Privacy Policy

We greatly appreciate your interest in our company. At Ingold Solutions GmbH, data protection is a particularly high priority for our management team. In general, it is possible to use the Ingold Solutions GmbH website without providing any personal data. However, if an individual wishes to access specific services offered by our company via the website, the processing of personal data may become necessary. Where the processing of personal data is required and there is no legal basis for such processing, we will generally seek the explicit consent of the individual concerned.

The processing of personal data - such as the name, address, email address, or telephone number of a data subject - is always carried out in compliance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection laws applicable to Ingold Solutions GmbH. Through this privacy policy, we aim to inform the general public about the nature, scope, and purpose of the personal data we collect, use, and process. Moreover, this policy also serves to inform data subjects of the rights to which they are entitled.

As the data controller, Ingold Solutions GmbH has implemented a wide range of technical and organizational measures to ensure the most comprehensive protection possible for personal data processed via this website. Nevertheless, internet-based data transmissions may in principle have security gaps, meaning absolute protection cannot be guaranteed. For this reason, data subjects are free to submit their personal data to us through alternative channels, such as by telephone.

1. Definitions

This privacy policy of Ingold Solutions GmbH is based on the terminology used by the European legislator when enacting the General Data Protection Regulation (GDPR). Our intention is to make this policy easily understandable for the general public, as well as for our customers and business partners. To ensure clarity, we would like to explain the key terms used in this document in advance.

We use, among others, the following terms in this privacy policy:

a) Personal data

Personal data refers to any information relating to an identified or identifiable natural person (referred to as the “data subject”). An identifiable person is someone who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, an online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

b) Data subject

A data subject is any identified or identifiable natural person whose personal data is processed by the data controller.

c) Processing

Processing refers to any operation or set of operations performed on personal data—whether or not by automated means. This includes collecting, recording, organizing, structuring, storing, adapting, altering, retrieving, consulting, using, disclosing by transmission, disseminating, or otherwise making available, as well as aligning, combining, restricting, erasing, or destroying such data.

d) Restriction of processing

Restriction of processing involves marking stored personal data to limit its future processing.

e) Profiling

Profiling refers to any form of automated processing of personal data aimed at evaluating certain personal aspects relating to a natural person, particularly to analyze or predict aspects concerning their work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

f) Pseudonymization

Pseudonymization is the processing of personal data in such a way that it can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is stored separately and subject to technical and organizational measures ensuring that the data cannot be linked to an identified or identifiable person.

g) Controller or data controller

The controller or data controller is the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by such law.

h) Processor

A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

i) Recipient

A recipient is a natural or legal person, public authority, agency, or another body to whom personal data is disclosed, whether or not they are a third party. However, public authorities that may receive personal data in the context of a particular legal inquiry under Union or Member State law shall not be considered recipients.

j) Third party

A third party is a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

k) Consent

Consent is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, by which they, by a statement or a clear affirmative action, signify agreement to the processing of personal data relating to them.

2. Name and Address of the Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR), as well as other applicable data protection laws in the Member States of the European Union and other provisions of a data protection nature, is:

Ingold Solutions GmbH

Clayallee 175

14195 Berlin

Germany

Tel.: +49 30 863 232 940

E-Mail: contact[at]ingoldsolutions.com

Website: https://www.ingoldsolutions.com/

3. Cookies

The websites of Ingold Solutions GmbH use cookies. Cookies are text files that are stored on a computer system via an internet browser.

Many websites and servers use cookies. Numerous cookies contain what is known as a cookie ID. A cookie ID is a unique identifier consisting of a string of characters that allows websites and servers to recognize the specific browser in which the cookie was stored. This enables visited websites and servers to distinguish the individual browser of a specific user from other internet browsers that store different cookies. A particular browser can thus be recognized and identified via its unique cookie ID.

The use of cookies allows Ingold Solutions GmbH to provide users of this website with more user-friendly services that would not be possible without cookies.

Cookies enable us to optimize the information and offers on our website in the interest of the user. As already mentioned, cookies allow us to recognize returning users of our website. The purpose of this recognition is to make it easier for users to access and use our website. For example, a user who has enabled cookies does not need to re-enter their login details every time they visit the website - this is handled by the website and the cookie stored on the user’s system. Another example is the cookie used in an online store to remember items placed in a virtual shopping cart.

