Capital Lease Privacy Statement

Last updated: 15 August 2026

Capital Lease handles personal data with care. This privacy statement explains which personal data we process, why we process them, with whom data may be shared, how long data are retained and which rights you have.

1. Who is responsible for your personal data?

The controller is:

Capital Lease
Middelweg 223
2312 KJ Leiden
The Netherlands
Dutch Chamber of Commerce number: 99432072
Email: info@capital-lease.nl

2. Who does this privacy statement apply to?

This privacy statement applies to personal data processed by Capital Lease relating to, among others:

• people who contact us;
• entrepreneurs who wish to discuss or submit a Finance Application;
• directors, representatives, partners or other persons connected with a business, where their personal data are necessary for an application;
• contacts at Suppliers, Financiers and other business relationships;
• visitors to our website.

3. Which personal data do we process?

The data we process depend on your contact with Capital Lease and the services you request.

Where necessary, we may process the following categories of personal data:

Contact details

Such as your name, email address, telephone number, address details and the content of your message or request.

Business details

Such as company name, legal form, Chamber of Commerce details, role and business contact details.

Finance Application information

Such as information about the vehicle, purchase price, down payment, term, final instalment and requested financing amount.

Financial data and documents

Where necessary for a Finance Application and provided by you to Capital Lease, this may include information on the financial position of the business or other financial information required for the application.

Identification data

Where identification information is necessary for a specific application, Capital Lease processes only the data required for that purpose. Do not submit a Dutch citizen service number (BSN), a full copy of an identity document or other unnecessary identification information through a general contact form unless Capital Lease expressly asks for it for a specific application and the processing is permitted.

Correspondence

Such as emails, messages, call notes and other communications concerning your question or application.

Technical data

When you use our website, technical data necessary for the operation and security of the website may be processed, such as an IP address, the date and time of a request and technical log data, to the extent recorded by the systems used. After you consent to Analytics, data may also be processed about pages visited, traffic source, browser, device, click, scroll, mouse and interaction behaviour and pseudonymous identifiers, as further described in section 14.

4. Why do we process personal data?

Contact and questions

We process personal data to answer your question and communicate with you.

Legal basis: taking steps at your request before entering into a contract, or Capital Lease's legitimate interest in handling business communications where the contact is not aimed at entering into a contract.

Preparing and assisting with a Finance Application

When you ask Capital Lease to investigate financing possibilities or handle an application, we process the data necessary for that purpose.

Legal basis: taking steps at your request before entering into a contract and, where an agreement with Capital Lease exists, performance of that agreement.

Contact with a Financier or Supplier

Where necessary for the Services you request, relevant data may be shared with a Financier, Supplier or another party directly involved in the application.

Legal basis: taking steps at your request before entering into a contract or performance of a contract.

Administration and legal obligations

We process personal data where necessary to comply with statutory administrative, tax or other obligations.

Legal basis: compliance with a legal obligation.

Security, misuse and legal interests

We may process personal data to secure our website and systems, prevent or investigate fraud and misuse, and establish, exercise or support legal claims.

Legal basis: Capital Lease's legitimate interest in protecting its business, systems and legal interests, provided your interests or fundamental rights do not override those interests.

5. Financing and credit assessment

At your request, Capital Lease may submit a Finance Application to one or more Financiers.

The relevant Financier independently decides whether financing is provided and on what terms. A Financier may request additional personal data and, where a valid legal basis exists, carry out checks or consultations.

For its own credit assessment and performance of a financing agreement, the Financier may act as an independent controller. The privacy statement of the relevant Financier then provides information about that processing.

Capital Lease does not itself take a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you, unless you are separately informed in advance.

6. Where do we obtain personal data?

Capital Lease primarily receives personal data directly from you.

Where necessary for an application, personal data may also be received from, for example:

• the business you represent;
• a Supplier;
• a Financier;
• public business registers or other lawfully accessible business sources.

7. With whom do we share personal data?

Capital Lease does not sell your personal data.

Where necessary for the relevant purpose, personal data may be disclosed to:

• Financiers and leasing companies to which you wish an application to be submitted;
• Suppliers involved in the vehicle or transaction;
• providers of IT, hosting, email, communication or other support services used by Capital Lease;
• accounting, legal or other professional advisers where their involvement is necessary;
• competent public authorities where Capital Lease is legally required to provide data.

Service providers that process personal data solely on behalf of Capital Lease may process those data only within the arrangements made with them and as required by data-protection law.

A Financier, Supplier or other party may act as an independent controller for its own processing.

8. Communication through external services

If you contact Capital Lease through an external communication service, the provider of that service may also process personal data. The privacy terms of the relevant provider may apply to that processing.

For financial, identification or other sensitive documents, Capital Lease may ask you to use a different communication channel.

9. Transfers outside the European Economic Area

Where a service provider used by Capital Lease processes personal data outside the European Economic Area, Capital Lease ensures that a valid transfer mechanism and, where required, appropriate safeguards are in place in accordance with the GDPR.

