Privacy Policy
Privacy Policy
A. GENERAL PROVISIONS
The controller within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
JA Solar Technology Co., Ltd.
No.123 Xinxing Road Ningjin, Xingtai City, Hebei Province, China
Phone: +86 10 6361 1888
Fax: + 86 10 6361 1999
E-Mail: jacompliance@jasolar.com
The controller has appointed the following representative in terms of Art. 27 GDPR:
JA Solar GmbH
Lyonel Feininger St. 28
80807 Munich
Phone: +49 89 327 2989 141
Fax: +49 89 327 2989 299
E-Mail: info@jasolar.eu
JA Solar GmbH has appointed a Data Protection Officer:
Data Protection Officer of JA Solar GmbH
c/o activeMind AG
Potsdamer Str. 3
80802 Munich
Phone: +49 89 919294-900
E-Mail: jasolar@activemind.de
1. Your data subject rights
You can exercise the following rights at any time using the contact details provided:
● Information about your data stored by us and its processing (Art. 15 GDPR),
● Correction of inaccurate personal data (Art. 16 GDPR),
● Erasure of your data stored with us (Art. 17 GDPR),
● Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
● Object to the processing of your data by us (Art. 21 GDPR), and
● Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us consent, you can revoke this at any time with effect for the future.
You can contact a supervisory authority at any time with a complaint, e.g. the competent supervisory authority in the federal state of your residence or the authority responsible for us as the responsible body.
A list of the competent European supervisory authorities (for the non-public sector) with address can be found at the following link provided by the European Data Protection Board (EDPB): Our Members | European Data Protection Board (europa.eu).
2. Right to object according to Art. 21 GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Send your objection to the following recipient:
JA Solar Technology Co., Ltd.
No.123 Xinxing Road Ningjin, Xingtai City, Hebei Province, China
Phone: +86 10 6361 1888
Fax: + 86 10 6361 1999
E-mail: jacompliance@jasolar.com
3. Change to our privacy policy
We reserve the right to adapt this privacy policy so that it always complies with the current legal requirements or in order to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
4. Questions to the Data Protection Officer
If you have any questions about data protection, please write us an email or contact the person responsible for data protection in our organisation directly or reach out to the Data Protection Officer of JA Solar GmbH:
Data Protection Officer of JA Solar GmbH
c/o activeMind AG
Potsdamer Str. 3
80802 Munich
Phone: +49 89 919294-900
E-Mail: jasolar@activemind.de

B. DATA PROCESSING RELATING TO OUR WEBSITE
1. Server log files
1.1 Nature and purpose of the processing:
When you access our website, i.e. if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and the like. In particular, they are processed for the following purposes:
● Ensuring a problem-free connection of the website,
● Ensuring a smooth use of our website,
● Evaluation of system security and stability, and
● Optimise our website.
We do not use your data to draw conclusions about your person. Information of this kind will be statistically analysed anonymously, if necessary, in order to optimise our website and the technology behind it.
1.2 Legal basis and legitimate interest:
The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
1.3 Recipient:
Recipients of the data may be technical service providers who act as data processors for the operation and maintenance of our website.
1.4 Storage period:
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for data used to provide the website when the respective session has ended.
1.5 Provision prescribed or required:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, an objection is excluded.
1.6 Objection
Please read the information about your right to object according to Art. 21 GDPR.
2. Contact form
2.1 Nature and purpose of the processing:
The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This is used for the assignment of the enquiry and the subsequent response to it. The provision of further data is optional.
2.2 Legal basis:
The processing of the data entered in the contact form is based on a legitimate interest (Art. 6(1)(f) GDPR).
By providing the contact form, we would like to enable you to contact us easily. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions. If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6(1)(b) GDPR).
2.3 Recipient:
Recipients of the data are, if applicable, our processors.
2.4 Storage period:
Data will be deleted no later than 6 months after the request has been processed.
If a contractual relationship arises, we are subject to the statutory retention periods and delete your data after these periods have expired.
2.5 Provision prescribed or required:
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.
2.6 Objection
Please read the information about your right to object according to Art. 21 GDPR.
3. Cookies
Like many other websites, we also use so-called "cookies". Cookies are small text files that are stored on your end device (laptop, tablet, smartphone or similar) when you visit our website.
