Privacy Notice

Data Protection and Security.

We take the protection of your personal data and your privacy very seriously. We therefore would like to explain how we protect your data and what it means for you when you use our services. In order to achieve transparency and to guarantee comprehensive protection of your privacy, it goes without saying that we comply with all legal regulations on data protection. The data protection information is based on the terms of the basic EU General Data Protection Regulation (GDPR).

Controller and data protection officer.

Controller and service provider is Sixt Leasing SE, Zugspitzstraße 1, DE 82049 Pullach (below-mentioned as "Sixt Leasing". You can also contact Sixt Leasing’s data protection officer at any time by sending an email to dataprotection@sixt-leasing.com.

What is personal data?

Personal data are defined as information through which you can be identified e. g. by your name or information that makes you identifiable, like your address, telephone number or IP-address.

Processing of personal data by Sixt Leasing.

General Information

Personal data is only collected and processed by us if this is necessary to provide a functional and comfortable operated website as well as to provide you with our contents and services. For various services it is also necessary that you provide us with certain personal data of your own (e.g. when using the contact form, sending e-mails or when sending vehicle enquiries).

Your data will be stored until the purpose of storage no longer applies. This can e.g. happen through time lapse but also if you exercise your data subject rights (see below). In some cases, European or national regulations, laws, or other regulations or contracts to which we are subject prescribe a longer storage period. The data will then be deleted at the end of this period.

If we use external service providers at your request for the execution of the contract (e.g. by calling our hotline to arrange an appointment), this will be done for the processing of your request to them. These external service providers act as controller in these cases. With regard to the processing of your data within our contractual relationship, please also observe the data protection information attached to the respective contractual documents.

If you would like to know more about the processing of your data, the legal basis of the processing, the purposes of processing, the storage period or deletion period as well as your data subject rights, please read the following information.
 

Product recommendations by e-mail

As a Sixt Leasing customer, you will regularly receive product recommendations from us by e-mail. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. In this way, we want to provide you with information about products from our range that may be of interest to you based on your recent purchases from us. In doing so, we strictly comply with legal requirements.
We will process your e-mail address, title, name, company, address and telephone number. The processing is carried out in accordance with Art. 6 para 1 lit. f GDPR (legitimate interest) in conjunction with recital 47 GDPR and Art. 7 para. 3 German competition law (UWG). Our legitimate interest is based on the advertising messages in connection with contractual relationships (self-promotion for existing customers) and we would therefore like to inform you about our products and/or services.
The information is stored as long as you receive product recommendations. After a cancellation or objection, we store the data purely statistically and anonymously.
You can find information about your data subject rights in Section 6: "Your rights regarding the processing of personal data".

Logfiles

Every time you visit our website, our system automatically collects data and information from your computer system and stores it in so called logfiles on the webserver (not in our system). The following data is processed:

  • Browser type/version
  • Operating system
  • Your Internet-Service-Provider
  • IP-Address
  • Date and time of access
  • Websites from which you can access our website
  • Websites accessed from your system through our website

The aforementioned data is not stored together with other personal data, thus no allocation of the requesting connection is possible.

It is necessary that our system temporarily stores the users’ IP address so that the website can be delivered to your computer. The legal ground for the temporary storage of data and log files is Article 6 para. 1 lit. f GDPR. The legitimate interest lies in the fact that we can improve the functionality and optimization of the website as well as secure our IT systems. The data will not be used for marketing purposes in this context.

The data is stored as long as it is necessary to achieve the purpose for its collection. If data is required for the functionality of the website, this data will be deleted after the respective session has ended. If the data is stored in log files, this is the case after 10 days at the latest.

Contact-Forms and Requests

If you have any questions about our services and products or certain situations, you can contact us via our website. In these cases, you enter certain data in an input mask provided for this purpose, via which your data is transmitted to us and stored. We use this data to get in contact with you and to be able to assign and process your request as quickly as possible.

This includes the following contact enquiries and the entry of the following data for the following purposes:

We process personal data from the input mask exclusively for the treatment of the establishment of contact. The data will not be passed on to third parties in this respect.

We delete your data as soon as it is no longer necessary to achieve the purpose for which it was collected. This case occurs, with regards to personal data inserted into the entry mask when the respective correspondence with you is terminated. Correspondence is terminated when it is obvious that the questions/reasons for sending the message have been finally clarified. Please note that we may be required by law to keep your data for longer than this period.

The processing of other data (e.g. connection data) during the sending process should prevent a misuse of the contact form and guarantee the security of our information technology systems. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest). Personal data additionally collected during the sending process will be deleted after a period of 10 days at the latest.

