1. General Information

The protection of your personal data is of particular concern to us. We process your personal data exclusively on the basis of the statutory provisions (GDPR, DSG, TKG 2021).

In order to provide our website and our services and to carry out our business operations, we process information about you, known as personal data – or “data” for short below. The term “processing” refers to any handling of data, such as the collection, storage, use or deletion of personal data.

We are happy to inform you about the processing of your personal data and the claims and rights to which you are entitled under data protection regulations as part of this privacy policy.

The data controller responsible for the processing of your personal data is:

LeaseTeq Austria GmbH
Lerchenfelder Gürtel 43, Top 2/2
1160 Vienna

Email: datenschutz.at@leaseteq.com
Phone: +43 1 92805960

We are happy to help with any complaints, questions or suggestions you may have regarding data protection.

 

2. Data Processing in the Context of our Website

2.1 General Information

As part of our website, we process data that you provide to us (for example, in the context of the contact form), protocols (our servers log who makes requests for security reasons) and cookies (these are small text files that are stored on your device and contain information to recognize you).
The web server for the operation of our website is technically hosted by hosttech GmbH, Seestrasse 15a, 8805 Richterswil, Switzerland, as a processor. The adequate level of protection for the transfer to Switzerland results from the Commission’s adequacy decision pursuant to Art. 45 GDPR.

Cookies

Cookies are small text files that are stored on your end device. We use the following technically necessary cookies to operate and display our website:

Name:	Duration:	Purpose:
elementor	permanent	Used in connection with the website’s WordPress theme. The cookie allows the website owner to implement or change the content of the website in real time.
rc::a	permanent	This cookie is used to distinguish between humans and bots. This is beneficial for the website to generate valid reports on the use of its website.
rc::c	Session	This cookie is used to distinguish between humans and bots.

We use technically necessary cookies on the basis of our legitimate interest in operating the website and improving its online presence. We use the following preference cookies to influence the way a website behaves or looks:

Name:	Duration:	Purpose:
wp-wpml_current_language	Session	This cookie stores the language setting that has been selected.

All other cookies (e.g. for marketing purposes, social media, etc.) are set by us on the basis of your consent or our legitimate interest. You can find more information about cookies under the respective points of this privacy policy.
To prevent third-party cookies from being set, you can block so-called third-party cookies in your browser. Instructions for the most common browsers can be found here:

• Firefox: here
• Chrome: here
• Microsoft Edge: here
• Safari: In Apple’s Safari, third-party cookies are blocked by default.
• Opera: here

2.2 Data Processing for the Operation and Security of our Website (Serverlogs)

Purpose of processing: When you visit our website, the web server collects usage data (so-called server logs). The collection of this data is necessary to technically enable the connection to our server and the use of the website. In addition, this data is used to defend against and analyze attacks.

The following server logs are collected: The anonymized IP address of the requesting device, together with the date, time, request, which file is requested (name and URL), which amount of data is transferred to you, a message as to whether the request was successful, identification data of the browser and operating system used, and the website from which access took place (should access take place via a link).

Legal basis for processing: Your data is processed on the basis of our legitimate interest in ensuring the operation of the service and system security.

Recipient of the data: The web server for the operation of our website is technically operated by hosttech GmbH, Seestrasse 15a, 8805 Richterswil, Switzerland, as a processor and web host. The data from the server logs will be passed on to the law enforcement authorities if there has been a hacker attack. The data will not be passed on to third parties.

Further information: The server logs are stored for 90 days.

2.3 Data Processing for Marketing Purposes

2.3.1 Webanalysis and Marketing

We use services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”):

Google acts as a processor for us and may use the transmitted data exclusively for the processing of specific orders and is contractually obliged to comply with the legal data protection regulations. In detail, we use the following Google service:

Google Analytics (web analysis)

If you consent, we process data about your use of our website and online services in order to adapt them as best as possible to your interests.

Purpose of processing: Google Analytics stores cookies to recognize you and then create personalized user statistics about your website activity. This allows us to analyze your user behavior. In addition, we have activated the “anonymize IP” module. For this purpose, the IP address assigned to you within the European Union is shortened and anonymized by Google. The IP address is not merged with other Google data.

