Privacy policy
1. Controller
The controller responsible for data processing on this website is:
RFI Gesellschaft für Investitionsberatung mbHWilhelmstr. 8
65185 Wiesbaden
Germany
Email: E-Mail
Phone / WhatsApp: +49 175 3034781
2. Principles
We process personal data only to the extent necessary to operate this website and to handle your enquiries. This website does not set cookies, does not use analytics or tracking services and does not embed third-party content. Fonts are loaded from our own server.
3. Hosting
This website is hosted by:
plusserver GmbHWelserstraße 14
51149 Köln
Germany
The host processes data solely on our behalf and in accordance with our instructions. A data processing agreement pursuant to Art. 28 GDPR is in place.
4. Server log files
When you visit this website, the server automatically stores information transmitted by your browser: IP address, date and time, page requested, amount of data transferred, referrer URL, browser and operating system. This processing serves the secure and stable operation of the website. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technical provision and security of the website. Log files are deleted automatically after seven days.
5. Enquiry form and email
If you contact us via the enquiry form or by email, we process the data you provide: company, name, business email address, country, the subject of your enquiry and optional details such as quantity, timeframe, delivery location and your message. We use this data solely to process your enquiry and to get in touch with you.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the conclusion of a contract, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in responding to business enquiries.
Form enquiries are sent to us by email and additionally stored in a protected enquiry log on the server. We delete the data once it is no longer required for processing your enquiry; the enquiry log is deleted automatically after six months at the latest. If your enquiry leads to a business transaction, we retain the correspondence for the statutory retention periods (six years for commercial and business letters under Section 257 of the German Commercial Code, HGB).
To protect against automated mass submissions, we derive a non-reversible check value from your IP address and use it to count enquiries per hour. The IP address itself is not stored; the check value is deleted after two hours at the latest (Art. 6(1)(f) GDPR).
If you message us via WhatsApp, you use the service of WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp processes your phone number and communication metadata; message content is end-to-end encrypted. Data may be transferred to the parent company Meta Platforms Inc. in the USA, which is certified under the EU-US Data Privacy Framework. We only use WhatsApp if you contact us through it yourself; the legal basis is Art. 6(1)(b) or (f) GDPR. If you prefer not to use WhatsApp, you can reach us just as well by email or phone.
6. Encryption
For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation (Art. 21). Please use the contact details given above.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und InformationsfreiheitGustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
9. Changes
We update this privacy policy whenever the website or the legal situation changes. Last updated: 2026