LichtBus

Datenschutzerklärung

This is a courtesy translation; the German version is legally binding.

This Privacy Policy informs you, in accordance with Article 13 GDPR, about which personal data is processed on the lichtbus.de platform, for which purposes, and on which legal basis.

Controller

LichtBus — Owner Olaf Kammler
Farbengasse 3
99084 Erfurt
Germany
Phone: +49 1525 4234913
Email: support@lichtbus.de

Data Protection Officer

No Data Protection Officer has been appointed, as there is currently no legal obligation to do so. LichtBus is a sole proprietorship and does not generally employ at least 20 persons who are permanently involved in the automated processing of personal data.

Please direct any data protection inquiries directly to the controller named above.

GeoBridge Plugin and LichtBus Platform

GeoBridge Plugin

The GeoBridge plugin processes geodata locally on the user's workstation. The plugin does not transmit geodata to LichtBus. LichtBus does not use telemetry, usage analytics, or marketing tracking in the plugin.

License verification is carried out via the Autodesk App Store or Autodesk licensing mechanisms. This processing takes place outside the LichtBus platform and is governed by Autodesk's privacy and contractual terms.

Further information about the GeoBridge plugin: /geobridge/privacy

LichtBus Platform

On the lichtbus.de platform, we process in particular the following data:

  • Magic-link email address for passwordless login
  • Ticket contents, such as bug reports, feature requests, and format inquiries
  • File attachments, for example DGM, DOP, CityGML, GeoShape, or Revit files, if you actively upload them
  • Bounce logs for diagnosing email delivery issues

Legal basis: Article 6(1)(b) GDPR, insofar as the processing is necessary to provide the platform, handle inquiries, or carry out pre-contractual measures.

Server Logs

Whenever the platform is accessed, the web server processes technical access data. This includes in particular: IP address, time of access, requested URL, HTTP status, amount of data transferred, referrer, and user agent.

This data is used exclusively for technical operation, security, abuse detection, and error analysis.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in the stable and secure operation of the platform). Storage period: 14 days, after which logs are automatically deleted or rotated.

Cookies and Session

We use only technically necessary cookies or comparable storage technologies. These include in particular:

  • a session cookie for login
  • a CSRF token to protect forms

These technologies are required for the operation of the platform and the security of the login process. Tracking, analytics, or marketing cookies are not used.

Consent is therefore not required under Section 25(2) TDDDG.

Recipients of Data

We use the following processor for the operation of the platform, with whom data processing agreements pursuant to Article 28 GDPR are in place:

  • STRATO AG, Berlin — hosting of the VPS, domain registrar, DNS, and email delivery via the domains and mailboxes of lichtbus.de.

As things currently stand, LichtBus does not transfer personal data to third countries outside the EU or the EEA.

Storage Periods

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations. The following storage periods currently apply:

  • Magic-link tokens: 30 minutes, single-use, then automatically deleted
  • Account record with email address: for as long as the account is active; after account deletion, a 30-day grace period applies, followed by deletion
  • Ticket contents and file attachments: until the ticket has been resolved; thereafter archived for 12 months, then deleted
  • Bounce logs: 90 days
  • Server logs: 14 days

Your Rights

You have the following rights vis-à-vis us at any time:

  • Right of access to your stored personal data pursuant to Article 15 GDPR
  • Right to rectification of inaccurate data pursuant to Article 16 GDPR
  • Right to erasure pursuant to Article 17 GDPR
  • Right to restriction of processing pursuant to Article 18 GDPR
  • Right to data portability pursuant to Article 20 GDPR
  • Right to object to processing based on legitimate interests pursuant to Article 21 GDPR

Please send inquiries to support@lichtbus.de. We generally respond to your request within one month of receipt.

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Thuringian State Commissioner for Data Protection and Freedom of Information (TLfDI)
Häßlerstraße 8
99096 Erfurt
Germany
tlfdi.de

No Automated Decision-Making

We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.

Clarification Regarding Autodesk License Data

Autodesk license data is processed via Autodesk or the Autodesk App Store. LichtBus does not operate its own licensing system within the lichtbus.de platform for this purpose.

Where Autodesk processes personal data in connection with the App Store, license verification, or contract processing, this is governed by Autodesk's privacy and contractual terms.

Changes to This Privacy Policy

We update this Privacy Policy when data processing changes, for example when new processors or new platform features are added. The current version of this Privacy Policy applies.

Last updated: 2026-07-11