Privacy Policy
Detailed information on the processing of your personal data.
Data Protection Policy – General Section
We know how important privacy is to our customers and visitors to our website. Our data protection policy aims to clearly and transparently describe how we collect, use, display, transfer, and store your data and information, so that you can be assured that your personal data is protected and processed correctly.
We carry out all personal data processing in accordance with applicable data protection legislation (GDPR).
Processing of Personal Data
CH FINNANZ, hereinafter "we", processes your personal data to provide you with our services and allow you to use them. The processing of this data depends on the service you have chosen.
If you wish to consult the terms of use of our brokerage services, please refer to the General Conditions section. If you wish to consult the employee benefits agreement, please refer to your contract.
By using the brokerage services, for example by visiting our website or applying for a loan or insurance, you confirm that you have read and understood the data protection policy of CH FINNANZ.
CH FINNANZ retains information about your use of our services, for example, the application channel used, the date of application, the dates of our communications with you, and their subject matter.
If you apply for a loan, insurance, or compare your contracts through the services of CH FINNANZ, we will transmit your personal data to the lending entities and insurance companies associated with our service and related to your application. These entities are controllers of the personal data processing they carry out within the scope of your application. We invite you to carefully consult their privacy policies.
When we provide a link to a website belonging to a third party, this reference is intended solely to provide a service to the user, and we disclaim all liability regarding that third-party website and the personal data processing carried out by said third party.
Data Controller
The data controller for services is:
CH FINNANZ
.
In this data protection policy, we explain how your personal data is processed for each service and within the framework of the common customer database.
Processing and Legal Basis
We collect information about you as a customer to, among other things, offer you our services and fulfill our commitments. The information collected varies depending on the service used.
The processing of personal data must be based on a legislative foundation, called a legal basis.
Legal Basis
For the processing of your personal data to be lawful, it must be necessary:
- (i) for the performance of our contract with you, or
- (ii) for compliance with a legal obligation to which we are subject.
Processing can also be based on:
- (iii) a balance of interests / legitimate interest, or
- (iv) your consent for a particular processing.
When the processing of your data is necessary for the purposes of the legitimate interests of CH FINNANZ or of a third party, we may process your personal data taking into account the balancing of these interests. These interests include the commercial interest of maintaining a quality relationship with the customer, providing relevant information for your use of our services, improving and developing the latter, and promoting our services.
What personal data is collected?
Below you will find more detailed information on the categories of personal data we collect, the processing we carry out, its purposes, and its legal basis:
1. Personal and Contact Information
Certain information you provide to us when you use one of our services, such as your personal and contact details (name, address, phone number, and email address), as well as certain information we collect about you within the framework and/or after the submission of your application (for example, updating your personal information or supplementary information via external registers).
Example: Name, social security number/ID, address, phone number, and email.
Finalidad: We need this information to provide our services to you. It also allows us to communicate with you, present offers, conduct direct marketing, develop and ensure the proper functioning of our services, ensure information security, provide customer service, prevent misuse of our services, and comply with our legal obligations.
Base jurídica: Performance of our contract with you and compliance with legal obligations and/or our legitimate interests.
Information Sharing: Your email address and phone number may be shared with providers to promote our services.
2. Company Information (if applicable)
If you act on behalf of a company, we also collect information about it.
Example: Registration number (VAT/Tax ID), name, address, your position.
Base jurídica: Performance of our contract and compliance with legal obligations.
3. IP Address, Cookies, and Technical Data
We also retain information about your use of our services, such as the application channel used, the date of application, the dates and times of our communications with you.
Example: Your browsing, pages visited, device type, IP address.
Finalidad: We use your IP address to identify you and recognize your settings in order to offer you a better user experience, for administrative purposes, and to prevent fraud.
Base jurídica: Legitimate interest and consent (for cookies).
4. Credit and Debt Information
We may also collect information about your creditworthiness and/or income. When applying for a loan, we will request a credit report on you from authorized agencies (e.g., Credit Bureaus).
Finalidad: This information is processed so that we can transmit your application to the corresponding lender. Without this information, we unfortunately cannot offer you our brokerage services.