Google Analytics stores the following cookies on your device:

Name:	Duration:	Purpose:
_ga	24 month	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
_ga_#	24 month	Collects data on how often a user has visited a website, as well as data for the first and last visit. Used by Google Analytics.
_gat	1 day	Used by Google Analytics to limit the request rate.
_gid	1 day	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
collect	Session	Used to send data to Google Analytics about the visitor’s device and behavior. Tracks the visitor across devices and marketing channels.

Legal basis for the processing: The processing of your data is based on your consent, which you give via the cookie banner. You can revoke your consent at any time here.

Recipients of the data: The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there. The adequate level of protection for the transmission results from standard contractual clauses in accordance with Art. 46 GDPR, which we have concluded with Google. Since the United States is a third country that does not have an adequate level of data protection, there is still a risk to the protection of your data. For more information about the standard contractual clauses and appropriate or suitable guarantees, please visit: https://privacy.google.com/businesses/processorterms/

Further information about the handling of data by Google can be found at:

• https://policies.google.com/technologies/partner-sites
• https://policies.google.com/privacy?hl=de&gl=de

 

Additional information: You can prevent cookies from being stored by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your anonymized IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

2.3.2 Newsletter

We may send newsletters and other notifications by email and through other communication channels. We may have newsletters and other notifications sent by third parties or send them with the help of third parties.
In principle, you must explicitly consent to the use of your e-mail address and other contact addresses, unless such use is permitted for other legal reasons. For e-mails, we use the “double opt-in” for consent, i.e. you will receive an e-mail with a web link that you must click to confirm your consent, so that no misuse by unauthorized third parties can occur. We may log such consents, including Internet Protocol (IP) address, date and time.
Newsletters and other notifications may contain web links or tracking pixels that record whether an individual newsletter or notification has been opened and which web links have been clicked on (performance measurement). Such web links and tracking pixels record the use of newsletters and other notifications. We need this statistical recording of usage, including the measurement of success and reach, in order to be able to offer newsletters and other notifications that are effective and user-friendly, as well as permanent, secure and reliable, based on the reading habits of recipients.
You can unsubscribe from newsletters and other notifications at any time and thus, in particular, object to the aforementioned usage survey. You can do this by contacting us directly or by following the link in the footer of each newsletter that we send you.

2.3.3 Live Chat

We use the live chat solution from Userlike UG, Probsteigasse 44-46, 50670, Cologne, Germany (“Userlike”). Userlike enables us to optimize our customer support by offering you the opportunity to contact us in near real time. In addition to data on requests, website visitors and the use of the live chat, we may process other personal data that you provide to us during our conversation. We process your personal data in this context in order to take steps at your request prior to entering into a contract and, if applicable, to fulfill a contract with you.

We also store the chat recording so that we can retrieve previous conversations with you. We do this to ensure that you do not have to retrieve all previous conversations with us every time you use our live chat. Please contact us at dataprivacy.at@leaseteq.com if you would like us to delete these records.

 

3. Data Processing in the context of Business Operations

3.1 Data Processing in the Context of Establishing Contact

Purpose of processing: When you contact us (e.g. by email, contact form, live chat, WhatsApp, SMS or telephone), we process the data you provide when contacting us only to the extent necessary to process and handle your request.

Legal basis for the processing: The processing of your data is carried out in order to take steps prior to entering into a contract or to fulfill a contractual relationship. If you are not in any (pre-contractual) contractual relationship with us and your request is not aimed at concluding a contract, the processing is based on our legitimate interest in answering the request.

Recipient of the data: A transfer of this data only takes place under the condition that the transfer is necessary for the request response.

Further information: We process your data for as long as is necessary to process your request and will delete it once we have finished processing your request, provided that there are no legal obligations to retain it due to a contractual relationship.

3.2 Data Processing as Part of our Services

3.2.1 Data processing in the Context of the Financing Calculator

Purpose of processing: When you use our financing calculator, we process the data you have provided in the tool to take steps prior to entering into a contract or on the basis of a legitimate interest in data processing.

Legal basis for processing: Your data is processed as part of steps prior to entering into a contract or on the basis of a legitimate interest in data processing.

Recipient of the data: This data is not transferred.

Further information: We process your data only for as long as is necessary to fulfill the pre-contractual measures or the contractual relationship or due to legal obligations (such as tax and corporate law retention requirements).

3.2.2 Data processing as part of the Financing Application (Leasing, Installment Purchase, Loan)

Purpose of processing: If you submit a leasing application on our website, we process your data in order to establish a business relationship. As soon as the application is approved, your data is processed in order to provide our services and to formally handle the business cases we are to procure as part of the business relationship (see point 3.2.3.).