Users can prevent the setting of cookies by our website at any time by configuring their internet browser accordingly and may thereby permanently object to the use of cookies. Furthermore, cookies that have already been set can be deleted at any time via the internet browser or other software utilities. This is possible in all commonly used internet browsers. If the user deactivates the use of cookies in their browser, not all features of our website may be fully functional.

4. Collection of General Data and Information

Each time a data subject or an automated system accesses the website of Ingold Solutions GmbH, a range of general data and information is collected. This data and information is stored in the server’s log files. The following data may be collected:

1. the browser types and versions used,
2. the operating system used by the accessing system,
3. the website from which an accessing system reaches our website (known as the referrer),
4. the subpages visited on our website,
5. the date and time of access,
6. the internet protocol address (IP address),
7. the internet service provider of the accessing system, and
8. other similar data and information used to protect our IT infrastructure in the event of cyberattacks.

Ingold Solutions GmbH does not draw conclusions about the identity of the data subject from this general information. Instead, this data is required in order to:

1. correctly deliver the content of our website,
2. optimize the content and advertisements on the website,
3. ensure the long-term functionality of our IT systems and website technology, and
4. provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.

These anonymously collected data and information are therefore analyzed by Ingold Solutions GmbH both statistically and with the aim of enhancing data protection and security within our company, ultimately to ensure the highest possible level of protection for the personal data we process. The anonymous data contained in the server log files are stored separately from all personal data provided by a data subject.

5. Registration on Our Website

Individuals have the option to register on the website of the data controller by providing personal data. The specific personal data transmitted to the controller depends on the input fields used during the registration process. The personal data entered by the user is collected and stored exclusively for internal use by the controller and for the controller’s own purposes. The controller may arrange for data to be passed on to one or more processors, for example, a parcel delivery service, which may also use the personal data exclusively for internal purposes attributable to the controller.

As part of the registration process, the IP address assigned by the user’s internet service provider (ISP), along with the date and time of registration, will also be stored. This data is stored as a safeguard to help prevent misuse of our services and to facilitate the investigation of any offenses that may be committed. The storage of such data is therefore necessary to protect the interests of the data controller. This data will not be shared with third parties unless required by law or necessary for the purpose of legal prosecution.

The registration of the user - by voluntarily providing personal data - enables the data controller to offer content or services that, by their nature, can only be provided to registered users. Registered individuals may modify or delete their personal data at any time.

The controller will, upon request, inform any data subject of the personal data held about them. Furthermore, the controller will correct or delete personal data at the request or direction of the data subject, provided there are no legal retention requirements that prevent this. All employees of the data controller are available to assist the data subject in this regard.

6. Subscription to Our Newsletter

The website of Ingold Solutions GmbH offers users the opportunity to subscribe to our company’s newsletter. The personal data collected when subscribing to the newsletter is determined by the input form used for this purpose.

Ingold Solutions GmbH regularly informs its customers and business partners about company offers by means of a newsletter. The newsletter can only be received by the data subject if (1) the person has a valid email address and (2) they have registered to receive the newsletter. As part of the subscription process, a confirmation email will be sent to the email address provided by the user using the double opt-in procedure. This confirmation email is used to verify that the owner of the email address has authorized the subscription.

When registering for the newsletter, we also log the IP address assigned by the ISP to the user at the time of registration, as well as the date and time of registration. This data collection is necessary in order to trace potential misuse of a data subject’s email address at a later date and serves as legal protection for the data controller.

The personal data collected as part of a newsletter registration is used exclusively for sending our newsletter. Subscribers may also be contacted by email in cases where this is necessary for the operation of the newsletter service or registration process, such as changes to the newsletter offering or technical conditions. No personal data collected for the newsletter service is shared with third parties.

The data subject may cancel their newsletter subscription at any time. Consent to the storage of personal data, given for the purpose of receiving the newsletter, can also be withdrawn at any time. Each newsletter contains a link that allows for the withdrawal of consent. Additionally, it is possible to unsubscribe directly on the website or to notify the data controller in another way.

7. Newsletter Tracking

The newsletters of Ingold Solutions GmbH contain what are known as tracking pixels. A tracking pixel is a miniature graphic embedded in HTML-formatted emails that enables log file recording and analysis. This allows for a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, Ingold Solutions GmbH can determine whether and when an email was opened by the user and which links were clicked.

Personal data collected via these tracking pixels is stored and analyzed by the data controller to optimize newsletter delivery and better tailor future content to the interests of the user. These personal data are not shared with third parties.