Base jurídica: Performance of our contract with you.
5. Application Information
The information required for your application may include various details necessary for the provision of the specific service you have requested.
Example: Income, employer, bank account number, loan amount, loan purpose, PEP status (Politically Exposed Person).
Finalidad: This data allows us to prepare and send an application to our partners, as well as to fight against money laundering and fraud. For any loan application, the law requires us to declare if you are a politically exposed person.
Base jurídica: Ejecución de nuestro contrato y obligaciones legales.
6. Third-Party Data
We may also obtain information from third parties, such as data brokers or publicly accessible sources, to ensure the quality of our data.
Base jurídica: Performance of our contract and/or legitimate interest.
Transfer of Personal Data to Third Parties
We will not share, sell, transfer, or otherwise disclose your personal information beyond what is stated in this privacy policy, unless required by law or a court order, or if we have received your consent for such disclosure.
CH FINNANZ may disclose personal data to third parties, such as the police or other authorities, if it relates to an investigation into a suspected crime or if we are required to disclose this information by law.
We may use external providers to perform tasks on our behalf, for example, to provide IT or marketing services. These providers process your personal data on our behalf in accordance with written data processing agreements.
Where is my data processed?
Your personal data will be shared with our partners to provide our services to you. Be assured that we will never sell your personal data to third parties for marketing purposes without your consent.
Transfer to a third country: We strive to always process your personal data within the EU/EEA. If we use providers located outside the EU/EEA (e.g., cloud services like Amazon Web Services or Google), we take appropriate protection measures (standard contractual clauses) to ensure that the data is protected.
What is personal data used for?
- Provision of our services: To confirm your identity (Anti-Money Laundering), prepare your application, and transmit it to our partners.
- Communication with you: By mail, phone, SMS, email, or chat to inform you about your file.
- Direct marketing: To offer you similar services. You can opt out at any time.
- Marketing via external platforms: We use advertising platforms (Google, Meta) to create custom audiences.
- Developing our services: Analyzing trends to improve our products.
- Seguridad: Preventing misuse of our services, fraud, and money laundering.
- Legal obligations: Complying with accounting law and legislation regarding brokerage.
- Call recording: For training purposes, quality assurance, and contractual proof.
Protection and Automated Decision Making
We prioritize security and protect your data in accordance with the General Data Protection Regulation (GDPR) through technical (encryption) and organizational solutions.
Automated Decision Making
"Automated decision making" is a decision made exclusively based on the automated processing of your data (algorithm).
Information regarding payment disputes automatically entails that your application is transmitted only to partner credit agencies that accept this profile. The information you provide is automatically compared with the requirements of each partner (income, age, employment).
If you are not satisfied or have objections regarding a decision made by an automated process, you can request a review of the decision by contacting our customer service.
Your rights as a data subject
As a data subject, you have several rights:
- Right of access: To receive a copy of your data.
- Right to rectification: To correct inaccurate data.
- Right to object: To object to processing (especially for marketing).
- Right to restriction: To request limiting processing in certain cases.
- Right to erasure ("Right to be forgotten"): To obtain the deletion of your data if they are no longer necessary, unless there is a legal obligation to retain them.
- Right to data portability: To retrieve your provided data in a structured format.
Retention Period
Personal data is not processed for a longer period than necessary or required by law.
- Comparisons and offers: 12 months.
- Contact information and logs: 12 months.
- Documents relating to insurance brokerage: 10 years + 1 year.
- Loan applications and anti-money laundering: 10 years.
- Marketing data: 36 months after the last activity.
- Accounting documents: 6 years.
Complaints and DPO Contact
If you have comments or believe we have processed your data incorrectly, you can contact our Data Protection Officer (DPO).
Contact details:
CH FINNANZ
Attn. Data Protection Officer
Email: kontakt@ch-finnanz.com
In Spain, the supervisory authority is the AEPD. To learn more about data protection, consult: https://www.aepd.es
I no longer want marketing, what should I do?
If you do not wish to be contacted for marketing purposes, you can request to be blocked by contacting us at the email address above.
Update
We reserve the right to modify this information at any time. The most recent version is always available on our website.
Published on 14/03/2026
