Data Protection Policy

1. Data Protection at a Glance

General Information

The following information will provide you with a simple overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to personally identify you. For detailed information on data protection, please refer to our Data Protection Policy stipulated beneath this introductory text.

Data Recording on this Website

Who is the responsible entity for the recording of data on this website?

On this website, data is processed by the website operator. You may obtain the operator’s contact data under section “Legal Information” on this website.

How do we record your data?

On the one hand, your data is captured because you communicate it to us. This may e.g. be information you enter into a contact form.

Other data are collected during your visit to the website by our IT systems automatically prior to or after you give us your consent. These are primarily technical data (e.g. web browser, operating system or time the site was accessed). Such data are recorded automatically as soon as you enter this website.

What is the purpose of use of your data?

A portion of the data is collected to be able to warrant an error free provision of the website. Other data may be used to analyze your user patterns.

What are your rights concerning your data?

You have the right to at any time demand free information concerning the source, recipients and purpose of your archived personal data. You also have a right to demand the rectification and eradication of these data. If you have given consent to the processing of your data, you may revoke your consent with impact on all future transactions at any time. Moreover, under certain circumstances, you have the right to demand the restriction of the use of your personal data. You also have the right to log a complaint with the competent supervisory agency.

If you have further questions about data protection, please feel free to contact us at any time at the address provided in section “Legal Information.”

2. Hosting and Content Delivery Networks (CDN)

External Hosting

This website is being hosted by an external service provider (Host). The personal information recorded on this website are archived on the Host’s servers. This includes primarily IP addresses, contact inquiries, meta and communications data, contract data, contact information, names, website access data and other data generated via a website.

The Host is used for the purpose of contractual obligations vis-à-vis out potential and existing customers (Art. 6 Sect. 1 lit. b GDPR) and in the interest of a secure, expeditious and efficient provision of our online content by a professional provider (Art. 6 Sect. 1 lit. f GDPR).

Our Host will process your data only insofar as this is necessary for the fulfillment of his obligations to perform and will comply with our instructions with regard to these data.

Execution of a Contract Data Processing Agreement

In order to ensure data protection compliant processing, we have executed a contract data processing agreement with our Host.

3. General Annotations and Required Information

Data Protection

The operators of these sites take the protection of your personal data very seriously. We treat your personal data as confidential and in compliance with the statutory data protection provisions and this Data Protection Policy.

Whenever you use this website, a variety of personal data will be collected. Personal data are data that can be used to personally identify you. This Data Protection Policy explains, which data we collect and the purposes we use the information for.

We must point out that data transfer via the Internet (e.g. also email communications) may be prone to security gaps. It is not possible to protect data from third party access uninterruptedly.

Disclosure of the Data Controller

The data controller for the processing of data on this website is:

Hanseatic Lease- & Finance GmbH
Carl-Zeiss-Straße 9
25451 Quickborn

Telefon: +49 (0) 40 30856675
E-Mail: info@hanseaticlease.de

The party responsible (data controller) is the natural or legal entity that solely or jointly with other entities makes decisions concerning the purposes and means of processing of personal data (e.g. names, email addresses, etc.).

Revocation of Your Consent to Data Processing

Many data processing transactions are possible only subject to your express approval. You may revoke consent you have already given at any time. A simple, informal email addressed to us will suffice to do so. The legality of any consent given in effect until the revocation shall not be affected by the revocation.

Right to Object to the Collection of Data in Special Cases and Against Direct Advertising (Art. 21 GDPR)

IF DATA PROCESSING OCCURS ON THE BASIS OF ART. 6 SECT. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO AT ANY TIME, FOR REASONS THAT ARISE FROM YOUR SPECIAL SITUATION, TO OBJECT AGAINST THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO ANY PROFILING BASED ON ONE OF THESE PROVISIONS. FOR THE RESPECTIVE LEGAL BASIS, ANY PROCESSING MAY BE BASED ON, PLEASE REFER TO THIS DATA PRIVACY POLICY. IF YOU FILE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE ABLE TO DOCUMENT MANDATORY PROTECTION WORTHY GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND LIBERTIES OR THE PROCESSING AIMS AT THE CLAIMING, EXERCISING OR DEFENSE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21 SECT. 1 GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME RAISE AN OBJECTION AGAINST THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING; THE SAME SHALL ALSO APPLY TO PROFILING IF IT IS RELATED TO DIRECT ADVERTISING. IF YOU OBJECT, WE WILL HENCEFORTH NO LONGER USE YOUR DATA FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION PURSUANT TO ART. 21 SECT. 2 GDPR).

