Person responsible in the sense of the DSGVO
State capital Stuttgart
Marketplace 1
70173 Stuttgart
E infostuttgartdenfo@stuttgart.de
Data Protection Officer of the State Capital Stuttgart
You can reach our data protection officer at:
Data Protection and Information Security Department.
If you have questions about data protection that do not concern the State Capital of Stuttgart, you are welcome to contact the State Commissioner for Data Protection (opens in a new tab). This is your central contact at the State of Baden-Württemberg for data protection. You can also file a complaint there.
Area of application: Internet pages of the state capital Stuttgart
The City of Stuttgart operates websites. We inform you about the processing of your personal data within the scope of this data protection declaration.
Websites of the state capital Stuttgart
stuttgart.de (opens in a new tab)
stuttgart-meine-stadt.de (opens in a new tab)
service.stuttgart.de (opens in a new tab)
welcome.stuttgart.de (opens in a new tab)
science-festival.stuttgart.de (opens in a new tab)
stuttgart-bewegt-sich.de (opens in a new tab)
stuttgart-steigt-um.de (opens in a new tab)
paedagogen.stuttgart.de (opens in a new tab)
planetarium-stuttgart.de (opens in a new tab)
stuttgarter-philharmoniker.de (opens in a new tab)
stadtlexikon-stuttgart.de (opens in a new tab)
stadtpalais-stuttgart.de (opens in a new tab)
weingutstuttgart.de (opens in a new tab)
stuttgart-machts-rein.de (opens in a new tab)
stuttgarter-innovationspreis.de (opens in a new tab)
stuttgart-city-library.com (opens in a new tab)
roomstr.de (opens in a new tab)
brycke-stuttgart.de (opens in a new tab)
opendata.stuttgart.de (opens in a new tab)
livestr.de (opens in a new tab)
sdg.dashboardstr.de (opens in a new tab)
firstnames.dashboardstr.com (opens in a new tab)
stuttgartumfrage.dashboardstr.de (opens in a new tab)
stuttgart.livecontract.com (opens in a new tab)
fire department.stuttgart.de (opens in a new tab)
stadtklima-stuttgart.de (opens in a new tab)
our-holiday-program.de/stuttgart/ (opens in a new tab)
now.makeclimate.com (opens in a new tab)
fruehehilfen-stuttgart.de (opens in a new tab)
new.stuttgart.de (opens in a new tab)
rosenstein-stuttgart.de (opens in a new tab)
buergerhaushalt-stuttgart.de (opens in a new tab)
stuttgart-inklusiv.de (opens in a new tab)
The privacy policy also applies to our online presences with external platform operators, e.g. in the area of social media. Specific information on the processing of personal data on our online presences can be found in the section of our privacy policy on social media.
Data processing
When you visit our website, we process personal data exclusively within the framework of the legal provisions (Basic Data Protection Regulation-DSGVO, Media State Treaty-MStV, Federal Data Protection Act-BDSG, State Data Protection Act Baden-Württemberg-LDSG Ba-Wü).
In the following, we provide you with information about the type, scope and purpose of the collection, processing and use of data when you visit one of our websites.
Usage data
Each time one of the aforementioned pages is accessed and each time a file is retrieved, general data about this process is automatically stored in a log file. The storage serves exclusively system-related and statistical purposes (based on Art. 6 para. 1 letter b) DSGVO), as well as in exceptional cases for the reporting of criminal offences (based on Art. 6 para. 1 letter e) DSGVO).
The data is not passed on to third parties or evaluated in any other way, unless there is a legal obligation to do so.
In detail, the following data record is stored about each retrieval:
- Name of the retrieved file
- date and time of the retrieval
- amount of data transferred
- Message as to whether the retrieval was successful
- Description of the type of web browser used
- operating system used
- search terms with date and time
- Provider
Personal data
In some places on our website, you have the option of voluntarily providing personal information: for example, in contact forms or when registering for the newsletter.
a.) Contact
If you contact us (e.g. via telephone, e-mail, yellow card or a contact form), we store your data on the basis of Art. 6 (1) b) DSGVO for the purpose of processing your request, as well as in the event that further correspondence should take place. Your data will be deleted as soon as your request has been fully processed and/or answered. As part of the daily backup, they will still be stored there for up to 30 days.
b.) Newsletter
Municipal newsletter
If you would like to receive the newsletter offered on our website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter.
