Your experience on this site will be improved by allowing cookies.
See our privacy protection here

Privacy Policy

We take the protection of your personal data seriously. This information applies to the processing of your personal data when you visit our website.

1. Controller

The Controller within the meaning of the EU General Data Protection Regulation (“GDPR”) is:

evident ingredients GmbH
Holsteinischer Kamp 97
22081 Hamburg
Germany

Telephone number: +49 40 468964777
Email: info@evident-ingredients.com

2. Data Protection Officer

You can contact our Data Protection Officer at privacy@evident-ingredients.com or by mail at the above postal address, marked for the attention of "The Data Protection Officer".

3. Processing on our website

The following personal data is processed in connection with your visit to our website.

3.1 Web hosting

When you visit our website, we process personal data to ensure the smooth, functional and secure operation of our website. The following data may be processed (so-called log files):

  • Operating system and current IP address (last octet truncated) of the device you are using to visit our website
  • Browser (type, version and language setting)
  • The amount of data accessed
  • Date and time of access
  • The URL of the previously visited website (referrer)
  • The URL of the (sub)page you are accessing on the website
  • The internet service provider of the accessing system

The collection of log files is technically necessary to display our website to you and to ensure the stability and security of the website. This also constitutes our legitimate interest in data processing. The legal basis is Article 6(1)(f) of the GDPR. This website is hosted by the service provider IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, with whom we have concluded a data processing agreement. Your data is processed in a German data centre and deleted after 8 weeks.

3.2 Contact

If you contact us via a form or by email, we process the data you provide. This includes your email address, your name and the content of your message. The processing of the data is carried out on the basis of Article 6(1)(b) of the GDPR in the context of the initiation or performance of pre-contractual measures, or on the basis of our legitimate interest in processing and responding to your other enquiry in accordance with Article 6(1)(f) of the GDPR. Further details are not strictly necessary to contact you and are therefore provided voluntarily on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. Your personal data will be deleted – subject to statutory retention periods – as soon as the purpose for which it was stored no longer applies, i.e. once your enquiry has been fully processed and no further communication with you is required or desired by you.

To provide our email service, we work with Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. Data processing generally takes place within the EU. However, as a data transfer to Microsoft Inc. in the USA (a third country) cannot be completely ruled out, a data processing agreement has been concluded with Microsoft using the EU Standard Contractual Clauses. The EU Standard Contractual Clauses are available on the European Commission’s website. Furthermore, Microsoft Inc. is certified under the EU-US Data Privacy Framework. The European Commission’s adequacy decision therefore applies to transfers of personal data.

4. Service providers and additional functions

4.1 Cookies

When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard drive and associated with the browser you are using, and through which certain information is transmitted to the provider that sets the cookie. Cookies cannot run programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall. We use technically necessary cookies that are required for the provision of the website. The legal basis for this is Article 6(1)(f) of the GDPR in conjunction with Section 25(2)(2) of the German TDDDG. Our legitimate interest lies in the technically flawless and user-friendly presentation of the website.

Cookie Domain Category Purpose Duration
__cf_bm First Party Necessary / Security Bot protection; helps distinguish automated traffic from legitimate users and protect the website. 30 minutes of inactivity
cf_clearance First Party Necessary / Security Stores proof that a security challenge was solved so the website can be accessed without repeated challenges. 1 year
XSRF-TOKEN First Party Necessary / Security Protects forms and requests against cross-site request forgery. Session
evident_ingredients_session or similar First Party Necessary / Session Maintains the user’s technical website session. Session

4.2 Cloudflare

We use services provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (“Cloudflare”) to improve the security, availability and performance of our website. Cloudflare acts as a reverse proxy and security service between your browser and our website. In this context, technical access data such as your IP address, browser and device information, requested URLs, date and time of access, and security-related event data may be processed.