Legal basis for the processing: The processing of your data is carried out in order to take steps prior to entering into a contract or to fulfill a contractual relationship and to fulfill a legal obligation in the context of a business relationship (or for the processing of this).

Data categories processed in the context of the financing application:

• Master data (including contact information)
• Order and contract data
• Financing and payment terms
• Credit information
• Subject of the delivery or service
• Data on delivery and service conditions (including supplier data)

 

Recipients of the data: If the transmission of your data is necessary in individual cases for the fulfillment of the contractual relationship or on the basis of a legal requirement, it will be transmitted to the following categories of recipients:

• Service providers in the field of KYC identity verification
• IT service providers
• Public authorities or institutions (e.g. the Financial Market Authority)
• Banks
• Legal representatives
• Chartered accountants, auditors and tax consultants
• Courts
• Competent administrative authorities
• Collection agencies
• Debt financiers
• Contractual and business partners
• Insurance companies
• Statistics Austria
• Transport companies
• Suppliers

 

Additional information: We only process your data for as long as is necessary to fulfill pre-contractual obligations and the contractual relationship or to comply with legal obligations (such as tax and corporate law retention requirements). We generally retain data for seven years.

3.2.3 Data processing in the context of the Financing Application (service)

Purpose of processing: As soon as we have activated your account for the use of our service, your data will be processed for the purpose of providing our service and for the formal processing of the business cases to be handled by us within the scope of the business relationship.

Legal basis for processing: The processing of your data is carried out for the fulfillment of a contractual relationship.

Recipients of the data: If a transmission of your data is relevant in the respective individual case for the fulfillment of the contractual relationship or is required by law, it will be transmitted to the following categories of recipients:

• Vehicle registration office
• Vehicle manufacturers and suppliers
• IT service providers
• Public authorities or institutions (e.g. the Financial Market Authority)
• Banks
• Legal representatives
• Chartered accountants, auditors and tax consultants
• Courts
• Competent administrative authorities
• Contractual and business partners
• Insurance companies

 

Additional information: We only process your data for as long as is necessary to fulfill the contractual relationship or to comply with legal obligations (such as retention requirements under tax and company law). As a rule, we store data for up to seven years after the end of the contractual relationship.

 

4. Your Rights

• Right of access to stored data in accordance with Art. 15 GDPR: You have the right to request information about whether we process your personal data. If this is the case, you have the right to request information about this personal data and to receive further information related to the processing.

• Right to rectification of inaccurate data in accordance with Art. 16 GDPR: In the event that personal data that we process about you is no longer accurate or is incomplete, you can request a correction and, if necessary, completion of this data.

• Right to erasure of data in accordance with Art. 17 GDPR: If the legal requirements are met, you can request the deletion of your personal data.

• Right to restriction of data in accordance with Art. 18 GDPR: If the legal requirements are met, you can request the restriction of the processing of your personal data.

• Right to data portability in accordance with Art. 20 GDPR: If the legal requirements are met, you can request the transfer of your data in a structured, commonly used and machine-readable format.

• Right to object to unreasonable data processing in accordance with Art. 21 GDPR: On grounds relating to your particular situation, you have the right to object at any time to processing of personal data concerning you which is based on legitimate interest in accordance with Art. 6 (1) lit. f GDPR.

• Right to revoke consent: If the processing is based on a declaration of consent, you have the option to revoke this at any time without affecting the legality of the processing carried out on the basis of the consent until revocation.

• Right to complain to the data protection authority: If you believe that the processing of your personal data by us violates the applicable data protection law or that your data protection rights have been violated in any other way, you have the right to complain to the relevant supervisory authority (Austrian Data Protection Authority). The address is: Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Phone: +43 1 52 152-0, Email: dsb@dsb.gv.at

 

5. Additional Information

We need the data that we request from you in order to process and provide our services within the framework of the contractual relationship and/or to provide you with the information that you have requested from us.
If you do not provide the data, we cannot provide our services.

Automated decision-making, including profiling, does not take place. Should we process your personal data for a purpose other than that for which we collected the data, we will notify you of this fact and inform you of this other purpose.

 

6. Changes to this Privacy Policy

We may update our privacy policy from time to time. We therefore recommend that you regularly review this privacy policy for changes. Changes to this privacy policy are effective when they are posted on this page.

 

Version v2.1: February 2025