Data Act information for INGOS MAIL

This page contains the information under Article 28 of Regulation (EU) 2023/2854 (Data Act) for INGOS MAIL. It is kept up to date. In addition, the General Terms of Business and Use for INGOS MAIL and the Data portability register apply.

INGOS GmbH, Gewerbepark 2, 94547 Iggensbach, Germany. Registered in the commercial register of the Local Court of Deggendorf under HRB 1784.

INGOS itself is the operator of the INGOS MAIL platform.

INGOS MAIL is provided on server infrastructure that INGOS operates in Germany. Emails, calendars, contacts, and other mailbox content are stored there.

The infrastructure and its operation are therefore subject to the law of the European Union and the Federal Republic of Germany.

• Storage of mailbox content on infrastructure that INGOS operates in Germany
• Encrypted transmission between devices and INGOS MAIL, currently with TLS 1.3; outdated protocol versions are rejected
• Information security management system with technical and organizational measures under Article 32 GDPR, continually adapted to the threat situation
• Logged administrative access: access to mailbox content only where required for the service or where you instruct it

• No transfer to third parties, except to deliver email to recipients outside INGOS MAIL, for the security service under § 9.2 of the terms, or when you activate third-party services yourself.
• The security service under § 9.2 receives only automatically derived characteristic values and the IP address of the submitting server, never the message in readable form. It is named in the data processing agreement as a sub-processor, with the place of processing.
• INGOS does not sell customer data and does not analyze it for its own purposes.
• INGOS employees are bound to confidentiality.

• Data processing agreement under Article 28 GDPR naming the sub-processors
• Confidentiality obligation in § 21.2 of the terms
• Choice of law: exclusively German law, place of jurisdiction in Germany

INGOS releases customer data to authorities only when a legally binding order under the law of the European Union or Germany is in place. INGOS reviews requests from authorities in third countries for compatibility with this law. Where legally permitted, INGOS informs the affected customer in advance.