We use the so-called double opt-in procedure to ensure that the newsletter is sent with your consent. In the course of this, the potential recipient allows himself to be included in a distribution list. Subsequently, the user is given the opportunity to confirm the registration in a legally secure manner by means of a confirmation e-mail. Only if the confirmation is received, the address will be actively included in the distribution list.
We use this data exclusively for sending the requested information and offers.
Sendinblue GmbH is used as the newsletter software. Your data will be transmitted to Sendinblue GmbH. Sendinblue is prohibited from selling your data and using it for purposes other than sending newsletters. Sendinblue is a certified provider, which was selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act. Sendinblue processes the personal of the newsletter subscribers only on our behalf and according to our instructions on the basis of a contract concluded with the company on commissioned processing pursuant to Art. 28 (3) DSGVO.
You can find more information here: https://de.sendinblue.com/legal/privacypolicy/
The legal basis for the processing of your personal data within the scope of the newsletter dispatch is your express consent pursuant to Art. 6 (1) a DSGVO.[MB1
You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter.
Press service
We use "myconvento", a software solution for press and public relations work and investor relations from Convento GmbH, Oberstrasse 4, 41460 Neuss (hereinafter "myconvento") to register for our press distribution list. This enables us to professionally implement the registration and login process as well as authentication for our press distribution list, i.e. access control and user administration, and thus also serves your security as a user of our information.
According to Myconvento, it initially collects the following categories of personal data:
- Personal master data, communication data (e.g. telephone, e-mail), contact history
- Contract master data (contractual relationship, product or contractual interest)
- Contract billing and payment data
- Information data (from third parties, e.g. credit agencies, or from public directories)
The user is also provided with a registration form, which is used for registration. In particular, the following personal data is collected, transmitted to myconvento, stored and processed: Surname, first name, company, editorial office, department, position, e-mail address, telephone number, areas of interest. The further registration process is then carried out via myconvento using a double opt-in procedure. By clicking on the confirmation link, you are registered for the desired press distribution list. A subsequent registration process using the specified e-mail address and a password is not set up.
In addition, myconvento automatically logs user behavior, in particular with the help of cookies and tracking technologies, whereby the following personal data categories are processed:
- Identity data including first and last name
- Contact data of users, including email addresses and telephone numbers
- Login data of the users
- Internet Protocol (IP) address, login data, browser data, statistics on page views and
The processing of the personal data described takes place exclusively in the territory of the Federal Republic of Germany. Since November 2023, myconvento has been operating the customer systems in a Kubernetes cluster of the data center operator OVHCloud GmbH, Christophstraße 19, 50670 Cologne, Germany, which is certified according to ISO 27001, among others.
The following categories of persons are affected by data processing by myconvento
- authorized users of myconvento's services, in particular journalists, bloggers, influencers, etc.
- other public relations contacts, for example customers, interested parties, employees pursuant to Section 26 BDSG, subscribers, suppliers, sales representatives, etc.
- any person about whom personal data is entered into the services or with whom we contact or communicate in any other way via the services of myconvento
For the provision of the services, we conclude a data processing agreement (DPA) with myconvento in accordance with Art. 28 to ensure the proper processing of your personal data. All details on data processing are described in detail in this data processing agreement. Myconvento advertises that it fully complies with the requirements of the GDPR and other statutory data protection regulations. In order to protect personal data against manipulation, loss, destruction or access by unauthorized persons in the best possible way, myconvento uses technical and organizational measures (TOM) in accordance with Art. 32 GDPR, see also here to the TOM.
The legal basis for the described data processing and sending of press releases is primarily your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you give when you register. Insofar as the aforementioned data is required to ensure the security and reliability of the systems, compliance with the terms of use and the prevention of misuse, this serves our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR or the performance of the contract pursuant to Art. 6 para. 1 lit. b GDPR. Insofar as information is used for usage and performance statistics of the services, the legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR or our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
You can revoke your consent at any time with effect for the future via our known communication channels, in particular by e-mail to infostuttgartde.
You are neither legally nor contractually obliged to provide us with your data, but we cannot grant you access to the press distribution list without your consent and the transmission of your personal data.
Your data will only be stored and processed for as long as your consent or our legitimate interest exists. Irrespective of this, your data will be deleted - also in accordance with myconvento's privacy policy - after termination of the contract between us and myconvento after three months at the latest, unless legal or regulatory requirements in particular make further storage necessary.