Right to Log a Complaint with the Competent Supervisory Agency

In the event of violation of the GDPR, data subjects have a right to log a complaint with a supervisory agency, in particular in the member state of their usual place of dwelling, employment or the location where the alleged violation occurred. The right to file a complaint exists, any other administrative legal or court remedies notwithstanding.

Entitlement to Data Portability

You have the right to have data we process automatically based on your consent or in fulfillment of a contract handed over to you as such or to any third party in common, machine readable formats. If you demand the direct transfer of the data to another responsible party, this will happen only if it is technically feasible.

Information, Eradication and Rectification

Within the boundaries of the applicable legislation, you have the right to at any time receive complimentary information about your stored personal data, their origin, and recipients and possibly a right to the rectification or eradication of such data. For more information about this and other personal data related questions, please feel free to contact us at any time under the address provided in section “Legal Information.”

Right to Restricted Processing

You have the right to demand the restriction of the processing of your personal data. To do this, you may contact us at any time at the address provided in section “Legal Information”. A right to restrict processing exists in the following cases:

If you dispute the correctness of your personal data stored by us, we will usually require time to verify this fact. For the duration of the verification process, you have the right to demand restricted processing of your personal data.
If the processing of your personal data occurred/occurs illegitimately, you can demand restriction in lieu of deletion.
If we no longer need your personal data and you require it to exercise, defend or claim legal entitlements, you have the right to demand restriction in lieu of the deletion of your personal data.
If you have filed an objection pursuant to Art. 21 Sect. 1 GDPR, a weighted decision between your interests and our interests will have to be made. As long as it has not been determined whose interests outweigh whose, you have the right to demand restricted processing of your personal data.

If you have restricted the processing of your personal data, this data, its storage notwithstanding, may only be processed subject to your consent or to claim, exercise or defend legal entitlements or for the protection of the rights of other natural or legal entities or for reasons of any important public interest of the European Union or one of its member states.

4. Data Recording on this Website

Cookies

Our websites use so-called cookies. Cookies do not cause any damages to your computer. Cookies are small text files that are stored by your browser and archived by your computer. They are either temporarily stored for the duration of a session (session cookies) or archived permanently (permanent cookies) on your end device. After the end of your visit, session cookies are automatically deleted. Permanent cookies remain archived on your device until you delete them, or they are automatically deleted by your web browser.

Sometimes cookies may also be stored on your device by a third party if you enter our site (third party cookies). These allow us or you to use certain services of the third party (e.g. cookies for the processing of payment services).

Cookies have different functions. Technically, numerous cookies are required since certain website functions will not work without them (e.g. shopping cart functions or the display of videos). Other cookies are used to analyze user patterns or show promotions.

Cookies that are used for the execution of the electronic communications process (required cookies) or for the provision of functions you desire (functional cookies, e.g. for the shopping cart function) or the optimization of the website (e.g. cookies that measure the web audience), will be stored on the basis of Art. 6 Sect. 1 lit. f GDPR, if different legal grounds are not provided. The website operator has a legitimate interest in the storage of cookies to attain a technically error free and optimized provision of the company’s services. If an approval for the storage of data was requested, the storage of the respective cookies will occur exclusively on the basis of this approval (Art. 6 Sect. 1 lit. a GDPR); this consent may be revoked at any time.

You may set up your browser in such a manner that it notifies you when cookies are set and you can permit cookies only in specific cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion function for cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

If we are using third party cookies or cookies for analysis purposes, we will brief you specifically in conjunction with this Data Protection Policy and, if applicable obtain your consent.

Server Log Files

The site provider automatically collects and archives information in so-called server log files, which your browser sends to us automatically. They are:

Type and Version of browser
Used operating system
Referrer URL
Hostname of the accessing computer
Server request time
IP adress

These data are not merged with other data sources.

The recording of these data occurs on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error free depiction and the optimization of his website. Server log files must be recorded for this purpose.

Contact Form

Whenever you send us inquiries via the contact form, the information you provide in the form, including the contact information indicated by you for the purpose of processing of the inquiry and for any follow-up questions will be archived by us. We will not share this data in the absence of your consent.

The processing of this information occurs on the basis of Art. 6 Sect. 1 lit. b GDPR, if your inquiry is related to the fulfillment of a contract or the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries directed at us (Art. 6 Sect. 1 lit. f GDPR) or your consent (Art. 6 Sect. 1 lit. a GDPR) if it was requested.

The data you have entered into the contact form will remain in our possession until you ask us to delete it, revoke your consent to its storage or the purpose of the data storage is rendered redundant (e.g. upon conclusion of the processing of your inquiry). This shall be without prejudice to mandatory statutory provisions, in particular retention periods.

