Privacy Policy
Version 2.0 | Effective as of 2026-08-08
This is a summary for convenience. The binding version of this privacy notice is the German one available at /datenschutz.
1. Controller
Logistik Hub Leipzig GmbH, Alexander Fürstenberg, Elisabeth-Schumacher-Straße 58, 04328 Leipzig, Germany.
Phone: 0341 2525330 · E-mail: info@logistik-hub-leipzig.de
2. Scope
This notice covers this website and the workforce management system reachable through it (scheduling, time recording, payroll). It addresses website visitors, contact persons of our clients and subcontractors, and our employees (section 6).
3. Visiting this website
Each request is logged with the page requested, date and time, IP address, amount of data transferred, browser type and provider (Art. 6(1)(f) GDPR, secure and reliable operation). We only use strictly necessary cookies — a session cookie for your login and a CSRF security token (§ 25(2) no. 2 TDDDG). There is no tracking, analytics or advertising. Some front-end libraries are currently loaded from external providers, which transmits your IP address to them.
4. Contacting us
If you contact us by e-mail, phone or a contact form, we process your details solely to handle your enquiry (Art. 6(1)(b) or (f) GDPR) and delete them once it has been dealt with, subject to statutory retention periods.
5. Clients and subcontractors
We process master and contact data of our clients and their contact persons for the performance of contracts, invoicing and statutory bookkeeping (Art. 6(1)(b), (c) and (f) GDPR). Duty rosters sent to a client contain the names and planned working times of the staff deployed; personal check-in links, private contact details, pay or document data are never shared with clients.
6. Employee data
For our employees we process master data, scheduling data, recorded working time, absences, payroll data, equipment issued and, where applicable, personnel documents with their expiry dates. Legal bases are Art. 6(1)(b) GDPR in conjunction with § 26(1) BDSG, Art. 6(1)(c) GDPR (working time records under § 16(2) ArbZG and § 17 MiLoG, tax and social security obligations) and, for health data, Art. 9(2)(b) GDPR in conjunction with § 26(3) BDSG. Sickness absence is recorded without any diagnosis. A profile photograph is stored only with consent, which can be withdrawn at any time.
Time can be recorded with an employee card at a terminal or through a personal web check-in link on a mobile phone. In the latter case the device position and its accuracy are processed at the moment of clocking in or out only, in order to verify presence within approximately 100 metres of the site of the shift concerned. There is no continuous tracking. Rejected attempts are recorded as well. Readings that cannot be reconciled with other readings are flagged for manual review only — there is no automated decision producing legal effects within the meaning of Art. 22 GDPR. Using the link is voluntary; the terminal and manual recording remain available.
7. Recipients
Access within our company is limited by role. External processors act on our instructions under Art. 28 GDPR: hosting, e-mail delivery, SMS delivery, payroll/tax advisors and system maintenance. Data is disclosed to authorities only where we are legally obliged to do so. Data is never sold.
8. Retention
Working time records are kept for at least 2 years (§ 16(2) ArbZG, § 17 MiLoG), payroll records for 6 to 10 years (§ 257 HGB, § 147 AO, § 41 EStG), invoices for 10 years, and application documents for 6 months after the end of the selection procedure. Server logs and position data are deleted once they are no longer required.
9. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15–20 GDPR), and the right to withdraw consent at any time with effect for the future. Where processing is based on Art. 6(1)(f) GDPR you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). Requests can be made informally or via /dsar.
You may lodge a complaint with a supervisory authority. The authority responsible for us is: Sächsische Datenschutz- und Transparenzbeauftragte, Devrientstraße 5, 01067 Dresden, Germany, saechsdsb@slt.sachsen.de.