Further information on data protection can be found in this privacy policy as well as in myconvento's privacy policy and FAQs.
c.) Registration
You have the option of registering on the portals named below:
service.stuttgart.de (opens in a new tab)
stuttgart-meine-stadt.de (opens in a new tab)
For this purpose, we require various information from you, such as first and last name, address, city district and e-mail address. In addition, you will be asked to provide a user name and to set up a password to secure the account.
Here, too, you will receive an e-mail from us to the e-mail address you provided for verification purposes, in which you must click on a confirmation link.
Depending on the portal, you have the option of entering additional data after registration or setting up a user name and password of your own choice.
Your data will only be used by us for the purpose of administering the entries and, if necessary, for contacting you in connection with the registration.
Contributions in discussion forums of stuttgart-meine-stadt.de or other publicly accessible participation formats will be displayed on the portal with your chosen user name. Your data will be stored as long as you are registered. If you delete your account, your data will also be permanently deleted. However, as part of the daily backup, they will still be stored there for up to 30 days.
You can delete the user account at any time.
The legal basis for this data processing is the contract concluded with you for the creation of a user account in accordance with Art. 6 (1) b) DSGVO.
Cookies, local storages and analysis tool Matomo
Use of technically necessary cookies
The offer uses so-called cookies. Cookies are small text files that are stored on your computer or mobile device via an Internet browser. In addition to cookies that are only used during a session and deleted after your visit to the website ("session cookies"), cookies can also be used to store user settings and other information for a certain period of time (e.g. two years) ("permanent cookies").Cookies are used to enable you to use our website.
We use so-called technically necessary cookies in some areas of our website. Through such file elements, your computer can be identified as a technical entity during your visit to one of our Internet pages. Some functions of our Internet pages cannot be offered without the use of cookies. Necessary cookies help make a website usable by enabling basic functions such as site navigation and access to secure areas of the website. The website cannot function properly without these cookies.
| Name of the cookie | Provider | Purpose | Storage period | Type |
| cookies-accepted | stuttgart.com | Storage of consent to cookies | two years | Secure, Samesite=lax |
| Matomo_SESSID | stuttgart.de | Storage of opt-out setting for Matomo | Session duration (until browser is closed) | Session |
| PHPSESSID | stuttgart.de | Storage of the privacy release | Session duration (until browser is closed) | PHP-Session, Secure, HTTP-Only |
The user data collected through technically necessary cookies are not used to create user profiles.
If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) lit. b DSGVO either for the performance of the contract or in accordance with Art. 6 (1) lit. f DSGVO to protect our legitimate interests. The processing is carried out to enable the functioning of our website and the online magazine. It is therefore necessary for the protection of our legitimate interests.
You can determine the setting of cookies yourself through the appropriate setting of your internet browser. You can use the settings in your Internet browser to allow, disable or restrict the transfer of cookies. Furthermore, cookies that have already been set can be deleted at any time.
Please remember that the use of our Internet pages may not be fully usable in all functions if cookies are not used.
Use of Local Storages
So that you can adapt our website to your personal needs and usage, we also use the so-called local storage technology (also called "local data" and "local memory"). In this process, data is stored locally in the cache of your browser, which continues to exist and can be read even after closing the browser window or exiting the program - as long as they do not delete the cache.
Local Storage enables your settings to be stored on your computer when you use the website and to be used by you. The data from Local Storage is used, for example, to hide the reference to the public authority number 115 - which appears at the top of the homepage of www.stuttgart.de - when you click it away.
The following information is stored as local data:
- Clicking away the reference to the authority number 115.
- The tab views in the contact sections.
- The display of emergency messages, if they are activated.
- The rating ("like"): Your own votes cast until they are transmitted to the server.
The data stored in the Local Storage cannot be accessed by third parties. They are not passed on to third parties and are not used for advertising purposes.
We use these techniques in the legitimate interest to provide you with a fully functional offer on the basis of Article 6 para 1 lit. f DSGVO. Storage in local storage is necessary for the technical implementation of the described functions.
If you do not want our website to use local storage functions, you can object to this by deactivating storage in the settings of your respective browser.
The information is stored in the local storage until it is deleted in your browser.
Use of the analysis tool Matomo
Our website uses Matomo (https://matomo.org), an open source software for analyzing visitor access to this site.
Matomo uses so-called cookies, text files which are stored on your computer and which enable your use of the website to be analyzed. The information generated by the cookie about the use of these pages is stored on our servers in Germany and is not passed on to third parties. The IP address of each visitor is anonymized immediately after processing and before it is stored.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website.