Cloudflare is used in particular to protect our website against malicious traffic, automated access, bots, attacks and misuse, and to ensure the reliable delivery of our website. For this purpose, Cloudflare may set technically necessary cookies. These cookies are used for bot detection, challenge handling and security verification. They are not used by us for advertising or analytics purposes.

The legal basis for the processing of personal data is Article 6(1)(f) GDPR. Our legitimate interest lies in ensuring the security, integrity, availability and proper functioning of our website. The storage of and access to information on your device is strictly necessary for the provision of the website and therefore takes place on the basis of Section 25 (2) No. 2 German TDDDG.

Cloudflare is certified under the EU-U.S. Data Privacy Framework. To the extent that personal data is transferred to Cloudflare in the USA and the certification applies, such transfer is covered by the European Commission’s adequacy decision.

4.3 Google Maps

We use the Google Maps map service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 E5W5, Ireland, on our website. The purpose of the processing is to display our location on our website.

To protect your privacy, the map is not embedded directly. Instead, we display a locally stored static image of the map. When you merely visit our website, no connection to Google is established, no data is transmitted to Google and no Google cookies are set.

A connection to Google is established only if you actively click on the map or the accompanying link in order to open Google Maps. Only then are your IP address and connection data, such as device type, session, browser, device dimensions and operating system, transmitted to Google, and Google may place cookies on your device.

The legal basis for the processing of personal data in connection with the use of Google Maps is Article 6(1)(f) GDPR. Our legitimate interest lies in presenting our location clearly, improving the user-friendliness of our website and enabling visitors to plan their route to us easily.

Data processing generally takes place on servers within the EU; however, a transfer to Google’s parent company in the USA cannot be ruled out. We have concluded a data processing agreement with Google using the EU Standard Contractual Clauses. The EU Standard Contractual Clauses are available on the European Commission’s website. In addition, Google is certified under the EU-US Data Privacy Framework. The European Commission’s adequacy decision therefore applies to transfers of personal data.

Further information on the data processed through the use of Google Maps can be found in Google’s privacy policy at: https://policies.google.com/privacy

5. Social media

We operate a company page on the LinkedIn platform: https://www.linkedin.com/company/evident-ingredients-gmbh/ and collaborate with LinkedIn Ireland Unlimited Company, Gardner House, 2 Wilton Pl, Dublin 2, D02 CA30, Ireland (“LinkedIn”) for this purpose. We process your personal data together with LinkedIn as joint controllers. LinkedIn provides us with so-called Insight data. This consists exclusively of aggregated information regarding the reach and success of our company page on LinkedIn. When you visit our company page, follow it or otherwise interact with our page, personal data is processed by LinkedIn. This includes data on occupation, country, industry, length of service, company size and employment status. We have no influence over which personal data LinkedIn processes for its own purposes. This also applies to whether LinkedIn attributes, stores, analyses or discloses activities to individual users. To exercise your rights set out below in relation to data processing by LinkedIn, please contact LinkedIn directly using the form available here: https://www.linkedin.com/help/linkedin/ask/cp-master.

6. Your rights

You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, we will be happy to provide you with information about this personal data and the details set out in Article 15 of the GDPR. Furthermore, subject to the relevant legal requirements, you have the right to rectification (Article 16 of the GDPR), the right to erasure (Article 17 of the GDPR), the right to restriction of processing (Article 18 of the GDPR), the right to data portability (Article 20 of the GDPR) and the right to object to processing (Article 21 of the GDPR). If the processing is based on your consent, you have the right to withdraw this consent at any time (Article 7(3) of the GDPR); however, the lawfulness of the processing carried out prior to withdrawal remains unaffected.

To exercise your data subject rights, please contact us at the address given in section 1.

You also have the option at any time to exercise your right to lodge a complaint with a competent supervisory authority if you believe that our processing of your personal data infringes data protection regulations (Art. 77 GDPR).

7. Updating and amending the privacy policy

We reserve the right to amend this privacy policy at any time in accordance with the applicable data protection regulations.

Last updated: 24.06.2026