to remember and apply user choices consistently across sessions. With privacy-compliant preference storage, Mapbox enhances satisfaction by ensuring tailored browsing experiences for every visitor.

Preferences

Draftpress HFCM

Draftpress HFCM is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Draftpress HFCM offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Draftpress HFCM empowers organizations to optimize strategy and maximize return on investment.

Other

SnapHop

SnapHop is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. SnapHop integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, SnapHop helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Oh Dear

Oh Dear is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Oh Dear supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Oh Dear ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Other

Personio

Personio is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Personio integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Personio helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

LocalFocus

LocalFocus is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. LocalFocus supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, LocalFocus ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Analytics

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site