Supervisory authority
Sächsischer Datenschutzbeauftragter
www.saechsdsb.deResponsible for all private-sector controllers headquartered in Sachsen. For cross-state groups, the main-establishment principle under Art. 56 GDPR applies.
Sächsisches Datenschutzdurchführungsgesetz (SächsDSDG)
The SächsDSDG specifies the GDPR for Saxon authorities and public sector bodies. Private companies are subject to the GDPR and the BDSG; the Saxon Data Protection Commissioner is the supervisory authority.
Supervisory practice
SDB regularly imposes fines under Art. 83 GDPR. Focus areas: employee data protection, cookie compliance, international data transfers. Current cases are documented in the annual activity reports.
View activity reportsIndustry clusters on the ground
Since 2000, Leipzig has developed into the economic center of eastern Germany. The BMW plant Leipzig and the Porsche plant are among the most modern automotive production sites in Europe, with high requirements for TISAX, supply chain privacy and manufacturing IT. The DHL hub at Leipzig/Halle Airport is one of the largest logistics hubs in Europe and brings complex requirements for employee data protection, tracking and international data transfers. Alongside this, the Mittelstand shapes the picture: mechanical-engineering-oriented, often family-run, with pragmatic data protection needs. Leipzig also has a strong book publishing tradition (Reclam, Haufe-Lexware) that brings journalistic privilege and source protection.
How the matching works
We match industry, size and language against our partner network. You get two profiles to choose from, no catalog, no sales discovery.
Describe your setup: industry, headcount, any frameworks (TISAX, ISO 27001, BAFIN). Optional: preferred language.
We check suitable DPOs for Leipzig and the surrounding area. Industry fit + capacity + response time. You get two profiles, you decide.
Appointment in writing, notification to the relevant supervisory authority, onboarding directly in the Kopexa platform.
Leipzig fees typically range between 400 EUR and 5,000 EUR per month, tending to be cheaper than in western German metropolitan areas. Automotive mandates with a TISAX nexus and DHL supply chain complexity sit at the upper end. Through Kopexa, transparent flat rates for the DPO service. The Kopexa platform license is billed separately.
BMW and Porsche suppliers need DPOs with TISAX experience (VDA ISA 6.0), knowledge of supply chain security (ISO 27001 A.5.19 to 5.23) and an understanding of OEM compliance requirements. Kopexa partner DPOs in the automotive cluster cover this specialization.
The SDB is the supervisory authority for all private companies headquartered in Saxony, including Leipzig, Dresden and Chemnitz. For cross-state corporate groups, the country-of-establishment principle under Art. 56 GDPR applies.
Legally yes, since the GDPR requires only accessibility. For on-site meetings at BMW, Porsche or the DHL hub, regional proximity is useful but not mandatory. Kopexa preferentially places partners from Saxony or eastern Germany.
We match you with a certified DPO from the Kopexa partner network, with industry expertise for Leipzig and the surrounding region. Response within one business day.
Access to certified DPOs with a range of industry specializations.
Kopexa Pro (599 EUR/month): unlimited frameworks, OSCAL support, vendor and asset management, cross-framework mapping, audit & assessments. Not just DPO tooling.
DPO flat rate and platform license shown separately. No hidden tool costs.
More in the hub
Overview: what an external DPO does, when one is mandatory and how the Kopexa partner network places them.
Pricing models for external DPOs compared: hourly fee, monthly flat rate, packages by company size.
Does your company need a DPO? Interactive checker based on Section 38 BDSG and Art. 37 GDPR.
External DPOs by region: Berlin, Munich, Stuttgart, Cologne, Bremen and more.