Privacy policy for online applications

Please read the following information carefully before sending your data to us.

1. Name and address of the controller The controller and service provider is LeasePlan Deutschland GmbH, Lippestr. 4, 40221 Düsseldorf (hereinafter ‘LeasePlan’).

2. Name and address of the data protection officer Our data protection officer is the lawyer Dr Karsten Kinast, Kinast Rechtsanwaltsgesellschaft mbH, Hohenzollernring 54, 50672 Köln. You can contact our data protection officer at any time if you have any questions relating to data privacy. You can send an e-mail to: marketing.de@leaseplan.com or a letter to: LeasePlan Deutschland GmbH, Lippestr. 4, 40221 Düsseldorf.

3. What is personal data? Personal data comprises information that can be used to learn about your personal or factual circumstances (e.g. your name, address, telephone number, date of birth, or e-mail address). Information which we cannot use (or only with disproportionate effort) to establish a reference to your person, for example by means of anonymization, is not personal data.

4. (Online) job applications, e.g. via the job portal ​4.1 What personal data do we process? If you would like to send a job application (online) to LeasePlan Deutschland GmbH, we will require some personal information from you. The following application data are collected and processed as part of the (online) application:

4.2 Purpose of the collection and transfer of data Application data will be collected and processed by LeasePlan Deutschland GmbH for the purpose of processing the job application. For the purpose of carrying out the application process, your application data may also be forwarded to ALD Autoleasing D GmbH, which also belongs to Société Générale and the Ayvens Group and thus to the same group of companies as LeasePlan Deutschland GmbH.

If you apply via the job portal, please also refer to the Global Privacy Policy for applicants of the Ayvens Group, which operates the job portal: https://www.ayvens.com/en-cp/careers/ayvens-global-applicant-privacy-statement/

4.3 Legal basis The collection and use of personal data of our users takes place regularly only for the purpose of processing the application on the basis of Art. 6(1)(b) of the General Data Protection Regulation (GDPR) or because this information is of particular importance to us and we have a legitimate interest in its processing, as also listed in greater detail in the aforementioned Ayvens Privacy Policy.

Insofar as we obtain consent for the processing of personal data, Art. 6(1)(a) GDPR serves as the legal basis for the processing of your personal data, which you can withdraw at any time for the future.

5. Online job applications in response to advertising campaigns on social media via the Talent Site We also advertise vacancies with targeted LeasePlan advertising campaigns via our company pages on social media, such as LinkedIn and Facebook. If you click on one of our adverts on social media, you will be redirected to a Talent Site where we will ask you specific questions about your expectations and the requirements for the position (“Talent Site”). In addition to the provisions already mentioned under point 4, processing will then take place in accordance with the following modalities:

5.1 Processing of your data in order to provide the Talent Site For the processing of your personal data for the purpose of providing the Talent Site, please refer to our general data protection provisions for our websites: https://www.leaseplan.com/de-de/datenschutz/.

5.2 Legal basis and processing of your data for the purpose of tracking on the Talent Site On the Talent Site, we optionally use tracking technologies to efficiently track to efficiently capture and analyse your interactions with the website. Tracking takes place using “Meta Conversion API” (“Meta CAPI”). Meta CAPI enables us to transmit events such as further clicking of information or interruption of the application process at certain points directly from our server to Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Ireland”). This helps us to better understand the success and design of our website and to gradually optimise the user experience.

Tracking through Meta CAPI only takes place if you agree to this by clicking “Accept all”. If you click on “Reject all” instead, your interaction with the website will not be recorded separately and will not be used to optimise the website. Whether you consent to tracking or not has no effect on the processing of your application and does not influence the application process.

If you consent to tracking, the data collection and subsequent analysis will be based on your consent in accordance with Section 25(1) of the German Federal Act on Privacy in Telecommunications and Telemedia (Teledienstedatenschutzgesetz, TDDDG) and Art. 6(1)(a) GDPR.

We are jointly responsible for tracking with “Meta Ireland” in accordance with Art. 26(1) GDPR. In order to determine the respective responsibilities for the fulfilment of the obligations under the GDPR with regard to joint processing, we have concluded an Agreement with Meta Ireland, which you can view here: https://www.facebook.com/legal/controller_addendum. For more information on how Meta Ireland processes personal data, including the legal basis on which Meta Ireland relies, the purposes and the options for data subjects to exercise their rights against Meta Ireland, please refer to their Privacy Policy at: https://www.facebook.com/about/privacy.