You can delete individual cookies or the entire cookie inventory. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:
If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:
(1) HMF_CI:It is used to generate a client ID to uniquely identify the client. The generated value is stored in HMF_CI and sent to the client. The client subsequently requests access with the cookie, and the BOT can parse out the CI value and locate it to the client;
(2) HOY_TR and HBB_HC: BOT will issue two cookies, HBB_HC and HOY_TR, during the human verification, where HBB_HC is used to store the verification memory, which will be kept in the browser until the verification expires, and HOY_TR is used for information interaction during the verification process, which will disappear after the verification is finished.
(3) PHPSESSID: It is the verification code storage used in https://product.jasolar.com/ (this is the link in the upper right corner of our official website, called "Module Authenticity"). This cookie is to verify whether the verification code filled by the front-end user is correct. It only stores the code used in that time, not to obtain user's information.
3.1 Nature and purpose of the processing
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.
We need cookies for the following applications:
● Adoption of language settings
● Remembering search terms
3.2 Legal basis and legitimate interest
The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in a user-friendly design of our website.
3.3 Recipient
Recipients of the data may be technical service providers who act as data processors for the operation and maintenance of our website.
3.4 Provision prescribed or required
The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be limited.
3.5 Objection
Please read the information about your right to object according to Art. 21 GDPR.

C. DATA PROCESSING OUTSIDE OUR WEBSITE: CORRESPONDENCE WITH JA SOLAR
1. Information according to Art. 13 and 21 of the General Data Protection Regulation (GDPR)
With the following information, we would like to give you an overview of how your personal data is processed by us and your rights according to data protection law. Which specific data are processed and how they are used depends largely on the requested or agreed-upon services. Therefore, not all sections of this information will apply to you.
2. Responsible parties
Jointly responsible parties for the processing:
JA Solar Technology Co., Ltd.
No.123 Xinxing Road Ningjin, Xingtai City, Hebei Province, China
Phone: +86 10 6361 1888
Fax: + 86 10 6361 1999
E-Mail: jacompliance@jasolar.com
and
JA Solar GmbH
Lyonel Feininger St. 28
80807 Munich
Phone: +49 89 327 2989 141
Fax: +49 89 327 2989 299
E-Mail: info@jasolar.eu
The joint responsibility is regulated by an agreement between the companies. The companies utilise the same database solution within the scope of their activities and access a common data set as required. Both companies are hereby independently responsible for the lawful processing of personal data and ensuring data subjects' rights, including the provision of compulsory information. If necessary, the companies support each other during this process.
You can reach the data protection officer of JA Solar GmbH at the contact details set out above.
3. We process your data for the following purposes and on the following legal basis:
We process personal data in accordance with the GDPR regulations and the Federal Data Protection Act (FDPA) [Bundesdatenschutzgesetz]:
3.1 To fulfil contractual obligations (Art. 6 (1) (b) GDPR)
Processing is necessary for the performance of a contract with you. This also includes the processing of warranty claims, which is a contractual service.
The same applies to those processing operations required to carry out pre-contractual measures, such as in cases of queries regarding our services.
3.2 Due to statutory requirements (Art. 6 (1) (c) GDPR)
We are subject to various legal obligations that result in data processing. These include, for example, tax laws, as well as the respective statutory accounting, responding to inquiries and meeting the requirements of supervisory or law enforcement authorities and compliance with tax audits and reporting obligations.
In addition, the disclosure of personal data within the context of administrative/judicial measures may be required for purposes of gathering evidence, prosecuting or enforcing civil claims.
3.3 Within the scope of weighing interests (Art. 6 (1) (f) GDPR)
If required, we process your data beyond actual contractual compliance for the protection of our legitimate interests or those of third parties. Examples of such cases are:
● If you contact us by e-mail or telephone, the data you enter will be stored for the purpose of individual communication with you,
● Enforcement of legal claims and defence in legal disputes, and
● Saving additional contacts in the CRM system for communication.
4. Who receives your data?
In our company, employees receive your data in order to contact you and for contractual collaboration (including the implementation of pre-contractual measures).
Your data will only be forwarded to service providers (processors) when necessary to perform our contractual duties (e.g. support/ EDP maintenance /IT applications, accounting, data erasure). All service providers are obliged to handle your data confidentially pursuant to a commissioned processing contract.
With regard to the data transfer to recipients outside of our company, it should be noted that we only forward required personal data in compliance with the applicable data protection regulations.
