Privacy Statement

Last updated: 17-5-2021

LeasePlan is committed to protecting the personal information processed by us. Compliant privacy and information security practices are therefore integral components of LeasePlan’s Services, corporate governance, risk management and overall accountability. We only process such personal information as is necessary for our business activities and the provision of the LeasePlan Services.

LeasePlan Privacy Pledges

Whenever and however we process your personal information:

  • Transparent: We help you understand how your data is collected and used.
  • Privacy by design: We ensure that our Services are privacy friendly.
  • Control: We provide you with an easy manner to access, correct or delete your data.
  • Safe with LeasePlan: We secure your data as best as we can, and personal information is only shared with third parties when necessary and under appropriate conditions.
  • Innovating and responsive: We keep thinking of ways how to improve our Services and your privacy and are open for all suggestions and complaints.

This Privacy Statement informs you of our privacy practices. Please visit the local version of this Privacy Statement in the country you are using LeasePlan’s Services, as to be found on the local website of a LeasePlan leasing entity.

Please read this Privacy Statement carefully so you understand how we collect and use your personal data.

Download file

1. Scope of this Privacy Statement

This Privacy Statement (“Statement”) describes our policy regarding the processing of personal data collected from:

I. Website visitors/users (“Website Visitors”); II. Business Clients (“Clients”); III. Clients’ employees/Drivers (“Drivers”); IV. Private lease clients (including one-person businesses) (“Private Lease Clients”); V. Private buyers of used vehicles (“Private Buyers”); VI. Professional buyers of used vehicles (“Traders”); and VII. Suppliers of goods and services (“Suppliers”).  (or individual and company prospects, in any of the above categories).

We collect and use your personal information we receive via registration on our website, our various vehicle and fleet leasing, management, and driver mobility services and in our business activities, as further described in Section 1 (“Services”). 

This Privacy Statement does not apply to the following affiliates and/or services:

  • Euro Insurances DAC or LeasePlan Insurance;
  • PowerD or LeasePlan Energy;
  • CarNext B.V. and its affiliates;

    Or to the services provided by these affiliates, which are governed by separate privacy statements.

    Please also note that any processing of your personal information via our telematics services will take place under the applicable Telematics Privacy Statement. Other specific services may be subject to specific privacy statements.  

Responsibilities of Business Clients Insofar as Clients in their capacity as employers have access to personal information of their employees, the Client is the data controller responsible for the processing and use thereof in such capacity. This Privacy Statement does not apply to the processing and use of personal information of employees by Clients (employers).

2. Who we are

The LeasePlan Portugal is the company responsible for the processing of your personal information (data controller): Lease Plan Portugal – Comércio e Aluguer de Automóveis e Equipamentos Unipessoal, Lda., Lagoas Park, Edifício 6, 2740-244 Porto Salvo

LeasePlan Corporation N.V. and LeasePlan Global B.V., will sometime be joint data controllers:  Address: Gustav Mahlerlaan 360, 1082 ME Amsterdam, the Netherlands LeasePlan Portugal and LeasePlan Corporation N.V. and LeasePlan Global B.V. are jointly called “LeasePlan” and “we”, “our” or “us”.

3. How we collect your data

LeasePlan and our service partners collect personal data in various ways, which include

  • Offline

    We collect personal information from you offline, e.g., when you visit our experience stores, place an order over the phone, or contact customer service.

  • Online

    We collect your personal information when you visit our websites or social media channels: if your social media accounts are linked to your Services account, or you share information from our websites on your social media platforms, you share the data from your social media accounts with us, for example, your name, email address, photo, contacts list and any information that is accessible, or to which you have given us access.

We process your personal information when you initiate the procurement process via our online services by registering on our platform.

