Privacy policy
We would like to take this opportunity to inform you about the processing of your personal data in connection with your visit to the website "https://www.hannover-leasing.de" (the "Website"). The protection of your privacy and your personal data is important to us.
1. RESPONSIBLE BODY
The controller within the meaning of the General Data Protection Regulation ("GDPR") with regard to the processing of personal data in connection with the website is (unless otherwise stated in this data protection notice; see section 3(II) below) the:
HANNOVER LEASING GmbH & Co. KG
Wolfratshauser Street 49
82049 Pullach
Phone: +49 (0)89 211 04-0
Fax: +49 (0)89 211 04-210
E-mail: kontakt@hannover-leasing.de
Website: https://www.hannover-leasing.de
2. DATA PROTECTION OFFICER
You can reach our data protection officer using the following contact options:
Data Protection Officer
fox-on Datenschutz GmbH
Tel. 02266/9015920
E-Mail: DPO+HL@fox-on.com
Any data subject can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.
3. PROCESSING OF YOUR DATA
(i) processing of data when using the website for informational purposes only
If you only use the website for informational purposes, i.e. if you do not actively transmit information to us, we do not collect any personal data (subject to the further information in this data protection notice), with the exception of the data that your browser automatically transmits, in particular to enable you to visit the website. This includes, for example
- IP address of the requesting computer
- Date and time of access
- Amount of data transferred in each case
- Browser type and browser version
- Operating system used
- Referrer URL
The aforementioned processing of personal data is basically carried out for the purpose of enabling the use of the website (connection establishment) or to improve the attractiveness and usability of the website and, if necessary, to recognize technical problems and malfunctions on the website at an early stage.
Individual data (information regarding the browser; see above) is stored in individual cases for a maximum period of four weeks. Insofar as the processing of the aforementioned data involves personal data, the corresponding processing of this data is based on Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest; the legitimate interest follows from the aforementioned purposes).
In the course of this data processing, the above-mentioned data may also be transmitted to our hosting service provider. The service provider is used to provide the website and ensure its permanent availability. A corresponding order processing contract has been concluded with the hosting provider, which obliges the service provider to comply with the relevant data protection regulations and guarantees a uniform level of data protection.
(II) CONTACT REQUESTS
If you contact us via the contact options provided on the website (e-mail addresses, telephone numbers, etc.), the personal data you provide in this context (such as your name, e-mail address) will be processed in order to respond to your request.
The legal basis for the processing of the aforementioned personal data is Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interests; the legitimate interest arises from the fact that the action desired by the user (e.g. answering an inquiry) can only be carried out through corresponding data processing). If the contact is aimed at the conclusion of a contract, the legal basis for the processing is (additionally) Art. 6 para. 1 sentence 1 lit. b GDPR (fulfillment of contract or pre-contractual measures).
Please note that with regard to individual contact forms on the website, not only HANNOVER LEASING GmbH & Co. KG processes the relevant personal data, but also CORESTATE Capital Group GmbH and subsidiaries of the HANNOVER LEASING Group (e.g. HANNOVER LEASING Investment GmbH).
(III) COOKIES
The website partly uses so-called cookies. Cookies are small text files that are stored on your computer and saved by your browser.
We use so-called session cookies to recognize that you have already visited individual pages of our website. Session cookies are only stored for the duration of your visit to the website and are automatically deleted when you close your browser or leave the website. These cookies do not contain any personal data, but merely identify the browser used to access the website. They are used to make the website more user-friendly, effective and secure and to make it easier for you to navigate through the website.
We also use so-called temporary cookies. These make it possible to store specific, device-related information on the user's access device (PC, smartphone, etc.), even beyond a single session. They are used, for example, to retain page settings for future visits to the website. These cookies remain stored on your end device for a maximum period of four weeks (usually for a shorter period). These cookies enable us to recognize your browser on your next visit.
The aforementioned cookies are used as far as possible to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function). The legal basis for the corresponding processing of personal data is Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest; the legitimate interest follows from the above-mentioned purposes, in particular optimization of website use) insofar as the cookies concerned are technically necessary for the provision of the services you have requested.
If the cookies used are not to be classified as technically necessary, we will obtain your consent for this in accordance with Art. 6 para. 1 lit. a) GDPR in conjunction with § 25 para. 1 TTDSG.
As a rule, you can configure your browser so that no cookies are stored or a message always appears before a new cookie is created. However, deactivating cookies may mean that you cannot (fully) use all the functions of our website.
Insofar as other cookies or cookie-like tools (e.g. tools for analyzing your surfing behavior) are used on or in connection with the website, these are treated separately in this data protection information (see in particular below under section 3(V)).
