Privacy policy

Thank you for visiting our website and for your interest in Roto Dach- und Solartechnologie GmbH and our services. To make you feel safe and comfortable when visiting our website, we take the protection of your personal data and its confidential treatment very seriously.

With this information on data protection, we would therefore like to inform you when we store which data and for what purpose we use it - naturally in compliance with the applicable data protection regulations.

Should you have any further questions regarding the handling of your personal data, you are welcome to contact our Group Data Protection Officer, whose contact details you will find below.

Constant technological developments, changes in our services or the legal situation as well as other reasons may require adjustments to our data protection information. We therefore reserve the right to change this data protection declaration at any time and ask you to inform yourself regularly about the current status.

Basic information

Unless otherwise stated in the following sections, no personal data will be collected, processed or used when using our website.

When you access our website, our web servers automatically collect information of a general nature. This includes the type of web browser, the operating system used, the domain name of the Internet service provider, the IP address of the computer used, the website from which you visit us, the pages you visit on our site and the date and duration of your visit.

This data cannot be used by us to identify individual users. The information is only statistically evaluated by us and used exclusively to improve the attractiveness, content and functionalities of our web pages.

Concept of personal data

In the EU data protection basic regulation (DSGVO), personal data are defined as follows:

Any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier or one or more specific characteristics which are an expression of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Legal basis for the collection and processing of personal data

Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a DSGVO serves as the legal basis for the processing of your personal data.

When processing your personal data to fulfill a contract between you and Roto Dach- und Solartechnologie GmbH, Art. 6 para. 1 lit. b DSGVO serves as the legal basis. This shall also apply to processing operations necessary for the implementation of pre-contractual measures.

If the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing.

Data erasure and storage duration

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, storage can take place if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the person responsible is subject. The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless it is necessary for further storage of the data for the conclusion or performance of a contract.

Collection and processing of personal data

Personal data are only collected if you provide them voluntarily, for example to carry out an order, a survey, a competition or a registration for personalised services. There you will be informed about the intended processing purpose and, if necessary, asked for your consent to storage.

The personal data collected within the scope of our web pages will only be used without your consent for order processing or processing your enquiries and, if necessary, passed on to the responsible group company. Only with your consent will your data be used in a centrally managed customer and prospect database administered under the responsibility of Roto Frank AG and your data will be merged within the Roto Group. The use of this data is limited to advertising, market and opinion research purposes and is only possible for Roto Group companies in the EU. You can revoke your respective consent at any time with effect for the future.

Your data will be encrypted before transmission and processing in order to protect it from access by unauthorized persons. Please note that e-mails sent unencrypted are not transmitted with access protection.

Your data will not be sold, rented or made available to third parties in any way other than as described here. Personal data will only be transmitted to state institutions and authorities within the framework of mandatory national legal provisions. Our employees, agencies and dealers are committed to the strictest confidentiality.

My Roto login area

You have the possibility to create a customer profile with us. For the registration we collect and store the following data from you:  Title, first name, surname, street and house number, postcode, city, country, telephone, e-mail address, password.
After successful registration you will receive a personal, password-protected access and can view the data you have stored. Registration is voluntary and is therefore based on Art. 6 Para. 1 lit. a DSGVO, but may be a prerequisite for using our services.

Contact us

You have the possibility to contact us via our e-mail address, or by telephone. The personal data transmitted to us in this way will, of course, be used exclusively for the purpose for which you provided it when contacting us.

If we use our contact form to request information that is not required for establishing contact, we have always marked it as optional. These data serve us to concretize your inquiry and to improve the handling of your request. A communication of this information takes place expressly on a voluntary basis and with your consent. Insofar as this involves information about communication channels (e.g. e-mail address, telephone number), you also agree that we may contact you via this communication channel in order to respond to your request.

You can of course revoke this consent at any time for the future. Please contact our data protection officer, whose contact details you will find below.

Professional league login

You have the possibility to get a professional league login with us. For registration we collect and store the following data from you:

  • salutation
  • first name
  • Surname
  • E-Mail (Username)
  • membership number
  • password

After successful registration you will receive a personal, password-protected access and can view the data stored by you. Registration is voluntary, but may be a prerequisite for using our services.