You can also object to the use of your data by Matomo by making use of the option described below.
In this case, a cookie is stored on your browser which only contains the information that no data about you may be collected by Matomo. Previously stored cookies will then be deleted. However, if you delete all cookies in your browser, you may have to object to the use of your data again.
You can decide here whether a unique web analysis cookie may be stored in your browser to enable us to collect and analyze various statistical data. If you wish to opt out, you can click on the following link to place the Matomo deactivation cookie in your browser.
We base the use of the aforementioned analysis tool on Art. 6 para. 1 letter f) GDPR: the processing is carried out to analyze user behavior and is therefore necessary to safeguard our legitimate interests.
You have the option of deactivating or reactivating tracking here: Privacy settings
Social media
On stuttgart.de you will find the " "Share page" function at the bottom of each page. This function is only integrated as a link to Facebook. If you click on the logo, you will be redirected to the corresponding website. If you are also logged in as a member of the relevant social network, the operator of the social network can assign the visit to our site to your respective user account.
If you do not want the social networks to collect and store data about your visit to our website, you must log out of your respective user account with these social networks before clicking on the logo.
The logo of the social network Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) is integrated on our page.
The logo is only activated when you click on it. Based on your consent pursuant to Art. 6 (1) lit. a DSGVO, a direct connection is then established between your browser and the Facebook server via the logo. Facebook thereby receives the information that you have visited our site with your IP address. We are jointly responsible for this data collection and forwarding to Facebook together with Facebook.
We point out that Facebook is responsible for the further processing of the transmitted data and its use. For more information, please refer to Facebook's privacy policy at https://de-de.facebook.com/policy.php. (opens in a new tab) Facebook's data protection officer can be reached at www.facebook.com/help/contact/540977946302970. (opens in a new tab)
If you do not want Facebook to be able to associate your visit to our site with your Facebook user account, please log out of your Facebook user account or do not activate the "share page" function.
Content on stuttgart.de from YouTube
We embed YouTube videos in our portal. These videos are stored on www.youtube.com. They are displayed on our portal using a so-called "framing technology" and can be played directly here.
This service is inactive by default, but you can activate and deactivate it via the privacy settings page or before playing a video on our pages. The connection to this service is only established when you click to give your consent to view the content that we have sent via YouTube. Through the embedding technology, general framework data such as your IP address can be transmitted back to the social networks and platforms.
This transmission takes place regardless of whether you have a YouTube user account or not. If you are logged in to a Google user account, your data will be assigned directly to this account. If you do not wish this to happen, you must log out of your user account before playing the video. The data transmitted to YouTube is stored by YouTube in the form of user profiles and used for advertising and market research purposes as well as for the personalized design of its website. With the help of this evaluation, YouTube can generate demand-optimized advertising (even for users who are not logged in) and inform other YouTube users about your visit to our portal. You can object to the creation of these user profiles. To do so, you must contact YouTube.
We would therefore like to point out that you use the service offered here and its functionalities on your own responsibility.
The data collected about you when you use the service will be processed by the provider and may be transferred to countries outside the European Union. We have no influence on the type and scope of the data processed by the provider, the type of processing and use or the transfer of this data to third parties, in particular to countries outside the European Union.
You can find out more about data processing by YouTube as well as your rights and the setting options for your data protection settings at https://www.google.de/intl/de/policies/privacy, where you can also change your settings yourself. Google also processes personal data in the USA. Google has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR.
We ourselves do not process any data from your use of the service. However, if we share your comments or reply to them or write posts from us that refer to your profile, we will also process the data you enter on the service, in particular your (user) name and the content published under your account, insofar as this is included in our offer and made accessible to our fans.
The privacy policy also applies to our online presences with external platform operators, e.g. in the area of social media. Specific information on the processing of personal data on our online presences can be found in the section of our privacy policy on social media.
Translation service
DeepL
Below we provide the legally required data protection information for the use of the translation service DeepL Pro on our website.
The translation service DeepL Pro is integrated into "stuttgart.de", whereby all content on the website is automatically displayed in different languages. DeepL Pro is a translation service provided by DeepL SE, Maarweg 165, 50825 Cologne (hereinafter "DeepL").
Processing of personal data
Foreign-language inquiries, e.g. via the contact form, are forwarded to the responsible person and translated there if necessary to answer them. In addition to your entries and inquiries, we also record the language selected. For further details on the processing of personal data for inquiries, the purpose and legal basis of data processing and the storage period, please refer to the "Data processing" section under "Usage data"/"Personal data" in this privacy policy.
