Cookie and privacy policy

Data Protection and Cookie Policy of DirectLease GmbH

This Data Protection and Cookie Policy was last updated on October 17, 2024.

DirectLease.de GmbH (hereinafter: DirectLease) is a company of International Car Lease Holding, part of the Van Mossel Automotive Group.

Your privacy is of great importance to us. We therefore comply with relevant laws and regulations regarding data protection, including the General Data Protection Regulation (hereinafter: GDPR). This means that we:

• Clearly define our purposes in this privacy statement before processing your personal data;

• Store as little personal data as possible, only the data necessary for our purposes;

• Explicitly request your consent if required to process your personal data;

• Take the necessary security measures to protect your personal data. We also impose these obligations on parties that process personal data on our behalf;

• Respect your rights, such as the right to access, correct, or delete your personal data processed by us.

For What Purposes Do We Use Your Personal Data?

In this Data Protection and Cookie Policy, we explain what we do with the information we receive about you. By using our services or visiting our website www.directlease.de, we receive various types of personal data from you. For each purpose, we specify which data we receive from you, for what purpose we process these data, and how long they are stored. If you have any questions or would like to know exactly what data we store about you, please feel free to contact us. The contact details can be found at the bottom of this privacy statement.

Contact and Complaint Handling

If you send us an email, fill out the contact form on the website, contact us by phone, or otherwise get in touch with us, you are contacting us based on our offer. We process your data based on contract fulfillment.

For this purpose, we process the following personal data:

• Name, address, place of residence (NAW data)

• Business information

• Contact details (email address and telephone number)

• Any information you provide as the content of a message

We store these contacts with the personal data you provide to handle the contact and, if necessary, to process your complaint. We retain this information as long as it is necessary for the contact, as we want to ensure that we have properly handled your question or complaint.

Account Creation and Login

It is possible to create an account on our website www.directlease.de. With your account, you can request a non-binding offer and subsequently place an order. When you create an account with us, you leave certain information. We process your personal data based on contract fulfillment.

For this purpose, we process the following personal data:

• Name

• Company name

• Contact details (email address and telephone number)

• Password

We store these data for up to 5 years after your last login. Some data are stored longer if we are legally obliged to do so (e.g., due to the tax retention obligation of 7 years).

Offers

You can request an offer via our website www.directlease.de. For this purpose, we process certain data to create the offer. This is done based on contract fulfillment.

For this purpose, we process the following data:

• First and last name

• Company name

• Email address

• Telephone number

• Vehicle configuration options

• Contract options

We retain these data for 12 months after sending the offer. For the data we need for our accounting, the statutory tax retention obligation of 7 years applies.

When Can We Share Your Personal Data with Third Parties?

We only share your data with third parties if this is legally permitted. It may happen that we share your personal data with third parties because:

• we have commissioned them to process certain data;

• we have a legal basis for doing so;

• we are legally obliged to do so (e.g., if the police require it in case of suspicion of a crime).

The parties that process personal data on our behalf or on your behalf are:

• IT providers and service providers

• Hosting providers

• Suppliers of aids

• Telecommunications providers

• Cookie service providers

• Payment service providers and collection agencies

• Marketing companies

• Review platforms

• Partners

• External consultants and brokers

• Government agencies (e.g., the tax office, municipalities)

Some of our suppliers are located outside the European Economic Area (EEA). In this case, we ensure that appropriate safeguards are in place to protect your privacy.

This Data Protection and Cookie Policy applies exclusively to the services of DirectLease. We are not responsible for the privacy policies of other websites that are accessible via a link on our website.

Social Media Buttons

On our website, we use social media buttons that redirect you to the respective social media platforms. This allows you to follow us and share content within the network. You will also see advertisements on your social media page. The buttons work based on codes that come from the social media networks. If you want to know what the social media platforms do with your personal data, please read the respective privacy statement:

• Facebook

• X

• LinkedIn

Cookies

On our website, we use cookies from ourselves and from third parties. Cookies are information files that are automatically stored on or read from the visitor's device (e.g., PC, tablet, or smartphone) when visiting a website. This is done via the web browser on the device.

We use the following types of cookies:

• Functional cookies: These cookies have a functional role on the website. They ensure that the website functions properly.

• Analytical cookies: These cookies give us insights into the use of our website. Based on this information, we can make our website more user-friendly.

• Marketing cookies: These cookies allow us to show you personalized advertisements (via our advertising partners).

The cookies can, among other things, collect the following data from you:

• Name

• Login information

• Display options

• IP address

• Cookie ID

• Website and click behavior

• Referrer URL

• Behavior within the application

When you visit our website for the first time, we show a message with an explanation about cookies. In doing so, we will ask for your consent to the use of cookies, if we are required to do so.

In the following table, you will find an overview of the cookies we use.

Enabling and Disabling Cookies

In your web browser, you can set it to only accept the storage of cookies if you agree. For more information, see your browser's manual. Note: Many websites do not function optimally if cookies are disabled.

Deleting Cookies

Most cookies have an expiration date. If an expiration date is set, the cookie is automatically deleted when the expiration date is reached. You can also manually delete cookies before the expiration date. See your browser's manual for this. Below you will find a link to the provider's website for each browser, where it is described step by step how to block or delete cookies.

• Google Chrome

• Firefox

• Edge

• Safari

How Are Your Personal Data Secured?

The protection of personal data is of great importance to us. We therefore take appropriate technical and organizational measures regarding the processing of personal data to prevent loss or any form of unlawful processing (such as unauthorized reading, modification, alteration, or disclosure of personal data). We continuously adjust the security measures and pay attention to what can go wrong.

What Privacy Rights Do You Have?

• Right to access: You have the right to view the personal data we process about you.

• Right to rectification: You have the right to correct or supplement the personal data we process about you if they are incorrect or incomplete.

• Right to object: You can object to the processing of your personal data, including direct marketing.

• Right to erasure: You can request us to delete your personal data.

• Right to withdraw your consent: If you have given us consent to process personal data, you can withdraw this consent at any time.

• Right to data portability: If technically possible, you have the right to have the personal data we process about you transferred to a third party.

• Right to restriction of processing: In certain cases, you can ask us to (temporarily) restrict the processing of your personal data.

When you make a request, we may ask you to identify yourself. We ask for information to ensure that you are the right person to whom the personal data belong.

We will usually respond to your request within 30 days. However, this period may be extended for reasons related to the specific privacy rights or the complexity of the request. If we extend this period, we will inform you in good time.

If you wish to exercise one of your rights, you can inform us via [email protected].

Changes to the Data Protection and Cookie Policy

If our services change, we will, of course, also have to adjust the Data Protection and Cookie Policy. Therefore, always pay attention to the date at the top of this document and check regularly whether there are new versions.

Questions or Complaints

If you have any questions or wish to file a complaint about the use of your personal data, you can send an email to [email protected]. We will handle any question and complaint internally and keep you informed. If you believe that we are not assisting you in the right way, you have the right to file a complaint with the supervisory authority. This is called the "Autoriteit Persoonsgegevens."

Contact Details

DirectLease.de GmbH

Am Seestern 4

D-40547 Düsseldorf

Email address: [email protected]

Telephone: +49 (0)211-528084-0

Commercial Register at the Local Court of Neuss: HRB 73120