Partner Finding Function

For the installation of our roof windows you can get displayed by entering your postal code professional partners in your area. We store the postal code collected in this way only for the purpose of the advertisement and do not pass the data on to third parties. The same applies to the search for specialist dealers in your area.

guarantee order

If you contact us with a warranty order, your details will be forwarded to one of our partner companies for processing, if necessary, if you have given us your consent to do so in the inquiry form. The forwarding serves the fast processing of your order.

Order clarification by telephone

If you contact us by telephone to clarify an order, we need the message number of your service order as mandatory information.

Service status query

You can check the status of your order online via our website. You will receive access data with the confirmation of receipt. The roofer responsible also has access to the status query of your order. In the context of the status inquiry no further personal data are raised by you. The data is only used for your and the roofer's insight into the processing of the transaction.

Service processing via App

Our service staff, who process the service order at your site, enter data on the processing of the order in the order data recorded in the app in order to record the status of the order and its processing. After completion of the order we need your digital signature to confirm the completion. You will then receive a completion message, which will be sent to the e-mail address you provided for processing the order or which will reach you by post.

After-warranty order / repair order

For post-guarantee orders / repair orders, we may call in additional external partner companies for order processing. The data transfer to third parties takes place only for the purpose of order processing.

satisfaction survey

After completion of the order, we will send you a satisfaction survey, which will be conducted via Participation in the satisfaction survey is voluntary. The personal data collected from you in this context serve to optimise our service process.


You can apply online at Roto Dach- und Solartechnologie GmbH via our application portal. Your online application will be forwarded directly to the personnel department via an encrypted connection and will of course be treated confidentially. We will of course only use your details to process your application and will not pass them on to third parties outside the Roto Group.

You will find further information on data processing within the scope of the application procedure in the data protection declaration of our application portal. If you have applied for a specific position and it has already been filled, or if we consider you to be suitable for another position as well or even better, we would like to forward your application within the company. Please let us know if you do not agree to a forwarding. Your personal data will be deleted immediately after completion of the application process, or after a maximum of 6 months, unless you have expressly given us your consent for a longer storage of your data.

Please note that we only offer the applicant portal for applications. Should you nevertheless apply to us by e-mail, we expressly point out that e-mail attachments are not encrypted. Data

transfer to other group companies

Your data will not be transferred to third parties outside the Roto Group unless we are legally obliged to do so, or unless the transfer of data is necessary for the execution of the contractual relationship, or unless you have expressly consented in advance to the transfer of your data. External service providers and partner companies receive your data only to the extent necessary to process your request. In these cases, however, the scope of the transmitted data is limited to the necessary minimum. Insofar as our service providers come into contact with your personal data, we ensure that they comply with the provisions of the data protection laws in the same way. Please also note the respective data protection information of the providers. The respective service provider is responsible for the content of external services, whereby we check the services for compliance with legal requirements within the scope of reasonableness.

Data transfer to external service providers (order processors)

Your data will be passed on to service partners if they are active on our behalf and support Roto Dach- und Solartechnologie GmbH in the provision of their services.

Your personal data will be processed by commissioned service providers within the framework of order processing pursuant to Art. 28 DSGVO.

The aforementioned service providers only receive access to such personal information that is necessary for the performance of the respective activity. These service providers are prohibited from disclosing your personal information or using it for other purposes, in particular for their own advertising purposes.

Insofar as external service providers come into contact with your personal data, we have taken legal, technical and organisational measures and carried out regular checks to ensure that they also comply with the applicable data protection regulations.

A commercial transfer of your personal data to other companies does not take place.

Website optimization tools

When collecting personal data via website optimisation tools, we invoke our legitimate interest pursuant to Article 6 para. 1 lit. f DSGVO in conjunction with Recital No. 47. According to this, direct advertising generally constitutes a legitimate interest. Your interests, fundamental rights and fundamental freedoms do not outweigh our interest in advertising, since we inform you comprehensively about the data collection in the context of our data protection declaration and you have the possibility of an opt-out (via link or browser settings) at any time. In addition, we only use pseudonymous tracking.


So-called cookies are used in some areas of our pages. A cookie is a small text file that is placed on your hard drive by a website. Cookies do not damage your computer and do not contain viruses. The cookies on our website do not collect any personal data. We use the information contained in cookies to make it easier for you to use our pages and to tailor them to your needs.

