This Privacy Policy was last updated and is effective as of May 6, 2024.
The following Privacy Policy provides an overview of how your data is recorded and processed by GC Leasing AZ LLC, GRENKE Leasing IL LLC and its U.S. affiliates and subsidiaries (the “Company”).
With the following information, we give you an overview of how we process your personal data (also referred to as personal information in applicable data protection laws) as well as certain of your rights under applicable laws when you use our website and services. What specific data is processed in detail and how it will be used depends on the requested or agreed services or the basis for which the information was provided to us. In some cases as indicated by the context of the clauses below of this Privacy Policy, certain provisions of our Privacy Policy apply only to individuals and others who are subject to specific laws (such as to persons who are data subjects under the European General Data Protection Regulation (GDPR) or as to persons who are consumers under U.S. state data privacy legislation such as the California Consumer Privacy Act (CCPA)).
Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, do not use our website or services. By accessing or using our website and services, you agree to this Privacy Policy.
We may make changes to this Privacy Policy from time to time. Your continued use of this website and services after we make changes is deemed to be acceptance of those changes.
This Privacy Policy applies only to our website and other services. Our website may contain links to other websites. We have no control over the privacy practices or the content of any of our business partners, advertisers, sponsors, or other third parties we link to from our website.
We do not endorse, approve, or certify these other websites, and we do not guarantee the accuracy, completeness, efficacy, or timeliness of the information contained on those websites. You should check the applicable privacy policy of the website sponsor when linking to other websites.
1. Who is responsible for data processing and who can I contact concerning such matters?
Contact details as follows:
GC Leasing AZ LLC
3200 E Camelback Road #253
Arizona, Phoenix 85018
USA
Phone: +1 602 515 8057
E-mail: [email protected]
GRENKE Leasing IL LLC
1100 Lake Street
Oak Park, Illinois 60301
USA
Phone: +1 708 443 1170
E-mail: [email protected]
You can reach our operational data protection officer at:
GC Leasing AZ LLC
Attention: Data protection officer
Thomas Sauerteig
3200 E Camelback Road #253
Arizona, Phoenix 85018
USA
Phone: +1 602 515 8057
E-mail: [email protected]
GRENKE Leasing IL LLC
Attention: Data protection officer
Juergen Eichinger
1100 Lake Street
Oak Park, Illinois 60301
USA
Phone: +1 708 443 1170
E-mail: [email protected]
2. Who is eligible to use the website and services?
Our website and services is not intended for children under 18 years of age. No one under age 18 may provide any personal data to us. We do not knowingly collect personal data from children under 18. If you are under 18, do not use or provide any information on our websites or services. If we learn we have collected or received personal data from a child under 18, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us. We do not sell personal data of children under the age of 16.
3. What sources and data do we use?
We process personal data that we receive from our customers as part of our business relationship. In addition, we process – as far as necessary for the provision of our services – personal data that we might collect from publicly accessible sources (e.g. debtor directories, land registers, trade and association registers, press, internet) or that was obtained from our distribution partners or from other third parties (e.g. a credit agency).
Relevant personal data includes:
and other data comparable to the aforementioned categories.
We may collect, use, or process personal data, which is classified as sensitive information under certain US or foreign legislation only in accordance with applicable law.
4. What do we process your data for (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of applicable law, including U.S. federal, state and local laws and other laws applicable to our activities and processing activities such as the GDPR.
With respect to individuals who are data subjects under GDPR, we process personal data:
a. For the fulfilment of contractual obligations
Data is processed in order to provide financial services as part of the execution of our contracts with our customers or to carry out pre-contractual actions, which are carried out upon request. The purposes of data processing are primarily geared towards the specific product (e.g. leasing, factoring) and may include, but are not limited to, needs analysis, consulting and to perform transactions. Further details on the purposes of data processing can be found in the relevant contract documents and terms and conditions.
b. In furtherance of our legitimate interests
As far as necessary, we process your data beyond the actual fulfilment of the contract for the protection of our legitimate interests or those of third parties, in particular:
For the purposes of examining possible credit risks and default risks as well as preventing criminal offences, we provide various credit bureaus with data on the application and the applicant. These credit bureaus may then provide us with relevant data about such applicants if we have credibly demonstrated our legitimate interest.
In addition, in the context of our contracting with individuals for our products or services we may transfer personal data collected concerning such individual’s application, the execution and termination of the business relationship as well as data on non-contractual or fraudulent behavior to various credit bureaus.
