Request a quote

PRIVACY POLICY JUFOL GmbH

Below you will find information about which types of personal data we process, to what extent and for what purposes. Personal data is any information that can be used to identify you as a data subject, such as your name, address, email address or your user behaviour.

Data subjects are those with whom a relationship exists in the course of providing our services, visitors to our website and users of our entire online offering.

Name and address of the controller responsible for data processing:

JUFOL GmbH
Krumbacher Straße 9
86154 Augsburg

Tel.: + 49 (0)821 3432199-0
Fax: + 49 (0)821 3432199-20
Email: info@jufol.de

The controller’s data protection officer is:

Datavise GmbH & Co. KG
Moltkestr. 97
40479 Düsseldorf

Phone: 0211 5800 26 96 0
Email: datenschutz@datavise.de

The following types of data are collected and stored by us:

  • Master data (e.g. names and addresses)
  • Contact data (e.g. telephone numbers and email addresses)
  • Contract data (e.g. terms and conditions)
  • Payment data (e.g. bank account details)
  • Usage data (e.g. access times, pages visited)
  • Metadata (e.g. browser type, IP address, operating system)
  • Content data (e.g. your text entries in contact forms or similar)


The categories of persons affected by this:

  • Applicants
  • Customers
  • Prospective customers
  • Users (website/online offerings)


Data is collected for the following purposes:

  • Information
  • Communication
  • Customer service
  • Services for the performance of a contract
  • Direct marketing / marketing
  • (technical) provision of the online offering
  • Security measures to protect the (online) offering
  • Reach measurement to improve the offering


The processing of your personal data takes place exclusively on the basis of the following legal grounds: 

Consent pursuant to Art. 6(1)(a) GDPR

“the data subject has given consent to the processing of his or her personal data for one or more specific purposes”

Performance of a contract and pre-contractual requests pursuant to Art. 6(1)(b) GDPR

“processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”

Legal obligations pursuant to Art. 6(1)(c) GDPR

“processing is necessary for compliance with a legal obligation to which the controller is subject”

Legitimate interest pursuant to Art. 6(1)(f) GDPR

“processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child”

Art. 88 GDPR, Section 26 of the new German Federal Data Protection Act (BDSG-neu)

Data processing in the employment context or data processing for the purposes of the employment relationship

Transfer to third parties and third countries

As a matter of principle, your data remains within our company. The transfer or disclosure of your personal data to a third party only takes place 

  • on the basis of a statutory authorisation,
  • with your consent,
  • where we are legally obliged to do so, or
  • on the basis of a legitimate interest pursuant to Art. 6(f) GDPR.

Insofar as we use external service providers as processors, they are obliged by contracts pursuant to Art. 28 GDPR to process personal data exclusively in accordance with our instructions and to implement appropriate technical and organisational measures to protect the rights of data subjects.

As a matter of principle, your personal data is not transferred directly to third countries (outside the European Union or the European Economic Area). The tools, software solutions and service providers we use are generally based in the European Union (EU) or the European Economic Area (EEA). In individual cases, however, data may indirectly reach third countries outside the EU/EEA via parent companies or affiliated companies.

In such cases, we ensure that a transfer only takes place subject to the following conditions:

  • an adequacy decision of the EU Commission exists for the country concerned,
  • appropriate safeguards within the meaning of Art. 46 GDPR exist, e. g. standard contractual clauses,
  • the country offers an adequate level of protection pursuant to Art. 45 et seq. GDPR, or
  • one of the derogations under Art. 49 GDPR applies.

In this way, we ensure that your personal data remains protected as effectively as possible even in the event of such a transfer.

Duration of storage

Your personal data is routinely deleted, or its processing restricted or blocked, at the latest upon expiry of the respective statutory retention periods (e.g. retention periods under commercial and tax law), provided that this data is no longer required for the performance of a contract and/or there is no legitimate interest on our part in continuing to store it.

Use of the website and creation of log files

When you visit our website, the following information is automatically transmitted by your browser to our provider’s server:

  • IP address of your end device
  • date and time of access
  • name and URL of files retrieved
  • website from which access is made or from which you were directed to our site (referrer URL)
  • browser used and, where applicable, the operating system of your device
  • name of the access provider.

This data is not merged with other data sources. The IP address is anonymised.

