Version v3.0, 30 September 2025
Valid for Switzerland, Austria and Germany

 

1. GENERAL INFORMATION

​

This privacy policy explains how we process and protect your personal data (hereinafter "data") when you use this website or our services offered via www.leaseteq.com (together the “Website”).

​

The Website is operated by LeaseTeq AG, Scheideggstrasse 73, 8038 Zurich, Switzerland, together with its subsidiaries and affiliated companies in other countries (collectively "LEASETEQ", "we").

​

Depending on your country of residence and the type of services we provide, the relevant LEASETEQ entity acts as the controller of your personal data. Details of the responsible entity and its contact information are provided in the "Contact" section.

​

Applicable laws: We process your personal data exclusively based on applicable legal provisions. Depending on your country of residence, the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the Telecommunications-Digital-Services-Data-Protection Act (TDDDG), the Austrian Telecommunications Act 2021 (TKG 2021), and for Swiss customers, the revised Swiss Data Protection Act (revDSG) and the Swiss Telecommunications Act (TKG) apply.

​

Unless otherwise defined in this privacy policy or in our General Terms and Conditions, the terms used in this privacy policy have the same meaning as in the data protection regulations applicable to you.

 

2. PERSONAL DATA WE COLLECT

​

When you use our Website or services, we may collect or receive personal data for a variety of purposes related to our business operations. This may include:

• Inquiry data (e.g., details of your inquiry and related communications)

• Master and contact data (e.g., name, address, date of birth, email addresses, phone numbers)

• Contract data (e.g., selected vehicle, term, account number, invoices)

• Information about the lessee or borrower (e.g., nationality, creditworthiness, proof of identity, living situation, employer and employment relationship, number and age of children, e-signature)

• Financial situation data (e.g., income and expenses, housing and living costs, existing credit or lease agreements)

• Website visitor data (e.g., IP addresses, log files, browser type and version, operating system)

• Live chat usage (e.g., date and time of the chat, URL of previously visited page, content of the exchange, chat recording)

 

3. HOW WE COLLECT PERSONAL DATA

​

We collect information about our users when they use our Website or services, including certain actions on the Website.

 

3.1 Directly

• when you or your organization offer or provide services to us

• when you or your organization use our services

• when you correspond with us via email, phone, or other means

• when you or your organization browse our Website, fill out a form, submit an inquiry, or otherwise interact with us

​

3.2 Indirectly

• through public sources: from public registers (e.g., commercial registers), news articles, and internet research

• from third parties such as third-party cookies, credit reporting agencies
  ​

4. LEGAL BASIS AND PURPOSES OF DATA PROCESSING

​

Our legal basis for collecting and using the personal data described in this privacy policy depends on the personal data we collect and the specific purposes for which we collect it.

​

4.1 Contract

To fulfill our contractual obligations or take measures related to a contract with you. In particular:

• To provide our services

• To offer customer support, especially via our live chat

 

4.2 Consent

We may rely on your voluntarily given consent at the time you provide your personal data. In particular:

• To provide users with news, special offers, partner offers, newsletters, and general information about the goods and services we offer

• To contact you via SMS and WhatsApp regarding the services

​

4.3 Legitimate interests

​

We may rely on legitimate interests based on our assessment that processing is fair and reasonable and that your interests or fundamental rights and freedoms do not override them. Specifically:

• To maintain and improve our Website and services

• To develop new services

• To provide and maintain our cooperative services

• To prevent payment defaults, fraud scenarios, and for identity verification

​

4.4 Compliance with legal obligations

​

To fulfill legal and public interest obligations. In particular:

• To comply with applicable regulations and laws

• For legal enforcement of claims and rights

 

5. DATA PROCESSING ON OUR WEBSITE

​

5.1 Data processing for the operation and security of our Website (server logs)

Purpose: When visiting our Website, technical data is automatically collected that is necessary to provide and secure the service.

 

Server logs collected include:

• IP address (anonymized)

• Browser type & version

• User's operating system

• Referrer URL (previously visited page)

• Date and time of the server request

• Device information (e.g., screen resolution, device type)

• Requested file

​

Legal basis: Processing is based on our legitimate interest in ensuring service operation and system security.

​

Recipients: Data from server logs may be shared with law enforcement in case of a hacker attack. No further disclosure to third parties occurs.

​

Retention: Server logs are stored for 90 days.

​

5.2 External Hosting

The web server hosting our Website is technically provided by hosttech GmbH, Seestrasse 15a, 8805 Richterswil, Switzerland, as a processor. During hosting, all data processed in connection with the use of this Website and our services are stored on the hosting provider's servers. The appropriate protection level for transfers to Switzerland arises from the Commission’s adequacy decision.

We have concluded a data processing agreement with the hosting provider, ensuring that data is processed solely according to our instructions.

​

5.3 Cookies and similar technologies

Our Website uses cookies and similar technologies to ensure proper functionality, improve user experience, and analyze Website usage.

​

Detailed information about the types of cookies we use, their purposes, duration, and options to manage your preferences can be found in our Cookie Policy.