Information is gathered both online and offline that allows us to initiate the contract, particularly to evaluate and approve the leasing procedure, or to ensure compliance with the regulatory procedures to which LeasePlan is subject.
  • Through the Services

    Most of the data we collect are in relation to the vehicle management services we provide to you as the driver and to our Client, your employer, if you are using a company car. This starts with the registration of the contract and continues when we communicate with you about our Services, e.g., to arrange for periodic maintenance and repairs. We may also process your data when your vehicle inadvertently is involved in an accident, to ensure that we restore mobility and handle any damage, or where we receive are the recipient of traffic fines in relation to your leased vehicle. Next to our core-leasing activities, we also provide several other related services, such as e-mobility services, fuel card and EV recharge services, electrical chargers, car rental from rent-a-car companies, and roadside assistance. Another service we provide relates to sales of used vehicles.

  • From Other Sources

    We receive your personal information from other sources, for example:

  • Drivers’ employers if you use a company car;

  • The relevant authorities (e.g., police) where we receive received traffic fines in relation to your leased vehicle;
  • From our independent Service Partners who assist us in providing our leasing and other services to you, including car dealerships, car maintenance providers, body repair shops;
  • Publicly available databases, credit reference agencies and other sources;
  • Visiting our websites or social media channels;
  • Joint marketing partners when they share the information with us.

We need to collect personal information to start the contract provide the requested Services to you or to handle queries, questions, comments, complaints related to our Services. If you do not provide the information requested, we may not be able to start the contract, provide the Services or respond to your request. If you disclose any personal information relating to other persons directly to us or to our service providers, you represent that you have the authority to do so and to permit us to use the information under this Privacy Statement.

Monitoring of communications Subject to applicable laws, we will monitor and record calls, email, text messages and other communications we have with you. We do this for compliance with regulatory rules, self-regulatory practices, or procedures relevant to our business, to prevent or detect crime, to protect the security of our communication systems and procedures, and for quality control and staff training purposes.

According to the legislation in force, telephone calls, emails, text messages and any other communications with us, will be recorded and monitored to ensure compliance with regulatory requirements and procedures relevant to our business, to prevent and detect crime, protect the security of our communications systems and procedures, and for quality control and staff training purposes.

For example, where we are required by a regulator to record certain telephone lines () we will do so. In addition, where appropriate and having regard to data protection law, our monitoring will be to check for inappropriate content in communications. In limited and specific circumstances we may conduct short term carefully controlled monitoring of your activities where this is necessary for our legitimate interests or to comply with a legal obligation. We may do this for instance where we think fraud or other crime is being committed, where offenses are suspected and where the monitoring is proportionate to the disciplinary offense, or where we suspect non-compliance with anti-money laundering regulations to which we are subject. Telephone calls may be recorded for these purposes.

4. For which purposes we use your data

4.1 Data regarding website visitors

4.2 Data regarding clients

4.3 DATA PERTAINING TO DRIVERS (Employees of our Clients).

4.4 DATA PERTAINING TO PRIVATE LEASE CLIENTS (INCLUDING SOLE TRADERS AND PARTNERSHIPS) AND PROSPECTIVE CLIENTS.

4.5 Data pertaining to private buyers of used vehicles.

4.6 Data pertaining to professional buyers of used vehicles (Traders).

4.6 Data pertaining to professional buyers of used vehicles (Traders).

5. Sharing data with third parties

In addition to what is indicated for each purpose above regarding sharing of personal information, we may also share personal information:

  • Within the LeasePlan group for the purposes described in this Statement.

    -You can consult the list and location of our Leaseplan entities here.

  • To our third-party service partners and providers, to facilitate services they provide to us.

    In order to provide you with our services, we often work closely with Service Partners and Service Providers. Our independent Service Partners assist us in providing our leasing and other services to you, and include car dealerships, car maintenance providers, body repair shops, and roadside assistance providers, but also rental service companies, and the administrators of our driver safety programs. 

    Service Providers are companies we retain that support us in running our business, for example to help us maintain our IT network and related infrastructure, and security and access controls to our premises.

We also use and disclose your personal information as necessary or appropriate, especially when we have a legal obligation or legitimate interest to do so:
  • To comply with applicable law and regulations.-

    -This may include sharing information with Credit Reference Agencies and Fraud Prevention Agencies.  Please see the relevant sections above for further information and contact details for these agencies.