(IV) iTHEMES SECURITY
This website uses the "iThemes Security" tool. In this context, the IP addresses of visitors to the website are processed in particular in order to detect malicious activities and protect the website from certain types of attacks. The IP addresses are only stored in one of our local databases and are not transmitted to third parties. The legal basis for the corresponding processing of personal data is Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest; the legitimate interest is that we need to protect the website against corresponding attacks by third parties).
In connection with iThemes Security, a connection to Google's reCAPTCHA tool can also be established. This is done in particular to prevent automated website calls by bots. When the reCAPTCHA tool is activated, data may be transmitted to Google servers.
We have concluded a contract processing agreement with Google (see also section 4 below). We have also concluded the European Commission's standard data protection clauses (SCC) with Google to safeguard data protection in the event of a possible transfer to a third country (e.g. the USA). Google has also certified itself to the EU-US Data Privacy Framework and has thus undertaken to guarantee a level of data protection that is equivalent to the level of data protection in the EU.
(V) MATOMO
This website uses the web analysis service Matomo to analyze the use of the web pages across all pages. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.
The information that Matomo collects about your use of this website is stored on our server (e.g. pages accessed, date and time of the request, referrer URL (previously visited page), browser type and version, operating system used). Your IP address is anonymized before it is stored. Data processing is carried out on the basis of our legitimate interests (Art. 6 para. 1 letter f GDPR). The information generated about the use of this website is not passed on to third parties.
(VI) INVESTOR PORTAL AND SALES PARTNER PORTAL
The investor portal (KdPortal) and the sales portal (VpPortal) are integrated into our website. Investors can use the investor portal to view their investments and the associated documents; brokers can use the broker portal to view the investments they have brokered and the associated documents.
Both portals are technically operated by the service provider Xpecto AG, Ergoldinger Str. 2a, 84030 Landshut, Germany. The content is displayed when you click on "Load content" in the corresponding placeholder and thus give your consent for your IP address and the page of origin to be transmitted to the service provider. The legal basis for the data transfer is your consent (Art. 6 (1) (a) GDPR).
4. DISCLOSURE OF DATA TO THIRD PARTIES
The personal data collected in the course of using the website will - subject to other cases expressly described in this data protection notice - not be passed on to third parties or transmitted in any other way without your consent.
We may use (technical) service providers who process personal data on our behalf (e.g. IT service providers). These service providers process the relevant personal data exclusively in accordance with our instructions (processors). The legal basis for such data processing is generally Art. 6 para. 1 lit. f) GDPR (legitimate interest; see above for the corresponding legitimate interests). Corresponding data processing agreements have been concluded with the processors used in accordance with Art. 28 GDPR.
In addition, data may be passed on within our group of companies. This transfer is also regularly based on our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. The transfers are either necessary for administrative purposes and thus covered by the small group privilege pursuant to Recital 48 of the GDPR, or the transfer is based on a service provided by another company within the group of companies for the controller. In the latter case, the transfer is covered by an intra-group data processing agreement pursuant to Art. 28 GDPR. In this context, a connection to other company websites of our group companies may also be established via our website (in particular to the website www.corestate-capital.com).
We may also disclose your personal data to third parties if we are legally obliged to do so (e.g. at the request of a court or law enforcement agency). The legal basis for such data processing is Art. 6 para. 1 lit. c GDPR (legal obligation).
5. HANDLING OF APPLICANT DATA
If you would like to apply for a job advertised with us via our website at https://www.hannover-leasing.de/karriere/, the following data protection information applies: https://www.hannover-leasing.de/datenschutzerklaerung-bewerber/.
6. DURATION OF THE STORAGE OF YOUR PERSONAL DATA
Insofar as no other storage period results from the other provisions of this data protection notice, we only store your personal data obtained by us in connection with the use of the website for as long as this is necessary in particular to process your inquiries to us or only for the period necessary to achieve the purpose of storage, thereafter only to the extent and insofar as we are obliged to do so due to mandatory statutory storage obligations. If we no longer need your data for the purposes described above, it will only be stored for the respective statutory retention period and will not be processed for other purposes.
7. RIGHTS OF DATA SUBJECTS
You have the right to request information from us at any time about the personal data we have stored about you. Insofar as the legal requirements are met, you also have the right to rectification, erasure or restriction of processing of the relevant personal data and the right to object to the processing of your personal data by us and to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format (you can transmit this data or have it transmitted to other bodies).
If you have given your consent to the use of personal data, you can revoke it at any time for the future.
If you are of the opinion that the processing of your personal data by us violates the applicable data protection law, you can lodge a complaint with a competent supervisory authority for data protection.
8. SECURITY OF YOUR DATA
We use suitable technical and organizational means to protect the data you transmit to us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously monitored and improved in line with technological developments and organizational possibilities.
