Embedding Google Maps in a data-protection-compliant way

An iframe from google.com/maps or the Maps JavaScript loads resources from Google (USA) when the page opens and can set identifiers.

Is this a risk?

The map request is usually not strictly necessary for the basic function of the site, so § 25 (1) TDDDG applies. Without consent or a two-click solution there is no basis; the US transfer must also be justified.

What you can do

• Two-click solution: static preview, the map loads only after a click.
• Alternatively use a data-minimising map (e.g. OpenStreetMap).
• With an active embed: obtain consent, name Google as recipient.

How consentglass helps

The free scan checks the delivered HTML and shows which services are embedded, whether a cookie banner is detected and whether privacy-policy and legal-notice links are present — with context for each finding. It is not a substitute for legal advice.