Privacy Policy of DAL SH Leasing GmbH & Co. KG

At DAL SH Leasing GmbH & Co. KG, located in Lockstedt, Germany, we are committed to protecting the privacy and security of the personal data of our clients and visitors to our online platform. As a financial institution operating under a BaFin license (BaFin-ID: 50015306) and leasing authorization (§1 Abs. 1a Satz 2 Nr. 10 KWG), we adhere strictly to the principles of data protection as required by the General Data Protection Regulation (GDPR) and other applicable German laws.

1. Data Controller

The data controller responsible for processing your personal data on this platform is:

DAL SH Leasing GmbH & Co. KG
[Street Name] [House Number]
[Postcode] Lockstedt
Germany

2. Types of Data Collected

We collect various types of information in connection with the services we provide, which may include:

• Contact Data: Such as name, email address, postal address, and telephone number, typically provided when you use our contact form or interact with us for inquiries about our leasing and factoring services.
• Financial Data: Information necessary for assessing eligibility for our financial services, including creditworthiness data, bank details, and other financial statements. This is collected directly from you or from authorized third parties with your consent.
• Usage Data: Information about how you use our online platform, including IP address, browser type, operating system, referring URLs, and pages viewed. This data helps us improve our service and platform functionality.
• Technical Data: Device identifiers and other technical information when accessing our platform.

3. Legal Basis and Purposes of Processing

We process your personal data based on the following legal grounds and for the specified purposes:

• Performance of a Contract or Pre-Contractual Measures (Art. 6 Abs. 1 lit. b GDPR): To process your applications for leasing or factoring, to manage your contracts, and to provide the services you request.
• Compliance with Legal Obligations (Art. 6 Abs. 1 lit. c GDPR): To fulfill our regulatory requirements as a BaFin-licensed financial institution, including anti-money laundering obligations, fraud prevention, and reporting duties.
• Legitimate Interests (Art. 6 Abs. 1 lit. f GDPR): To improve our services, ensure the security of our platform, manage our business operations, and for customer relationship management, provided that your interests do not override these legitimate interests.
• Consent (Art. 6 Abs. 1 lit. a GDPR): For specific purposes where we have obtained your explicit consent, such as for marketing communications beyond existing client relationships. You have the right to withdraw your consent at any time.

4. Data Disclosure to Third Parties

We may share your personal data with third parties only when necessary and under strict data protection agreements:

• Service Providers: We engage third-party service providers (e.g., IT services, marketing, legal advisors) who assist us in operating our business. These providers are contractually obliged to protect your data and only process it according to our instructions.
• Regulatory and Legal Authorities: We may disclose your data to supervisory authorities (e.g., BaFin), courts, or other public bodies if legally required or necessary to protect our rights or the rights of others.
• Credit Bureaus: For credit assessment purposes, with your consent where required, to ensure responsible lending and factoring practices.

5. International Data Transfers

We do not generally transfer personal data to recipients in countries outside the European Economic Area (EEA). Should such a transfer become necessary for specific services, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to guarantee an adequate level of data protection.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Specific retention periods apply based on the type of data and legal obligations, particularly those stemming from German commercial and tax laws (e.g., 6 to 10 years).

7. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): To obtain confirmation as to whether or not your personal data is being processed, and access to that data.
• Right to Rectification (Art. 16 GDPR): To request the correction of inaccurate or incomplete personal data.
• Right to Erasure ('Right to be Forgotten') (Art. 17 GDPR): To request the deletion of your personal data under certain conditions.
• Right to Restriction of Processing (Art. 18 GDPR): To request that we restrict the processing of your personal data under certain circumstances.
• Right to Data Portability (Art. 20 GDPR): To receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right to Object (Art. 21 GDPR): To object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent (Art. 7 Abs. 3 GDPR): If processing is based on your consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint (Art. 77 GDPR): To lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of personal data relating to you infringes the GDPR.

To exercise any of these rights, please contact us using the details provided below.

8. Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including measures to prevent unauthorized access, disclosure, alteration, or destruction of personal data. This includes encryption, access controls, and regular security audits.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our platform. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or our data protection practices, please contact us:

DAL SH Leasing GmbH & Co. KG
[Street Name] [House Number]
[Postcode] Lockstedt
Germany