Data subjects may revoke their separate consent - given through the double opt-in process - for newsletter tracking at any time. Upon revocation, this data will be deleted by the controller. Unsubscribing from the newsletter is automatically treated as a revocation of consent.

8. Contact Options via the Website

Due to legal requirements, the website of Ingold Solutions GmbH includes information that enables quick electronic contact with our company and direct communication with us. This includes a general email address.

If a user contacts the controller by email or via a contact form, the personal data transmitted by the user is automatically stored. Such voluntarily submitted personal data is stored for the purpose of processing the inquiry or contacting the user. This data will not be shared with third parties.

9. Comment Function in the Website Blog

Ingold Solutions GmbH maintains a blog on its website that allows users to leave individual comments on specific posts. A blog is a publicly accessible portal where one or more authors, known as bloggers, publish articles or share ideas in so‑called blog posts, which can typically be commented on by third parties.

When a user leaves a comment on our blog, the comment itself, the time the comment was submitted, and the username (pseudonym) chosen by the commenter are stored and displayed. In addition, the IP address assigned by the user’s internet service provider (ISP) is logged. This IP address is stored for security reasons and in case the commenter’s contribution infringes the rights of third parties or contains unlawful content. Storing this data is therefore in the legitimate interest of the data controller, enabling us to exonerate ourselves if legal violations occur. The data will not be passed to third parties unless required by law or for the controller’s legal defense.

10. Subscription to Blog Comments

Users can subscribe to comments made on the Ingold Solutions GmbH blog - for example, to receive notifications of follow‑up comments on a particular post.

If a user opts to subscribe, we send an automatic confirmation email using the double‑opt‑in process to verify that the owner of the specified email address has genuinely chosen this option. The subscription can be cancelled at any time.

11. Routine Deletion and Blocking of Personal Data

The data controller processes and stores personal data only for the period necessary to achieve the purpose of storage, or as permitted by European or national legislators under applicable laws and regulations.

If the purpose of storage no longer applies, or if a statutory retention period expires, the personal data will be routinely blocked or deleted in accordance with legal requirements.

12. Rights of the Data Subject

a) Right to Confirmation

Every data subject has the right to obtain confirmation from the controller as to whether personal data concerning them are being processed.

b) Right of Access

Data subjects may request free information at any time about the personal data stored about them, together with a copy of that information. This includes:

• the purposes of processing;
• the categories of personal data processed;
• the recipients or categories of recipients to whom the data have been or will be disclosed, especially in third countries or international organisations;
• where possible, the planned period of storage or, if not possible, the criteria used to determine that period;
• the existence of rights to rectification, erasure, restriction, or objection;
• the right to lodge a complaint with a supervisory authority;
• any available information about the data’s origin if not collected from the data subject; and
• the existence of automated decision‑making, including profiling, and meaningful details about the logic involved and the envisaged consequences.
  Data subjects also have the right to know whether data have been transferred to a third country or international organisation and, if so, what appropriate safeguards apply.

c) Right to Rectification

Data subjects can request the prompt correction of inaccurate personal data and the completion of incomplete data.

d) Right to Erasure (“Right to Be Forgotten”)

Data subjects may demand that their personal data be erased without delay where one of the following grounds applies and processing is not required:

1. The data are no longer necessary for the purposes for which they were collected.
2. Consent on which processing was based is withdrawn, and there is no other legal ground.
3. Objection is lodged pursuant to Art. 21 (1) GDPR and no overriding legitimate grounds exist, or objection is lodged under Art. 21 (2) GDPR.
4. The data were processed unlawfully.
5. Erasure is required to comply with EU or Member State law.
6. The data were collected in relation to information‑society services under Art. 8 (1) GDPR.

