Privacy Policy

Last updated: 1 July 2025 | Effective date: 1 July 2025

1. Who We Are

A*Lease GmbH & Co. KG ("A*LEASE", "we", "our", "us") is a professional leasing company registered in Germany. We operate the website at https://a-lease.it.com and related sub-pages (the "Site"). We provide leasing services for automobiles, machinery, and business equipment to individual and corporate clients across Europe.

As the data controller, we are responsible for determining how and why your personal data is processed. We take data protection seriously and are committed to complying with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the German Federal Data Protection Act (BDSG), and all applicable data protection legislation.

2. What Data We Collect

2.1 Data You Provide Directly

When you interact with our Site, request a quote, or become a client, we may collect:

• Identity data: First name, last name, date of birth, national ID or passport number (required for credit checks)
• Contact data: Email address, phone number, postal address
• Business data: Company name, VAT registration number, company registration number, industry
• Financial data: Bank account details (IBAN for SEPA direct debit), annual turnover, financial statements
• Contract data: Details of assets leased, contract terms, payment history
• Communication data: Content of emails, forms, and calls submitted to us

2.2 Data Collected Automatically

When you visit our Site, we automatically collect:

• Technical data: IP address, browser type and version, device type, operating system
• Usage data: Pages visited, time spent, referring URLs, click paths
• Cookie data: See our Cookie Policy for full details

2.3 Data from Third Parties

We may receive data from:

• Credit reference agencies (e.g., Schufa, Creditreform) for credit assessment purposes
• Public registers (e.g., company house, land registry) to verify business details
• Our partners and introducers who refer clients to us

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide leasing services: Processing your application, conducting credit assessments, drafting and managing lease contracts, processing payments
• To respond to enquiries: Answering questions submitted via contact forms, email, or phone
• Account management: Managing your client portal, sending invoices, and handling renewals and terminations
• Legal compliance: Meeting our obligations under anti-money laundering (AML) regulations, financial services regulations, and tax law
• Fraud prevention: Verifying identity and detecting fraudulent applications
• Marketing: Sending newsletters and promotional content where you have given consent or we have a legitimate interest
• Analytics: Improving our website and services based on aggregated usage data
• Legal claims: Establishing, exercising, or defending legal claims

4. Legal Basis for Processing

We process your data on the following legal bases under GDPR Article 6:

• Contract performance (Art. 6(1)(b)): Processing necessary to provide leasing services you have requested or to take pre-contractual steps
• Legal obligation (Art. 6(1)(c)): Processing required to comply with AML, financial services, and tax regulations
• Legitimate interests (Art. 6(1)(f)): Analytics, fraud prevention, and direct marketing to existing clients (where not overridden by your rights)
• Consent (Art. 6(1)(a)): Newsletter subscriptions, non-essential cookies, and marketing communications to prospects

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To withdraw consent, email privacy@a-lease.it.com.

5. How We Share Your Data

We do not sell your personal data. We share it only with:

• Credit reference agencies (Schufa, Creditreform) for creditworthiness assessments
• Vehicle and asset manufacturers/dealers to facilitate asset procurement and delivery
• Insurance partners to arrange asset insurance where requested
• IT service providers (e.g., cloud hosting, CRM, email) acting as data processors under GDPR-compliant agreements
• Professional advisors (lawyers, accountants, auditors) bound by confidentiality obligations
• Regulatory authorities and law enforcement where required by law
• Acquirers in the event of a merger, acquisition, or business sale (with prior notice to you)

6. International Transfers

Our primary servers are located in the European Union (Germany). If we transfer data outside the EEA, we ensure appropriate safeguards are in place: EU Standard Contractual Clauses (SCCs), adequacy decisions, or Binding Corporate Rules. You may request a copy of the relevant safeguards by contacting us.

7. Data Retention

We retain your data for as long as necessary for the purposes described in this policy, and in line with applicable legal requirements:

• Client contract data: 10 years from contract end (statutory commercial and tax record-keeping requirements)
• Credit assessment data: 3 years from application date (whether or not a contract was entered into)
• Marketing data: Until you withdraw consent or opt out
• Website analytics: 26 months (aggregated and anonymized thereafter)
• Contact form submissions: 2 years from receipt

8. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15): Request a copy of all personal data we hold about you
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
• Right to erasure (Art. 17): Request deletion of your data (subject to legal retention obligations)
• Right to restriction (Art. 18): Request that we limit processing in certain circumstances
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw any consent you have given at any time

To exercise any of these rights, contact us at privacy@a-lease.it.com. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

9. Cookies

We use cookies and similar tracking technologies on our Site. For full details of what cookies we use and how to manage them, please see our Cookie Policy.

10. Children's Privacy

Our services are directed to businesses and adult individuals. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data to us, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify existing clients by email. Your continued use of our services after the effective date constitutes acceptance of the revised policy.

12. Contact & Complaints

If you have questions, concerns, or wish to exercise your rights, contact our Data Protection team:

• Email: privacy@a-lease.it.com
• Post: Data Protection Officer, A*Lease GmbH & Co. KG, Leasingstraße 42, 80331 Munich, Germany
• Phone: +49 89 123 456 78 (ask for Data Protection)

If you are not satisfied with our response, you have the right to lodge a complaint with the competent supervisory authority. In Germany, this is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) at www.lda.bayern.de.