Recipients of the personal data
When users visit "stuttgart.de", no connections to DeepL are established. This means that no personal data of users is transferred to DeepL. Only the web servers of "stuttgart.de" are connected to DeepL, deliver all content via the content management system and receive the fully translated content back. All translated content is stored locally on the web server, so that even foreign-language entries (e.g. in the search function, contact form, etc.) do not result in data being transmitted to DeepL, but are only processed locally.
Within the controller, only departments that require your data to fulfill contractual or legal obligations, e.g. to respond to your inquiry, will have access to your data. If service providers are used for order processing, this is only done on the basis of Art. 28 GDPR after careful selection and examination of the technical and organizational security provisions.
Transfer of personal data to third countries
Personal data is not transferred to third countries.
Disclaimer of liability
We assume no liability for the accuracy, reliability or timeliness of the information translated by DeepL. Machine translation does not replace manual translation by certified linguists.
Further information on the handling of user data can be found in Deepl's privacy policy: https://www.deepl.com/de/privacy (opens in a new tab)
Online services
Appointment
You can use the online appointment system to make an appointment with the relevant authority for the service you require. Personal data is only collected and processed by Girona Softwareentwicklung GmbH to the extent necessary in the context of this online appointment arrangement.
Legal basis for the processing of data
- The provision of data is voluntary (Art. 6 para. 1 lit. a GDPR), but the data is necessary if the appointment is to be processed online. The personal data will be deleted 180 days after the end of the appointment.
- When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
- Insofar as the processing of personal data is necessary to fulfill a legal obligation to which the City of Stuttgart is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
- In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
- Insofar as the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, Article 6(1)(e) GDPR serves as the legal basis.
Video consultation
With Syncpilot's software, consultations with citizens and companies can be carried out online. Furthermore, applications can be fully processed and completed via the software with the support of the clerk. Personal data is only collected and processed by Syncpilot GmbH to the extent necessary when using the software.
Legal basis for the processing of data
- The provision of data is voluntary (Art. 6 para. 1 lit. a GDPR), but some of the data is necessary to carry out a video consultation. The personal data will be deleted after 6 months.
- When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
- Insofar as the processing of personal data is necessary to fulfill a legal obligation to which the City of Stuttgart is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
- In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
- Insofar as the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, Article 6(1)(e) GDPR serves as the legal basis.
Chatbot
Smart Dialogue platform from viind GmbH
This website uses the Smart Dialogue platform of viind GmbH via a technical interface (API). The provider is viind GmbH, Leightonstraße 3, 97074 Würzburg, Germany.
The Smart Dialogue platform is used in the interest of an appealing presentation of our online offers, to provide information in chat format and to communicate with the state capital Stuttgart.
In order to use these functions, it is necessary to process technical features such as your IP address, the browser and operating system you are using and the time stamp. This information is briefly recorded by viind GmbH for the purpose of error analysis, but is not linked to the chat histories.
The above data may be stored for up to 6 months in order to process your request and ensure the quality of the chatbot service. viind only uses data centers in Germany with ISO 27001 certification to store the data.
This data is required to process your inquiries and, if necessary, to send you an answer. Your inquiries are processed automatically (chatbot). Your data may also be used for internal evaluation of the chatbot service (e.g. troubleshooting or compiling statistics).
We also ask you not to transmit any information that violates the rights of third parties (e.g. photos with people). Such information will be deleted after identification by us. Please also do not transmit any personal data via the chatbot.
If your data is processed electronically, the technical operation of the viind data processing systems is carried out by their processors (Hetzner Online GmbH, netcup GmbH, IONOS SE) in ISO 27001-certified data centers.
For the provision of extended knowledge-based functions (automated answering of questions via ChatGPT), we work together with the service provider Microsoft Ireland Operations Ltd. This service provider provides search, mapping and processing services as part of commissioned data processing and only processes anonymized data.
If you use our services in a language other than German, we work with the service DeepL SE, Maarweg 165, 50825 Cologne. This service provider provides automated translation services as part of commissioned data processing.
You can find more information on this in viind GmbH's privacy policy: https://www.viind.com/datenschutz-sdp (opens in a new tab)
Digital Official Journal
The official gazette of the state capital Stuttgart is published weekly and publishes official announcements and current information from the city administration. The City of Stuttgart also offers the official gazette in digital form as an e-paper at https://amtsblatt.stuttgart.de/. Use of the digital version is voluntary, as the official gazette can still be obtained by post.