​

Legal basis:

• Technically necessary cookies are used based on our legitimate interest in providing a secure and functional Website.

• Preference, analytics, and marketing cookies are used only with your consent. You can withdraw your consent at any time via our Cookie Policy or your browser settings.

 

6. CONTACT FORM AND COMMUNICATION

​

6.1 Contact form

If you submit inquiries via the contact form, your information, including contact details provided, will be stored for the purpose of processing the inquiry and follow-up questions.

​

Legal basis: Processing is for pre-contractual measures or based on our legitimate interest in responding to your inquiry.

​

Data sharing: These data are not shared without your consent.

​

6.2 Inquiry via email, phone, SMS, WhatsApp

If you contact us, your inquiry, including all resulting personal data (name, inquiry), is stored and processed to handle your request.

​

Legal basis: Processing is for pre-contractual measures or based on our legitimate interest in responding to your inquiry.

​

Data sharing: These data are not shared without your consent.

 

7. DATA PROCESSING FOR MARKETING PURPOSES

​

7.1 Newsletter

We may send newsletters and other notifications via email or other communication channels. Newsletters may be sent by us or with the help of third parties.

​

You must generally consent to the use of your email address and other contact addresses unless otherwise legally permitted. We use a "double opt-in" process for email consent. Such consents may be logged, including IP address, date, and time.

 

Newsletters may include links or tracking pixels that record whether the newsletter was opened and which links were clicked (performance measurement). This statistical collection allows us to offer newsletters effectively, user-friendly, and securely based on recipients’ reading habits.

​

Legal basis: Processing is solely based on your consent.

​

Withdrawal: You can unsubscribe anytime by contacting us or via the link in the newsletter footer.

​

7.2 Live Chat

We use Userlike UG's live chat solution, Probsteigasse 44-46, 50670 Cologne, Germany ("Userlike"). Userlike allows us to optimize customer support and contact users nearly in real-time. Besides inquiry and chat usage data, we may process other personal data you provide during the chat.

​

Legal basis: Processing is for pre-contractual measures or to fulfill a contract.

​

Deletion: Contact dataprivacy@leaseteq.com to request deletion of chat recordings.

 

8. DATA PROCESSING IN OUR SERVICES

​

8.1 Financing calculator

Purpose: Data entered into the financing tool are processed for pre-contractual measures.

​

Legal basis: Processing is for pre-contractual measures or based on legitimate interest.

​

Data sharing: No data transfer to third parties occurs.

​

8.2 Financing application and credit check

Purpose: Data is processed to establish the business relationship, including creditworthiness assessment.

​

8.3 Credit check and credit agencies

Depending on your residence:

• Germany | SCHUFA: Data for credit assessment collected.

• Austria | KSV1870: Data for credit assessment collected.

• Switzerland | ZEK, CRIF AG, Intrum AG: Data for credit assessment collected.

​

Legal basis: Data transfer based on legitimate interest.

​

Automated decision-making: Automated scoring may be used; the final decision is not solely automated.

​

Data included in scoring:

• Application details

• Credit agency data

• Possibly other credit data

​

Rights: You can request information on the logic and effects of automated decisions.

​

8.4 Data categories processed

• Master data (including contact information)

• Order and contract data

• Financing and payment terms

• Creditworthiness information

• Income proof and/or financial figures

• Register information (e.g., commercial or transparency register)

• Subject of delivery or service

• Delivery and service conditions

 

Legal basis: Processing is for pre-contractual measures, contract fulfillment, legal obligation, or legitimate interest.

 

9. RETENTION PERIODS

​

Data are retained as long as necessary for the purposes collected or according to legal, regulatory, or contractual requirements. Generally, data are kept up to ten years after contract termination if legally required.

 

10. EXTERNAL SERVICE PROVIDERS AND OTHER RECIPIENTS

​

LEASETEQ may engage third-party service providers to operate our Website, analyze usage, or provide related services. Third parties access personal data only as necessary for their tasks.

​

Service provider categories:

• KYC identity verification

• Credit agencies (e.g., SCHUFA, KSV1870, ZEK, CRIF, Intrum)

• IT providers

• Public authorities or institutions

• Financial supervisory authorities: BaFin (DE), FMA (AT), FINMA (CH)

• Government or regulatory authorities

• Banks and financing partners

• Tax advisors and insurers

• Professional advisors (auditors, lawyers)

• Other group companies

• Cooperation partners (collection agencies, transport companies, manufacturers, suppliers)

• Legal representatives

• Courts

• Vehicle registration authorities

• Third-party analytics and marketing providers

• Messaging providers

• Video identification and e-signature service providers

 

11. DATA TRANSFERS TO THIRD COUNTRIES

​

We and/or our service providers may transfer and process personal data outside Switzerland, the EU, or EEA, including countries without the same data protection level.

​

Typical transfers occur when using analytics, marketing, IT, or international payment providers.

​

11.1 Legal basis

Transfers to the USA rely on the EU-US Data Privacy Framework or EU Standard Contractual Clauses (SCCs) for adequate protection.