Inquiry via Email, Phone or Telefax

If you contact us via email, phone or fax, your inquiry including all resulting personal data (name, inquiry) will be archived and processed by us for the purpose of fulfilling your request. We will not share this data in the absence of your consent.

The data you send us via contact inquiries will remain in our possession until you ask us to delete them, revoke your consent to its storage or the purpose of the data storage is rendered redundant (e.g. upon conclusion of the processing of your inquiry). This shall be without prejudice to mandatory statutory provisions, in particular retention periods.

5. Social Media

Social-Media-Plugins with Shariff

This website uses plugins of social media operators (e.g. Facebook, Twitter, Instagram, Pinterest, XING, LinkedIn, Tumblr).

As a rule, you can recognize the plugins based on their respective social media logos. To ensure data privacy on this website, we use these plugins only in conjunction with the so-called “Shariff” solution. This application prevents plugins from being integrated into this website transfer data to the respective provider as soon as the site is accessed.

Only when you activate the respective plugin by clicking on the respective button, a direct connection to the provider’s service is established (consent). As soon as you activate the plugin, the respective provider receives the information that you have visited the website with your IP address. If you are simultaneously logged in with your social media account (e.g. Facebook), the respective provider can allocate the visit to the website to your user account.

The activation of the plugin constitutes consent as defined in Art. 6 Sect. 1 lit. a GDPR. You may revoke this consent at any time with future effect.

Facebook Plugins (Like & Share-Button)

Plugins of the social network Facebook are integrated on this website. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the recorded data are, however, also transferred to the United States and other non-EU countries.

You will recognize the Facebook plugins by the Facebook logo or the “Like” button” on this website. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

Whenever you visit this website, a direct connection between your browser and the Facebook server is established via the plugin. As a result, Facebook is also notified that you have visited this website with your IP address. If you click the Facebook “Like” button while you are logged into your Facebook account, you can link the contents of this website with your Facebook profile. This enables Facebook to allocate the visit to this website to your user account. We point out that we as the provider of the sites do not have any knowledge of the content of the transferred data and its use by Facebook. For more information please consult Facebook’s Data Privacy Policy at: https://de-de.facebook.com/privacy/explanation.

If you do not want Facebook to be able to allocate the visit to this website to your Facebook user account, please log out of your Facebook user account.

The use of the Facebook plugins occurs on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the highest possible visibility on social media. If respective consent was obtained, the data are processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the consent may be revoked at any time.

Instagram Plugin

Functions of the Instagram service are integrated into this website. These functions are being provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you can link contents from this website with your Instagram profile by clicking the Instagram button. As a result, Instagram can allocate your website visit to your user account. We have to point out that we as the provider of the sites do not receive any information about the content of the transferred data and their use by Instagram.

The storage and analysis of the data occurs on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the highest possible visibility on social media. If respective consent was obtained, the data are processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the consent may be revoked at any time.

For more information please consult the Data Privacy Policy of Instagram: https://instagram.com/about/legal/privacy/.

6. Newsletter

Newsletter Data

If you want to subscribe to the newsletter we offer on the website, we will need an email address as well as information from you that make it possible for us to verify that you are the holder of the provided email address and that you agree to the receipt of the newsletter. Other data will not be collected or will only be captured on a voluntary basis. We use these data exclusively for sending the requested information and will not share the information with third parties.

The processing of the data entered into the newsletter registration form will occur exclusively on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). The granted approval for the storage of the data, the email address and its use for sending the newsletter may be revoked at any time, for instance via the “unsubscribe” link in the newsletter. This shall be without prejudice to the legality of already completed data processing transactions prior to the revocation.

The data archived with us for the purpose of the newsletter subscription will be stored at our end or at the newsletter service provider’s end until you unsubscribe from the newsletter. Once you have unsubscribed it will be deleted from the newsletter distribution list. This will not affect data archived by us for other purposes.

Once you are unregistered from the newsletter distribution list, your email address will possibly be stored in a blacklist by us or the newsletter service provider to prevent future mailings. The data from the blacklist are only used for this purpose and are not merged with other data. This is in both, yours and our interest in complying with the statutory provisions for the sending of newsletters (legitimate interest as defined in Art. 6 Sect. 1 lit. f GDPR). There is no time limit for the archiving of the blacklist. You may object to the storage if your interests outweigh our legitimate interests.

7. Plugins & Tools

YouTube with Enhanced Data Protection

This website integrates YouTube videos. The operator of the sites is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in an enhanced data protection mode. According to YouTube, this mode has the effect that YouTube will not store information about visitors before they watch the video. The sharing of data with YouTube partners, on the other hand, cannot necessarily be ruled out as a result of the data protection mode. For instance, YouTube – regardless of whether you watch a video – establishes a connection to the Google DoubleClick Network.

