I General information about data processing
General Data Protection Regulation (GDPR) - scope of data processing
Personal data that you disclose when visiting our website is processed in accordance with the provisions of the General Data Protection Regulation (GDPR) and all other applicable statutory provisions.
- Legal basis
If the processing of personal data is required to protect a legitimate interest of Deutsche Leasing AG or a third party and this interest is not overridden by the interests, fundamental rights and freedoms of the data subject the legal basis for processing is Article 6 (1) (f) GDPR.
- Data erasure and storage period
The personal data of the data subject is deleted or blocked as soon as the purpose of storage is achieved.
II Providing the website and creation of log files
- Description, scope and legal basis of data processing
Every time our website is accessed our system automatically collects data and information from the computer system accessing our website. The following data is collected:
(1) Information about the browser type and the version used
(2) The user's operating system
(3) The user’s ISP
(4) The user's IP address
(5) Date and time of access
(6) The websites visited by the user's system before our website was visited
(7) The websites that the user's system travelled to from this website
This data is stored in our system as log files. This data is not stored together with other personal data of the user.
- Legal basis for processing data
The legal basis for the temporary storage of data and log files is Article 6 (1) (f) GDPR.
- Purpose of processing data
The temporary and short-term storage of the user's IP address by the system is necessary to facilitate the delivery of the website to your computer. To do so, the user’s IP address must remain stored for the duration of the session.
Log files are stored to ensure the functionality of the website. In addition, the data serves to optimise the website and ensures the security of our IT systems. The data is not evaluated for marketing purposes.
These purposes also form the basis of our legitimate interest for data processing in accordance with Article 6 (1) (f) GDPR.
Storage period
The data is deleted at the end of the respective session. Web server log files are stored for 90 days and then for 30 consecutive days on back up tapes. The user’s IP address is deleted or anonymised so that assignment to the requesting client is no longer possible.
- Objecting to processing, eliminating data
Collecting data to display the website and storing data in log files is absolutely necessary to operate the website. Consequently, the user may not object to such processing.
III Use of cookies
Description and scope of data processing
This website uses temporary website cookies in order to analyse the usage of the website and to optimise the website for you. We use cookies to improve the user-friendliness of this website. Some elements of this website require your browser to be identified even after changing websites. The following data is stored and transmitted in cookies: Language settings and log-in information. Cookies are small text files which are stored in/by the Internet browser on the user's computer system. When a user accesses a website a cookie may be stored on the user’s operating system. Cookies are not part of your system and cannot cause any harm. Most browsers are set up to accept cookies automatically. The cookie in the user's system enables a clear identification of the browser when the website is accessed another time, which simplifies usability.
You can deactivate the automatic storage of cookies or set up your browser to inform you about the usage of cookies or to reject cookies. All functions of our website may be used without cookies. If you deactivate cookies this may restrict the functioning of our website.
Legal basis for processing data
The legal basis for processing personal data using cookies is Article 6 (1) (f) GDPR.
Purpose of processing data
Cookies which are technically necessary are used to make it easier for users to use websites. Some features of this website may not be able to be offered without the usage of cookies. For their functioning, your browser must be re-identified even after going to another website.
The following applications require cookies:
(1) Logging in
(2) Saving language settings
(3) Noting search terms
Analysis cookies are used for the purpose of improving the quality of this website and its contents. These analysis cookies show us how the website is used and therefore allow us to continually optimise the services we provide. These purposes also form the basis of our legitimate interest for processing personal data in accordance with Article 6 (1) (f) GDPR.
Storage period, objecting to processing, eliminating data
Cookies are stored on the user’s computer and transmitted to our website. Therefore the user has complete control over the use of cookies. By changing your Internet browser settings you can deactivate or restrict the transmission of cookies. Cookies that have already been stored may be deleted at any time. This can also happen automatically. If cookies are deactivated for our website this may mean that you are no longer able to fully use all the functions of the website. You can adjust the website-specific cookie settings in the Data Privacy settings and change or revoke your consent at any time from the cookie declaration on our website.
IV Contact form and contact by email
- Description and scope of data processing
There is a contact form on our website that may be used to contact us electronically. If a user uses this form the data entered in the entry fields is transmitted to us and stored.
(1) The user's IP address
(2) Date and time of registration
Your consent to processing the data is obtained as part of sending your message and reference is made to this Privacy Policy. Alternatively, you may contact us using the provided email address. In this case the personal data of the user transmitted with the email is stored. This data is not transmitted to third parties in this context. The data is solely used for processing your enquiry.
- Legal basis for processing data
The legal basis for processing data with the user’s consent is Article 6 (1) (a) GDPR.
The legal basis for processing data transmitted in the course of sending an email is Article 6 (1) (f) GDPR. If this email contact is aimed at concluding a contract, the additional legal basis for processing is Article 6 (1) (b) GDPR.
