Cookie and privacy policy

Privacy policy

At DirectLease, we believe leasing should be simple and worry-free. Naturally, we also take great care when handling your personal data. We use your data to provide our services, for example to manage your lease agreement, maintenance, damage claims or to contact you about your lease car. We want to be clear about what data we use, why we use it and how we protect it. This privacy statement explains exactly how we handle your personal data.

DirectLease B.V. is part of International Car Lease Holding, an enterprise of Van Mossel Automotive Group.

This Privacy Statement contains information on how we handle your personal data. This Privacy and Cookie Statement was last updated on 29 September 2026.

Who is responsible for processing your data?

The party responsible for the personal data processing is Van Mossel. We are a group of car companies, damage repair companies, leasing companies and financial service providers, all of which are part of the Van Mossel Automotive Group, as described in more detail on our website, www.vanmossel.nl.

Van Mossel offers mobility products and services in the areas of buying, renting, leasing, finance and insurance and acting as an intermediary in these areas, customization, servicing, repair and damage repair of passenger cars, commercial vehicles, electric bicycles and charging solutions.

We offer existing and potential customers various mobility solutions that, in many cases, are carried out by several Van Mossel companies jointly. This means that a customer of one of the Van Mossel companies is a customer of Van Mossel as a whole.

What are personal data?

Any information about an identified or an identifiable natural person constitutes personal data. Whether certain information qualifies as personal data depends partly on whether Van Mossel has lawful means at its disposal that it can reasonably be expected to use to identify a data subject.

Personal data we process

Van Mossel processes personal data when concluding and/or performing agreements to deliver, lease, rent out, service or repair vehicles, if you use the charging solutions for electric vehicles offered by Van Mossel, and where Van Mossel acts as an intermediary for you in applying for finance or insurance. Depending on the services we provide, we usually receive these personal data from you, your employer and/or your employer's leasing company, or when you use our services in another way and provide us with data in doing so, or when you allow us to record data about your interests and preferences. In addition, we use public registers or third parties (data suppliers or importers/manufacturers) that can verify, update and/or enrich your personal data for us. We also receive your data from third parties if you have given your consent for that, for example when you make an appointment via a Schadenet website or if you have expressed your interest via a website like Autotrack or Autoscout or via the manufacturer/importer's website.

If you are an existing or potential customer, we may collect and process the following data concerning you:

• Contact details: such as your name, address, telephone number(s) and email address(es), gender and perhaps the same details about your partner (in the case of private leasing and finance).
• Identifying details: such as your date of birth, customer number, driver's licence information, passport number, initial login details or another unique identification number (such as an RDIF key number when using a charging card for electric charging).
• Financial details: (in the case of a lease, finance and insurance): income/expenses, fixed costs and bank statements.
• Vehicle details: registration number, chassis number, make, model, service history, ownership history and any other information relevant to the agreement in question.
• Personnel details: if necessary for the implementation of the car scheme, we may process data about a driver's job title and/or employment relationship.
• Usage and consumption information: such as transaction details, claim notices, trip data, fines, electricity consumption and location data (in the case of electric charging solutions), IP address, communication preferences and settings, surfing behaviour, cookies, customer satisfaction data, notes and emails regarding complaints/whenever there is contact.

A combination of these data is used for financing and securitisation purposes (see section below for more details). These include the following: debtor number, debtor name (in combination with outstanding items), name and address details, other contact details, such as telephone number and email address, vehicle registration number, contract number, lessor name, make, type and information regarding the lease term and book value.

No processing of data of persons under the age of 16: Our products and services are not intended for persons under the age of 16.

Why we process your personal data

Van Mossel processes your personal data for the purposes listed below:

Sharing with third parties

We may share your details with third parties. We do this mostly in order to be able to provide the products and/or services requested. In some cases you have consented to this; in other cases the law requires this, or this is to promote our interests or those of a third party, such as the importer or manufacturer. The overview below provides more information on personal data sharing.

If we share personal data with third parties that process personal data on our instructions ('processors'), then these processors may only process the personal data in accordance with our instructions and subject to our data processing agreement. Consequently, you can hold us accountable for the correct processing of your personal data.

We also share personal data with third parties that themselves determine the purpose and means of the processing of your personal data and that are themselves responsible to you for the correct processing of your personal data ('controllers'). These include your employer, the fuel card supplier, the software supplier and (in some cases) the electricity supplier in the context of a charging solution for electric vehicles purchased from Van Mossel, the roadside assistance provider, a loss adjustment agency or an agency that collects the leased vehicle, credit bureaus or, for example, your non-life insurer. This Privacy Statement does not apply to the processing of personal data by these controllers.

