Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator:

INGATE GmbH
Bergiusstr. 13
86199 Augsburg
Phone: +49 821 99 83 546
Email: info@ingate.de

2. Hosting

This website is hosted on servers operated by INGATE GmbH in Germany. When you visit this website, the server automatically collects information in so-called server log files. This information includes, for example, the web browser used, the operating system, the referrer URL, the IP address, and the time of the server request. Data is processed exclusively in German data centers.

3. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection regulations and this privacy policy.

Information About the Responsible Party

The responsible party for data processing on this website is:

INGATE GmbH
Managing Director: Florian Alexander Lihl
Bergiusstr. 13
86199 Augsburg

The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Data Retention

Unless a more specific retention period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data.

4. Data Collection on This Website

Server Log Files

The hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing device
• Time of the server request
• IP address

This data is not merged with other data sources. The collection of this data is based on Art. 6 Abs. 1 lit. f DSGVO (GDPR). Our legitimate interest lies in operating the website securely and without disruption and in defending against attacks and abuse.

Our server protects itself against abuse automatically in two stages. If an unusually high number of requests arrives from one IP address within a short time, the address is blocked briefly, usually for one minute. If the requests show typical attack patterns, such as targeted searches for configuration files or the use of known scanning tools, the IP address is blocked for 24 hours, for longer in the event of repeated incidents, up to a maximum of five weeks. Log files are deleted automatically after 100 days at the latest, block records after eight weeks at the latest.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact information you provide, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent. The processing of this data is based on Art. 6 Abs. 1 lit. b DSGVO (GDPR).

The data submitted via the contact form will be stored until your inquiry has been fully processed and then deleted, unless statutory retention obligations exist.

Spam protection: Our contact form uses technical spam protection measures (honeypot fields and time checks) that function entirely without external services, without cookies, and without collecting additional personal data. No data is transmitted to third parties.

Web analytics with Matomo

This website uses Matomo, an open-source web analytics application. Matomo runs exclusively on our own servers in Germany, no data is transmitted to third parties, and the analysis works without cookies.

We record the pages visited, time spent on the site, the device and operating system used, the referring page and the IP address. The legal basis is our legitimate interest in presenting our offering in line with demand, pursuant to Art. 6 (1) (f) GDPR. You may object to this processing at any time under Art. 21 GDPR; a message to the address given above is sufficient.

Job applications

If you apply through the form on our careers page, we process the details you submit — name, contact details, the position applied for, your possible starting date and the application documents you upload — solely for the purpose of conducting the application procedure.

The legal basis is Section 26 (1) BDSG in conjunction with Art. 6 (1) (b) GDPR (decision on entering into an employment relationship). Your documents are accessible only to those involved in the selection process and are not passed on to third parties.

If we do not offer you a position, we delete your application documents six months after the procedure has concluded. This period follows from the limitation period under the German General Equal Treatment Act. If you would like us to keep your documents on file for future vacancies, we will add you to our applicant pool subject to your separate consent. If you are hired, the data is transferred to your personnel file.

Live chat

You can contact us directly via the live chat on our website. For this purpose we use the open-source software Chatwoot, which we operate ourselves on our own server in Germany (data centre in Munich). No data processor is involved in operating the chat.

We only show the chat button ("Chat with Sales") while a member of our staff is available. Our web server checks this with the chat software; no data about you is transmitted and nothing is stored in your browser. The chat itself is only loaded once you click the button. Only then does your browser load the chat software from chat.ingate.de and store an identifier (the cookie cw_conversation and entries in your browser's local storage) so that you can continue the conversation. This storage is strictly necessary for the chat function you have expressly requested (Section 25(2) No. 2 TDDDG) and therefore does not require consent.

We process your chat messages, your name and email address and, optionally, your company and phone number if you provide them (the chat asks for them), the time of the messages and technical data such as IP address, browser and the address of the page visited. We process this data in order to answer your inquiry. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to the initiation or performance of a contract, and otherwise our legitimate interest in answering inquiries under Art. 6(1)(f) GDPR. If we cannot reply in time or you leave the website beforehand, we send our reply to the email address you provided.

Our staff are notified of new messages by email via our own mail server and by browser notification. Browser notifications are delivered in encrypted form via the push service of the respective browser vendor. We do not use any external service provider to process chat content.

The chat software regularly reports the hostname and version number of our installation to the manufacturer Chatwoot Inc., USA, in order to notify us of available updates. No personal data of visitors is transmitted in the process.

We delete chat conversations twelve months after the last message, unless statutory retention obligations apply. Where we process your data on the basis of our legitimate interest, you may object to this processing at any time (see "Right to object under Art. 21 GDPR" in section 6).