Both session cookies and permanent cookies are used on our site. Session cookies are temporary cookies that are stored in the user's Internet browser until the browser window is closed and the session cookies are deleted. Persistent cookies are used for repeated visits and are stored in the user's browser for a specific period of time (usually 1 year or longer). These cookies are not deleted when the browser is closed. This type of cookie is used to reuse a user's preferences as soon as they return to the site.

Of course you can also view our website without cookies. If you do not want cookies to be stored on your computer, you can deactivate the corresponding option in the system settings of your browser. You can delete stored cookies at any time in the system settings of your browser. You can find out how this works in detail from the instructions of your browser manufacturer. However, we would like to point out that our website may only be of limited use without cookies.

Google Analytics

This website uses Google Analytics. On behalf of the operator of this website, Google will evaluate your use of the website in order to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet.

Since the Hamburg Commissioner for Data Protection and Freedom of Information voted in favour of Google on the basis of the Düsseldorf Circle's decision to design analysis procedures for measuring the range of Internet services in accordance with data protection regulations, Google Analytics can be used in accordance with data protection regulations and without complaint under certain conditions. It goes without saying that we adhere to these requirements. In particular, we point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to guarantee an anonymised recording of IP addresses (so-called IP masking). Your IP address will be previously shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. Further information on the terms of use and data protection can be found at or at

Google Analytics also uses so-called "cookies". The information generated by the cookie about your use of this website will generally be transmitted to and stored by Google on servers in the United States. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser add-on. If you click here, an opt-out cookie will be set to prevent your data from being collected in the future when you visit this website: Deactivate Google Analytics.

Google Tag Manager

For reasons of transparency, we would like to point out that we use the Google Tag Manager. Google Tag Manager does not collect any personally identifiable information itself. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements used, among other things, to measure traffic and visitor behavior, capture the impact of online advertising and social channels, set up remarketing and targeting, and test and optimize Web sites. We use the Tag Manager for the Google services Google Analytics and GA Audience. If you've made a deactivation, the Google Tag Manager will take that deactivation into account. For more information about the Google Tag Manager, see:

Conversion measurement with the visitor action pixel of Facebook

We use the "visitor action pixel" of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") within our Internet presence. It allows us to track the actions of users after they have seen or clicked on a Facebook ad. This allows us to measure the effectiveness of Facebook advertisements for statistical and market research purposes. The data collected in this way is anonymous for us, i.e. we do not see the personal data of individual users. These data are however stored and processed by Facebook, about which we inform you according to our state of knowledge. Facebook may link this information to your Facebook account and may also use it for its own promotional purposes, in accordance with Facebook's Privacy Policy You can enable Facebook and its affiliates to serve ads on and off Facebook. A cookie can also be stored on your computer for these purposes.

This consent may only be given by users who are older than 13 years of age. If you are younger, please ask your parents or guardians for advice.

Google Analytics Remarketing

Our sites use Google Analytics Remarketing features in conjunction with the cross-device features of Google AdWords and Google DoubleClick. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This feature allows you to link advertising target groups created with Google Analytics Remarketing with the cross-device features of Google AdWords and Google DoubleClick. In this way, interest-related, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one terminal (e.g. mobile phone) can also be displayed on another of your terminals (e.g. Tablet or PC).

If you have given your consent, Google will link your web and app browser history to your Google Account for this purpose. In this way, the same personalized advertising messages can be displayed on any device on which you sign in with your Google Account.

To support this feature, Google Analytics captures Google-authenticated user IDs that are temporarily linked to our Google Analytics data to define and create target audiences for cross-device advertising.

You can permanently opt out of cross-device remarketing/targeting by opting out of personalized advertising in your Google Account by following this link:

The data collected in your Google Account is only collected on the basis of your consent, which you can give or revoke at Google (Art. 6 para. 1 lit. a DSGVO). In the case of data collection processes that are not merged into your Google Account (e.g. because you do not have a Google Account or have objected to the merging), the data collection is based on Art. 6 para. 1 lit. f DSGVO. The justified interest results from the fact that the website operator has an interest in the anonymous analysis of the website visitors for advertising purposes.

Further information and the privacy policy can be found in Google's privacy policy at:

Facebook Custom Audiences

The product Custom Audiences from Facebook (Facebook Custom Audiences1601 S. California Avenue, Palo Alto, CA, 94304, USA) is also used on the website as part of the usage-based online advertising. In principle, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which can be transmitted to Facebook for analysis and marketing purposes. A Facebook cookie is set. Information about your activities on the website (e.g. surfing behaviour, visited subpages, etc.) is collected. Your IP address is stored and used for the geographical control of advertising. For
further information about the purpose and scope of data collection and the further processing and use of the data, as well as privacy settings, please refer to Facebook's privacy policy.

