Privacy Policy

Introduction

embercresters GmbH ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services. As the data controller, we are responsible for ensuring your personal data is processed in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller Information

The data controller responsible for your personal data is embercresters GmbH, a company registered in Germany with registration number HRB741902. Our registered office is located at Kirchstraße 157, 70657 Stuttgart, Baden-Württemberg, Germany. For any data protection enquiries, please contact us at privacy@embercresters.pro or call +49 711 4000275.

Data Collection

We collect personal data in various ways when you interact with our services. The data we collect may include:

• Contact Information: Name, email address, phone number, postal address, and company details when you contact us or request our services
• Communication Data: Records of your communications with us, including emails, phone calls, and messages
• Technical Data: IP address, browser type, device information, and website usage data collected through cookies and analytics
• Financial Information: Credit information and financial details necessary for equipment leasing assessments
• Business Information: Company registration details, business activities, and equipment requirements

How We Use Your Information

We process your personal data for legitimate business purposes and with appropriate legal basis. How we use your data includes:

• Service Provision: To provide equipment leasing services, process applications, and manage lease agreements
• Communication: To respond to enquiries, provide customer support, and send service-related communications
• Legal Compliance: To comply with regulatory requirements, conduct credit checks, and fulfil legal obligations
• Business Operations: To improve our services, conduct risk assessments, and manage our business relationships
• Marketing: With your consent, to send marketing communications about our services and industry updates

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We may share your personal data with trusted third parties in the following circumstances:

• Service Providers: Professional advisors, IT service providers, and other companies that help us deliver our services
• Financial Partners: Credit reference agencies, banks, and financial institutions for credit assessments and lease arrangements
• Legal Requirements: When required by law, regulation, or court order
• Business Transfers: In connection with any merger, acquisition, or sale of our business assets

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. Generally, we retain customer data for the duration of the lease agreement plus seven years for legal and regulatory compliance. Marketing data is retained until you withdraw consent or for a maximum of three years. Technical data and cookies are typically retained for shorter periods as outlined in our Cookie Policy.

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encryption, access controls, regular security assessments, and staff training. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved mechanisms to protect your data in accordance with GDPR requirements.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

Complaints

If you believe we have not handled your personal data in accordance with data protection laws, you have the right to lodge a complaint with the relevant supervisory authority. In Germany, this is the Federal Commissioner for Data Protection and Freedom of Information (BfDI) or your local state data protection authority.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your data.

Legal Basis for Processing

We process your personal data based on various legal grounds under GDPR, including: performance of a contract (when providing leasing services), legitimate interests (for business operations and communications), legal obligation (for compliance requirements), and consent (for marketing communications and certain cookies). We will always inform you of the specific legal basis when collecting your data.