Subject to these conditions, recipients of personal data may be:
● public bodies and institutions (e.g. tax authorities, law enforcement authorities) when presented with a statutory or regulatory obligation,
● credit and financial services institutions (processing payment transactions), and
● tax consultants, certified public accountants and income/corporate tax auditors (statutory audit mandate).
5. Is data transferred to a third country or to an international organisation?
Your data will be transferred to JA Solar Technology Co., Ltd. In China on the basis of standard contractual clauses.
6. How long will your data be stored?
We process and store your personal data as long as this is necessary to fulfil our contractual and legal obligations. If the data are no longer required for the fulfilment of contractual or legal obligations, these are deleted on a regular basis.
Exceptions to the above-mentioned deletion criteria are for:
● Data required to fulfil the statutory retention requirements, e.g. German Commercial Code [Handelsgesetzbuch] and Fiscal Code [Abgabenordnung]. The respective stipulated periods for retention or documentation are usually six to ten years.
● Data for maintaining evidence in accordance with the legal statute of limitations. According to §§ 195 ff of the German Civil Code [Bürgerlichen Gesetzbuches)], these statutes of limitations can be up to 30 years, whereby the regular limitation period is three years.
If the data processing takes place in our legitimate interest of that of a third party, the personal data will be deleted as soon as this interest no longer exists. The aforementioned exceptions also apply here.
7. Which data protection rights do you have?
Every data subject has the right of access pursuant to Art. 15 GDPR, right to rectification pursuant to Art. 16 GDPR, right to erasure pursuant to Art. 17 GDPR, right to restriction of processing pursuant to Art. 19 GDPR, right to object from Art. 21 GDPR as well as the right to data portability from Art. 20 GDPR.
With the right to access and the right to erasure, the restrictions in accordance with §§ 34 and 35 BDSG apply.
In addition, there is a right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR). A list of the competent European supervisory authorities (for the non-public sector) with address can be found at the following link provided by the European Data Protection Board (EDPB): Our Members | European Data Protection Board (europa.eu)
8. Am I obligated to provide data?
Under the terms of the contractual relationship, you may provide the personal information necessary to initiate, carry out and terminate the contractual relationship and to fulfil the respective contractual obligations or those that we are required to collect by law. Without this data, we will not be able to contact you, enter into a contract with you or perform the services detailed therein.
9. Information on your right to object according to Art. 21 (1) GDPR
9.1 Case-specific right to object
You have the right to object to the processing of your personal data by us at any time for reasons arising from your particular situation, provided that this objection was filed in accordance with Art. 6 (1) (f) GDPR (data processing based on a weighing of interests).
If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is for the purpose of enforcing, carrying out or defending legal claims.
9.2 Recipient of an objection
The objection can be made without any formal requirements with '”Objection” in the subject line, your name, address and date of birth and should be addressed to:
JA Solar Technology Co., Ltd.
No.123 Xinxing Road Ningjin, Xingtai City, Hebei Province, China
Phone: +86 10 6361 1888
Fax: + 86 10 6361 1999
E-mail: jacompliance@jasolar.com
or
JA Solar GmbH
Lyonel Feininger St. 28
80807 Munich
Phone: +49 89 327 2989 141
Fax: +49 89 327 2989 299
E-Mail: info@jasolar.eu

D. DATA PROCESSING OUTSIDE OUR WEBSITE: SOCIAL MEDIA
JA Solar Technology Co., Ltd. is represented in various social networks. For information on the storage and use of your data as well as your rights and options for settings to protect your privacy, please refer to the data protection information of the respective social media provider:
1. Facebook and Instagram
JA Solar Technology Co., Ltd. is represented on the social networking sites Facebook and Instagram. These platforms are provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. We maintain these Facebook/Instagram pages in order to inform users and interested parties as well as customers about our services.
We cannot exclude the possibility that a third country transfer, e.g. to servers located in the USA, may take place when our company presence is called up in these social networks. Furthermore, we would like to point out that as the operator of a Facebook/Instagram fan page, we are jointly responsible with Facebook for processing the personal data of visitors to the page (Art. 26 GDPR). For this purpose, we have concluded corresponding contracts with Facebook.
Facebook acknowledges shared responsibility for Insights data with Page operators and assumes primary responsibility, see: Facebook.