You can find information about your data subject rights in Section 6: "Your rights regarding the processing of personal data".

Customer portal functions on sixt- gebrauchtwagen.de

Login Function

You can log in to our Sixt Gebrauchtwagen (Used Cars) website with your email address and password if you have previously registered. The processing of your data is based here on Art. 6 Para. 1 b) GDPR, since the successful registration entitles you to log into the portal. We need the data to authenticate you successfully.

The data will be stored for as long as necessary to achieve the purpose for which they were collected. This is basically given for the duration for which you are registered with us. We would like to point out that we may be legally obliged to comply with longer retention obligations.

You can find information about your data subject rights in Section 6: "Your rights regarding the processing of personal data".

Forgotten your password

If you have forgotten your portal password, you can request a new one. For authentication reasons, you must enter your e-mail address so that we can send the new password to this e-mail address.

The processing of your data is based on Art. 6 Para. 1 b) GDPR, as you have a contractual right to access our portal and this is the only way you can offer your used car.

The data will be stored for as long as necessary to achieve the purpose for which they were collected. This is basically for the duration for which you are registered with us.

You can find information about your data subject rights in Section 6: "Your rights regarding the processing of personal data".

Used car auction

You can auction your used car on our website. To do this, you provide us with information about yourself and your used car and set a minimum price for the auction. Sixt Leasing then offers your vehicle exclusively to registered and tested car dealers from all over Europe. During the auction the car will be sold to the buyer who offers most. If this reaches or exceeds the minimum price agreed with you (also starting price), the vehicle will be auctioned off to the highest bidder. If the car does not reach the minimum price, we will inform you about the auction result and you will decide whether you want to sell your car anyway.

The following data will be processed by us:

  • Name
  • Address

Furthermore, a service provider will be called in to take over the further handling of payments. The latter will also transfer the money less a service fee to you after the end of the process. Therefore, you will be asked in the context of our input masks to transmit your account data, which we transfer to the service provider.

The legal basis for this processing is the fulfilment of contractual obligations according to Art. 6 Para. 1 b) DSGVO, as we need your address for correspondence and your account data for the transfer of the money for your used car after a successful auction.

Your data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case when business correspondence with you has been completed. Please note that we may be required by law to keep your data for longer than this period.

You can find information about your data subject rights in Section 6: "Your rights regarding the processing of personal data".

Customer portal functions on sixt-haendlerboerse.de

Registration

You can register on the Sixt Leasing website six-haendlerboerse.de. To do this, enter the following data in an input field:

  • Name of the company
  • Address
  • Telephone number
  • UID number
  • Activity

You can also enter additional user data. After completion of the registration you transmit these data to us. Every buyer must register before attending a sales event for the first time. Each buyer must expressly declare and prove his entrepreneurial status and his status as a motor vehicle dealer before the first admission to submit offers. The type of proof shall be determined by the seller. The registration confirmation is sent to the buyer by e-mail and contains the buyer's initial password determined by the seller. With the assigned initial password and the assigned merchant ID/user name, the buyer can authenticate himself in the system and assign his personal password. Only after changing the initial password is participation in the sales event possible. The user name is visible to all participants in the screen display of the sales process, but the buyer's name remains anonymous and the password remains secret.

The legal basis of the processing is Art. 6 para. 1 lit. b) DSGVO, since registration data must be processed in order to give you access to the sales portal.

The data will be stored for as long as necessary to achieve the purpose for which they were collected. This is usually the case as long as you are registered in our customer portal. We would like to point out that we may be legally obliged to comply with longer retention obligations.

You can find information about your data subject rights in Section 6: "Your rights regarding the processing of personal data".

Guest access is also possible without personal data being processed.

Login Function

You can log in to our Sixt Händlerbörse (retailer exchange) website with your email address and password if you have previously registered. The processing of your data is based here on Art. 6 Para. 1 b) GDPR, since the successful registration entitles you to log into the portal. We need the data to authenticate you successfully.

The data will be stored for as long as necessary to achieve the purpose for which they were collected. This is basically given for the duration for which you are registered with us. We would like to point out that we may be legally obliged to comply with longer retention obligations.

You can find information about your data subject rights in Section 6: "Your rights regarding the processing of personal data".

Forgotten your password

If you have forgotten your portal password, you can request a new one. For authentication reasons, you must enter your e-mail address so that we can send the new password to this e-mail address.

The processing of your data is based on Art. 6 Para. 1 b) GDPR, as you have a contractual right to access our portal and this is the only way you can offer your used car.