​

11.2 Safeguards

• Transfers to countries with adequate protection or Commission adequacy decisions

• Use of SCCs, binding corporate rules, or equivalent safeguards

 

Residual risk: Without adequacy or safeguards, authorities (e.g., intelligence services) may access data.

 

12. DATA DISCLOSURE

​

We may disclose personal data if necessary to:

• Comply with legal obligations

• Protect Website security, rights, or property

• Prevent or investigate misconduct

• Defend legal claims

 

13. SOCIAL MEDIA

​

We maintain social media accounts to communicate with customers and provide information. Your public information may be seen when we access your profile. Content communication via social media is governed by the network's privacy policy. Once we import data into our systems, we are responsible for processing for pre-contractual measures or contract fulfillment.

​

Possible data processing:

• Public comments, likes, and interactions

• Direct messages and inquiries

• Statistical and demographic analyses

​

Platforms & privacy policies:

• Instagram: Privacy Policy

• LinkedIn: Privacy Policy

• TikTok: Privacy Policy

 

14. LINKS TO THIRD-PARTY APPS AND WEBSITES

​

Our Website may contain links to third-party websites or apps. We have no control or responsibility for their content, privacy policies, or practices.

 

15. DATA SECURITY

​

15.1 Security measures

We use technical and organizational measures to protect stored data from manipulation, loss, or unauthorized access. Employees and service providers are bound to confidentiality and legal compliance.

​

15.2 SSL/TLS encryption

This site uses SSL/TLS to protect transmitted data. You can recognize encryption by “https://” and a lock icon. No method of transmission or storage is 100% secure; antivirus, firewall, and similar software are recommended.

 

16. YOUR RIGHTS

​

You have the following data protection rights. To exercise them, contact dataprivacy@leaseteq.com. We may verify your identity before responding.

​

16.1 Right of access

You can request confirmation whether we process your personal data and, if so, access to the data along with information on the processing purposes, categories of data, recipients, retention period, and your other rights.

16.2 Right to rectification

You have the right to correct inaccurate or incomplete personal data without undue delay.

16.3 Right to withdraw consent

If processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

16.4 Right to erasure

You may request the deletion of your personal data if it is no longer necessary for the purposes collected, if processing is unlawful, or if you have withdrawn consent, subject to legal obligations or legitimate interests that require retention.

16.5 Right to restrict processing

You can request restriction of processing in certain circumstances, e.g., while contesting accuracy, processing legality, or pending an objection.

16.6 Right to data portability

You may request your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller, if processing is based on consent or a contract and is carried out automatically.

16.7 Right to object

You have the right to object to processing based on legitimate interests or marketing purposes. Upon objection, we will stop processing unless compelling legitimate grounds exist.

16.8 Right to lodge a complaint

You have the right to file a complaint with a competent supervisory authority if you believe processing violates applicable data protection law.

 

17. COMPETENT SUPERVISORY AUTHORITIES

​

Switzerland
Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter

Feldeggweg 1

CH – 3003 Bern

Email: info@edoeb.admin.ch

​

Austria
Österreichische Datenschutzbehörde
Barichgasse 40-42

1030 Vienna
Email: dsb@dsb.gv.at

​

Germany
Berliner Beauftragte für Datenschutz und Informationsfreiheit

Alt-Moabit 59-61

10555 Berlin

Email: mailbox@datenschutz-berlin.de
Website: https://www.datenschutz-berlin.de

 

Other EU/EEA countries

In the other EU and EEA countries, you can exercise this right, for example, with a supervisory authority in the member state of your residence, your place of work, or the place of the alleged infringement. A list of the competent authorities can be found here: https://edpb.europa.eu/about-edpb/about-edpb/members_de

 

18. ADDITIONAL INFORMATION

​

18.1 Provision of data

Providing personal data is generally voluntary but may be necessary to use certain services or conclude a contract. Failure to provide data may prevent us from providing services.

18.2 Profiling

Where legally permitted, we may perform automated profiling for assessing creditworthiness or for marketing purposes. Profiling does not result in fully automated decisions without human intervention unless explicitly stated.
 

18.3 Purpose change

If we intend to process your personal data for purposes other than those stated, we will inform you beforehand. Additional processing will be based on consent or other legal grounds.

18.4 Language

This privacy policy is provided in English for informational purposes. In case of any discrepancy, the English version shall prevail. We may also provide translations into local languages (German, French, Italian) for convenience.

 

19. CHANGES TO THIS PRIVACY POLICY

​

We may update this policy; changes take effect when posted. If required or material, we will notify you appropriately.

 

20. CONTACT US

​

If you have any questions about this privacy policy or wish to exercise your rights, please contact the LEASETEQ company responsible for your country of residence: 

​

Email: dataprivacy@leaseteq.com

By post:

• Switzerland: LeaseTeq AG, Scheideggstrasse 73, 8038 Zurich

• Germany: LeaseTeq Deutschland GmbH, Pappelallee 78/79, 10437 Berlin

• Austria: LeaseTeq Austria GmbH, Lerchenfelder Gürtel 43, Top 2/2, 1160 Vienna