Below we inform you about the processing of personal data that takes place in connection with the use of the digital Official Gazette (e-paper app and web reader).
Responsible parties, service providers and order processing
The controller for the Digital Official Gazette within the meaning of Art. 4 No. 7 GDPR is the controller specified above for the website, i.e. the City of Stuttgart. The Digital Official Gazette is implemented by the service providers MSH Medien System Haus GmbH & Co KG (Plieninger Straße 150, 70567 Stuttgart, mshmshde and MHS Digital GmbH (Plieninger Straße 150, 70567 Stuttgart, infomhsdigitalde, with each of which the City of Stuttgart has concluded contracts for order processing in accordance with Art. 28 GDPR.
The Digital Official Gazette is offered as an e-paper app and web reader via the technology platform of the named service providers. The SAP application for subscriber management (new subscriptions, cancellations, interruptions, etc.) of the Stuttgarter Amtsblatt is provided by the service provider MSH Medien System Haus GmbH & Co. KG and used by the City of Stuttgart. The e-paper app and a web reader for the digital reproduction of the Stuttgarter Amtsblatt are provided by MHS Digital GmbH. On behalf of the City of Stuttgart, MHS Digital GmbH provides a web store at https://amtsblatt-abo.stuttgart.de/, through which users can send forms to order trial or regular subscriptions. Identity management, which is required to provide the login functionality, and the consent management tool for managing tracking and cookie consent are implemented by MHS Digital GmbH.
Processing of personal data
The Stuttgarter Amtsblatt is a paid subscription, which means that all personal data required for contract processing, invoicing and delivery are processed:
- First name, title
- Address, e-mail address, telephone no.
- Meta/communication data e.g. IP address, device information, device ID, operating system, app version
- approximate location of the app, AppID (subscription-specific identification number), system authorizations for Android and iOS
- Billing address, different delivery address if applicable (e.g. for gift subscriptions)
- Account details with name, IBAN and bank, payment details
- Contract data, e.g. subject matter of the contract, subscription term data: Subscription term (order date, expiration date), downloaded issues, time of download of issues
- Content data, e.g. entries in online forms, number of ratings submitted
- Usage data, e.g. websites visited, interest in content, access times, app starts. The following personal data is processed for discounted offers such as Bonuscard holders and U-25 subscriptions:
- Bonuscard: first name, surname, date of birth, Bonuscard no.
- For the U-25 subscription, suitable proof of age is required to prove name and age, e.g. (identity) card, driving license, etc.
The proof required for the discount will only be checked once. The proof will not be stored after the check has been carried out.
Further information on the processing of your personal data can be found in the data protection information provided by MHS Digital GmbH at: https://www.swmh-datenschutz.de/epaper#scroll-to-1 and .
Cookies, tracking tools and deactivation
The named service providers also process personal user data through the use of cookies, tracking tools and similar technologies for the operation and provision of the platform and for advertising purposes. The named service providers use tracking technologies to analyze how you use the platform, e.g. which pages you visit most frequently. This information is used to evaluate your activities and behaviour patterns as a user of the platform, in particular to optimize the platform and adapt it to user habits. The City of Stuttgart has no direct access to the processed tracking data, but can only retrieve non-personal statistics, e.g. on downloads and expenditure openings.
In particular, the following cookies and tracking tools are used:Sourcepoint
In order to obtain and store your consent under data protection law, we use the consent management platform from Sourcepoint (Sourcepoint Technologies, Inc., 228 Park Avenue South, #87903, New York, NY 10003-1502, United States). This platform sets strictly necessary cookies in order to query the consent status and thus be able to display corresponding content.
The data is stored for a maximum of 13 months.