The data will be stored for as long as necessary to achieve the purpose for which they were collected. This is basically for the duration for which you are registered with us.

You can find information about your data subject rights in Section 6: "Your rights regarding the processing of personal data".

reCAPTCHA

On our website, we use the reCAPTCHA service by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) to protect your submissions and orders via internet submission and order forms. The query serves to differentiate whether the input is made by a person or abusively by automated machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose your input will be transmitted to Google and used there. This plugin query includes the sending of the IP address and possibly other data required by Google for the Google reCAPTCHA service. For this purpose your input will be communicated to and used by Google.

However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other countries party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address provided by reCAPTCHA from your browser shall not be merged with any other data from Google.

The legal ground for processing your data by using this service is based on Art. 6 para. 1 f GDPR as the website operator has a legitimate interest in protecting his website offers against abusive automated spying and spam.

Google complies with the privacy provisions of the US Privacy Shield Agreement with the EU and is registered with the US Department of Commerce's Privacy Shield Program. Google only transmits the data to third parties within the framework of legal regulations or within the framework of order processing. Google will not combine the collected data with other data collected by Google.

This data collection is subject to the data protection regulations of Google (Google Inc.). For more information about Google's privacy policy, please visit https://www.google.com/intl/en/policies/privacy/ or https://www.google.com/recaptcha/intro/android.html.

Third Party Websites

Our websites may contain links to and from partner websites. Please note that if you click on the link to a third party website, our privacy notice is not valid for these services, so we are not responsible or liable for their policy. Please refer to the certain Privacy Notice from the third party in this regard.

Cookies

SIXT has taken technical and organisational measures to protect your personal data, in particular against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. These security measures are continually updated in line with technological developments. The transfer of personal data between your phone and our server is always encrypted (SSL method, Secure Socket Layer).

Cookies.

General information on the use of cookies

When you visit our websites it may be that information created by us will be stored on your computer in the form of a "cookie". Cookies are small text files that are copied from a web server to your hard drive. Cookies contain information that can later be read by a web server in the domain within which the cookie was issued to you. Cookies cannot run programs or deliver viruses to your computer. The cookies we use do not contain any personal information and will not be merged with any personal information held about you. The information collected through the use of cookies will only be used to analyze the function and use of websites, doing so by creating anonymous evaluations and charts on the number of visits, number of pages viewed per user etc. The analyses are used exclusively for the purposes of our own market research as well as for the optimization and demand-oriented design of the website.

We use the following types of cookies:

Technically required cookies

Most of the cookies we use are so-called technically required cookies, which are necessary to keep your visit consistent, i.e. to ensure that e.g. saved search queries are retained during the web session. In addition, we need these cookies to ensure that a specific offer that you have clicked on is assigned to your request (e.g. in the case of promotional offers). These cookies are automatically deleted at the end of the session.

Furthermore, we use cookies to recognize whether you are particularly interested in certain offers when you visit the website at a later date, which enables us to display such offers on the website in a targeted manner.

The legal basis for the use of technically necessary cookies is Art. 6 para. 1 lit. f GDPR. The legitimate interest is that the availability of the website as well as a large number of services could not be realized without the setting of these cookies.

Cookies with a lifetime of no longer than one year are used to store search queries via the notepad function and to carry out user tests and user surveys, which are then automatically deleted.

Technically necessary cookies cannot be manually deactivated by you via our website. However, you have the option of using your browser settings to specify that cookies should generally be rejected. Please note that in this case some functions of the website cannot be used.

Analyzing Cookies from Third-parties

This website uses analyzing cookies from various third-party providers. These cookies are used to analyze your surfing behavior. This data is not stored together with your other personal data.

When you visit our website, you will be informed about the use of cookies for analytical purposes and we will obtain your consent to the processing of the data used in this context. You can alter your settings here. In this context, we also refer to our cookie policy.

 In this way, the following data can be transmitted through the use of cookies:

  • Entered search term
  • Frequency of page views
  • Use of the website functions
  • Information on how visitors use our websites

For these purposes, the processing of your personal data is justified by an explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. For providing us with your consent, you can either move the slider in the cookie layer on the Sixt Leasing website to the extent you want it to be activated or you could also click on the button next to this text to reject the use of these cookies. Further information about the individual providers can be found in the following explanations.

Google Analytics

On our websites we use Google Analytics, a web analytics service provided by Google, Inc. (“Google”) 1600 Amphitheatre Parkway, Mountain View, California, 94043, USA. Google Analytics uses cookies. The information generated by the cookies about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

Google uses this information on our behalf to evaluate the use of our online offer, to compile reports on the activities within this online offer and to provide us with further services connected with the use of this online offer. Pseudonymous user profiles can be created from the processed data.