If you have a Facebook/Instagram profile and are logged in, Facebook can, for example, analyse your usage behaviour and create a usage profile corresponding to your usage behaviour. This user data is regularly processed for market research and (personalised) advertising purposes.
The processing of the data is based on your consent pursuant to Art. 6 (1) (a) GDPR.
If you wish to make requests for information or assert your user rights, it is possible to assert these rights against us or Facebook.
Further information regarding the collection and use of data as well as your rights and protection options can be found at Facebook - Meta Privacy Policy - How Meta collects and uses user data and Instagram - Meta Privacy Policy - How Meta collects and uses user data.
2. LinkedIn
JA Solar Technology Co., Ltd. maintains a company presence on LinkedIn. This is located on a platform operated by LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland.
On our site, we provide information and offer users the opportunity to communicate. The company website is used for applications and information/PR.
When you visit, follow or engage with our LinkedIn company page, LinkedIn processes personal data to provide us with anonymised statistics and insights. This provides us with insights into the types of actions visitors take on our page (so-called page insights). LinkedIn processes in particular such data that you have already provided to LinkedIn via the information in your profile. In addition, LinkedIn will process information about how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page. Personal data is not transmitted to us by LinkedIn. It is also not possible for us to draw conclusions about individual members via the information of the page insights.
This processing of personal data in the context of Page Insights is carried out by LinkedIn and us as joint controllers. We have entered into a joint controller agreement with LinkedIn which sets out the allocation of data protection obligations between us and LinkedIn. The agreement is available at the following link: LinkedIn Pages Joint Controller Addendum
Under this agreement, LinkedIn is responsible for responding to data subject requests. To do this, you have the option of contacting LinkedIn online or reaching LinkedIn via the contact details in the privacy policy.
You can contact us about exercising your rights in connection with the processing of personal data in the context of Page Insights by contacting us via the contact form with the selection of your concern "data protection". In such a case, we will forward your request to LinkedIn.
The processing of the data is based on your consent pursuant to Art. 6 (1) (a) GDPR, which you have given to LinkedIn as part of your registration.
You can find more information on data processing by LinkedIn in the LinkedIn privacy policy.
We cannot exclude that a third country transfer, e.g. to servers located in the USA, takes place when you call up our LinkedIn page. Your visit to our website may therefore be tracked by LinkedIn.
3. YouTube
JA Solar Technology Co., Ltd. is also represented on YouTube. YouTube is a service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
We cannot exclude the possibility that a third country transfer, e.g. to servers located in the USA, may take place when you access our YouTube channel. Your visit to our website may therefore be tracked by YouTube.
By using YouTube, your personal data will be collected, transferred, stored, disclosed and used by Google. Google analyses your user behaviour and creates a corresponding usage profile, regardless of whether you have a Google account. This data can be used to tailor content or advertising to you.
The processing of the data is based on your consent pursuant to Art. 6 (1) (a) GDPR.
Further information on the collection and use of data as well as your rights and protection options can be found at Google Product Privacy Policy Guidelines – Privacy and Terms and Privacy Policy – Privacy and Terms – Google.
4. X (former Twitter)
We maintain a company profile on X.
This platform is operated by Twitter International Unlimited Company, an Irish company. We maintain this X company page in order to inform users or interested parties as well as customers about our company. We provide information via our X profile and offer users the opportunity to communicate with us.
You can request a copy of our contracts with X here and here . To assert these data subject rights you can contact X online or reach X using the contact information in the Privacy Policy . You can also contact X's data protection officer via the following link: Privacy.
In addition, you can contact us in this context to exercise your data subject rights. For this purpose, it is sufficient that you contact us via the contact form with the selection of your request "Privacy-X". In such a case, we will forward your request to X.
As soon as you visit our X company profile, follow this page or engage with this page, X processes personal data. As a result, X grants us insight and statistics in anonymized form, after which we are informed about the types of actions visitors take on our site (so-called audience insights). It is not possible for us to derive conclusions about individual members via the information of the page insights. On the one hand, X processes data that you have stored in your profile based on your own published information. In addition, X processes in particular data about how you interact with our X company page, e.g. whether you are a follower of our X company page.
The processing of your personal data is based on your consent pursuant to Art. 6 (1) (a) GDPR, which you have given to X as part of your registration.
Further information on the processing of your data X can be found in X's privacy policy.
We cannot exclude that a third country transfer, e.g. to servers located in the USA, takes place when calling up our X - company presence.