Google reCaptcha

To protect our contact form against unwanted use, we use the service reCaptcha of the company Google Inc.
This service makes it possible to distinguish whether the input is made by a human or abusive and automated by a machine (spambot). For this purpose, your IP address and any other data required by Google Inc. for the reCaptcha service will be transmitted to Google Inc. These data are subject to the different privacy policies of Google Inc. You can find them at:

Social Bookmarks

So-called social bookmarks (Facebook, YouTube, Twitter, Xing) are integrated on our website. Social bookmarks are Internet bookmarks with which the users of such a service can collect links and news messages. These are integrated on our website only as a link to the corresponding services. After clicking on the integrated graphic, you will be forwarded to the page of the respective provider, i.e. only then will user information be transferred to the respective provider. Please refer to the respective data protection regulations of the providers for information on the handling of your personal data when using these web pages.

data security

Roto Dach- und Solartechnologie GmbH uses technical and organisational security measures in order to protect your data administered by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved in line with technological developments.

Rights of data subjects

If personal data is processed by you, you are the data subject within the meaning of the DSGVO and you are entitled to the following rights vis-à-vis the person responsible:

  • Right of access under Article 15 DSGVO

You may request confirmation from us as to whether personal data relating to you will be processed by us. If we have processed data from you, you are entitled to further information rights as specified in Article 15 DSGVO.

  • Right to rectification

If your data which we have collected from you is incorrect or incomplete, you can demand immediate correction from us in accordance with Article 16 DSGVO.

  • Right to limitation of processing

Subject to the requirements of Article 18 DSGVO, you may also request that the processing of your personal data be restricted under certain circumstances.

After the limitation, your data may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State. We will inform you before the restriction is lifted.

  • Right to deletion

If one of the reasons for Article 17 (1) DSGVO applies, you can demand that we delete your personal data immediately, unless there is an exception to the deletion obligation under Article 17 (3) DSGVO.

  • Right to information

If you have asserted the right to correction, deletion or restriction of processing against us, we are obliged pursuant to Article 19 DSGVO to notify all recipients of your personal data, unless the notification is impossible or involves disproportionate effort. They also have the right to be informed of the recipients. They shall have the right vis-à-vis the person responsible to be informed of such recipients.

  • Right to data transferability

Furthermore, according to Article 20 DSGVO, you have the right to receive from us the personal data concerning you in machine-readable format and to transfer the data to another responsible person without hindrance, provided that the requirements of Article 20 para. 1 lit.a DSGVO are met, or to have your personal data transferred directly by us to another responsible person, insofar as this is technically feasible and no freedoms and rights of other persons are impaired thereby. This right shall not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or for the exercise of official authority.

  • right of objection

You have the right to object to the processing of your personal data by Roto Dach- und Solartechnologie GmbH in accordance with Art. 6 Para. 1 lit. f DSGVO at any time.

We will no longer process your personal data unless there are legitimate reasons for the processing outweighing your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

  • Right to revoke the declaration of consent under data protection law

You have the right at any time to revoke your declaration of consent under data protection law with a declaration to Roto Dach- und Solartechnologie GmbH. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.

  • Right of appeal to the supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall at all times have the right to complain to a supervisory authority, in particular in the Member State in which you are staying, at your place of work or at the place where the alleged infringement was committed, if you consider that the processing of your personal data is contrary to this Regulation.

Changes to the Privacy Policy

This data protection declaration is continuously adapted in the course of the further development of the Internet or our offer. Changes will be announced on this page in good time. This page should be consulted regularly in order to obtain information on the current status of our data usage regulations.

data security engineer

Data protection officer
c/o Roto Frank AG
Wilhelm-Frank-Platz 1
70771 Leinfelden-Echterdingen


Contact details of
Roto Dach- und Solartechnologie GmbH
Wilhelm-Frank-Straße 38-40
97980 Bad Mergentheim
Phone: +49 7931 5490 0
Fax: +49 7931 5490 50

Managing Director:
Christoph Hugenberg
Stephan Hettwer