We use Google Analytics only with the enabled IP anonymization configuration to ensure an anonymized collection of IP addresses (so called IP-masking). This means that your IP address will be anonymized by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.). The IP address transmitted by your browser is not merged with other Google data. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser; further you can prevent Google from collecting and using your data by downloading and installing the browser plug-in available here: http://tools.google.com/dlpage/gaoptout?hl=de .

Further information regarding the data use for advertising purposes by Google, possible settings and objections can be found on the Google websites:

As an alternative to the browser add-on or mobile device browser, please click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie is stored on your device as a result. It stores that we may not delete your data for Google Analytics. If you delete your saved cookies, you must click this link again.

We also use Google Analytics to evaluate data from AdWords and the double-click cookie for statistical purposes. If you do not want this to happen, you can disable it using the Ads Preferences Manager (http://www.google.com/settings/ads/onweb/?hl=en ).

Google complies with the privacy provisions of the US Privacy Shield Agreement with the EU and is registered with the US Department of Commerce's Privacy Shield Program. Google only transmits the data to third parties within the framework of legal regulations or within the framework of order processing. Google will not combine the collected data with other data collected by Google.

Google Tag Manager

By using the Google Tag Manager, website tags can be managed via an interface. The service only implements tags. As a result, no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn collect data if necessary. However, the Google Tag Manager does not access this data. This service provider processes the following data:

  • IP-Address

 

Google Conversion Tracking

If you reached our Website via Google advertisement, a cookie will be stored on your system. This cookie enables us and Google to recognize that you have accessed our website through a Google ad. This is used to create conversion statistics, i.e. to record how many users reach a conversion page after clicking on an ad, i.e. to complete an order process.

This service provider processes the following data:

  • IP-Address

_________________________________________________Table Analysis Cookies
 

 

Cookie-Name

Storage time

Google Analytics, Tag Manager und Conversion Tracking

_ga

2 years

_gid

1 day

 

 

 

 

 

Advertising Cookies from Third-parties

This website also uses cookies from third parties for advertising purposes. These cookies are set by external advertisers (third-party cookies) and are used to collect information about the user's visited websites so that individualized advertising can be placed on the website.  

We can use relevant advertising via the usual methods of retargeting or remarketing. Retargeting is advertising on a website that was created based on the online behavior of a consumer on another website. For example, if you visit sixt-leasing.de, you may see Sixt Leasing advertisements on a third-party website. To do this, we or our advertising partners use cookies. These cookies or other technology make it possible to identify them across several websites. You should review the privacy statements of our advertising partners to understand how they collect and use your information.

The following data may be transferred by using advertising cookies:

  • IP-Address
  • Frequency of page views
  • Use of the website functions
  • Information on how visitors use our websites

You can alter your settings here. For these purposes, the processing of your personal data is justified by an explicit consent pursuant to Art. 6 para. 1 a) GDPR. For providing us with your consent, you can either move the slider in the cookie layer on the Sixt Leasing website to the extent you want it to be activated or you could also click on the button next to this text to reject the use of these cookies. Further information about the individual provider can be found in the following explanations.

The storage time depends on the cookie used and can be seen in the table (see below). You can click the button next to this text to decline the use of these cookies. Further information about the individual providers can be found in the explanations below.

Google Remarketing or "Similar target groups" function

Cookies are used to target users of our website through targeted advertising on the pages of the Google Partner Network by analyzing user behavior when they visit our website.

This service provider processes the following data:

-      IP-Address

Deactivate: https://www.google.de/settings/ads/onweb

Alternatively, you can disable the Doubleclick cookies on the Digital Advertising Alliance site at: http://www.aboutads.info/choices/.

Doubleclick by Google 

Your browser is assigned a pseudonymous identification number (ID) by the use of cookies. This is to enable Google and its affiliate sites to display targeted advertising based on your previous visits to our and other sites.

This service provider processes the following data:

-     IP-Address

You can prevent Google from collecting and using the data generated by using cookies. To do this, deactivate the doubleclick cookies on the Digital Advertising Alliance website under the following link: http://www.aboutads.info/choices or install the browser plug-in available under the following link: https://www.google.com/settings/ads/plugin

Your rights regarding the processing of personal data.

In this chapter, we want to inform you about your data subject rights. If you have any questions concerning your data subject rights or if you want to exercise one or several of these rights, please send us an e-mail to dataprotection@sixt-leasing.com or by post to the "Data Protection Officer at Sixt Leasing SE, Zugspitzstraße 1, DE 82049 Pullach/Germany".