  • To cooperate with public and government authorities.

    -These may include regulatory or governmental bodies to which LeasePlan is subject to

    -To respond to a request or to provide information we believe is important

    -These can include authorities outside your country of residence.

  • To cooperate with law enforcement.

    -For example, when we respond to law enforcement requests and orders or provide information we believe is important.

  • For other legal reasons.

    -To enforce our terms and conditions; and

    -To protect our rights, privacy, safety or property, and/or that of our affiliates, you or others.

  • In connection with a sale or business transaction.

    -We have a legitimate interest in disclosing or transferring your personal information to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings) Such third parties may include, for example, an acquiring entity and its advisors.

6. International transfer of personal data

Due to the global nature of our organization and Services, your personal information may be stored and/or processed in a country other than the one you reside in. 

Some of the non-EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available here. For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate measures, such as, such as through LeasePlan’s own Binding Corporate Rules or through contractual arrangements put in place with third parties. You may obtain a copy of these measures by contacting us via the contact form.

7. Security and retention

  • How we secure personal data

    We seek to use organisational, technical and administrative measures to protect personal information within our organization.

Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure.  If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us in accordance with the [Contact details](targetBlank:https://app-eu.onetrust.com/app/#/webform/72945227-736f-45b6-b207-a2897f3f26b4 ) provided in this Statement.
  • How long we retain personal data

    We will retain your personal information for as long as necessary or permitted in light of the purposes outlined in this Statement and consistent with applicable law.  

    The criteria used to determine our retention periods include:  

    -Retention for our business relationship. The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you use a LeasePlan vehicle); 

    -Retention in case of legal obligation. Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or 

    -Retention to protect our legal position. Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

    -Retention in case of claims. We will retain your personal information for the period in which you might legally bring claims against us (as relevant).  

    -Retention in accordance with regulatory requirements. We will retain your personal information where we are required to do so by regulatory regimes and regulations applicable to us (in the UK this includes the FCA regulatory regime).

    -Prospects. We will retain your contact details for our marketing purposes (as above) for a maximum of two years unless you tell us within that period that you wish to unsubscribe or withdraw your consent.

    -Retention of CCTV images. We apply a separate criteria to retention of these records, as follows. We retain CCTV images for three months and after that they will be erased because we will not need to retain them for the purposes listed (above).

8. Children’s privacy

Our Services are not directed at individuals under the age of 18.

9. Your rights and contacting us

Your rights

If you would like to request to review, correct, update, suppress, restrict or delete your personal information processed by us, object to the processing of personal information, to object to automated decision making or if or if you would like to request to receive an electronic copy of your personal information for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), you may contact us via the contact form. We will respond to your request consistent n accordance with applicable law.

In your request, please make as clear as possible what personal information your request relates to.  For your protection, we will only implement requests with respect to the personal information associated with the particular email address as you indicated in the contact form, and we may request you to provide verification of your identity before implementing your request.  We will try to comply with your request as soon as reasonably practicable and in any event within any applicable legally required timeframes.

Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that began prior to requesting such change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed. 

Questions? If you have any questions or complaints about this Statement, please contact us via the contact form.

Because email communications are not always secure, please do not include sensitive information in your emails to us.

Additional information regarding the EEA You may also:

  • Contact our Data Protection Officer (“DPO”) via the contact form or via: LeasePlan Corporation N.V., attn. Data Protection Officer, Gustav Mahlerlaan 360, 1082 ME Amsterdam, the Netherlands
  • Lodge a complaint with a data protection authority for your country or region or where an alleged infringement of applicable data protection law occurs.  A list of data protection authorities is available here.

10. Changes to this Privacy Statement

We may change this Statement at any time. Please take a look at the “Last Updated” legend at the top of this page to see when this Statement was last revised.  Any changes to this Statement will become effective when we post the revised Statement on the Services. Your use of the Services following these changes means that you accept the revised Statement.