Information on the Use of Your Data
Privacy Policy of Roth Finanz Maklergesellschaft m.b.H.
Privacy
Controller & Data Protection Overview
Retirement and financial data can include sensitive information. We respect your personal rights and protect your personal data with utmost care. Below, we provide transparent information regarding the collection, processing, and use of your data when visiting our website and within our brokerage activities pursuant to the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Controller within the meaning of the GDPR is: Roth Finanz Maklergesellschaft m.b.H. Bahnstraße 95, 63225 Langen, Germany Telephone: +49 6103 70648-0 Fax: +49 6103 70648-48 E-Mail: [email protected] Managing Directors: Monika J. Roth, Carlo Roth
Web Hosting & CDN
Hosting via Cloudflare Pages
We host our website with Cloudflare Pages, a service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA ("Cloudflare").
When you visit our website, Cloudflare automatically collects technical server log files to guarantee delivery speed, resilience, and security against attacks (DDoS mitigation). The following data is processed in this context:
- IP address of the requesting device
- Date and time of access
- Requested URL and volume of data transmitted
- Browser type, version, and operating system
- Referrer URL (the previously visited page)
The legal basis for this data processing is Art. 6 (1) (f) GDPR (our legitimate interest in the secure, stable, and performant provision of our website). Data transfer to the USA is conducted on the basis of the European Commission's Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework (DPF), under which Cloudflare is certified. We have concluded a Data Processing Addendum (DPA) with Cloudflare.
Data Security
SSL/TLS Encryption & Security Safeguards
For security reasons and to protect the transmission of confidential content, this website utilizes modern SSL/TLS encryption. You can recognize an encrypted connection by the browser's address bar changing from "http://" to "https://" and the lock icon displayed in your browser line.
We continuously maintain technical and organizational measures (TOMs) to safeguard your data managed by us against manipulation, loss, destruction, or unauthorized access.
Communication
Contact via Email or Phone
When you contact us via email or telephone, your inquiry including all resulting personal data (e.g. name, email address, phone number, matter) is stored and processed by us for the purpose of handling your request and in case of follow-up questions.
The legal basis for processing is Art. 6 (1) (b) GDPR if your contact serves the initiation or performance of a brokerage agreement. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6 (1) (f) GDPR). The data remains with us until you request erasure or the purpose for storage ceases to apply (subject to statutory retention duties).
Web Analytics
Traffic Analytics via Cloudflare Web Analytics
To optimize our website according to user needs, we employ Cloudflare Web Analytics. This service operates in a strictly privacy-preserving manner: it sets no cookies, accesses no local device storage, and conducts no cross-site tracking or profiling.
Only anonymized or aggregated metrics are collected (such as page load speeds, number of visits, device types) to assess the reliability and quality of our website.
The legal basis is our legitimate interest in a privacy-compliant measurement of website performance pursuant to Art. 6 (1) (f) GDPR.
Brokerage Services
Data Processing within our Intermediation and Advisory Mandates
When you become our client, we collect, process, and store your personal data (including financial, policy, and risk details as well as health data where relevant for personal lines) on the basis of the brokerage agreement concluded, the broker power of attorney, and a separate data protection consent form (Art. 6 (1) (b) and Art. 9 (2) (a) GDPR).
We document our activities thoroughly within our broker management system. Storage occurs for the duration of the advisory relationship and beyond in accordance with statutory retention periods under commercial and fiscal law (e.g. German Commercial Code HGB and Fiscal Code AO) as well as to observe limitation periods for liability claims.
Data Transmission
Categories of Recipients
A transmission of your data to third parties occurs strictly within the scope of executing our brokerage mandate, legal obligations, or with your explicit consent. Potential categories of recipients include:
- Insurance companies, benefit providers, and financial institutions to solicit quotes and administer policies
- Service providers for IT operations, cloud hosting, and broker management platforms under Data Processing Agreements (Art. 28 GDPR)
- Claims adjusters, experts, and legal counsel in claims or dispute proceedings
- Competent supervisory authorities and dispute resolution bodies in the event of statutory disclosure obligations
Under no circumstances is personal data transmitted to third parties for commercial advertising or marketing purposes.
Your Rights
Rights of Data Subjects (Art. 15–21 GDPR)
Under applicable statutory provisions, you possess the following rights at any time concerning your personal data processed by us:
- Right of access (Art. 15 GDPR): Right to obtain information regarding your processed data, purposes, and recipients.
- Right to rectification (Art. 16 GDPR): Right to prompt rectification of inaccurate data or completion of incomplete data.
- Right to erasure (Art. 17 GDPR): Right to erasure of your data ("right to be forgotten"), provided no statutory retention duties preclude this.
- Right to restriction of processing (Art. 18 GDPR): Right to demand restricted processing.
- Right to data portability (Art. 20 GDPR): Right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object (Art. 21 GDPR): Right to object at any time to processing on grounds relating to your particular situation.
- Right to withdraw consent (Art. 7 (3) GDPR): Any granted consent can be revoked at any time with effect for the future without formality.
To exercise your rights, an informal communication to our management suffices (contact details above). Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a data protection authority regarding our processing of your personal data. The competent supervisory authority for our company is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany Postfach 3163, 65021 Wiesbaden Telephone: +49 611 1408-0 · Fax: +49 611 1408-611 E-Mail: [email protected] Website: datenschutz.hessen.de