The Leasys Group has implemented a policy for handling personal data to ensure that it is processed in accordance with applicable regulations:
Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “General Data Protection Regulation” or GDPR).
All data protection laws implemented at the national level.
This Privacy Policy describes our rules for protecting information about prospective customers, customers, our customers' employees, partners, our partners' employees, students or freelance applicants, suppliers, and visitors to our website.
PROTECTION AND MANAGEMENT OF PERSONAL DATA
1. RESPONSIBILITY FOR PROCESSING
LEASYS Austria GmbH is responsible for the processing of personal data transmitted in connection with the following:
an information request,
a quotation,
an order,
the ongoing administration of your contracts and services,
an application for an internship or job.
LEASYS Austria GmbH assumes no liability for the disclosure of information to third parties outside the strict scope of using its website or those of its partners. It is therefore your responsibility to take all necessary measures to avoid errors or harmful elements such as viruses.
LEASYS Austria GmbH is responsible for the processing of personal data transmitted in connection with the following:
an information request,
a quotation,
a purchase order,
the ongoing administration of your contracts and services,
an application for an internship or job.
LEASYS Austria GmbH assumes no liability for the disclosure of information to third parties outside the strict scope of using its website or those of its partners. 2. APPROPRIATE, RELEVANT, AND LIMITED DATA COLLECTION
To establish and maintain our business relationship, we collect your data directly from you, depending on the nature of our relationship:
Identification: Surname, first name, nationality, signature (or signatory authority), VAT number, etc.
Contact: Postal address, email, telephone, etc.
Personal data: Marital status, number of children, household composition, etc.
Professional data: Education, studies, employer, occupation, etc.
Economic and financial data: Bank details, IBAN, credit rating, tax ID, tax status, country of residence, etc.
Data from the use of our websites/apps: Cookies, IP address, login and navigation data, etc.
Usage habits and preferences regarding our products and services or your interactions with us
To verify your driving privileges, we may request your driver's license.
We may also indirectly collect data about other individuals associated with you (some will be informed by us, others must be informed by you). (will be):
Guarantors or security providers
Heirs and beneficiaries in the event of death
For legal entities: legal representatives, beneficial owners, and shareholders
Employees or drivers (not lessees)
In addition, we may collect certain data from the vehicle you have rented: mileage, accident reports, geolocation (deactivated), maintenance, etc.
3. PROCESSING AND PURPOSES
Our data processing is lawful, fair, and transparent. The associated purposes are defined, explicit, and legitimate. The list below is not exhaustive and may change due to legal amendments or adjustments to our business operations.
Based on the contract initiation (prospective customer) or during contract execution (customer)
When reviewing your application for long-term rental/renewal (LTR), automated procedures via our banking partner or other intermediaries (scoring or pre-scoring) may be used. This serves as a decision-making aid; The final decision, however, is made with human review. Depending on the provider, AI-supported tools may also be used with your explicit consent.
You have the right to receive an explanation of the decision and to challenge it through a re-examination.
You can subscribe to additional services or use individual services independently (without an LTR contract).
Execution of all processes related to managing our business relationship – from the pre-contractual phase to the return of the vehicle.
Management of out-of-court and court-based debt collection processes, as well as all necessary legal or out-of-court measures related to the fulfillment of the contract.
Based on legal and regulatory obligations
We use certain of your data to fulfill legal obligations, either on our own responsibility or in connection with obligations of third parties:
Prevention and combating of money laundering and terrorist financing. We are obligated to comply with international sanctions and embargo regulations. This requires us to identify you and verify your identity when you apply and throughout the entire business relationship.
Leasys and/or our financial intermediaries conduct the assessment.
9. EXERCISE OF YOUR RIGHTS
In accordance with applicable legal provisions, you may exercise certain rights with respect to our services, to the extent permitted by law:
Right | Beschreibung | GDPR - Artikel |
Information and access* | Sie können Auskunft über die Verarbeitung Ihrer personenbezogenen Daten sowie eine Kopie dieser Daten erhalten. Wir informieren Sie über die Zwecke der Verarbeitung, die Kategorien der verarbeiteten Daten, die Empfänger, die Speicherdauer sowie – sofern zutreffend – über Ihre Rechte auf Berichtigung, Löschung oder Einschränkung der Verarbeitung. | 13 & 15 |
Rectification | Sie können die Berichtigung Ihrer Daten verlangen, wenn diese unrichtig, veraltet oder unvollständig sind. | 16 |
Erasure (right to be forgotten) | Sie können die Löschung Ihrer Daten verlangen. | 17 |
Restriction of processing | Sie können die Einschränkung der Verarbeitung Ihrer Daten verlangen. | 18 |
Datenübertragbarkeit | Sie können die Übertragung Ihrer Daten an einen anderen Verantwortlichen verlangen. Die Daten müssen in einem strukturierten, gängigen und maschinenlesbaren Format bereitgestellt werden. | 20 |
Widerspruch | Sie können der Verarbeitung Ihrer Daten (z. B. Profiling) aus Gründen widersprechen, die sich aus Ihrer besonderen Situation ergeben. | 21 |
Widerruf der Einwilligung | Sie können Ihre Einwilligung jederzeit widerrufen, auch wenn die Verarbeitung automatisiert erfolgt. | 7 |
* Where applicable under local law, regulations for combating money laundering and terrorist financing may prevent us from granting you direct access to personal data processed for this purpose. In this case, you must exercise your right of access with the competent local authority, which will then contact us.
To exercise the aforementioned rights, you can contact us at any time, without giving reasons and free of charge, at the following email address: Datenschutz.at@leasys.com. You may be asked to confirm your identity by providing certain information or by submitting an official document.
You also have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, or to exercise the legal remedies available to you under applicable law.
10. PROTECTION
We have implemented appropriate technical and organizational measures to protect your personal data from unauthorized or unlawful processing, as well as from loss, destruction, damage, alteration, or disclosure.
Our Information Security Policy is available upon request.
11. CHANGES TO THIS PRIVACY POLICY
We reserve the right to unilaterally amend or supplement this Privacy Policy. We recommend that you review our Privacy Policy regularly.
This Privacy Policy was last updated on March 19, 2026.
12. CONTACTING LEASYS
If you have any questions or comments regarding this Privacy Policy or the processing of personal data, you can contact us by mail:
Leasys Austria GmbH
Attn: Data Protection Officer
1120 Vienna, Grünbergstraße 15/3/6
or by email: Datenschutz.at@leasys.com