Less is more. Digital.Discover innovative lightweight solutions from Baden-Württemberg.

Privacy Policy

Privacy Policy and Data Protection of Leichtbau BW GmbH

We take the protection of your personal data seriously and handle your personal information with confidentiality in accordance with the statutory data protection regulations and the provisions of this data protection and privacy notice.

1. Name and contact information of the data controller and designated data protection officer

Data conroller:
Leichtbau BW GmbH
70174 Stuttgart

Tel. +49 (0) 711 / 128988-40

Data protection officer:


2. Purpose of processing

2.1 Consent (Art. 6 para. 1A GDPR), right to revoke
Personal data will be processed for specific purposes (such as to deliver our newsletter via e-mail after you click the confirmation links sent to you, forwarding to other third parties, evaluation of data for the purpose of PR work and marketing purposes, taking images and making recordings and publishing lists of participants in events), if you have granted your consent to us. You may revoke your consent at any time. The subscription to our newsletter can be canceled at any time by clicking the unsubscribe button in the newsletter. Please note that any revocation of consent will only apply to the future.

2.2 Contractual or precontractual obligations (Art. 6 para. 1B GDPR)
We process personal data which is required for the fulfillment of a contract to which you are a party or for the implementation of precontractual measures which become necessary due to a request submitted by you, e.g. through the contact form on our website. The purposes of the data processing are oriented on the contents of the contract (e.g. employment contract, service contract, management contract, framework agreement) and may include inter alia the evaluation, consultation and implementation of further action. When we offer events, we process your data in order to plan, organise, and carry out the event, along with event-related communication; housing (for instance in conference hotels) and catering for attendees; reimbursing travel expenses.In the course of your application for employment, the data provided by you (e.g. application letter, CV, employment history) which we require to evaluate your potential employment in our company will be carried out by those departments in our company which process employment applications (e.g. general management). The personal data of employees are processed for the purpose of fulfilling the employment contract if necessary in order to evaluate the establishment of an employment relationship or to implement the terms after the establishment of an employment relationship or to exercise or fulfill any rights and obligations arising from applicable law.

2.3 Processing required by law (Art. 6 para. 1C GDPR)
Data processing is carried out if required under applicable law for purposes including the prevention of fraud or money laundering, the fulfillment of fiscal monitoring and reporting purposes and in order to respond to inquiries by public authorities.

2.4 Legitimate interests (Art. 6 para. 1F GDPR)
In order to protect our legitimate interests or those of third parties, data processing will be carried out for certain purposes following a prior evaluation of interests, e.g. for premises security, for the production and distribution of image and sound recordings for marketing and PR purposes on our homepage, printed, online and social media as well as the daily and trade press, protection of legal claims, prosecution of criminal acts, improvements in product development, optimized customer outreach for marketing purposes including contacting other companies by telephone, delivery of advertising information by post (e.g. invitations to events, introduction of new services), business optimization or for improved data security. You may withdraw from our reporting on events by contacting us and objecting to this processing. When you take part in an event, we will inform you in advance if we are planning to make recordings or take photographs. For digital events, you have the option of attending using a made-up name (pseudonym) and image (avatar), and deactivating your camera and microphone. Only if you participate in digital events using your first and last name, activate your microphone or camera, or take part in a chat using your own name will your personal data be visible to other attendees during the event, in which case it may be included in recordings and subsequent reporting.

3. Data processing through the use of our website

3.1 Collection and processing of http protocol data
When visiting our website and when accessing any file, our web server will collect protocol information about these procedures (e.g. browser type, time and date of the website access). These data are not personal data. It is not possible for us to allocate these data to a specific natural person.

All such information is evaluated by use strictly for statistical purposes. This information is not transferred to third parties. This information is not coupled by us to other data.

3.2 Presentation of companies, products and services
We offer companies from relevant sectors the opportunity to present themselves, their products and services on this website. If you are interested in any such services, you can switch to the website of a relevant company by clicking on an external link. We have no influence over the content of these linked website, and we provide no guarantee for said content. We have reviewed the content for possible legal violations at the time the external link was created. However, it is not reasonable for us to continuously monitor third-party websites for legal violations, without specific grounds to do so. If we find, or if we are informed by a third party, that a specific website to which we link represents a violation of civil or criminal law, then we will remove the link to this website insofar as it is technically possible and reasonable for us to do so. You can also be contacted directly by the company if you leave your contact information on our business card that we have provided. When it is sent, this will result in an e-mail being sent to us.