You can assert the rights mentioned in point 8 in connection with tracking through Meta CAPI both vis-à-vis us and vis-à-vis Meta Ireland. We then forward requests pursuant to Art. 15 to Art. 20 GDPR internally to Meta Ireland, because Meta Ireland is responsible for processing in accordance with the Agreement indicated above. In particular, you can withdraw your consent to tracking at any time at the bottom of the website by choosing “Manage tracking” and then “Reject all”.

5.3 Legal basis and processing of your data for the purpose of applying via the Talent Site The processing of your personal data when you apply via the Talent Site serves to process and carry out the application procedure. In the first phase, we mainly process your answers in relation to your expectations, to subject-specific questions and your contact details, which you provide to us via the Talent Site. At a later stage, we may process additional personal data from you in accordance with point 4.1, e.g. if you provide us with further information about yourself in the course of further contact.

The personal data you provide as part of this application process will be processed exclusively for the purpose of processing your application in accordance with Art. 6(1)(b) GDPR. It serves in particular to assess your individual suitability for the advertised position and compared to other applicants.

To carry out the application process, we may use specialised HR recruiters as our service providers. Either the HR recruiters process the information received in accordance with our instructions and if necessary contact you to request additional information, or we may receive your personal data from HR recruiters who transmit your data to us from their own applicant pool. We also use various IT service providers in order to provide the website. We have concluded order processing contracts with the service providers, who act exclusively on our instructions and do not pursue their own purposes in the processing of personal data, which ensure that they process the personal data exclusively on our instructions.

Otherwise, your application will be processed as described in point 4.

6. Security, SSL technology We take appropriate technical and organisational measures to protect personal data against accidental or deliberate manipulation, loss, destruction and unauthorised access. These measures are regularly optimised and upgraded to reflect the state-of-the-art. Personal data transferred between your computer or mobile device and our server is always encrypted (Secure Socket Layer (SSL) procedure).

7. Data subject rights 7.1. Right of access You have the right to request information from us at any time regarding data about you that are stored by us, as well as their origin, recipients or categories of recipients to whom the data are passed on and the purpose of storage.

7.2. Right of withdrawal If you have provided your consent to the use of your data, you can revoke it at any time with future effect and without stating reasons.

7.3. Right to rectification If the personal data concerning you that we store is incorrect you can instruct us to correct it at any time.

7.4. Right to erasure and blocking You have the right to instruct us to block or erase the personal data concerning you that we store. Personal data is generally erased within 2 working days of the data subject exercising this right. If it is not possible for us to erase your personal data due to statutory, contractual, tax or commercial law archiving requirements or for other legal reasons, the data can be blocked instead of erased. After the erasure of your data it is no longer possible for us to provide information about it. Application data are erased 6 months at the latest after the end of the application process.

7.5. Right to data portability If you instruct us to transfer your personal data to you, we will send the data to you or another controller in a structured, commonly used and machine-readable format. However, the latter only applies if it is technically feasible.

7.6. Contact for exercising data subject rights When you send an e-mail to marketing.de@leaseplan.com or a letter to LeasePlan Deutschland GmbH, Lippestr. 4, 40221 Düsseldorf, we will store the data that you provide to us (your e-mail address, or your name and telephone number) in order to respond to your question or comply with your request. We delete all data in this connection when it is no longer necessary to store it, or we restrict the processing of that data if we are required to comply with statutory archiving requirements.

8. Right to lodge a complaint with a supervisory authority You have the right to lodge a complaint with the competent supervisory body regarding the processing of your personal data if you believe that your rights under the GDPR have been infringed.

9. Amendment of this privacy policy Due to the rapid development of the Internet and the ongoing development of case-law, we reserve the right to adapt this Privacy Policy to technical and legal requirements at any time. In addition, please refer to our general data protection provisions for our websites (https://www.leaseplan.com/de-de/datenschutz/.) Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6(1)(a) GDPR serves as the legal basis for the processing of personal data.

Last updated: 29/11/2024