Transfers are also made to the extent necessary to safeguard our legitimate interests or those of third parties and provided these interests do not outweigh the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data.
The data exchange with the credit bureaus also serves the fulfilment of legal obligations to carry out creditworthiness checks of customers.
Credit agencies process the data obtained and also use it for the purposes of profiling (scoring) in order to provide their contractors and customers with information in order to, inter alia, make assessments on the creditworthiness of natural persons. As to data subjects under the GDPR, this information is only transferred outside the European Economic Area and Switzerland if there is an adequacy decision by the European Commission or other appropriate assurance mechanism in place (such as certification under the EU-US Privacy Framework Program).
c. On the basis of your consent
Insofar as you have given us your consent to process your personal data for specific purposes (e.g., disclosure of data to affiliated companies, or analysis of payment transaction data for marketing purposes), the legality of this processing is assured on the basis of your consent. Consent that has been issued can be revoked at any time. As to data subjects under the GDPR, this also applies to the revocation of declarations of consent that were issued to us before the GDPR came into effect, i.e. before 25 May 2018; provided that the revocation of consent does not affect the legality of the data processed until the revocation.
d. Based on legal requirements, legitimate interests or in the public interest
In addition, we are subject to various legal obligations, i.e. legal requirements (e.g., anti-money laundering laws and tax laws) as well as certain bank/financial services-related supervisory requirements. The purposes of the processing include, but are not limited to, the creditworthiness check, identity and age checks, prevention of fraud and money laundering, the fulfilment of tax auditing and reporting obligations, and the assessment and management of risks.
5. Who receives my data?
Within our organization, the entities that gain access to your data are those who need it in order to fulfil our contractual and legal obligations. Our service providers and vicarious agents may also receive data for these purposes. These are companies in the categories of financial services, IT services, logistics, printing services, telecommunications, debt collection, advising and consulting, as well as sales and marketing.
With respect to the disclosure of data to recipients outside our company, we may only disclose information about you if we are required to do so by law or if you have given us your consent to do so. Under these conditions, recipients of personal data may be, for example:
Other entities to fulfill the purpose for which you provide it, with your consent or other entities disclosed by us when you provide the information.
We may also disclose your personal data:
6. Is data transmitted to a third-party country or to an international organization?
If you are located outside of the U.S. or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information to a country or jurisdiction that does not have the same data protection laws as your jurisdiction.
As to data subjects under the GDPR, a transfer of data to third parties in countries outside the European Union (so-called third-party countries) takes place, as far as
7. How is my data processed by the Company?
Unless otherwise stated, we process your data either to fulfill your requests made with us, for business purposes, or based on our legitimate interests as follows:
a. Usage data
Every time you access a page on our website and retrieve a file, this process automatically saves general data to a log file. The storage is exclusively system-related and is purely for statistical purposes or to report criminal offences in exceptional circumstances.
We use this data to improve our websites and to present content tailored to your interests on various sites in the network and on multiple devices. As part of this process, usage data is not merged with personalized data. Should you decide to provide us with your data, this data will be backed up securely during the entry process. The same applies to the storage in our system. For security reasons, we store your IP address. This can be accessed in case of a legitimate interest.
We do not save your browser history. A transfer of data to third parties or any other evaluation does not take place, unless there is a legal obligation to do so.
In detail, the following data record is saved each time it is accessed:
b. Contact forms and other enquiries
In order to be able to give you appropriate information as part of a request made by you via our contact forms, the appropriate affiliated company of ours will be identified after inquiring about your specific interest at the top of the applicable web page. If you contact us (e.g. via contact forms), the designated company will save your data in order to process your request or in case any further correspondence is required. If several companies are listed there, they will process your personal data as joint data processors. Further information on joint responsibility can be obtained by sending an e-mail either to [email protected] for GC Leasing AZ LLC or to [email protected] for grenke Leasing IL LLC.
If you provide specific information about your needs or your person in the context of other enquiries (e.g. during our leasing test), we will save your data for the purpose of processing your request and in the event that further correspondence should take place.
If you expressly agree to be contacted by e-mail, telephone or postal mail within the scope of the contact form, you grant the Company and its affiliated companies the opportunity to inform you in future by telephone, e-mail or post about current products and services, in the selected category. We may also store your data for the purpose of sending you our newsletter. In addition, we store your IP address and the date of your registration in order to be able to prove your newsletter subscription in case of doubt. You can object to the use of your data for advertising purposes at any time or unsubscribe from the newsletter at any time by clicking on the unsubscribe link in the footer of the newsletter.