|
Cookie |
Purpose |
Duration |
Type |
|
consentUUID |
UniqueUserID to store the consent status of the user |
12 months |
cookie |
|
_sp_su |
Identification of users for the sample of consent rate reporting |
12 months |
cookie |
|
_sp_user_consent |
UniqueUserID to call up the user's consent status stored in our database if required |
unlimited |
local storage |
|
_sp_local_state |
Determining whether a user has seen the consent banner so that it is only shown once |
unlimited |
local storage |
|
_sp_non_keyed_local_state |
Information about the user's metadata and UniqueUserID |
unlimited |
local storage |
Twipe
For the realization and operation of this app we use the platform of Twipe Mobile Solutions, Gaston Geenslaan 8, Leuven, Belgium ("Twipe"). Twipe sets the following cookies in order to display the desired content:
|
Cookie |
Purpose |
Storage period |
|
TW_DESKTOP_DOUBLEPAGE |
Storage of the selected view |
1 year |
|
TW_REGION |
Defining the region |
1 year |
|
TW_USER_DATA |
Authorization to display the ePaper |
1 year |
|
TW_SSO_STATE |
Determination of the user status |
1 year |
|
tw_preferred_viewer |
View settings of the user |
1 year |
Registration
You can register with us to be able to log in to our digital services. When you register, we use cookies in your browser to identify you and your e-mail address.
Push notifications
Push notifications are sent with the help of a pseudonymous push token assigned by the operating system you are using or by the corresponding push service. We cannot derive any personal data from the push token or assign it to an end device.
Further information on cookies and tracking tools can be found in the data protection information provided by MHS Digital GmbH at: https://www.swmh-datenschutz.de/epaper#scroll-to-1 and .
You have the option of adjusting your device settings to deactivate personalized advertising. You can also manage and disable cookies and tracking technologies in your web browser. However, this may impair the functionality of the platform.
Transmission to third countries
In order to use our digital services, it may be necessary to transfer personal data to third countries in which the GDPR does not apply. In particular, data is transferred to Sourcepoint, see above for details. However, a transfer will only take place if an adequate level of data protection can be guaranteed in the third country in accordance with Art. 44 et seq. GDPR can be guaranteed, in particular on the basis of an adequacy decision of the European Commission (e.g. the "Data Privacy Framework"), the conclusion of standard contractual clauses or consent in accordance with Art. 49 GDPR.
Purpose and legal basis of processing
We initially process your personal data insofar as this is necessary for the provision of the digital Official Gazette. In addition, we use cookies and tracking tools to analyze usage in order to optimize and further develop our digital offerings. As part of the usage analysis, we measure the reach and use of content and functions and evaluate visitor flows. This includes visitor behavior, interests or demographic information such as age or gender. This allows us to see, for example, when our digital offerings are used most frequently or which functions are often reused.
The legal basis for the processing of the personal data described is Art. 6 para. 1 lit. b GDPR if you have taken out a subscription, and Art. 6 para. 1 lit. a GDPR, Section 25 para. 1 TDDDG if you have consented to the processing, e.g. on the basis of the consent banner. The use of necessary cookies is based on § 25 para. 2 no. 2 TDDDG. The processing of the data is also based on our performance of public tasks in accordance with Art. 6 para. 1 lit. e GDPR in conjunction with § 4 LDSG BW, whereby the performance of tasks results from the present purpose description. In particular, we would like to inform you about official announcements and current topics of the city administration.
If you order our digital offers, we require your address, contact and communication data as well as your bank and, if applicable, credit card details when concluding the contract. The processing of this data is necessary for the initiation or fulfillment of the contract and is carried out on the basis of Art. 6 para. 1 sentence 1 lit. b .
If you actively contact us, e.g. regarding an inquiry, we will process your personal data, e.g. name, contact details, request, etc., in order to process your inquiry and communicate with you. For this purpose, we store your data in our CRM system. Depending on the nature of your inquiry, the legal basis for this data processing is our public task performance in accordance with Art. 6 para. 1 lit. e GDPR in conjunction with Section 4 LDSG BW in order to process a general inquiry with you, or Art. 6 para. 1 lit. b GDPR if your inquiry is aimed at concluding a contract.
Data security
The named service providers guarantee to protect the confidentiality, integrity, availability and resilience of your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons with the help of technical and organizational security measures such as encryption procedures (SSL or TLS) and to regularly check and update the security measures. Further details on data security can be found in the data protection information provided by MHS Digital GmbH at: https://www.swmh-datenschutz.de/epaper#scroll-to-1 and https://datenschutz.swmh.de/stz_epaper#scroll-to-0.
Storage period
Your personal data will only be stored for as long as this is necessary in accordance with the above-mentioned purposes or for as long as statutory retention obligations exist, which may arise, for example, from the German Commercial Code or the German Fiscal Code and generally amount to 6 to 10 years. The service provider Twipe (see above for details) generally stores email addresses, subscription and device data for as long as is necessary for the operation of the platform; your IP addresses are deleted by Twipe after one week. Geolocation data is not stored. The AWS data center stores all data for 30 days. Your data can also be deleted earlier on request.