This data is collected in order to ensure the proper use of the website, to optimise the website and to ensure the security of our IT systems. These aforementioned purposes also constitute our legitimate interest in the data processing pursuant to Art. 6(1)(f) GDPR.

This data is regularly deleted automatically. In the event of misuse of the website, the relevant data whose further storage is necessary for evidentiary purposes is retained until the matter has been resolved.

Hosting

We use the hosting service of Telekom, Landgrabenweg 149, 53227 Bonn, for the purpose of providing the website on the basis of processing carried out on our behalf. All data collected on our website is processed on the servers of Telekom . This may in particular involve IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

Further information on data protection at Telekom can be found on the following website: Link to the privacy page of https://www.telekom.de/ueber-das-unternehmen/datenschutz#fragen-und-antworten

The hosting provider is used for the purpose of performing the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).

Further processing on servers other than those of Telekom mentioned above only takes place within the scope set out below.

Cookies

This website uses cookies. These are small text files that are stored in or by the internet browser on the user’s end device. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again. 

A distinction is made between the following types of cookies: 

Session cookies

Session cookies are functionally necessary cookies that do not require consent, as they are automatically deleted when you leave the website.

The legal basis for this processing is Art. 6(1)(f) GDPR. 

Permanent cookies

Permanent cookies remain permanently on the end device. They can be used, for example, to check the login status or to display preferred content. In addition, the data processed here can be used for reach measurement. 

The legal basis for this processing is Art. 6(1)(a) GDPR, and therefore requires the user’s consent. 

We use cookies that enable an analysis of the user’s surfing behaviour.

The following data is stored and transmitted in the cookies:

  • frequency of page views
  • use of website functions

When accessing our website, the user is informed about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. Reference is also made to this privacy policy in this context.

Via the cookie settings, the user can revoke their consent at any time and object to the processing of their personal data. 

Consent with Usercentrics

This website uses the cookie consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your end device and to document this in compliance with data protection law. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, website: https://usercentrics.com/de/ (hereinafter „Usercentrics“).

When you enter our website, the following personal data is transmitted to Usercentrics:

  • your consent(s) or the withdrawal of your consent(s)
  • your IP address
  • information about your browser
  • information about your end device
  • time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consents granted or their withdrawal to you. The data collected in this way is stored until you request us to delete it, you delete the Usercentrics cookie yourself, or the purpose for storing the data ceases to apply. Mandatory statutory retention obligations remain unaffected.

Usercentrics is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1)(1)(c) GDPR.

Data processing agreement
We have concluded a data processing agreement with Usercentrics. This is a contract required under data protection law that ensures that Usercentrics processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Use of third-party services

In order to present our website to you in the best possible way, to personalise content, to optimise the technical provision and to analyse the use of our website, we use various external services. The processing of your personal data takes place – unless technically strictly necessary – exclusively on the basis of your voluntary consent pursuant to Art. 6(1)(a) GDPR, which you give via our cookie consent banner.

If you wish to withdraw your consent, you can do so at any time via the consent banner or – depending on the provider – directly in the settings of the respective service. Following withdrawal, the services concerned will no longer be used and your data will no longer be processed within the scope of these services.

Google services (Analytics, Tag Manager)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Purpose: We use various Google services, in particular for analysis, provision of functions and display of the website.

  • Google Analytics

For analysing user behaviour and measuring the reach of our website.

  • Google Tag Manager

For the technical management and integration of website tags. The service itself does not process any personal data and does not set any cookies.

Transfer to third countries:

A transfer of personal data to the USA cannot be ruled out.

Safeguards: EU standard contractual clauses (SCCs) as well as – where applicable – the EU-US Data Privacy Framework (DPF)

Contact

As a rule, our website can be used without providing personal data. 

Should you contact us by other means, such as email or telephone, the data collected here will be treated as confidential and will not be passed on to third parties without your consent. 

The respective purpose of the data processing results from

  • the voluntary disclosure by the data subject pursuant to Art. 6(1)(a) GDPR
  • the performance of a contract or the taking of pre-contractual steps pursuant to Art. 6(1)(b) GDPR
  • the legitimate interest in the effective handling of enquiries addressed to the company pursuant to Art. 6(1)(f) GDPR.

A contact form is available on our website for electronic contact. If this option is used, the data entered in the input mask is transmitted to us and stored.

This personal data is:

  • Name
  • Email address

In addition, the following data is stored at the time the message is sent:

  • The user’s IP address
  • Date and time of registration
  • Browser and device

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. 