If you do not give your consent, your data will be deleted after your request has been processed. Excluded from this undertaking is data for which legal or other mandatory storage obligations exist.
Within the framework of our contact forms we work with the Eloqua, a service of the provider ORACLE Nederland B.V., Hertogswetering 163, 3543 AS Utrecht, P.O. Box 40387, 3504 AD Utrecht, The Netherlands. For further information on the processing of data by Eloqua, please refer to the additional notes under g.
c. Registration
The data provided by you during registration for use of our website will be used by us to enable you to use our services.
We collect the following data for the registration process:
d. Newsletter
We are happy to inform you on the basis of your consent about the latest news with our newsletter.
In order to receive the newsletter, you must provide us with your name and e-mail address. You can also enter and submit further optional information. After you have submitted your e-mail address, you will receive an e-mail from us to the e-mail address you have specified, in which you must click a confirmation link to verify the e-mail address you provided.
Your data will be stored by us only for the purposes of sending our newsletter. In addition, we store your IP address and the date of your registration in order to be able to prove the newsletter subscription in case of doubt. In addition, in order to measure the success of our newsletter, we collect data on whether the newsletter is opened, when it is opened and which links are clicked.
For the delivery of our newsletter we work with the Eloqua service of the provider ORACLE Nederland B.V., Hertogswetering 163, 3543 AS Utrecht, P.O. Box 40387, 3504 AD Utrecht, The Netherlands. Newsletters sent with the help of Eloqua use tracking technologies. We use this data primarily to find out which topics are of interest to you by tracking whether our emails are opened and which links you click on. We then use this information to improve the e-mails we send you and the services we provide, and to link them to existing tracking or profiling information. We will not be able to track your emails if you have disabled the display of images in your email program by default. In this case, however, the newsletter will not be displayed in full and you may not be able to use all the features. If you display the images manually, the above-mentioned tracking will take place. For further information on using Eloqua, please refer to the additional notes under g.
You can unsubscribe from the newsletter at any time by clicking the unsubscribe link at the bottom of the newsletter.
e. Use of cookies
aa) General information
In order to make your visit to our websites more pleasant and to enable the use of certain functions, we use so-called cookies on various sites. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our affiliates to recognize your browser on your next visit (so-called persistent cookies).
Cookies cannot access other files on your computer or identify your email address.
bb) Use of cookies
Like most websites you visit, our website also uses cookies to improve the user experience on both one-time and repeated website visits. This allows you to quickly and easily switch between sites, save your configurations, and use third-party tools (such as YouTube videos) on the website.
Cookies are either placed on our website (first party cookies) or on other websites whose content appears on our website (third-party cookies). These third-party providers (such as Facebook) may set cookies if you are logged in to their pages and visit our website. We have no influence on the cookie settings of these websites. Please visit the third-party websites for more information on their use of cookies.
cc) Legitimacy of the storage of cookies
The essential, functional and statistical cookies are stored on the basis of our legitimate interests for the optimization and needs-based design of our website.
Cookies are stored for marketing purposes on the basis of the user's consent. These cookies are therefore only set if the user agrees to the storage by issuing their consent to the cookie notification on the website.
dd) Deactivating and deleting cookies
The setting you choose on the first visit in response to the cookie notification will be saved. The selected settings can be adjusted here in the privacy settings at any time.
Call us
Get in touch with us via
Phoenix, Arizona:
Mo – Fr 8.00 am – 5.00 pm
Chicago, Illinois:
Mo – Fr 8.00 am – 5.00 pm
Statistical cookies
Statistical cookies collect information about how a website is used, e.g. the frequency of site visits and whether a user receives error messages from a page. These cookies do not store any information that would allow the user to be identified. The information collected is aggregated and therefore evaluated anonymously. These cookies are used exclusively to improve the performance of a website and thus the user experience.
Cookies for marketing purposes
Cookies for marketing purposes are used to display ads that are relevant to the user and tailored to their interests. They are also used to limit the number of times an ad is shown and to measure the effectiveness of advertising campaigns. They register whether or not you have visited a website. This information can be shared with third parties, such as advertisers. Cookies to improve targeting and advertising are often linked to third party website functions.
f. Range analysis using Piwik
Based on our legitimate interests under the GDPR, (i.e. interest in the analysis, optimization and economic operation of our website), we use Piwik, a software for the statistical evaluation of user access.
Your IP address will be abbreviated before it is saved. However, Piwik uses cookies that are stored on users' computers and enable the user’s use of the website to be analyzed. In this case, pseudonymous usage profiles of the users can be created from the processed data. The information generated by the cookie regarding your use of this online content is stored on our server and not passed on to third parties.
You can revoke your consent to this data analysis cookie processing as follows:
g. Use of Eloqua
We use the Eloqua service to collect statistical data about the use of our website, to send our newsletters and to optimize our services accordingly. The Eloqua servers of the supplier ORA-CLE Nederland B.V., whose address is Hertogswetering 163, 3543 AS Utrecht, P.O. Box 40387, 3504 AD Utrecht, Netherlands, are located in the EU.
If you have consented to the use of cookies for marketing purposes, Eloqua will use corresponding cookies that are stored on your computer and that enable an analysis of the use of the website (hereinafter referred to as usage behavior) If you have already used a website that uses Eloqua, you may already have an Eloqua cookie. Even if this cookie is set on other websites, the information from your visit to our websites is only visible to us and is not shared with Oracle or any other users of the Eloqua system. It is also not possible for us to use this cookie to record or view information about your visits to any other websites.
If you enter personal data (e.g. in the contact form) during your visit to the website, these data will be processed with the usage behavior in order to offer you content on the website and in our newsletter that is geared to your interests, as well as to be able to send you news and information about our company or our range of services based on your data, which are geared to your individual interests. For this purpose, it is technically necessary that we combine your accrued and given data in user profiles and evaluate them for the aforementioned purposes. This is done internally and only for the aforementioned purposes.
For data subjects under the GDPR, the legal basis for the pseudonymous evaluation of the use of our website is your consent (Article 6 (1) (a) GDPR), which you may have given us in the course of using our website.
The information generated by the cookie about your use of this website is transferred to a server and stored there. On our behalf, Eloqua uses this information to evaluate your use of the website and to compile reports on website activity. If you wish to prevent the use of Eloqua cookies or the evaluation of usage behavior on your device in the future, this is possible via the following link: Eloqua Opt-Out
You can find further information on data protection in connection with the use of Eloqua here: Oracle Privacy Policy.
h) Use of the Facebook pixel
aa) Processed data
On our website we use the so-called “Facebook pixel” from “Facebook” (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland). With the Facebook pixel we can classify the visitors of our website into certain target groups in order to be able to show you advertisements ("Ads") on Facebook. The recorded data (e.g. IP addresses, information about the web browser, the location of the website, buttons clicked, possibly pixel IDs and other features) cannot be viewed by us, but can only be used in the context of displaying certain advertisements. When the Facebook pixel code is used, cookies are also set.
If you have a Facebook account and are logged in, your visit to this website will be assigned to your Facebook user account.
In order to exchange the respective data, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data that is collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: By integrating the Facebook Pixel, Facebook receives the information that you are visiting the corresponding site of our website and that you have accessed or clicked on one of our advertisements. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is the possibility that the provider will find out and save your IP address and other identification features.
• You can find out how the Facebook pixel is used for advertising campaigns at https://www.facebook.com/business/learn/facebook-ads-pixel
• You can find more information on Facebook's privacy policy at https://www.facebook.com/policy.php
• Further information on data processing by Facebook is available at https://www.facebook.com/about/privacy
bb) Purposes of the processing of data
We use these functions in order to be able to present you with offers that match your interests.
cc) Legal basis
For data subjects under the GDPR, we process your data because you have given your consent (Article 6 (1) (a) GDPR). We obtain your consent when you visit our website via the cookie banner.
dd) Storage duration and control options
We store your data as long as we need it for the respective purpose (display of interest-based advertising), or as long as you have not objected to the storage of your data or have revoked your consent.
The deactivation of the “Facebook Custom Audiences” function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#.