- Purpose of processing data
Personal data entered into the entry fields of the contact form is solely used to process your enquiry. If you contact us by email this is also the basis of our required legitimate interest in processing the data.
Other personal data is processed as part of sending your message to prevent any misuse of the contact form and to ensure the security of our IT systems.
- Storage period
Data is deleted when it is no longer required to fulfil the purpose for which it was collected. This is the case for personal data entered into the entry fields of the contact form and personal data sent by email when the respective dialogue with the user is finished. The dialogue is finished if it can be inferred from the circumstances that the inquiry has been settled. Additional data collected during the process of sending messages are deleted after seven days at the latest.
- Objecting to processing, eliminating data
The user may withdraw his consent to the processing of his personal data at any time. If the user has contacted us by email, he may object to the storage of his personal data at any time with future effect. In such a case the dialogue can no longer be continued.
Requests for information or inquiry, any withdrawals of previously given consent and any objections to the processing of your data should be sent by email to
service@deutsche-leasing.com
or to the address given in the Legal Notice. We ensure that all personal data which was saved as part of contacting us is then deleted.
IV a. Newsletter and electronic notifications
We send newsletters, e-mails and other electronic notifications (hereinafter referred to as "newsletters") only with the consent of the recipients or a legal permission. If the contents of the Newsletter are specifically described in the context of a registration, they are decisive for the consent of the users. Otherwise, our newsletters contain information about our services and us.
In order to subscribe to our newsletters, it is generally sufficient to provide your e-mail address. However, we may ask you to provide a name, for the purpose of personal address in the newsletter, or further information, if this is necessary for the purposes of the newsletter.
Double opt-in procedure: The registration for our newsletter is always carried out in a so-called double opt-in process. This means that after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Likewise, changes to your data stored with the dispatch service provider are logged.
Deletion and restriction of processing: We may store unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before deleting them in order to be able to prove consent previously given. The processing of this data will be limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time. In the case of obligations to permanently observe objections, we reserve the right to store the e-mail address in a block list (so-called "block list") for this purpose alone.
The logging of the registration process takes place on the basis of our legitimate interests for the purpose of proving its proper course. If we commission a service provider to send e-mails, this is done on the basis of our legitimate interests in an efficient and secure sending system.
Notes on legal basis: The newsletter is sent on the basis of the recipients' consent or, if consent is not required, on the basis of our legitimate interests in direct marketing, if and to the extent that this is permitted by law, e.g. in the case of existing customer advertising. Insofar as we commission a service provider to send e-mails, this is done on the basis of our legitimate interests. The registration process is recorded on the basis of our legitimate interests to prove that it was carried out in accordance with the law.
Content: Information about us, our services, promotions and offers.
Condition of receiving free services: Consent to the sending of mailings may be made conditional as a prerequisite to the use of free services (e.g. access to certain content or participation in certain promotions). If you would like to take advantage of the free service without subscribing to the newsletter, please contact us.
-
Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), meta/communication data (e.g. device information, IP addresses), usage data (e.g. websites visited, interest in content, access times).
-
Data subjects: Communication partners, users (e.g., website visitors, users of online services).
-
Purposes of processing: direct marketing (e.g., by e-mail or postal mail), provision of contractual services and customer service.
-
Legal basis: consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
-
Opt-out: You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can otherwise use one of the above contact options, preferably e-mail, for this purpose.
Hubspot CRM
We use Hubspot CRM on this website. The provider is Hubspot Inc. 25 Street, Cambridge, MA 02141 USA (hereinafter referred to as Hubspot CRM).
Hubspot CRM enables us, among other things, to manage existing and potential customers as well as customer contacts. Using Hubspot CRM, we are able to capture, sort, and manage customer interactions via email, social media, or phone across multiple channels, sorting and analyzing them. The personal data collected in this way can be evaluated and used for communication with the potential customer or for marketing measures (e.g. newsletter mailings). With Hubspot CRM, we are also able to record and analyze the user behavior of our contacts on our website.
The use of Hubspot CRM is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in the most efficient customer management and customer communication possible. Insofar as a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a DSGVO; consent can be revoked at any time.
For details, please refer to Hubspot's privacy policy: https://legal.hubspot.com/de/privacy-policy.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.hubspot.de/data-privacy/privacy-shield
V Web analysis by google analytics (tracking tool)
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) we use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transferred to a Google server in the USA and stored there.
Google will use this information on our behalf in order to evaluate the use of our website by users, to compile reports on the activities within this website and to provide us with further services associated with the use of this website and the Internet. The processed data can be used to create pseudonymous user profiles of the users.
We only use Google Analytics with activated IP anonymisation. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by adjusting their browser software accordingly.
Further information on the use of data by Google, setting and objection options, can be found in the Google privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).