3.3 Use of cookies
Cookies are packets of data which are sent by the web server to the user’s browser and stored by the browser for later access. You determine whether or not cookies may be collected by configuring your browser settings to inform you prior to storing cookies and only storing cookies once you have explicitly agreed to do so. Some cookies are necessary for proper operation of this website (category: required cookies). We only set additional cookies if you have given us your consent before (categories: statistical cookies, comfort cookies). You can reject your consent at any time here.

3.3.1 Required cookies
We use the necessary cookies to facilitate or facilitate the transmission of a message over an electronic communications network. In addition, we use the necessary cookies to provide a service of a information society which you had requested.

Required cookies in detail:

Name Function Expiration times  
cookieConfig Check the cookie setting. Session  
hideCookieLayer Hides the Cookie Layer Consent or Rejection. Session  

Consent to Borlabs Cookie

Our website uses consent technology from Borlabs Cookie to obtain your consent to store certain cookies in your browser or use certain technologies, as well as to document this in a manner that conforms to data protection law. The provider of this technology is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (hereinafter referred to as Borlabs).

When you access our website, a Borlabs cookie is stored in your browser, and the consent you have granted, or revocation of that consent, is stored therein. This data is not transmitted to the provider of Borlabs Cookie. The collected data is stored until you request that we delete it, until you delete the Borlabs cookie yourself, or until the purpose for which the data was stored no longer applies. Mandatory statutory retention periods are not affected. Details on data processing by Borlabs Cookie are available at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/. Borlabs Cookie consent technology is used to obtain legally conforming consent to the use of cookies. The legal basis for doing so is Art. 6 para. 1 lit. c GDPR.


3.3.2 Statistical Cookies by Matomo

We use the open-source software Matomo for analysis and statistical analysis of the website usage. Cookies are used for this purpose. The information generated by the cookie about the use of the website is transmitted to our servers and summarized in pseudonymous usage profiles. The information is used to evaluate the use of the website and to enable a design of our website based on the needs of the visitors. The information will not be passed to third parties. In no case the IP address will be associated with any other data concerning the user. The IP addresses are anonymized, so that an assignment is not possible (IP masking). Your visit to this website will only be recorded by Matomo Web Analytics with your consent. You can also click here https://matomo.org/docs/privacy/ to stop your visit.

Matomo-Cookies in detail:

Name Function Expiration times  
_pk_id Used to store a few details about the user such as the unique visitor ID. 13 month  
_pk_ref Used to store the attribution information, the referrer initially used to visit the website. 6 month  
_pk_ses, _pk_cvar, _pk_hsr Short lived cookies used to temporarily store data for the visit. 30 minutes  
_pk_testcookie Used to check whether the visitor’s browser supports cookies. Session  

4. Categories of recipients, transfer to third countries
In order to carry out the intended processing purposes, the respectively required data may be made accessible to various separate departments within our company. External data processors may also be contracted by us and receive data for specific purposes, e.g. IT services, sensitive data destruction and marketing. Other recipients of personal data may also include public authorities, credit and financial service providers, lawyers, tax consultants or rating agencies. A data transfer to third countries will only occur to the extent necessary for e.g. the implementation of a contract, fulfillment of statutory obligations or if you have given consent. Through the integration of IT components, it cannot be ruled out that an IT service provider from a third country (e.g. USA) may have access to personal data. Otherwise, no transfer of personal data to third countries or any international organization is carried out.

5. Duration of data storage
Personal data is stored by us for the duration of the contractual relationship. In addition, the statute of limitation of legal claims extends in most cases to three years. Following the employment application procedure, we will normally delete your data after three months provided that no employment contract between you and our company is entered into. The personal data collected by us for the use of the contact form are automatically deleted after your request or query has been answered. Various retention and documentation statutes apply on the basis of e.g. the German Commercial Code (HGB) and the Tax Ordinance (AO) which may extend for up to ten years.

6. Obligation to provide data
You are only obligated to provide such personal data as required for the establishment, implementation and termination of a contract or which we are obligated by law to collect. If you do not provide us with the required information and documents, we will be unable to enter into or continue the business relations which you request.

7. Automated decision making in individual cases, profiling
We do not implement any fully automated decision-making processes for establishing and implementing our business relationship. We may process your data through partially automated means for the purpose of evaluating specific personal aspects (profiling), e.g. in the evaluation of targeted customer outreach, tailored advertising including market and opinion research as well as for scoring and rating procedures. The evaluation may take into account for example data on payment history (e.g. account statements and balances) as well as criteria such as business sector affiliation and experiences from the current business relationship.