If Ingold Solutions GmbH has made data public and is obliged to erase them, we will take reasonable steps - considering available technology and implementation costs - to inform other controllers processing the data that the data subject has requested deletion of all links, copies, or replications.

e) Right to Restrict Processing

Data subjects may obtain restriction of processing where:

1. they contest the data’s accuracy (for a period enabling verification);
2. processing is unlawful and they oppose erasure;
3. the controller no longer needs the data, but the data subject requires them for legal claims; or
4. they have objected under Art. 21 (1) GDPR and verification of overriding legitimate grounds is pending.

f) Right to Data Portability

Data subjects have the right to receive the personal data they provided to a controller in a structured, commonly used, machine‑readable format, and to transmit those data to another controller where processing is based on consent or contract and carried out by automated means. They also have the right, where technically feasible, to have the data transmitted directly between controllers, provided this does not adversely affect others’ rights.

g) Right to Object

Data subjects may object at any time, on grounds relating to their particular situation, to processing based on Art. 6 (1)(e) or (f) GDPR, including profiling. Ingold Solutions GmbH will cease processing unless we can demonstrate compelling legitimate grounds overriding the interests, rights, and freedoms of the data subject, or processing is needed for legal claims.

Where personal data are processed for direct marketing, data subjects may object at any time; this includes profiling related to such marketing. After objection, the data will no longer be processed for these purposes.

h) Automated Individual Decision‑Making, Including Profiling

Data subjects have the right not to be subject to decisions based solely on automated processing - including profiling - that produce legal effects or similarly significant consequences, unless the decision is necessary for a contract, authorised by Union or Member‑State law with suitable safeguards, or based on explicit consent. In such cases, Ingold Solutions GmbH will implement measures to safeguard the data subject’s rights, including the right to human intervention, to express a viewpoint, and to contest the decision.

i) Right to Withdraw Consent

Data subjects may withdraw consent for processing personal data at any time.

For any of these rights, data subjects can contact any employee of Ingold Solutions GmbH.

13. Data Protection in Applications and Recruitment

The controller collects and processes applicants’ personal data for the purpose of managing the recruitment process. Processing may be carried out electronically - for example, when applications are submitted by email or via a web form. If the controller concludes an employment contract with an applicant, the transmitted data will be stored - subject to statutory provisions - for the purpose of the employment relationship. If no contract is concluded, the application documents are automatically deleted two months after notification of the rejection, unless other legitimate interests of the controller (e.g., evidence in proceedings under the German General Equal Treatment Act) require longer retention.

14. Data Protection Provisions Regarding the Use of Facebook

The controller has integrated components of the company Facebook on this website. Facebook is a social networking service.

A social network is an online platform that enables users to communicate and interact with each other in a virtual environment. It serves as a medium for exchanging opinions and experiences or allows the internet community to provide personal or company-related information. Facebook allows users to create private profiles, upload photos, and connect through friend requests.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Whenever a page of this website containing a Facebook component (Facebook plug-in) is accessed, the browser on the data subject’s system automatically downloads content of the respective Facebook component. An overview of Facebook plug-ins can be found at: https://developers.facebook.com/docs/plugins/?locale=de_DE. In the course of this process, Facebook learns which specific subpage of our website the data subject is visiting.

If the data subject is logged into Facebook while visiting our website, Facebook recognizes which specific subpage is being accessed and assigns this information to the data subject's Facebook account. If the user clicks on a Facebook button (e.g., the "Like" button) or leaves a comment, Facebook links this information to the personal Facebook user account and stores it.

Facebook receives information via the component regardless of whether it is clicked or not, provided the data subject is logged into Facebook at the time of visiting our site. If such data transfer is not desired, the data subject may prevent it by logging out of their Facebook account before visiting the website.

The data policy published by Facebook, available at https://facebook.com/about/privacy/, provides information on Facebook's collection, processing, and use of personal data. It also explains the privacy settings Facebook offers to protect users’ privacy. Additionally, there are various applications available that prevent data transmission to Facebook, which the data subject may use for this purpose.

15. Data Protection Provisions Regarding the Use of Google Analytics (with Anonymization Function)

The controller has integrated Google Analytics with the anonymization function on this website. Google Analytics is a web analytics service that collects and analyzes data about how users interact with websites.

The operator of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

Google Analytics is used with the extension "_gat._anonymizeIp", which ensures that Google shortens and anonymizes the IP address of the data subject within EU or EEA countries.

The purpose of using Google Analytics is to analyze traffic on our website and compile reports on usage trends. Google uses the data to provide us with insights and additional services related to the website’s usage.

Google Analytics places a cookie on the data subject’s device. Each time a page containing Google Analytics is accessed, the browser transmits data to Google. This includes the IP address and other usage data such as visit time, location, and frequency.

This data may be stored and processed by Google in the United States and could be transferred to third parties.

Users can prevent the setting of cookies by adjusting their browser settings. Additionally, users can prevent the collection and processing of data by Google Analytics by installing a browser add-on available at: https://tools.google.com/dlpage/gaoptout.