V a. Web analysis by Hotjar
We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.
For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
VI Links to external providers
As far asour website contains links to websites from third parties, this Privacy Policy does not apply to the content of the other websites. The Deutsche Leasing Group is unaware of data collected by the operators of those websites asthis goes beyond our legal reach. Please see the Privacy Policy of the respective websites for information.
VII Datenschutz für Social Media
-
Datenschutz für unsere LinkedIn-Seite+
-
Datenschutz für LinkedIn - LinkedIn Tracking und LinkedIn Insight Tags
Diese Webseite nutzt LinkedIn Conversion Tracking von LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Irland („LinkedIn"). LinkedIn Conversion Tracking ist ein Retargeting- und Analysetool, welches durch das LinkedIn Insight Tag unterstützt wird. Das Insight Tag bewirkt, dass bei Besuch der Webseite ein Cookie in Ihrem Webbrowser abgelegt wird. Das Insight Tag ist auf dieser Webseite integriert und ermöglicht die Erfassung von Daten wie Ihrer IP-Adresse, die Zeit des Aufrufs dieser Webseite oder die Erfassung von definierten Ereignissen (wie z.B. Downloads oder Seitenaufrufe). Außerdem können Ihnen interessenspezifische und relevante Angebote und Empfehlungen angezeigt werden, die davon abhängen, über welche Services, Informationen und Angebote Sie sich auf unserer Webseite informiert haben. Ferner kann LinkedIn dadurch Statistiken mit aggregierten Daten über die Nutzung und den Besuch unserer Webseite zusammenstellen. Das vom Insight Tag in Ihrem Browser abgelegte Cookie verbleibt dort, bis es manuell von Ihnen gelöscht wird oder nach dem letzten Laden des Insight Tags automatisch gelöscht wird.
Sie können die Speicherung von Cookies generell über die Einstellung Ihres Webbrowsers verhindern. Falls Sie LinkedIn-Mitglied sind, klicken Sie dazu auf das Feld „Opt-out on LinkedIn“. Nicht-Mitglieder klicken auf „Opt-out“. Weitere Informationen zum Datenschutz bei LinkedIn finden Sie hier.
-
Datenschutz für unsere Meta-Seiten+
-
With your consent in accordance with Art. 6 para. 1 lit. a) GDPR this website uses technology provided by Meta Platforms Ireland Ltd. This enables Meta Platforms Ireland Ltd., on behalf of Deutsche Leasing AG, to track the behaviour of users by using a pixel after the users have been redirected to the provider's website by clicking on a Facebook ad. This is to enable evaluating the effectiveness of Facebook advertisements and can help to optimize future advertising measures. The data collected is generally anonymous to us and does not allow us to draw any conclusions on the identity of the user. However, the data is stored and processed by Facebook so that a conclusion to a respective user profile can be drawn and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage guidelines. You can enable Facebook and its partners to place adverts on and outside Facebook. A cookie may also be stored on your computer for this purpose. By giving your consent, you also consent to your data being processed in the United States of America (“United States”) in accordance with Art. 49 para. 1 sentence 1a) GDPR. On 10 July 2023, the European Commission adopted the adequacy decision for the EU-U.S. Data Privacy Framework (successor to the "Privacy Shield"), certifying that the United States have an adequate level of data protection. The adequacy decision can now serve as the basis for data transfers to certified organizations in the United States. With the adequacy decision, personal data can be transferred from the EU to the United States without the need for further transfer instruments or additional measures. However, this only applies if the organization to which the data is transferred is also certified under the EU-U.S. Data Privacy Framework.
If you do not give your consent, the transfer described above will not take place.
VIII Informationsanwendungen anderer Anbieter
-
Datenschutz für Microsoft Advertising (Bing)+
-
We use Universal Event Tracking (UET) on our website via the services of Microsoft Corporation (One Microsoft Way - Redmond, WA 98052-6399, USA). Via UET, Microsoft stores a cookie in the user’s browser in order to collect and store data on this website for marketing and optimization purposes. For this purpose, your surfing behaviour on our website is analyzed, e.g. which offers you have viewed. The prerequisite for this is that the user has reached our website via an advert from Microsoft. This JavaScript code enables Microsoft to use cookies to collect pseudonymized data about your visit and the usage of our online offerings (e.g. about the browser session and the website displayed) and to provide us with aggregated, non-personal statistics on this basis (e.g. how many visitors have visited a specific target page). This allows us to track the actions that have taken place after an advert from Microsoft Advertising has been viewed or clicked on. The legal basis for this processing is your consent, pursuant to Art. 6 para. 1 lit. a) GDPR, where given.
You have the option to withdraw your consent to the processing of personal data at any time with effect for the future. Please see also section 10 of this privacy policy. You can also prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by clicking on the following link https://choice.microsoft.com/de-DE/opt-out.