8. Categories of personal data, data sources
We process for example the following categories of personal data: person master data, contract master data, data for the implementation and termination of contracts, service instruction data, data for the fulfillment of legal obligations, marketing and sales data, data on the use of our telecommunications (e.g. time and date of website access, apps or newsletter, clicks on our provided links and entries) as well as other data comparable to these data categories. We process the data that we receive from you in the course of our business relationship as well as the data received legitimately by us from other third parties. Furthermore, we collect data from publicly accessible sources (e.g. business directories and records of debtors, commercial registries, media).

9. Your right to informationYou have the right to request at any time information on the personal data which we store in relation to you, including the sources and recipients of your data and the purpose of the data processing. Information requests should be submitted in writing (to: Leichtbau BW GmbH, Breitscheidstraße 4, 70174 Stuttgart, Germany) or by email (to: info@leichtbau-bw.de).

Below you will find a summary of your information and data subject rights:

– Art. 15 GDPR: Purpose of processing, categories of personal data that are processed, recipients or categories of recipients to whom personal data are disclosed, in particular third countries, the provisional retention period or criteria for determining the retention period, information on your rights to data correction, deletion, restriction of processing as well as the right to object to the processing, right to appeal to the data protection regulatory authority, source of the data, the implementation of automated decision making and profiling if applicable, the appropriate guaranties pursuant to Art. 46 in cases of transfer to third countries/international organizations.

– Art. 16 GDPR: You have the right to demand the correction of any incorrect or incomplete personal data held by the data controller.

– Art. 17 GDPR: You have the right to demand the immediate deletion of the personal data stored by us provided that you have e.g. revoked your consent to the storage of your personal data or the data are processed illegitimately.

– Art. 18 GDPR: You have the right to demand the restriction of the processing of your personal information by Leichtbau BW provided that the correctness of the data is disputed by you, the processing is illegitimate but you reject deletion or you have objected to the processing in accordance with Art. 21 GDPR.

– Art. 20 GDPR: You have the right to receive information on the personal data held by us in a structured, common and machine readable format. Furthermore, you may demand from us the transfer of your data to another data controller.

– Art. 7 para. 3 GDPR: You have the right to revoke any consent you have issued to the storage and processing of your personal data at any time. This revocation has the consequence that we may in the future no longer continue the data processing and storage carried out on the basis of this consent.

– Art. 77 GDPR: You have the right to appeal to a data protection regulatory authority at any time. You may contact the data protection regulator for you typical place of residency or employment or you may contact the data protection regulator responsible for our place of business (Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

10. Validity of and changes to this data protection and privacy policy notice

This data protection and privacy policy notice is currently valid as of 1st August 2021. Amendments and updates to this data protection and privacy notice may become necessary due to changes in statutory or administrative requirements. The respectively valid data protection and privacy policy notice can be accessed at any time through the following link: http://www.leichtbau-bw.de/privacy-policy
Furthermore, a link to the data protection and privacy policy is available in the footer of our website.

This data protection and privacy notice applies only to the contents of our own servers and does not extend to the external websites accessible through links on our website.


Information on your right to object pursuant to Art. 21 of the General Data Protection Regulation (GDPR)

Objection due to particular situation

You have the right to object, on reasons relating to your particular situation, to object to processing of personal data concerning you which is processed based on Article 6 para. 1e GDPR (data processing in public interest) and Article 6 para. 1f GDPR (data processing based on legitimate interests); this also applies to profiling carried on this basis. If you object, we will no longer process your personal data unless we can provide necessary vital interests in the processing which override your interests, rights and liberties or which serves the pursuit, exercise or defense of legal claims.

Right to object to the processing of data for the purpose of direct marketing

We process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data relating to you for the purposes of such advertisement; this also applies to profiling to the extent used in connection with direct marketing procedures. If you object to the processing for direct marketing, we will no longer use your personal data for such purposes. The objection does not require any specific form and should be addressed to the extent possible to:

Leichtbau BW GmbH
Landesagentur für Leichtbau Baden-Württemberg
Breitscheidstraße 4
70174 Stuttgart
Email: info(at)leichtbau-bw.de

If you have any questions which are not answered in this data protection and privacy notice, you can contact us at any time through the following email address: