Privacy Policy and Data Protection of Leichtbau BW GmbH

We take the protection of your personal data seriously and handle your  personal information with confidentiality in accordance with the statutory data protection regulations and the provisions of this data protection and privacy notice.

1. Name and contact information of the data controller and designated data protection officer

Data controller:
Leichtbau BW GmbH
Breitscheidstr. 4
70174 Stuttgart

Tel. +49 (0) 711 / 128988-40

Data protection officer:


2. Purpose of processing

2.1 Consent (Art. 6 para. 1A GDPR), right to revoke
Personal data will be processed for specific purposes (such as to deliver our newsletter via e-mail after you click the confirmation links sent to you, forwarding to other third parties, evaluation of data for the purpose of PR work and marketing purposes, taking images and making recordings and publishing lists of participants in events), if you have granted your consent to us. You may revoke your consent at any time. The subscription to our newsletter can be canceled at any time by clicking the unsubscribe button in the newsletter. Please note that any revocation of consent will only apply to the future.

2.2 Contractual or precontractual obligations (Art. 6 para. 1B GDPR)
We process personal data which is required for the fulfillment of a contract to which you are a party or for the implementation of precontractual measures which become necessary due to a request submitted by you, e.g. through the contact form on our website. The purposes of the data processing are oriented on the contents of the contract (e.g. employment contract, service contract, management contract, framework agreement) and may include inter alia the evaluation, consultation and implementation of further action. When we offer events, we process your data in order to plan, organise, and carry out the event, along with event-related communication; housing (for instance in conference hotels) and catering for attendees; reimbursing travel expenses.In the course of your application for employment, the data provided by you (e.g. application letter, CV, employment history) which we require to evaluate your potential employment in our company will be carried out by those departments in our company which process employment applications (e.g. general management). The personal data of employees are processed for the purpose of fulfilling the employment contract if necessary in order to evaluate the establishment of an employment relationship or to implement the terms after the establishment of an employment relationship or to exercise or fulfill any rights and obligations arising from applicable law.

2.3 Processing required by law (Art. 6 para. 1C GDPR)
Data processing is carried out if required under applicable law for purposes including the prevention of fraud or money laundering, the fulfillment of fiscal monitoring and reporting purposes and in order to respond to inquiries by public authorities.

2.4 Legitimate interests (Art. 6 para. 1F GDPR)
In order to protect our legitimate interests or those of third parties, data processing will be carried out for certain purposes following a prior evaluation of interests, e.g. for premises security, for the production and distribution of image and sound recordings for marketing and PR purposes on our homepage, printed, online and social media as well as the daily and trade press, protection of legal claims, prosecution of criminal acts, improvements in product development, optimized customer outreach for marketing purposes including contacting other companies by telephone, delivery of advertising information by post (e.g. invitations to events, introduction of new services), business optimization or for improved data security. You may withdraw from our reporting on events by contacting us and objecting to this processing. When you take part in an event, we will inform you in advance if we are planning to make recordings or take photographs. For digital events, you have the option of attending using a made-up name (pseudonym) and image (avatar), and deactivating your camera and microphone. Only if you participate in digital events using your first and last name, activate your microphone or camera, or take part in a chat using your own name will your personal data be visible to other attendees during the event, in which case it may be included in recordings and subsequent reporting.

3. Data processing through the use of our website

3.1 Collection and processing of http protocol data
When visiting our website and when accessing any file, our web server will collect protocol information about these procedures (e.g. browser type, time and date of the website access). These data are not personal data. It is not possible for us to allocate these data to a specific natural person.

All such information is evaluated by use strictly for statistical purposes. This information is not transferred to third parties. This information is not coupled by us to other data.

3.2 Newsletter
If you wish to subscribe to our newsletter, we require in addition to your email address the confirmation that you are the owner of the email address provided and that you agree to receive the newsletter and that we may send the newsletter to the address provided. Other information may be freely provided by you. The provision of our newsletter is carried out by the service provider CleverReach GmbH & co. KG, Mühlenstr. 43, 26180 Rastede, Germany (CleverReach). CleverReach provides comprehensive analysis possibilities for determining if the newsletter is opened and used. These analyses are carried out on groups of recipients and are not used by us to evaluate any individual newsletter recipient. Further information on CleverReach and their data protection policies are available at:
You can unsubscribe at any time either by notifying us directly or by clicking the unsubscribe link in the newsletter.

3.3 Contact form
You have the option of contacting us at any time via the following address through the contact form on our homepage:
In doing so it is necessary to provide a valid email address in order to allow us to contact you through this address and answer your requests and queries. Other information can be freely provided by you through the contact form.

3.4 Registration for events
For certain events, we offer the option of registering on our website using a registration form. To do so, you must provide your name and contact information so that we can process your concern using this address and complete your registration. You may voluntarily provide further information in the registration form. We use a variety of online platforms for digital events, such as Zoom or evenTwo. In general, to participate you must provide your first and last name, institution and e-mail address. Registered users can typically log in to the platform using a link sent to them in advance with their assigned user name and password. After the end of the digital event, we will delete user data after three months. Information on data protection by the platform providers is available from the respective online platform provider.

3.5 Use of cookies
Cookies are packets of data which are sent by the web server to the user's browser and stored by the browser for later access. You determine whether or not cookies may be collected by configuring your browser settings to inform you prior to storing cookies and only storing cookies once you have explicitly agreed to do so. Some cookies are necessary for proper operation of this website (category: required cookies). We only set additional cookies if you have given us your consent before (categories: statistical cookies, comfort cookies). You can reject your consent at any time here.

3.5.1 Required cookies
We use the necessary cookies to facilitate or facilitate the transmission of a message over an electronic communications network. In addition, we use the necessary cookies to provide a service of a information society which you had requested.

Required cookies in detail:

Name Function Expiration times  
cookieConfig Check the cookie setting. Session  
hideCookieLayer Hides the Cookie Layer Consent or Rejection. Session  

3.5.2 Comfort cookies
Our website implements social plugins (“Plugins”) provided by social networks, a map provider, a survey tool and a social video platform. In order to improve the protection of your data when visiting our website, the plugins are not universally accessible on the website but only through an HTML link. This form of integration ensures that by accessing any part of our website which contains such plugins, no automatic connection with the servers of the providers of the respective social networks or video platform is created. Only when you agree to the usage of the plugins, a connection to the servers of the respective provider is established. If you click on any of the buttons, a new window will open in your browser to the site of the respective provider to which you may then (after entering your login details) click the like or share button. The purpose and scope of the data collected and the processing and use of the data by these providers as well as your rights and privacy protection options in regards thereto can be found in the privacy policies of the providers.

Comfort cookies in detail:

Name Function Expiration times  
1P_JAR ( Carries out information about how the user uses the website and advertising that the end user may have seen before visiting. session/30 days  
NID ( Set by DoubleClick (by Google) to help build profile of your interests and show relevant ads. 1 year  
APISID ( Set through google for advertising partners, to build a profile of the users interests and show relevant. It identifies your browser and device. 1 year  
CONSENT ( Carries out information about how the user uses the website and advertising that the have seen before visiting the website. 1 year  
HSID ( Cookie is set by DoubleClick (by Google) to build a profile of the users interests and show relevant ads. 1 year  
PREF ( By Google or Doubleclick, used by advertising partners to build a profile of interests to show relevant ads. It identifies your browser and device. 1 year  
SAPISID ( Generally set by DoubleClick (Google) and used to build a profile of the users interests and show relevant ads. It identifies your browser and device. 1 year  
SID ( Cookie is set by DoubleClick (by Google) to build a profile of the users interests and show relevant ads. 1 year  
SSID ( This cookie has information about how the end user uses the website and any advertising that the end user may have seen before visiting. 1 year  
VISITOR_INFO1_LIVE ( Set by Youtube to track users preferences for embedded videos embedded. It also checks if the user has new or old version of the Youtube interface. 1 year  
YSC ( Set by YouTube to track views of embedded videos. 1 year  
muxData (Vimeo) If the visitor interrupted while viewing video content, the cookie remembers where to start the video when reload. session  
vuid (Vimeo) Used by the Vimeo video player on websites. 2 years  
player (Vimeo) Saves the user's preferences when playing embedded videos from Vimeo. 1 year  
OGPC (Google Maps) Enables the functionality of Google Maps. 1 month  
SEARCH_SAMESITE ( This cookie has information about how the end user uses the website and any advertising that the end user may have seen before visiting. 6 month  
ANID ( This cookie has information about how the end user uses the website and any advertising that the end user may have seen before visiting. 6 month  
_fbp (Facebook) Used by Facebook for advertising. 3 month  
fr (Facebook) Used by Facebook for advertising. 3 month  
tr (Facebook) Used by Facebook for advertising. 3 month  
yt-remote-cast-installed (youtube) Saves user preferences when retrieving a Youtube video built into other websites Session  
yt-remote-connected-devices (youtube) Saves user preferences when retrieving a Youtube video built into other websites Persistent  
yt-remote-device-id (youtube) Saves user preferences when retrieving a Youtube video built into other websites Persistent  
yt-remote-fast-check-period (youtube) Saves user preferences when retrieving a Youtube video built into other websites Session  
yt-remote-session-app (youtube) Saves user preferences when retrieving a Youtube video built into other websites Session  
yt-remote-session-name (youtube) Saves user preferences when retrieving a Youtube video built into other websites Session  
pk_id, pk_ref, pk_ses, csrftoken (Umbuzzo) Stores user data and statistical evaluation of usage, for example to prevent multiple surveys. 1 year  

3.5.3 Statistical Cookies by Matomo

We use the open-source software Matomo for analysis and statistical analysis of the website usage. Cookies are used for this purpose. The information generated by the cookie about the use of the website is transmitted to our servers and summarized in pseudonymous usage profiles. The information is used to evaluate the use of the website and to enable a design of our website based on the needs of the visitors. The information will not be passed to third parties. In no case the IP address will be associated with any other data concerning the user. The IP addresses are anonymized, so that an assignment is not possible (IP masking). Your visit to this website will only be recorded by Matomo Web Analytics with your consent. You can also click here to stop your visit.

Matomo-Cookies in detail:

Name Function Expiration times  
_pk_id Used to store a few details about the user such as the unique visitor ID. 13 month  
_pk_ref Used to store the attribution information, the referrer initially used to visit the website. 6 month  
_pk_ses, _pk_cvar, _pk_hsr Short lived cookies used to temporarily store data for the visit. 30 minutes  
_pk_testcookie Used to check whether the visitor’s browser supports cookies. Session  

4. Categories of recipients, transfer to third countries
In order to carry out the intended processing purposes, the respectively required data may be made accessible to various separate departments within our company. External data processors may also be contracted by us and receive data for specific purposes, e.g. IT services, sensitive data destruction and marketing. Other recipients of personal data may also include public authorities, credit and financial service providers, lawyers, tax consultants or rating agencies. A data transfer to third countries will only occur to the extent necessary for e.g. the implementation of a contract, fulfillment of statutory obligations or if you have given consent. Through the integration of IT components, it cannot be ruled out that an IT service provider from a third country (e.g. USA) may have access to personal data. Otherwise, no transfer of personal data to third countries or any international organization is carried out.

5. Duration of data storage
Personal data is stored by us for the duration of the contractual relationship. In addition, the statute of limitation of legal claims extends in most cases to three years. Following the employment application procedure, we will normally delete your data after three months provided that no employment contract between you and our company is entered into. The personal data collected by us for the use of the contact form are automatically deleted after your request or query has been answered. Various retention and documentation statutes apply on the basis of e.g. the German Commercial Code (HGB) and the Tax Ordinance (AO) which may extend for up to ten years.

6. Obligation to provide data
You are only obligated to provide such personal data as required for the establishment, implementation and termination of a contract or which we are obligated by law to collect. If you do not provide us with the required information and documents, we will be unable to enter into or continue the business relations which you request.

7. Automated decision making in individual cases, profiling
We do not implement any fully automated decision-making processes for establishing and implementing our business relationship. We may process your data through partially automated means for the purpose of evaluating specific personal aspects (profiling), e.g. in the evaluation of targeted customer outreach, tailored advertising including market and opinion research as well as for scoring and rating procedures. The evaluation may take into account for example data on payment history (e.g. account statements and balances) as well as criteria such as business sector affiliation and experiences from the current business relationship.