You can contact info@capital-lease.nl for more information about safeguards used for a specific transfer.

10. How long do we retain personal data?

Capital Lease does not retain personal data longer than necessary for the purpose for which they were collected, unless further retention is required by law or necessary for the establishment, exercise or defence of legal claims.

Capital Lease applies the following criteria:

• information from a contact request is retained for as long as necessary to handle the request and while follow-up can reasonably be expected;
• information from a Finance Application is retained for as long as necessary to handle the application and afterwards only insofar as retention remains necessary for the Services, a legal obligation or legal claims;
• data that form part of the basic tax administration are retained for the statutory tax-retention period, which is generally 7 years;
• technical and security data are retained for as long as necessary for management, security and investigation of incidents or misuse.

When personal data are no longer required, they are deleted or anonymised unless continued retention is lawfully necessary.

11. Security

Capital Lease takes appropriate technical and organisational measures to protect personal data against loss, unauthorised access, unauthorised alteration and other unlawful processing.

Measures are adapted to the nature of the processing, the personal data involved and the related risks.

Access to personal data is limited to persons and parties that need the data for their work.

12. Your privacy rights

Depending on the circumstances, you have the right to:

• request access to the personal data Capital Lease processes about you;
• have inaccurate personal data corrected;
• request deletion of personal data;
• request restriction of processing in certain circumstances;
• object to processing based on a legitimate interest;
• receive or transfer personal data in certain circumstances;
• withdraw consent where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Requests can be sent to info@capital-lease.nl.

Capital Lease may request additional information where reasonably necessary to verify your identity. No more information will be requested than necessary.

13. Complaints about personal-data processing

If you have a question or complaint about how Capital Lease handles your personal data, contact info@capital-lease.nl.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

14. Cookies, Google Analytics and Microsoft Clarity

Capital Lease uses necessary cookies to keep the website working properly and to remember your cookie preference. These cookies do not require separate consent.

With your consent, Capital Lease uses analytics services to understand how visitors use the website and to improve the website and our services. We use Google Analytics 4 and Microsoft Clarity for this purpose. These services are only loaded after you have explicitly consented to Analytics. If you choose necessary cookies only, we do not load Google Analytics or Microsoft Clarity and this website makes no Clarity network requests.

Google Analytics

Google Analytics 4 may show us, for example, which pages are visited, which channel brought visitors to the website and whether features such as the lease calculator or contact options are used.

We do not send names, email addresses, telephone numbers, company names, message content or other information entered into our forms to Google Analytics. We do not use Google Analytics for remarketing or personalised advertising.

After consent, Google Analytics may place first-party cookies, including _ga and a cookie with a name starting with _ga_. These cookies help distinguish visits and sessions. We have limited the lifetime of these Analytics cookies to approximately 13 months.

We use Google to provide Google Analytics. Google processes Analytics data to provide this service under the applicable data processing terms. Google Signals and advertising personalisation are disabled for this implementation.

Microsoft Clarity

With your consent, we use Microsoft Clarity to better understand how visitors use the website. Clarity may create heatmaps and session replays for this purpose. These may show us, for example, where visitors click and scroll on a page and which website features may be unclear or difficult to use. Session replays are technical reconstructions of interactions, not video recordings of the visitor.

Clarity may process technical and usage data, such as pages visited, click and scroll behaviour, mouse and interaction data, browser and device information and pseudonymous identifiers used to distinguish visits or page views.

We use Clarity exclusively to analyse and improve the website. We do not use Microsoft Advertising, UET, remarketing, retargeting or personalised advertising. Advertising storage remains technically denied.

Input fields are masked by Clarity by default. In addition, the contact forms and dynamic financial values in the lease calculator are explicitly masked in the website code. Individual calculator values are not placed in HTML data attributes or clicked URLs for Clarity. We do not use the Clarity Identify API and do not send names, email addresses, telephone numbers, company names, free-text messages or other directly identifying form data to Clarity as Analytics data.

After your consent, Clarity may place first-party cookies, including _clck and _clsk. Microsoft may also use its own technology and cookies to provide Clarity, including third-party identifiers depending on the browser, consent and Microsoft infrastructure. Microsoft processes Clarity data in accordance with the applicable terms and the Microsoft Privacy Statement.

Analytics retention periods

User-level and event-level data in Google Analytics is retained for a maximum of 14 months. We do not keep this information for longer than necessary to analyse and improve the website.

Microsoft retains regular playback data for Clarity session replays for 30 days. Click and aggregated data, heatmap data and sessions labelled or favourited by Clarity users may be retained for up to 9 months.

You can change your choice at any time through ‘Cookie settings’ at the bottom of the website. If you disable Analytics, we stop Analytics measurement, set the consent status for Google Analytics and Microsoft Clarity to denied and, where technically possible, remove Capital Lease's first-party Analytics cookies from your browser.

15. Amendments

Capital Lease may amend this privacy statement when its Services, data processing or applicable law changes.

The latest version is published on capital-lease.nl. Where changes are material, data subjects will be additionally informed where required by the circumstances or applicable law.