As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. The YouTube server is notified which of our sites you have visited. If you are logged into your YouTube account, you enable YouTube to allocate your surfing patterns directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after a video is started, YouTube can store various cookies on your device. With the assistance of these cookies, YouTube may receive information about visitors to this website. Among other things, this information is used to record video statistics, improve the user friendliness and prevent attempts of fraud. The cookies remain on your device until you delete them.

After starting a YouTube video, further data processing transactions may be triggered, and we have no control over such transactions.

We use YouTube in the interest of an attractive presentation of our online offers. This represents a legitimate interest as defined in Art. 6 Sect. 1 lit. f GDPR. If respective consent was obtained, the data are processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the consent may be revoked at any time.

For more information about YouTube’s data privacy provisions, please consult their Data Privacy Policy under: https://policies.google.com/privacy?hl=de.

Google Maps

Via an API, this website uses the mapping service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To be able to use the functions of Google Maps, it is necessary to store your IP address. As a rule, this information is transferred to a Google server in the United States, where it is stored. The provider of this website does not have any control over this data transmission.

The use of Google Maps occurs in the interest of an attractive presentation of our online offers and to make it easy to find locations depicted in the website. This represents a legitimate interest as defined in Art. 6 Sect. 1 lit. f GDPR. If respective consent was obtained, the data are processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the consent may be revoked at any time.

For more information about Google Maps’ data privacy provisions, please consult their Data Privacy Policy under: https://policies.google.com/privacy?hl=de.

OpenStreetMap

We use the mapping service of OpenStreetMap (OSM). The provider is the Open-Street-Map Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

If you visit a website with an integrated OpenStreetMap function, your IP address and other information about your user patterns on the website will be forwarded to OSMF. OpenStreetMap may, under certain circumstances, store cookies in your browser. Cookies are text files that are stored on your computer to make the analysis of the website’s use by you possible. You can prevent the storage of the cookies by making relevant adjustments to the setting of your browser software; however, we have to point out that in this case you may possibly not be able to fully use all functions of this website.

Your location may also be tracked, if you have approved this function in your device settings, for instance on your mobile phone. The provider of this website does not have any control over this data transmission. For details, please consult the Data Privacy Policy of OpenStreetMap under the following link: https://wiki.osmfoundation.org/wiki/Privacy_Policy.

The use of OpenStreetMap occurs in the interest of an attractive presentation of our online offers and to make it easy to find locations depicted in the website. This represents a legitimate interest as defined in Art. 6 Sect. 1 lit. f GDPR. If respective consent was obtained, the data are processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the consent may be revoked at any time.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to verify whether any data entry on this website (e.g. in a contact form) was made by a person or an automated program. For this purpose, reCAPTCHA analyzes the patterns of the website visitor based on a variety of characteristics. This analysis begins automatically, as soon as the website visitor enters the website. To perform the analysis, reCAPTCHA verifies different data (e.g. IP address, time the website visitor spends on the website or mouse movements conducted by the user). The data generated during the analysis are forwarded to Google.

reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is being conducted.

The storage and analysis of the data occurs on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in protecting web presentations from the misuse of automated spying and SPAM. If respective consent was obtained (e.g. consent to the storage of cookies), processing occurs exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the consent may be revoked at any time.

For more information on Google reCAPTCHA, please consult the Google Data Privacy Policy and the Google Terms of use under the following links: https://policies.google.com/privacy?hl=de und https://policies.google.com/terms?hl=de.

SoundCloud

It is possible that this website contains plugins of the social network SoundCloud (SoundCloud Limited, Berners House, 47-48 Berners Street, London W1T 3NF, Great Britain). You can recognize SoundCloud plugins by the SoundCloud logo displayed on the affected pages.

If you visit this website, once the plugin is activated, a direct connection between your browser and the SoundCloud server will be established. As a result, SoundCloud is informed that you have visited this website with your IP address. If you click the “Like” or “Share” button while you are logged into your SoundCloud user account, you can link the contents of this website with your SoundCloud profile, and/or share it. As a result, SoundCloud can allocate the visit to this website to your user account. We have to point out that we as the operator of the sites do not receive any information about the content of the transferred data and their use by SoundCloud.

More related information is available in the Data Privacy Policy of SoundCloud under: https://soundcloud.com/pages/privacy.

If you do not want SoundCloud to allocate the visit of this website to your SoundCloud user account, please log out of your SoundCloud user account before you activate contents of the SoundCloud plugin.

Source: https://www.e-recht24.de