8. Categories of personal data, data sources
We process for example the following categories of personal data: person master data, contract master data, data for the implementation and termination of contracts, service instruction data, data for the fulfillment of legal obligations, marketing and sales data, data on the use of our telecommunications (e.g. time and date of website access, apps or newsletter, clicks on our provided links and entries) as well as other data comparable to these data categories. We process the data that we receive from you in the course of our business relationship as well as the data received legitimately by us from other third parties. Furthermore, we collect data from publicly accessible sources (e.g. business directories and records of debtors, commercial registries, media).

9. Your right to information
You have the right to request at any time information on the personal data which we store in relation to you, including the sources and recipients of your data and the purpose of the data processing. Information requests should be submitted in writing (to: Leichtbau BW GmbH, Breitscheidstraße 4, 70174 Stuttgart, Germany) or by email (to:

Below you will find a summary of your information and data subject rights:

- Art. 15 GDPR: Purpose of processing, categories of personal data that are processed, recipients or categories of recipients to whom personal data are disclosed, in particular third countries, the provisional retention period or criteria for determining the retention period, information on your rights to data correction, deletion, restriction of processing as well as the right to object to the processing, right to appeal to the data protection regulatory authority, source of the data, the implementation of automated decision making and profiling if applicable, the appropriate guaranties pursuant to Art. 46 in cases of transfer to third countries/international organizations.

- Art. 16 GDPR: You have the right to demand the correction of any incorrect or incomplete personal data held by the data controller.

- Art. 17 GDPR: You have the right to demand the immediate deletion of the personal data stored by us provided that you have e.g. revoked your consent to the storage of your personal data or the data are processed illegitimately.

- Art. 18 GDPR: You have the right to demand the restriction of the processing of your personal information by Leichtbau BW provided that the correctness of the data is disputed by you, the processing is illegitimate but you reject deletion or you have objected to the processing in accordance with Art. 21 GDPR.

- Art. 20 GDPR: You have the right to receive information on the personal data held by us in a structured, common and machine readable format. Furthermore, you may demand from us the transfer of your data to another data controller.

- Art. 7 para. 3 GDPR: You have the right to revoke any consent you have issued to the storage and processing of your personal data at any time. This revocation has the consequence that we may in the future no longer continue the data processing and storage carried out on the basis of this consent.

- Art. 77 GDPR: You have the right to appeal to a data protection regulatory authority at any time. You may contact the data protection regulator for you typical place of residency or employment or you may contact the data protection regulator responsible for our place of business (Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

10. Validity of and changes to this data protection and privacy policy notice
This data protection and privacy policy notice is currently valid as of 1st August 2021. Amendments and updates to this data protection and privacy notice may become necessary due to changes in statutory or administrative requirements. The respectively valid data protection and privacy policy notice can be accessed at any time through the following link:
Furthermore, a link to the data protection and privacy policy is available in the footer of our website.

This data protection and privacy notice applies only to the contents of our own servers and does not extend to the external websites accessible through links on our website.

Information on your right to object pursuant to Art. 21 of the General Data Protection Regulation (GDPR)

Objection due to particular situation

You have the right to object, on reasons relating to your particular situation, to object to processing of personal data concerning you which is processed based on Article 6 para. 1e GDPR (data processing in public interest) and Article 6 para. 1f GDPR (data processing based on legitimate interests); this also applies to profiling carried on this basis. If you object, we will no longer process your personal data unless we can provide necessary vital interests in the processing which override your interests, rights and liberties or which serves the pursuit, exercise or defense of legal claims.

Right to object to the processing of data for the purpose of direct marketing

We process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data relating to you for the purposes of such advertisement; this also applies to profiling to the extent used in connection with direct marketing procedures. If you object to the processing for direct marketing, we will no longer use your personal data for such purposes. The objection does not require any specific form and should be addressed to the extent possible to:

Leichtbau BW GmbH
Landesagentur für Leichtbau Baden-Württemberg
Breitscheidstraße 4
70174 Stuttgart
Email: info(at)

If you have any questions which are not answered in this data protection and privacy notice, you can contact us at any time through the following email address: