Privacy policy 

Privacy Statement

LeasePlan is committed to protecting the privacy of the personal information collected and processed by us. Compliant privacy and data security practices have therefore become integral components of LeasePlan’s Services, corporate governance, accountability and risk management. We therefore process only such personal information as is necessary for the provision of the relevant LeasePlan Services (‘Services’).

LeasePlan Privacy Pledges

Regardless of when and how we process your personal data:

• Transparent: We help you understand how your data is collected and used
• Privacy as starting point: We ensure that our services are privacy friendly
• Control: We provide you with an easy manner to access, correct or delete your data
• Safe with LeasePlan: We secure your data as best as we can and personal data is only shared with third parties when necessary and under appropriate conditions.
• Innovating and responsive: We keep thinking of ways how to improve our services and your privacy and are open for all suggestions and complaints

1. Scope of this Privacy Statement

We collect your personal data in order to provide you with our Services. If you do not provide the requested information to us, we may not be able to deliver our Services (properly). The service we provide is that you can access Prospectuses, Rating Agency reviews, Investor Reports and other documents related to our public Bumper transactions on our website. Note this privacy statement only applies to the data processed via the website www.bumperfinance.com.

2. Who we are

LeasePlan Corporation N.V. is the company responsible for the processing of your personal data (data controller):
Gustav Mahlerlaan 360, 1082 ME Amsterdam, the Netherlands,
LeasePlan Corporation N.V. is referred to as “LeasePlan” and “we”.

3. How we collect your data

For the delivery of the Services we mainly use the data you provide yourself, such as your name and address when you fill out the registration form or contact form and your IP address when you visit our website. The IP address is a number that is automatically assigned to a computer when logged on to the internet. IP addresses merely reveal the name of access providers or company networks and are generally not linked to information that would identify you, unless you explicitly permitted Leaseplan Corporation N.V. thereto.

4. For which purposes we use your data

4.1 Website

4.1.1 Communication

What does this purpose entail?

We collect your information when you contact us through one of our contact forms, for example when you send us questions or when you register yourself on our website. We use your data for this purpose with your consent.

Which personal information do we process for this purpose?

For this purpose we collect your full name, contact details (including your email address, telephone number, name of your company) and any other information that you provide to us in the open field entry of the contact form, where you can, for example, pose your question, describe your suggestion, make a compliment or share a complaint.
With whom do we share your personal information? See section ‘Sharing data with third parties’.

4.1.2 Cookies and similar technologies

Any processing of your personal information via cookies will take place in accordance with our @Html.TryActionLink("Cookies policy", "CookiePolicy", "Pages", new { Area = "" }).

4.1.3 Compliance with laws and legal obligations and protection of LeasePlan assets and interests

What does this purpose entail?

To comply with a legal obligation or where we have a legitimate interest we will process your personal information as appropriate or necessary (a) under applicable law, including laws outside your country of residence and including sectorial recommendations (e.g. counterparty due diligence, money laundering, financing of terrorism and other crimes); (b) to comply with legal process; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to enforce our terms and conditions and other applicable policies; (e) to protect our operations; (f) to protect our rights, privacy, safety or property, and/or that of yours or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

Which personal information do we process for this purpose?

For this purpose we process your name, your contact information, your correspondence with LeasePlan, your use of any of our Services and any other information mentioned in this Statement or otherwise provided to us by you, if such is required for one of the purposes mentioned in the previous paragraph.

With whom do we share your personal information?

Only if we are required to do so by law or sectorial recommendation to which LeasePlan is subject, your personal information will be provided to supervisory agencies, fiscal authorities and investigative agencies. See also section ‘Sharing data with third parties’.

5. Sharing data with third parties

In addition to what is indicated for each purpose above regarding sharing of personal information, we may also share personal information:

• To our third-party service partners and providers, to facilitate services they provide to us. In order to provide you with our services, we often work closely with Service Providers. Service Providers are companies we retain that support us in running our business, for example to help us maintain our IT network and related infrastructure, and security and access controls to our premises.
  
  We also use and disclose your personal information as necessary or appropriate, especially when we have a legal obligation or legitimate interest to do so:
• To comply with applicable law and regulations. - This may include sharing information with Credit Reference Agencies and Fraud Prevention Agencies. Please see the relevant sections above for further information and contact details for these agencies.
• To cooperate with public and government authorities.
  - These may include regulatory or governmental bodies to which LeasePlan is subject to
  - To respond to a request or to provide information we believe is important
  - These can include authorities outside your country of residence.
• To cooperate with law enforcement.
  - For example, when we respond to law enforcement requests and orders or provide information we believe is important.
• For other legal reasons.
  - To enforce our terms and conditions; and
  - To protect our rights, privacy, safety or property, and/or that of our affiliates, you or others.
• In connection with a sale or business transaction. - We have a legitimate interest in disclosing or transferring your personal information to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings) Such third parties may include, for example, an acquiring entity and its advisors.

6. International transfer of personal data

Due to the global nature of our organization and Services, your personal information may be stored and/or processed in a country other than the one you reside in. Some of the non-EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available here. For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate measures, such as, such as through LeasePlan’s own Binding Corporate Rules or through contractual arrangements put in place with third parties. You may obtain a copy of these measures by contacting us via the contact form.

7. Security and retention

• How we secure personal data
  We seek to use organisational, technical and administrative measures to protect personal information within our organization.
  
  Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your user account has been compromised), please immediately notify us of the problem by contacting us in accordance with the Contact details provided in this Statement.
• How long we retain personal data We will retain your personal information for as long as necessary or permitted in light of the purposes outlined in this Statement and consistent with applicable law.
  The criteria used to determine our retention periods include:
  - Retention for our business relationship. The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you use our website);
  - Retention in case of legal obligation. Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or
• - Retention to protect our legal position. Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).
  - Retention in case of claims. We will retain your personal information for the period in which you might legally bring claims against us (as relevant).
  - Retention in accordance with regulatory requirements. We will retain your personal information where we are required to do so by regulatory regimes and regulations applicable to us.

9. Your rights and contacting us

Your rights

If you would like to request to review, correct, update, suppress, restrict or delete your personal information processed by us, object to the processing of personal information, to object to automated decision making or if or if you would like to request to receive an electronic copy of your personal information for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), you may contact us via the contact form. We will respond to your request consistent in accordance with applicable law.

In your request, please make as clear as possible what personal information your request relates to. For your protection, we will only implement requests with respect to the personal information associated with the particular email address as you indicated in the contact form, and we may request you to provide verification of your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and in any event within any applicable legally required timeframes.

Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that began prior to requesting such change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed.

Questions?

If you have any questions or complaints about this Statement, please contact us via the contact form.
Because email communications are not always secure, please do not include sensitive information in your emails to us. Additional information regarding the EEA
You may also:

• Contact our Data Protection Officer (“DPO”) via the contact form or via: LeasePlan Corporation N.V., attn. Data Protection Officer, Gustav Mahlerlaan 360, 1082 ME Amsterdam, the Netherlands
• Lodge a complaint with a data protection authority for your country or region or where an alleged infringement of applicable data protection law occurs. A list of data protection authorities is available here.

10. Changes to this Privacy Statement

We may change this Statement at any time. Please take a look at the “Last Updated” legend at the top of this page to see when this Statement was last revised. Any changes to this Statement will become effective when we post the revised Statement on the Services. Your use of the Services following these changes means that you accept the revised Statement.

Website links:

EEA Countries (chapter 7)