You can change your settings for advertisements in Facebook at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen,%20provided%20you%20are%20logged%20into%20Facebook
i) Use of Google Remarketing and Double Click
aa) Processed data
Google Remarketing and Double Click (now Google Ad Manager): We use Google Remarketing and Google Double Click from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With this technology, cookies are set which evaluate how you use our website and which enable your browser to be recognized when you visit websites that belong to the Google advertising network. For this purpose, the Google Analytics tracking code uses so-called double click cookies in addition to the Google Analytics cookies. These collect data on which third-party websites in the Google Display Network you have visited and which advertisements you have clicked on. In addition, data from first-party cookies (e.g. Google Analytics cookies) and third-party cookies (e.g. Google cookie for display preferences) are linked. This enables us to evaluate the display of advertisements and your interaction with these advertisements.
Google Ads Conversion Tracking: We use Google Ads Conversion Tracking. With this technology, cookies are set when you interact with one of our advertisements, e.g. click on it. Cookies are used to analyze what happens after you have interacted with an advertisement, e.g. whether you have bought our product, viewed the ad from a mobile phone, downloaded our app or signed up for a newsletter.
bb) Purposes of the processing of data
Google Remarketing and Double Click (now Google Ad Manager): We use this technology to present you with interest-based advertisements on other websites in the Google advertising network. The advertisements relate to content that you have previously viewed on our website.
Google Ads Conversion Tracking: We use this technology to improve our offers.
cc) Legal basis
For EU residents, we process your data because you have given your consent (Article 6 (1) (a) GDPR). We obtain your consent when you visit our website via the cookie banner.
dd) Storage duration and control options
The data that are collected via the Google functions are saved and regularly deleted.
You can prevent the storage of cookies by making the appropriate setting in your browser.
You can also prevent Google from collecting the data and processing the data by downloading and installing the browser add-on available under the following link.
Google Dynamic Remarketing and Double Click as well as Google Ads Conversion Tracking: You can object to the storage of cookies and the associated data processing by deactivating personalized advertising via your advertising settings. You can deactivate the use of cookies by third-party providers via the deactivation website of the net-work advertising initiative. Alternatively, you can deactivate double-click cookies by installing a browser plug-in.
This can restrict the functionality of our website.
You can find further information in the Google privacy policy
j) Use of Linkedin Insights and Conversion Tracking
aa) Processed data
We use the LinkedIn Insight Tag of the provider LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA for this website. The LinkedIn Insight Tag creates a LinkedIn "browser cookie" which collects the following data:
• IP address,
• time stamp,
• page activities,
• demographic data from LinkedIn, if the user is an active LinkedIn member.
This technology enables us to generate reports on the performance of our advertisements and information on website interaction. For this purpose, the LinkedIn Insight Tag is integrated on this website, which establishes a connection to the LinkedIn server if you visit this website and are logged into your LinkedIn account at the same time.
bb) Purposes of the processing of data
We process your data in order to evaluate campaigns and to collect information about website visitors who may have reached us through our campaigns on LinkedIn.
cc) Legal basis
For data subjects under the GDPR, we process your data because you have given your consent (Article 6 (1) (a) GDPR). We obtain your consent when you visit our website via the cookie banner.
dd) Storage duration and control options
We store your data as long as we need it for the respective purpose (campaign evaluation), or you have not objected to the storage of your data or have revoked your consent.
The collected data is encrypted. More information can be found here. Here you will find the LinkedIn privacy policy and the LinkedIn opt-out.
k) Integration of Google Maps
We integrate the maps of the service "Google Maps" provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The data processed may include, but is not limited to, the IP addresses and location data of users, which, however, are not collected without their consent (usually performed as part of the settings of their mobile devices). Unless you have expressly consented to the use, our legal basis for this data processing is our legitimate interest in order to design our website to meet your needs. The data could also be processed in the USA.
Privacy policy: https://www.google.com/policies/privacy/ , Opt-Out: https://adssettings.google.com/authenticated
8. How long will my data be stored?
Unless explicitly stated in this privacy statement, the usage and registration data stored with us is deleted as soon as it is no longer required for its intended use and the deletion does not con-flict with any statutory retention obligations.
We process and store other personal data as long as it is necessary for the fulfilment of our con-tractual and legal obligations. It should be noted that our business relationship is a continuing obligation, which is designed to last for years. If the data is no longer required for the fulfilment of contractual or legal obligations, it is regularly deleted, unless its - temporary - further processing is necessary for the following purposes:
8. How long will my data be stored?
Unless explicitly stated in this Privacy Policy, the usage and registration data stored with us is deleted as soon as it is no longer required for its intended use and the deletion does not con-flict with any statutory retention obligations.
We process and store other personal data as long as it is necessary for the fulfilment of our con-tractual and legal obligations. It should be noted that our business relationship is a continuing obligation, which is designed to last for years. If the data is no longer required for the fulfilment of contractual or legal obligations, it is regularly deleted, unless its - temporary - further processing is necessary for the following purposes:
9. Which data protection rights do I have if I am covered by the GDPR?
Every data subject under the GDPR has the following rights with respect to us:
With regard to the right of access and the right to erasure, the restrictions under section 34 and 35 BDSG apply.
In addition, there is a right to appeal to a competent data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).
You may revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were issued to us before the GDPR came into effect, i.e. before 25 May 2018. Please note that the revocation is only applicable for the future. Processing that took place before the revocation is not affected.
To exercise these rights, contact:
Data protection officer
GC Leasing AZ LLC
Attention: Data protection officer
Thomas Sauerteig
3200 E Camelback Road #253
Arizona, Phoenix 85018
USA
or by E-mail: [email protected]
Data protection officer
GRENKE Leasing IL LLC
Attention: Data protection officer
Juergen Eichinger
1100 Lake Street
Oak Park, Illinois 60301
USA
or by E-mail: [email protected]
10. Am I obligated to provide data?
As part of our business relationship, you must provide the personal data required in order to en-ter into a business relationship and perform its associated contractual obligations, or the per-sonal data that we are required to collect by law. Without this information, we will generally not be able to conclude or execute the contract with you. In particular, according to the money laundering regulations, we are obligated to identify you prior to entering into a business relationship with you on the basis of your identification docu-ment and to record and save your name, place of birth, date of birth, nationality, address and identification data. In order for us to be able to fulfil this legal obligation, you must provide us with the necessary information and documents in accordance with the Money Laundering Act and im-mediately notify us of any changes during the course of the business relationship. If you do not provide us with the necessary information and documents, we may not enter into or continue your desired business relationship.
11. To what extent is there an automated decision-making process?
In principle, we do not use any fully automated decision-making processes in order to justify or maintain the business relationship. If we do use these procedures in individual cases, we will inform you about this or obtain your consent separately, if such notification or consent is required by law.
12. Does profiling take place with any of your data?
We sometimes process your data automatically with the aim of evaluating certain personal as-pects (profiling). For example, we use profiling in the following cases:
13. Information about GDPR Data Subjects´ right of revocation of consent to processing according to Art. 21 GDPR
1. Case-specific right of revocation
You have the right at any time, for reasons arising from your particular situation, to revoke your consent for the processing of personal data relating to you, which takes place on the basis of Ar-ticle 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data pro-cessing on the basis of a balance of interests); this also applies to profiling based on this provi-sion within the meaning of Art. 4(4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compel-ling legitimate grounds for the processing which override your interests, rights and freedoms or unless the processing serves the establishment, exercise or defense of legal claims.
2. Right to revoke your consent to the processing of data for direct advertising purposes
In individual cases, we process your personal data in order to perform direct advertising. You have the right to object at any time to the processing of personal data concerning you for such advertising, which includes profiling to the extent that it is related to such direct advertising. If you object to the processing for direct advertising purposes, your personal data will no longer be processed for such purposes. You can revoke your consent to such processing by sending such a written request to:
Data protection officer
GC Leasing AZ LLC
Attention: Data protection officer
Thomas Sauerteig
3200 E Camelback Road #253
Arizona, Phoenix 85018
USA
or by E-mail: [email protected]
Data protection officer
GRENKE Leasing IL LLC
Attention: Data protection officer
Juergen Eichinger
1100 Lake Street
Oak Park, Illinois 60301
USA
or by E-mail: [email protected]
14. What security measures do we employ?
We are committed to safeguarding the personal information you provide to us, and we maintain procedures and use technology designed for this purpose. We take several steps to protect the information we have about you, including the following:
You play a significant role in protecting your personal information. If you have registered on our website you are responsible for protecting the security of your user name and pass-word and you are responsible for any transaction made using your user name and pass-word.
Although we will take reasonable security precautions regarding your personal information collected from and stored on the website and otherwise held by us, because of the open nature of the Internet, we cannot guarantee that any of your personal information stored on our services or on those of our third parties, or transmitted to or from the Company, will be free from unauthorized access or disclosure. Accordingly, we disclaim any liability for any unauthorized access to, disclosure or damage to, interception of, theft, or loss of any data communications and/or person information. By providing personal information to us and/or using the website, you acknowledge that you understand and agree to assume these risks.
