Privacy Policy

A/I/M Leasing + Finance GmbH ("we", "our", "the Company") takes the protection of your personal data seriously. This Privacy Policy explains how we collect, use, and protect personal information in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and applicable German data protection legislation.

1. Controller Information

The data controller responsible for the processing of your personal data is:

A/I/M Leasing + Finance GmbH
Palmaille 82
22767 Hamburg
Deutschland

Telephone: +49 (0)40 2 70 78-2 00
Email: support@aim-leasing.com
Website: aim-leasing.com

2. Data We Collect

We may collect and process the following categories of personal data:

• Contact data: name, email address, telephone number, postal address
• Enquiry data: information you voluntarily provide when submitting an enquiry through our contact form
• Usage data: IP address, browser type, operating system, pages visited, and time spent on our website, collected automatically via server logs and analytics tools
• Cookie data: data stored in your browser's cookie storage; see our Cookie Policy for full details

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

• Consent (Art. 6(1)(a) GDPR): where you have given clear consent, for example by accepting cookies or subscribing to communications
• Legitimate interests (Art. 6(1)(f) GDPR): for analysing website usage to improve our services, where your interests and fundamental rights do not override our interests
• Pre-contractual measures (Art. 6(1)(b) GDPR): where processing is necessary to respond to your enquiries or take steps prior to entering a relationship
• Legal obligation (Art. 6(1)(c) GDPR): where we are required to process data to comply with German or European legal requirements

4. How We Use Your Data

We use your personal data for the following purposes:

• Responding to enquiries submitted via our contact form
• Improving and maintaining our website and its content
• Complying with legal and regulatory obligations applicable to a BaFin-supervised institute
• Analysing aggregated and anonymised website usage for internal reporting purposes

5. Data Sharing and Recipients

Your data may be shared with the following categories of recipients where necessary:

• IT service providers: hosting, email delivery, and website analytics providers operating under data processing agreements in compliance with GDPR
• Legal advisors and auditors: where required for compliance purposes
• Regulatory authorities: BaFin, tax authorities, or law enforcement agencies where we are legally required to disclose information

Any third-party service providers acting as data processors are bound by contractual obligations and may only process your data in accordance with our instructions.

6. International Transfers

Your personal data is processed and stored within the European Economic Area (EEA). Where any transfer to a third country occurs, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, including Standard Contractual Clauses approved by the European Commission.

7. Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:

• Contact enquiry data: up to 3 years from last contact, unless a longer period is required by law
• Server logs and usage data: up to 12 months
• Cookie data: as specified in our Cookie Policy
• Data subject to statutory retention obligations (e.g. commercial records under HGB §257): up to 10 years

8. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access (Art. 15 GDPR): to obtain confirmation of whether we process your data and to receive a copy
• Right to rectification (Art. 16 GDPR): to have inaccurate personal data corrected without undue delay
• Right to erasure (Art. 17 GDPR): to request deletion of your personal data in certain circumstances
• Right to restriction (Art. 18 GDPR): to request restriction of processing in certain circumstances
• Right to portability (Art. 20 GDPR): to receive your data in a structured, machine-readable format
• Right to object (Art. 21 GDPR): to object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent (Art. 7(3) GDPR): to withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at support@aim-leasing.com. We will respond within one month of receipt of your request.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority. The supervisory authority responsible for Hamburg is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 6. OG
20459 Hamburg
Tel.: +49 40 428 54 – 4040
Email: mailbox@datenschutz.hamburg.de

10. Website Security

This website uses SSL/TLS encryption for all data transmitted between your browser and our servers. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction.

11. Links to Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites and recommend that you review their respective privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision is indicated at the top of this page. We encourage you to review this policy periodically.

13. Contact

For any questions or concerns regarding this Privacy Policy or our data processing practices, please contact us at:

A/I/M Leasing + Finance GmbH
Palmaille 82, 22767 Hamburg
Email: support@aim-leasing.com
Phone: +49 (0)40 2 70 78-2 00