Right to withdraw your Consent (Art. 7 para. 3 GDPR).

In case that the processing of your data by us is based on your explicit consent, you have the right to withdraw this consent at any time. The withdrawal of consent shall not affect the lawfulness of the processing based on consent before its withdrawal. You will be informed about this right before you give your consent.

Right to information (Art. 15 GDPR).

You have the right to obtain information from us as to whether we process personal data concerning you. If this is the case, you have a right to access these data and to a list of information. When personal data is transferred to a third country or an international organization, you have the right to be informed about appropriate safeguards to ensure that the recipients are also in compliance with the provisions of the GDPR.

Right to rectification (Art. 16 GDPR).

You can request us to correct any incorrect data concerning you without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

Right to erasure or “right to be forgotten” (Art. 17 GDPR).

You have the right to request the immediate deletion of your data if one of the following reasons applies:

  • data is no longer necessary for the purposes for which they were collected or otherwise processed,
  • you withdrew your consent on which the processing was based and there is no other legal basis for the processing,
  • you oppose to the processing pursuant to Article 21 para. 1 GDPR for reasons arising from your particular situation and there are no overriding legitimate grounds for processing,
  • you oppose to the processing for direct marketing in accordance with Article 21 para. 2 GDPR,
  • the data have been processed unlawfully,
  • the deletion of data is necessary to fulfil a legal obligation under European or German law,
  • the data were collected in relation to an offer of information society services directly to a child provided in accordance with Article 8 para. 1 GDPR.

We will comply with the request for deletion, unless we are legally obliged or entitled to continue storing and processing your data. In particular, legal retention periods are considered as legal obligations. Furthermore, we are entitled to continued storage if we are unable to assert, exercise or defend legal claims without your data.

Right to restriction of processing (Art. 18 GDPR).

In accordance with Article 18 GDPR, we may only process data to a limited extent in the following cases:

  • you dispute the accuracy of your data until we are able to verify its accuracy,
  • the processing is unlawful and you oppose to the erasure of your data and instead request that the use of your personal data should be restricted instead,
  • we no longer need the data for the purposes of processing, but you do need them to assert, exercise or defend legal claims, or
  • you object to the processing pursuant to Article 21 para. 1 GDPR for reasons arising from your particular situation, as long as it is not yet clear whether the legitimate reasons for the processing by us outweigh your interests.

If processing has been restricted, we may only store this data. Any further processing in such case is only permissible with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the European Union or a Member State. You can withdraw your consent given in this connection at any time. You will be notified by us before the restriction is lifted.

Notification Obligation (Art. 19 GDPR).

We are obliged to inform all recipients to whom your data have been disclosed about a correction or deletion of your data or a restriction of the processing. This shall not apply if it is impossible or involves a disproportionate effort. We will inform you about these recipients if you have any questions in this regard.

Right to data transferability (Art. 20 GDPR).

You have the right to receive the data concerning you in a structured, common and machine-readable format. You also have the right to instruct us with the transmission of your data to a third party. However, this right shall not impair the rights and freedoms of other persons, including our company. If this is the case, we are entitled to refuse the surrender or transfer of your data.

Right to object (Art. 21 GDPR).

If we process your data on the basis of a legitimate interest (Article 6 para. 1 lit. f GDPR), you have the right to object to this if the reasons for this arise from your particular situation. This also applies to profiling based on these provisions.

In this case, we will no longer process your data unless we can prove compelling reasons worthy of protection for the processing. This must outweigh your interests, rights and freedoms, or processing serves to assert, exercise or defend legal claims.

If we process your data for direct marketing purposes, you may object to the processing of your data. This also applies to profiling insofar as it is connected with such direct advertising.

After your objection, your data will no longer be processed for these purposes.

Right to Appeal to a Supervisory Authority (Art. 77 GDPR).

You have the right to complain to a supervisory authority, in particular in the Member State where you are staying, working or suspected of having infringed the GDPR-provision. Other administrative or judicial remedies that you may be entitled to remain unaffected.

Security, SSL technology.

Sixt Leasing has taken technical and organizational measures to protect your personal data, in particular against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. These security measures are continuously adapted in line with technological developments. The transmission of personal data between your computer and our server is always encrypted (SSL procedure, Secure Socket Layer).

Updates to our Privacy Notice

We reserve the right to update this privacy notice regularly if the legal, technical or economic conditions change. When we update our privacy notice, we undertake appropriate measures to inform you as required about the importance of the changes we have made. We will obtain your consent to all important changes to the privacy notice if and to the extent to which this is required under applicable data privacy laws.