Further details on Google’s data practices can be found at:

• https://www.google.com/intl/en/policies/privacy/
• http://www.google.com/analytics/terms/en.html
• https://www.google.com/intl/en/analytics/

16. Data Protection Provisions Regarding the Use of Google Remarketing

The controller has integrated Google Remarketing services on this website. Google Remarketing is a feature of Google Ads that enables companies to display ads to users who previously visited their websites.

The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

Google Remarketing places a cookie that allows Google to recognize the visitor when they access other sites in the Google Display Network and display interest-based ads.

This may include the processing of IP addresses and behavioral data. Data is transmitted to and stored by Google in the USA. Google may share this data with third parties.

Users can prevent cookie placement through browser settings or opt out of personalized ads at: https://www.google.com/settings/ads

More info:
https://www.google.com/policies/privacy/

17. LeadRebel

We analyze our website visitors’ data using a third-party provider. For this purpose, we transmit IP-derived data to Pulserio AG, Wassergrabe 3, 6210 Sursee, Switzerland, leadrebel.io.

Data categories include website visitors and users of our web services. The purpose is lead generation based on IP lookup analysis. If user consent is obtained, processing is based on Art. 6(1)(a) GDPR; otherwise, it is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Users can opt out at: https://leadrebel.io/optout
In this case, LeadRebel will no longer collect any data from you.

18. Data Protection Provisions Regarding the Use of Google Ads (AdWords)

The controller has integrated Google Ads on this website. Google Ads allows advertisers to display ads both in Google’s search engine results and across the Google Display Network.

Operator: Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

If a user accesses our site via a Google ad, a "conversion cookie" is placed. This cookie expires after 30 days and is not used for personal identification. It helps track whether users complete actions like purchases.

Google uses this information to create visitor statistics for us. We use these stats to evaluate the success of ads and optimize future campaigns. No personal identification of users occurs.

Data including IP addresses may be transmitted to and stored by Google in the USA and possibly shared with third parties.

Users can opt out by adjusting browser settings or through https://www.google.com/settings/ads

More info:
https://www.google.com/policies/privacy/

19. Data Protection Provisions Regarding the Use of Instagram

The controller has integrated Instagram components on this website. Instagram is a platform for sharing photos and videos, and redistributing them across social networks.

Operator: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When visiting pages with an Instagram button, the user’s browser automatically loads Instagram content. Instagram is informed of the specific subpage accessed.

If the user is logged in, this data is linked to their Instagram account and stored. If users do not want this data transfer, they should log out of their Instagram account before visiting the site.

Further information:

• https://help.instagram.com/155833707900388
• https://www.instagram.com/about/legal/privacy/

20. Data Protection Provisions Regarding the Use of LinkedIn

This website incorporates components provided by LinkedIn Corporation. LinkedIn is an online-based social network that enables users to maintain existing business relationships and establish new professional contacts. With more than 400 million registered users across over 200 countries, LinkedIn is currently the largest platform for business networking and one of the most frequently visited websites worldwide.

The operating company for LinkedIn is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. For data protection matters outside the United States, the responsible entity is LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Each time a user accesses a page on this website that includes a LinkedIn plugin, the plugin automatically prompts the user's browser to download a corresponding display from LinkedIn. More information about LinkedIn plugins is available at: https://developer.linkedin.com/plugins. Through this process, LinkedIn is informed of which specific subpage on our website the user has accessed.

If the user is logged into their LinkedIn account while visiting our website, LinkedIn is able to associate the visit with the user's LinkedIn profile. This occurs for every interaction with our site during the session. If the user clicks on any LinkedIn-integrated button (such as “Share” or “Follow”), this information is likewise linked to their LinkedIn account and stored by LinkedIn.

This data transmission occurs regardless of whether the user actively engages with the plugin. If you do not wish LinkedIn to collect information about your visit to our website, you should log out of your LinkedIn account before accessing our site.

LinkedIn provides settings to manage communication preferences and targeted advertising at: https://www.linkedin.com/psettings/guest-controls. LinkedIn also collaborates with partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame, who may place cookies on your device. These cookies can be managed or refused at: https://www.linkedin.com/legal/cookie-policy. LinkedIn’s current privacy policy can be found at: https://www.linkedin.com/legal/privacy-policy, and the cookie policy is available at the same address.