Privacy Policy

The data controller within the meaning of the GDPR and other data protection regulations is:

Server Log Files

When you visit our website, our web host automatically collects the following technical data in server log files:

• IP address of the requesting device (anonymized after a short period of time)
• Date and time of access
• Name and URL of the retrieved file, as well as the amount of data transferred
• Referrer URL (website from which the request originated)
• Browser, operating system, and screen resolution used
• Name of the Internet Service Provider
• HTTP status code of the request

This data is necessary for the secure technical operation of the website and is not used to identify individual persons. Legal basis: Art. 6(1)(f) of the GDPR (legitimate interest in secure operation).

No automated decision-making

We do not use automated decision-making or profiling as defined in Article 22 of the GDPR.

If you contact us via the contact or inquiry form or by email, the information you provide (name, email, phone number, company, message) will be stored for the purpose of processing your inquiry. We will not share this information without your consent.

Legal Basis:

• Art. 6(1)(b) of the GDPR – if your inquiry is intended to lead to the conclusion of a contract (e.g., a job inquiry)
• Art. 6(1)(f) of the GDPR – for general contact inquiries (legitimate interest in responding)
• Art. 6(1)(a) of the GDPR – provided that express consent has been given

Our website uses cookies—small text files that are stored on your device by your browser. In accordance with Section 25 of the TDDDG (formerly the TTDSG), prior consent is required for all cookies that are not technically necessary. We obtain this consent via our cookie consent banner.

You can withdraw or modify your consent at any time using our cookie consent tool at the bottom of the page. Rejecting non-essential cookies does not affect the basic functionality of the website.

We use the Google Tag Manager of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (for Europe). Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Tag Manager is a tag management system (TMS) that allows us to centrally integrate and manage code snippets and tracking tags on our website—without having to edit the source code directly. Google Tag Manager itself does not store any personal data and does not set its own cookies.

When the website loads, Google Tag Manager transmits technical metadata (including IP address and browser information) to Google servers—including those in the United States. In addition, Tag Manager controls the loading of services integrated through it (e.g., Google Analytics, Google Ads). In its ruling of March 19, 2025 (Case No. 10 A 5385/22), the Administrative Court of Hanover determined that the use of Google Tag Manager is permissible only with prior consent.

Google Tag Manager is loaded only after you have given your consent in the cookie consent banner. Without your consent, no tags are triggered via Google Tag Manager.

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (for the European region). Google Analytics uses cookies to analyze your behavior on the website and generate statistical reports for us.

The information generated by cookies about your use of this website is generally transmitted to a Google server in the United States and stored there. We have enabled IP anonymization, so your IP address is truncated within the EU before transmission.

Opt-out: You can opt out of data collection by Google Analytics by downloading and installing the browser plugin: tools.google.com/dlpage/gaoptout. Alternatively, you can withdraw your consent at any time via the cookie consent banner.

This website uses Google Ads (formerly Google AdWords) and the associated conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is placed on your device. These cookies expire after 30 days and are not used to identify you personally.

If you visit certain pages on our website and the cookie has not yet expired, Google and we can tell that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across Ads customers' websites.

You can manage the personalization of Google ads at adssettings.google.com disable them or revoke your consent in the cookie banner.

Our website may include links to or content from social networks. In doing so, we generally rely on what is known as the Two-Click Solution or load external content only after you have given your consent:

Facebook / Meta

We maintain a presence on Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). When you visit our Facebook page, Meta processes your data in accordance with its own privacy policy. As the page administrator, we have no influence over this processing. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in maintaining a social media presence).

LinkedIn

We maintain a presence on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). When you use LinkedIn features on our website, data may be transmitted to LinkedIn servers in the United States. Legal basis: Art. 6(1)(a) GDPR (consent for embedded content); Art. 6(1)(f) GDPR (LinkedIn page presence).

YouTube (Google Ireland Limited)

When we embed YouTube videos, we use the privacy-enhanced mode (youtube-nocookie.com). YouTube does not set cookies until you actively play the video. Legal basis: Art. 6(1)(a) GDPR (consent).

Our website is hosted by All-Inkl.com (ALL-INKL.COM – Neue Medien Münnich, Owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf) hosted. The provider processes visitor data exclusively on servers in Germany. No data is transferred outside the EU.

The data is used for the purpose of fulfilling the contract (Art. 6(1)(b) GDPR) and to ensure the secure and efficient provision of our online services (Art. 6(1)(f) GDPR). A data processing agreement (DPA) has been concluded with All-Inkl.com in accordance with Article 28 of the GDPR.

Content Delivery Network (CDN)

External CDN servers can be used to deliver fonts and libraries (e.g., Font Awesome, Google Fonts). When this happens, your IP address is transmitted to the respective servers. Whenever possible, we host external resources locally to minimize data transfers.

This website is based on the content management system WordPress (Automattic Inc., USA). WordPress itself does not transfer any personal data. We use various WordPress plugins that may process data on their own:

For more information about the plugins used and their privacy practices, please contact us at info@personalleasing-osteuropa.de.

We process your data based on the following legal grounds:

As a general rule, your personal data will not be disclosed to third parties unless this is permitted by law or covered by one of the following legal bases:

• Your explicit consent (Art. 6(1)(a) of the GDPR)
• Performance of a contract or pre-contractual measures (Art. 6(1)(b) of the GDPR)
• Legal obligation (Art. 6(1)(c) of the GDPR)
• Protection of legitimate interests (Art. 6(1)(f) of the GDPR)

Data Processor

We work with carefully selected data processors (web hosting providers, email service providers, Google). They are permitted to process your data only in accordance with our instructions. Data Processing Agreements (DPAs) pursuant to Article 28 of the GDPR have been concluded with all data processors.

Transfers to Third Countries (U.S.)

Some of the services used (Google Tag Manager, Google Analytics, Google Ads, Wordfence) transfer data to the United States. These transfers are based on:

• EU-U.S. Data Privacy Framework (DPF) – Google LLC and other U.S. providers are DPF-certified (EU Commission Adequacy Decision of July 10, 2023)
• EU Standard Contractual Clauses (SCC) pursuant to Article 46(2)(c) of the GDPR as an additional safeguard

We implement technical and organizational security measures to protect your data against accidental or intentional tampering, loss, destruction, or unauthorized access:

• SSL/TLS Encryption (HTTPS): All data transmissions are encrypted.
• Wordfence Security: Firewall, malware scanning, and login protection at the WordPress level.
• Access Control: Access to personal data is restricted to authorized personnel who are bound by data protection obligations.
• Regular Backups: Daily data backups at the server level performed by the hosting provider.
• Software Updates: WordPress, themes, and plugins are updated regularly.
• Strong Password Policies: All administrator accounts use secure, unique passwords and two-factor authentication.

We reserve the right to update this Privacy Policy if legal requirements change or new processing activities are added. The currently valid version is always available on this page. In the event of significant changes, we will notify you through appropriate channels.

Date of last update: July 2025