Further information on data protection and the cookies used by Microsoft and Bing can be found on the website of Microsoft at https://privacy.microsoft.com/de-de/privacystatement.
Microsoft also processes your data in the United States of America (“United States”). Information on the processing of your data collected on this website in the United States by Microsoft Corp.:
By providing your consent, you also consent to your data being processed in the United States in accordance with Art. 49 para. 1 sentence 1 lit. a) GDPR. On 10 July 2023, the European Commission adopted the adequacy decision for the EU-U.S. Data Privacy Framework (successor to the "Privacy Shield") and certified that the United States have an adequate level of data protection. The adequacy decision can now serve as the basis for data transfers to certified organizations in the United States. With the adequacy decision, personal data can be transferred from the EU to the United States without the need for further transfer instruments or additional measures. However, this only applies if the organization to which data is transferred is also certified under the EU-U.S. Data Privacy Framework.
If you do not give your consent, the transfer described above will not take place.
-
Datenschutz für Outbrain+
-
Diese Website nutzt die Technologie von Outbrain Inc. ("Outbrain"). Outbrain gibt Empfehlungen über sein Netzwerk von Publishern, die von einem Werbetreibenden bezahlt werden können. Wenn Sie Ihre Zustimmung erteilen, gibt Outbrain Empfehlungen ab, die darauf basieren, wie Sie mit Inhalten interagieren, auf denen Outbrain installiert ist. Diese Empfehlungen und Anzeigen erscheinen nur auf Outbrain-Werbeflächen, entweder auf Outbrain Engage-Werbeflächen oder auf Outbrain Extended Network.
-
Datenschutz für Welect+
-
Diese Website nutzt mit Ihrer Einwilligung gem. Art 6 I Iit., a) DSGVO die zur Verfügung gestellte Technologie von Virtual Minds GmbH. Diese ermöglicht es der Welect GmbH im Auftrag der Sparkassen-Finanzgruppe sowie deren Verbundpartnern mittels des Einsatzes eines Pixels ein Postclick- Tracking zu vollziehen. Dieses Postclick- Tracking misst, wie viele Benutzer nach dem Klick ein Produkt gekauft, ein Formular ausgefüllt oder eine bestimmte Seite besucht haben. Bei der Verarbeitung dieser Daten ist die Welect GmbH ausschließlich verantwortlich. Weitere Informationen zur Datenverarbeitung durch Welect gem. Art. 12, 13 und 21 DSGVO erhalten Sie mittels der Datenschutzhinweise über den eingefügten Hyperlink.
Information about google maps
-
Google Maps+
-
For this website Google Maps is used to display maps. This allows interactive maps to be displayed directly on the website and enables the use of the map function. The map function of Google Maps uses persistent cookies. By visiting the subpage of this website where Google Maps is used, Google receives the information that you have visited the corresponding subpage. In addition, the data referred to in section II. 1. will be transmitted to Google.
This occurs regardless of whether you are logged in via a Google user account. If you are logged in at Google, your data will be assigned to your Google user account. If you do not wish to be assigned to a Google user account, you must log out before you can use the map function. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing needs-based advertising and to inform other users of the social network about your activities on this website. You have a right of objection to the creation of these user profiles, whereby you must contact Google in order to exercise this right.
For further information on the purpose and scope of data collection and its processing by Google, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.
Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Rights of the data subject (“Data protection information - How we deal with your data and your rights - Information pursuant to Articles 13 and 14 General Data Protection Regulation (GDPR))
Beyond the website, we also generally process personal data within the context of business relationships. Information on such data processing and on your claims and rights in respect of data protection law – some of which also concerns data processing on our website – is available in our Data Privacy Notice. (in german language)
Information about the following topics can be found there:
- Who is responsible for processing data and whom may I contact?
- What sources and data do we use?
- Why do we process your data (purpose of processing) and what is the legal basis for this?
- To fulfil our contractual obligations (Article 6 (1) (b) GDPR)
- Within the framework of balancing interests (Article 6 (1) (f) GDPR)
- On the basis of your consent (Article 6 (1) (a) GDPR)
- On the basis of statutory requirements (Article 6 (1) (c) GDPR)
- Who receives my data?
- How long is my data stored for?
- Is data transmitted to a third country or to an international organisation?
- What rights do I have under data protection law?
- Am I obliged to provide data?
- To what extent is automated individual decision-making activated?
- To what extent is my data be used for profiling (scoring)?
Data protection officer
If you have any questions about the processing of your personal data or about data protection in general, please contact the data protection officer, who is also available to deal with complaints:
Deutsche Leasing AG
Frölingstraße 15-31
61352 Bad Homburg vor der Höhe
datenschutz@deutsche-leasing.com