5. Credit Checks and Receivables Management

Credit checks

As we provide our services in advance, we may obtain information on creditworthiness before concluding a contract and, where there is a justified reason, during the term of the contract. For this purpose, we transmit the company or name, address and, where applicable, the date of birth of the customer or its authorised representatives to mediaFinanz GmbH, Weiße Breite 5, 49084 Osnabrück, Germany, which obtains the information from CRIF GmbH, Leopoldstraße 244, 80807 Munich, or SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden. We receive information on past payment behaviour and a credit score. The legal basis is Art. 6(1)(b) GDPR and our legitimate interest in avoiding payment defaults under Art. 6(1)(f) GDPR.

The decision on concluding a contract is made by a member of our staff. No decision based solely on automated processing within the meaning of Art. 22 GDPR takes place. If no contract is concluded, we delete the information once the decision has been made; otherwise we store it for the duration of the contractual relationship. Information on data processing by the credit agencies is available at www.crif.de/datenschutz and www.schufa.de/datenschutz.

Debt collection

If customers do not settle invoices that are due despite a reminder, we hand the claim over to specialised service providers for out-of-court and, where necessary, judicial collection. In doing so, we process the company or name and address of the debtor, names and contact details of contact persons, contract and invoice data, and the amount and due date of the claim. The legal basis is Art. 6(1)(b) GDPR and our legitimate interest in enforcing our claims under Art. 6(1)(f) GDPR.

We decide on a case-by-case basis which of the two following service providers we engage, in particular depending on where the debtor is located.

mediaFinanz GmbH, Weiße Breite 5, 49084 Osnabrück, Germany, is a collection agency registered under Section 10(1) No. 1 of the German Legal Services Act (RDG). For court proceedings, mediaFinanz works with contracted lawyers, to whom the data is passed on in that case.

The platform Debitura (Debitura LLC, 300 Delaware Ave Ste 210 #557, Wilmington, DE 19801, USA) is a specialised service provider for debt collection. Debitura acts as our data processor under Art. 28 GDPR, processes the data solely on our instructions and passes it on to a collection agency or law firm in the debtor's country, which collects the claim on our behalf. The data is stored with Microsoft Azure in the European Union. As Debitura is a company based in the USA and also uses sub-processors in the USA to operate the platform, data is transferred there. This is based on the Standard Contractual Clauses of the European Commission agreed with Debitura (Module 2, controller to processor) under Art. 46(2)(c) GDPR. Debitura's sub-processors in the USA are likewise bound by Standard Contractual Clauses or certified under the EU-US Data Privacy Framework. Where the debtor is located outside the European Economic Area, the transfer to the service provider in that country is based on an adequacy decision of the European Commission (Art. 45 GDPR), as in the case of Switzerland. Where no such decision exists for that country, the transfer is necessary to enforce our claim (Art. 49(1)(e) GDPR). Further information on how Debitura processes personal data is available at www.debitura.com/legal/data-protection.

The data is stored until the claim has been settled and beyond that only as long as statutory retention obligations under commercial and tax law apply.

6. Your Rights

You have the right at any time to:

• Obtain information about your personal data stored by us (Art. 15 DSGVO / GDPR)
• Request correction of inaccurate data (Art. 16 DSGVO / GDPR)
• Request deletion of your data stored by us (Art. 17 DSGVO / GDPR)
• Request restriction of data processing (Art. 18 DSGVO / GDPR)
• Request data portability (Art. 20 DSGVO / GDPR)
• Object to data processing (Art. 21 DSGVO / GDPR)

If you believe that the processing of your data violates data protection law or that your data protection rights have been otherwise infringed, you may lodge a complaint with the supervisory authority. In Bavaria, this is the Bavarian State Office for Data Protection Supervision (BayLDA).

7. Cookies and Consent

This website uses technically necessary cookies that are required for the operation of the website (legal basis: Art. 6 Abs. 1 lit. f DSGVO / GDPR). In addition, we only use the following services with your explicit consent (legal basis: Art. 6 Abs. 1 lit. a DSGVO / GDPR, § 25 Abs. 1 TDDDG):

• Google Analytics 4 (Google Ireland Limited, Ireland; transfer to Google LLC, USA) — Website usage analysis, anonymized IP addresses, retention period up to 2 years
• Google Ads (Google Ireland Limited, Ireland; transfer to Google LLC, USA) — Measurement of whether a visit originated from one of our ads, retention period up to 90 days
• Google Maps (Google Ireland Limited, Ireland; transfer to Google LLC, USA) — Display of the map section on our location pages

You may revoke your consent at any time with effect for the future. To do so, use the overview below or the "Cookie Settings" link in the website footer. The live chat does not require consent because it is only loaded when you click on it (see section 4, "Live chat").

Data transfers to the USA

The Google services listed above also process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework. By adequacy decision of 10 July 2023, the European Commission determined that certified US companies provide an adequate level of data protection; transfers take place on that basis pursuant to Art. 45 GDPR. Irrespective of this, a transfer only occurs once you have given your consent.