Privacy Policy

At a glance

• This website collects no form data (there is no contact form), sets no analytics, marketing, or tracking cookies, and loads no external fonts (no Google Fonts).
• There is exactly one technically necessary cookie (joulium_lang, language preference) and one local storage entry for your cookie choice (joulium_consent, localStorage).
• The videos on this page (a podcast and a product video) are embedded from YouTube but only load after you click "Play" — before that, no connection to YouTube/Google is made (see Section 6).
• Contact happens exclusively through your own email client (mailto: links) — we only receive what you write in your own email.

1. Data Controller

The controller responsible for data processing on this website is:

Joulium Ltd, 65 London Wall, London, EC2M 5TU, England & Wales (see Imprint for full details).

2. This website vs. the Joulium platform

This policy applies to the public marketing website at joulium.de. It does not apply to use of the Joulium Intelligence / Joulium Settlement platform itself (login area, API, mobile app). Customers registered on the platform as an organisation (B2B tenant) are covered by a separate, more extensive data protection and data processing agreement provided under the respective contractual relationship — the platform naturally processes significantly more personal and business data (user accounts, time-series data, billing data) than this public website.

3. Hosting & server log files

When you visit this website, our hosting provider automatically collects technical information transmitted by your browser: IP address, date and time of the request, page requested, amount of data transferred, browser type and version, operating system, referrer URL. This data is used solely to technically operate and secure the website (Art. 6(1)(f) GDPR — legitimate interest in a functioning and secure service) and is deleted automatically after a short period. This data is not combined with any other data source.

TODO: name the hosting provider and, if located outside the EU/EEA, add the legal basis for transfer — see Section 10.

4. Cookies & local storage

We do not set any analytics, marketing, or tracking cookies, and we do not transmit any data to third-party advertising or analytics services. The cookie notice you see on first visit exists for transparency; since only technically necessary storage is used, no separate consent is required under Art. 6(1)(f) GDPR / the equivalent ePrivacy implementation. Should this change in future (e.g. through the introduction of an analytics tool), we will update this notice and policy accordingly and obtain genuine opt-in consent where required.

5. No external fonts (Google Fonts)

All fonts used on this site (Sora, IBM Plex Mono, Inter) are self-hosted and served locally from our own server. There is no connection to Google Fonts or any other external font service — your IP address is never transmitted to a font provider in the US or elsewhere when this page loads.

6. Embedded YouTube videos

In the "Resources" section, we embed videos from YouTube (a podcast and a product video). To avoid unnecessary data transfer, we do not automatically load the YouTube player — instead, we first show only a thumbnail image hosted on our own server. In this state, no connection to YouTube/Google is made — no cookies are set and no data is transmitted.

Only once you actively click a video's play button does the video player load, in privacy-enhanced mode ("youtube-nocookie.com"). From that point on, YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may also be processed by Google LLC in the US) may process technical data such as your IP address and may set cookies, particularly if you are simultaneously logged in to YouTube/Google. The legal basis is your consent given through the active click (Art. 6(1)(a) GDPR). For details, see Google's Privacy Policy.

7. No further analytics or tracking services

Beyond the click-to-load YouTube player described in Section 6, this website does not embed any web analytics tools (e.g. Google Analytics, Matomo), social media plugins, or advertising/retargeting pixels. Your usage behaviour on this site is not analysed.

8. Contacting us by email

If you contact us via one of the email links on this website (e.g. to request a pilot), your message is sent directly through your own email client. The website itself does not store or process any form data — there is no contact form that transmits input to us. Data you send us by email (e.g. name, email address, content of your enquiry) is processed solely to handle your enquiry (Art. 6(1)(b) GDPR, pre-contractual measure) and is deleted once no longer required for that purpose, unless statutory retention obligations apply.

9. Recipients and processors

Personal data described in Section 3 is shared with our hosting provider as a data processor (Art. 28 GDPR) to the extent necessary for the technical operation of the website. If you actively click the video in Section 6, Google/YouTube additionally acts as an independent controller. Data is not shared with any other third parties beyond this (e.g. for advertising purposes).

TODO: name the hosting provider and reference the data processing agreement.

10. International data transfers

Should hosting involve a transfer of personal data outside the EU/EEA, we ensure an appropriate safeguard under Art. 46 GDPR is in place (e.g. EU Standard Contractual Clauses). Actively loading the YouTube video (Section 6) may involve a data transfer to Google LLC in the US; Google relies on its own published transfer safeguards for this.

TODO: fill in specifics once the hosting location is confirmed.

11. Retention periods

Server log data (Section 3) is automatically deleted after a short, technically justified period. Email correspondence (Section 8) is deleted once no longer needed to handle your enquiry. The language cookie (Section 4) expires automatically after one year. Any cookies/data set by YouTube after you click the video are subject to Google's own retention periods.

12. Your rights

Under the GDPR you have the right to:

• Access (Art. 15) the data we process about you,
• Rectification (Art. 16) of inaccurate data,
• Erasure (Art. 17),
• Restriction of processing (Art. 18),
• Data portability (Art. 20),
• Object (Art. 21) to processing,
• Withdraw any consent given (e.g. by not playing the YouTube video) with effect for the future (Art. 7(3) GDPR).

Please contact us via the address listed in the Imprint.

13. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data — typically the authority of your habitual residence or member state has jurisdiction.

14. No processing of children's data

This website is directed exclusively at business customers and their representatives (B2B) and is not intended for children or minors. We do not knowingly process data from individuals under the age of 16.

15. Changes to this privacy policy

We will update this policy as soon as the website's actual functionality changes (e.g. if a contact form or analytics software is introduced). The version published on this page at the time of your visit always applies.

As of 26 July 2026. This policy describes the website's actual technical state (no tracking other than the optional, click-to-load YouTube video, no external fonts, no form data collected) and should be treated as a thorough first draft — the "TODO" items regarding hosting should be completed and reviewed by legal counsel before publication.