The user has the option of objecting to the processing of personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of making contact will be deleted in this case.

Contractual and business partners

The data of our contractual and business partners is processed by us primarily to fulfil our contractual obligations and for communication. Processing also takes place for proper and economically sound business management and to safeguard our rights. Processing therefore takes place

  • for the performance of a contract and pre-contractual requests pursuant to Art. 6(1)(b) GDPR,
  • on the basis of a legal obligation pursuant to Art. 6(1)(1)(c) GDPR, or
  • on the basis of legitimate interests pursuant to Art. 6(1)(1)(f) GDPR.

Data is only passed on to third parties insofar as this is necessary to fulfil legal obligations or where this is stated in the contract or in this privacy policy. 

Applicants

By submitting their application, applicants consent to the processing of their data for the application procedure in accordance with our privacy policy.

The legal basis for processing applicant data is Art. 88 GDPR, Section 26 of the new German Federal Data Protection Act (BDSG-neu) and, where applicable, Art. 6(1)(b) GDPR for the initiation or performance of contractual relationships.

Insofar as special categories of personal data within the meaning of Art. 9(1) GDPR are voluntarily provided in the course of the application procedure, their processing additionally takes place pursuant to Art. 9(2)(b) GDPR (e.g. health data, such as severe disability status or ethnic origin).

Insofar as special categories of personal data within the meaning of Art. 9(1) GDPR are requested from applicants in the course of the application procedure, their processing additionally takes place pursuant to Art. 9(2)(a) GDPR (e.g. health data, where this is necessary for carrying out the profession)

In the event of a successful application, the data provided by applicants may be further processed by us for the purposes of the employment relationship. Otherwise, if the application for a job offer is unsuccessful, the applicant’s data will be deleted. The applicant’s data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. Deletion takes place after a period of six months has elapsed, so that we can answer any follow-up questions regarding the application and meet our obligations to provide evidence under the German General Equal Treatment Act (AGG). Invoices for any reimbursement of travel expenses are archived in accordance with the requirements of tax law.

Your rights

As a data subject, you have the option of asserting your rights in connection with the General Data Protection Regulation against us. These include the following rights:

Right of access pursuant to Article 15 GDPR

You have the option of requesting the data we have stored about you. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information about the details thereof. An informal request by email or by post is sufficient for this purpose. You will receive the information you have requested within one month of receipt of the letter.

Right to rectification pursuant to Article 16 GDPR

In the event that we have recorded/stored incorrect data about you, you can request the rectification or completion of this data by means of an informal request. Within one month of receipt of the letter, you will receive information about the change to your data.

Right to erasure pursuant to Article 17 GDPR

You have the option of requesting the erasure of your personal data stored by us, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims. However, this requires that the purposes of the processing no longer apply, or that you have objected to the processing pursuant to Article 21 GDPR, that you withdraw your consent pursuant to Article 7 GDPR, or that the processing is unlawful.

Right to restriction of processing pursuant to Article 18 GDPR

You have the right to request the restriction of the processing of your personal data insofar as you contest the accuracy of the data, the processing is unlawful but you refuse its erasure, we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR. You can also notify us of this informally.

Right to data portability pursuant to Article 20 GDPR

You have the option of receiving the data we hold about you in a structured, commonly used and machine-readable format, or of requesting its transmission to another controller.

Right to withdraw consent pursuant to Art. 7(3) GDPR

You have the right to withdraw any consent you have given at any time with effect for us. As a result, we may no longer continue the data processing that was based on this consent in the future.

Right to object pursuant to Article 21 GDPR

Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(1)(f) GDPR, you have the right to object to the processing of your personal data, provided that there are grounds for doing so arising from your particular situation or that the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without you having to state a particular situation. If you wish to exercise your right of withdrawal or objection, an email to info(at)jufol.de is sufficient.

Right to lodge a complaint pursuant to Article 77 GDPR

You have the right to lodge a complaint with a supervisory authority. For this purpose, you may contact the supervisory authority of your habitual residence or place of work or of our registered office.

A list of the German supervisory authorities (for the non-public sector) with addresses can be found at:

https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar changes from „http://“ to „https://“ and by the lock symbol in your browser bar.

When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Validity and amendment of this privacy policy

This privacy policy is currently valid and is dated 02/06/2026

Created and reviewed by