If your personal data is required for the assertion, exercise or defense of legal claims, we store your data at least until the expiry of the statutory limitation periods, i.e. usually 3 years, but in individual cases also up to 30 years. If you send us an inquiry, we will store your data during the processing period and for six months after the end of processing. Your personal data will then be deleted.
Further information and rights of data subjects
You are under no legal or contractual obligation to provide us with your personal data. However, you cannot use the Digitale Amtsblatt without processing your personal data.
Further information on how we process personal data and what rights you have as a data subject in this regard can be found in our data protection information. You can assert your data subject rights (see the "Data subject rights" section for details) both against the named service providers and against the City of Stuttgart.
Contact options
For questions about data protection at the City of Stuttgart or to assert your rights, please contact our official data protection officer:
Data Protection and Information Security Department
Eberhardstraße 6A, 70173 Stuttgart; e-mail: poststelle.dsbstuttgartde
You will also find further contact options regarding our data processing above.
Calendar of events
The online event calendar offers information on events. You can enter contact information with personal data for your own events in the event calendar. These are entered in the event calendar on a voluntary basis.
If you are an event organizer and wish to enter and manage an event in the calendar, you will be asked to create a user account and register. You can find more information on this in the data protection information on data processing under point c.) Registration.
The legal basis for this processing is your implied consent in accordance with Art. 6 (1) (a) GDPR when you enter the information in our event calendar. You can revoke this consent at any time by deleting the stored data.
Disclosure of data to third parties
Unless specifically identified below or in the preceding sections, your information will not be shared with third parties or other recipients.
We also only pass on your personal data to third parties if:
- you have given your express consent to this in accordance with Art. 6 (1) p. 1 lit. a DSGVO,
- the disclosure is required under Art. 6 (1) p. 1 lit. f DSGVO for the assertion, exercise or defense of legal claims and there is no reason to believe that you have an overriding legitimate interest in not disclosing your data,
- in the event that there is a legal obligation for disclosure pursuant to Art. 6 (1) p. 1 lit. c DSGVO, as well as
- this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b DSGVO for the processing of contractual relationships with you.
Storage duration
The data processed by us will be deleted or restricted in its processing in accordance with Articles 17 and 18 DSGVO.
Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as any consent is revoked or when the data is no longer required for its intended purpose and the deletion is not contrary to any legitimate interests or statutory retention obligations.
If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to user data that must be retained for reasons of commercial or tax law.
According to legal requirements, data is stored for 6 years in accordance with § 257 para. 1 HGB (e.g. commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 para. 1 AO (e.g. commercial and business letters, tax-relevant documents).
Data subject rights
a.) Right to information
You have the right to request confirmation from us as to whether personal data relating to you is being processed.
To do so, please simply send an e-mail to post[at]stuttgart.de.
b.) rectification/deletion/restriction of processing
Furthermore, you have the right to demand from us that
- Inaccurate personal data concerning you be corrected without delay (right to rectification);
- personal data concerning you be deleted without delay (right to erasure); and
- the processing be restricted (right to restriction of processing).
To do so, please simply send an e-mail to post[at]stuttgart.de.
c.) Right of withdrawal
You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
To do so, please simply send an e-mail to post[at]stuttgart.de.
d.) Right of objection
You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
To do so, please simply send an e-mail to post[at]stuttgart.de.
e.) Right of appeal
If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority, such as the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, e-mail: poststelle[at]lfdi.bwl.de, without prejudice to other legal remedies.
Change of the privacy policy
We reserve the right to adapt this data protection declaration in the event of any changes to the legal situation, the service offered on the website and the data processing. However, this only applies with regard to declarations on data processing. If your consent is required or parts of the privacy policy contain provisions of the contractual relationship with you, the changes will only be made with your consent.
You can regularly inform yourself about any changes in this privacy policy.
(Status: July 2025)
Privacy settings
You can make your privacy settings for the use of social media content on stuttgart.de and for the Matomo analysis tool here.
More privacy information
- Social media
- Office for Urban Planning and Housing
- Environmental protection office
- Foreigners' Registration Office
- Building Law Office
- Citizens' Bureaus
- Yellow card
- Health Department
- Job Center Stuttgart
- Youth Welfare Office
- LinkedIn employer profile
- Citizenship authority
- City Surveyor's Office
- Registry office
- Encrypted emails
- Xing employer profile
Social media "page share" function