15. Disclaimers as to Links to Third Party websites
The privacy policy of an advertiser or promotional service and related websites or mobile apps that are linked to from or on our website may differ from ours. We encourage you to read such third party privacy policies before visiting such third party sites or responding to any related offer. We are not responsible for the data collection and use practices of nonaffiliated third parties to which our website may link.
16. Changes to Our Privacy Policy
The practices and policies contained in this Policy are subject to change and may be modified by the Company at any time. Any such material changes will be communicated through the website or through other reasonable means. For this reason, the Company encourages you to review this Policy each time you visit the website. Information collected before changes are made will be secured according to the previous Policy. The practices and policies in this Policy replace all previous notices or statements with respect to the same subject matter. We will post at the top of this Privacy Policy the date that modifications were last made, which should alert you to any changes since your last use of or visit to the website. Your continued use of the website is your agreement to the revised Privacy Policy.
17. Applicable Law
This Privacy Policy and any disputes 17arising between you and the Company related in any way to this Policy or the Company’s products, including but not limited to disputes over billing, service, privacy, advertising, or the Company’s or its Associates' communications with you, whether based on contract, tort, statute, or common law, will be governed by the laws of the State of Arizona, without regard to choice of law principles and shall follow the arbitration provision set forth in the Terms of Use for this website.
18. Additional Privacy Notices for U.S. Residents
State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information.
The Company adopts this U.S. Privacy Notice to comply with current and future U.S. data protection and privacy laws, including the California Consumer Protection Act of 2018, as modified by the California Privacy Rights Act of 2020 (“CCPA”), the Colorado Privacy Rights Act, and additional state data protection laws including Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah and Virginia and related regulations and other applicable U.S. state laws.
U.S. State Privacy Notice
We have collected the following categories of personal information from U.S. consumers:
Category |
Examples |
Identifiers |
An individual’s name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number or other similar identifiers |
Personal information categories described in Cal. Civ. Code § 1798.80(e) |
A name, signature, Social Security number, address, telephone number, passport number, driver's license or state identification card number, education, employment, employment history, bank account number, or any other financial information, medical information |
Protected classification characteristics under California or federal law |
marital status, sex, veteran or military status |
Commercial information |
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies |
Internet or other similar network activity |
Browsing history, search history, information on a California consumer's interaction with a website, application, or advertisement |
Geolocation data |
Physical location or movements |
Sensory data |
Audio, electronic, visual-related information |
Professional or employment-related information |
Current or past job history or performance evaluations |
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g; 34 C.F.R. Part 99)) |
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, student schedules, student identification codes, student financial information or student disciplinary records |
III. Sources of Personal Information
In addition to sources of personal information addressed elsewhere in this Privacy Policy, we obtain the categories of personal information listed above from the following categories of sources:
IV. Uses of Personal Information
In addition to uses of personal information addressed elsewhere in this Privacy Policy, we may use or disclose the personal information we collect for one or more of the following business purposes:
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated or incompatible purposes without providing you notice.
V. Sharing Personal Information
We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
Disclosures of Personal Information for a Business Purpose
The Company has disclosed the following categories of personal information for a business purpose:
The categories of third parties to which we may disclose personal information collected by us include the following:
Sales of Personal Information
The Company does not sell personal information to third parties in the traditional sense of sharing personal information for a monetary benefit. However, our use of cookies and other website tracking technologies may be considered a sale or sharing of personal information under certain U.S. data protection laws, in which case, the categories of personal data that we have sold or shared include identifiers (e.g. IP addresses) and internet or other similar network activity.
Categories of third parties to whom personal information is sold or shared include data analytics providers and advertising and marketing providers. We have not sold personal information of children under the age of 16.
VI. Exercising Your U.S. Privacy Rights
California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, Virginia, and other states provide (now or in the future) their state residents with rights to:
- targeted advertising (excluding Iowa);
- sales; or
- profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
Access to Specific Information and Data Portability Rights
You have the right to request that we disclose certain information to you about our collection and use of your personal information. Once we receive and confirm your verifiable consumer request (see “Exercising Access, Data Portability and Deletion Rights” below), we will disclose to you:
If we disclosed your personal information for a business purpose, a list disclosing:
Deletion Request Rights
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see “Exercising Privacy Rights” below), we will delete (and direct our service providers to delete) your personal information from our (and service provider) records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
Exercising Privacy Access Rights
To exercise the rights described above, you should submit a request to us by one of the following methods:
Accessing an online account that you maintain with us
Please note that to exercise the access, data portability, and deletion rights, you must submit a verifiable consumer request. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of a minor child for whom you are a parent or legal guardian.
You may only make a verifiable consumer request for access or data portability twice within a twelve (12) month period. The verifiable consumer request must:
We cannot respond to your request or provide you with personal information if we cannot verify your identity or your authority to make the request and confirm that the personal information involved with the request relates to you.
Making a verifiable consumer request does not require you to create an account with us. However, we will consider requests made through a password-protected online account that you maintain with us to be sufficiently verified when the request relates to personal information associated with that online account, provided such online account functionality is then made available by us on the website.
We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
Response Timing and Format
We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time, we will inform you of the reason and extension period in writing.
If you have an online account with us, we may deliver our written response to that online account, provided that such online account functionality is then made available by us on the website. If you do not have an online account with us, or such functionality is not available for your online account we will deliver our written response by mail or electronically, at your option.
The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.
If you would like to appeal a denial of your request, follow the instuctions provided within our communication denying your request.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
VII. Non-Discrimination
We will not discriminate against you for exercising any of the rights provided to you by your state of residence. Unless permitted by applicable law, we will not as a result of you exercising any of your rights:
However, we may offer you certain financial incentives permitted by the CCPA and other applicable laws that can result in different prices, rates, or quality levels. Any permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.
VIII. Additional Privacy-Related Disclosures
Sharing Personal Information for Direct Marketing Purposes
Before sharing personal information of U.S. consumers with third parties for direct marketing purposes we will obtain opt-in consent from the applicable consumers or provide such consumers with a cost-free method to opt out if required by law.
California Do-Not-Track Disclosure
At this time, the website is not set up to honor web browser do-not-track settings. Do-not-track is a privacy preference that users can set in their web browsers. When a user activates the do-not-track settings in browsers that offer this setting, the browser sends a message to websites or applications requesting them not to track the user. For more information about do-not-track matters, please visit www.allaboutdnt.org.
Global Privacy Controls
At this time, website users may download the Global Privacy Control (GPC) browser extension to convey privacy requests. More information can be found at: https://globalprivacycontrol.org/.
California Information on Marketing Disclosures
California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us once a year, free of charge, information about the personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of personal information that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us at:
GC Leasing AZ LLC
Thomas Sauerteig
3200 E Camelback Road #253
Arizona, Phoenix 85018
USA
or by E-mail: [email protected]
Content Removal Requests for website Users Under 18 Years Old
If you are a website user under 18 years of age and reside in California, you may request and obtain removal of, content or information that you have posted on the website. You may send us any such requests by one of the following methods: (i) by email (writing “Privacy Policy – Removal Request” in the subject line) at [email protected] ; or (ii) by writing to us at:
GC Leasing AZ LLC
Thomas Sauerteig
3200 E Camelback Road #253
Arizona, Phoenix 85018
USA
or by Email: [email protected]
We will review the request and respond promptly. You should be aware that a request to remove content or information posted by you on the website does not ensure or require complete or comprehensive removal of such content or information from our databases.
Nevada Privacy Disclosure
Nevada provides its residents with a limited right to out-out of certain personal information sales. Residents who wish to exercise this sale opt-out rights may submit a request to opt-out. However, please know we do not currently sell data triggering that statute´s opt-out requirements.
Complaints
If you have any complaint about use of the website, you may contact us by email at [email protected], or by postal mail at:
GC Leasing AZ LLC
Thomas Sauerteig
3200 E Camelback Road #253
Arizona, Phoenix 85018
USA
Furthermore you can reach out to us through our internal Whistleblower plattform:
https://grenke.integrityline.org/index.php
In accordance with California Civil Code Section 1789.3, California residents may also file complaints with the Complaint Assistance Unit, Division of Consumer Services, California Department of Consumer Affairs by postal mail at 1625 North Market Road, Suite N112, Sacramento, CA 95834 or by telephone at 800-952-5210.
IX. Changes to Our U.S. Notice
We reserve the right to amend this U.S. Notice at our discretion and at any time. When we make changes to this U.S. Notice, we will post the updated U.S. Notice on the website and update the U.S. Notice's effective date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.