If personal data are transmitted to a recipient abroad, they are usually only transmitted to a recipient in a country that the European Commission considers provides an adequate level of personal data protection. If a recipient is located in a third country that does not have an adequate level of protection, personal data will only be transferred in a secure and lawful manner, for example using the model contracts for transfer to a third country.

Personal data may also be shared within the Van Mossel Automotive Group in certain circumstances, for example for financing and securitization purposes or to provide a full range of services to our customers. The bases for sharing data within the Van Mossel Automotive Group are the performance of a contract or quotation and Van Mossel's legitimate interest. This Privacy Statement applies to all companies that are part of the Van Mossel Automotive Group, which means that your privacy is always guaranteed.

How long we retain data

We retain personal data in accordance with our internal data retention policy and/or for as long as (i) you are a Van Mossel customer or you continue to show an interest in Van Mossel's services, or (ii) we are required by law to retain data, or (iii) we believe we have good grounds to retain data, to the extent necessary.

Website visit

When you visit or use our websites, services, applications, communication services (such as email) and tools, we may use cookies, web beacons and other similar data storage technologies for the purpose of personalizing advertising messages and providing you with a better, faster and more secure customer experience. You may refuse non-essential cookies if you wish. Please refer to the cookie statement on our websites for more details on cookie use.

Your rights

You can submit any privacy requests to Van Mossel by sending an email to [email protected]. In your email, please specify the request and state your name and address, your email address known to us, your vehicle registration number and your branch/brand so that we can find you in our systems. We will respond to the request within 30 days. Alternatively, you can use one of the three web forms on this page: https://www.vanmossel.nl/privacyverklaring/.

For some requests (e.g. access or data portability), we may ask you to provide a secure copy of your identity document so that we can verify your identity (only if we have not been able to establish your identity by other means). 'Secure' means that you cover the passport photograph and citizen service number (BSN) (including in the machine-readable zone (MRZ)) or block them out. Indicate on the copy the date and the branch(es) to which the request relates.

Van Mossel does not use solely automated individual decision-making.

You may only exercise your rights to the extent that the law grants you these rights. We may need to retain certain data to comply with legal obligations, for administrative purposes and/or to complete transactions that had already been initiated before you requested the change or deletion.

Where the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. However, withdrawing your consent does not affect the lawfulness of any processing based on your prior consent carried out before we received the withdrawal.

If you, as an existing or former customer, object to direct marketing, we will stop that processing operation for you immediately. You can object, for example, by clicking on the unsubscribe link in any commercial email you receive from us, by completing this form: https://www.vanmossel.nl/bezwaar-tegen-direct-marketing/, through mijnvanmossel.nl, through the customer website, or by sending an email to [email protected].

If you object to another legitimate interest of Van Mossel or a third party, we will look at your objection and weigh up your individual interest against our legitimate business interest.

If we are unable to reach a solution together, you obviously always have the right to file a complaint with the Dutch Data Protection Authority, Bezuidenhoutseweg 30, 2594 AV The Hague, the Netherlands.

Data security and protection

Van Mossel takes appropriate security measures to minimize the misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification of personal data. Van Mossel has implemented both technical and organizational measures to secure your personal data. These security measures are reviewed periodically, for example on the basis of threats.

Unfortunately, no data transmission or storage system is guaranteed to be 100% secure. If you have reason to believe that your communications with us are no longer secure, please inform us immediately by contacting us at [email protected] and/or by calling +31 (0)416 82 07 41.

Contact

Amendments

This Privacy Statement will be amended as and when necessary. This Privacy Statement always states the most recent date it was amended.

Cookies

On our website, we use cookies from ourselves and from third parties. Cookies are information files that are automatically stored on or read from the visitor's device (e.g., PC, tablet, or smartphone) when visiting a website. This is done via the web browser on the device.

We use the following types of cookies:

• Functional cookies: These cookies have a functional role on the website. They ensure that the website functions properly.

• Analytical cookies: These cookies give us insights into the use of our website. Based on this information, we can make our website more user-friendly.

• Marketing cookies: These cookies allow us to show you personalized advertisements (via our advertising partners).

The cookies can, among other things, collect the following data from you:

• Name

• Login information

• Display options

• IP address

• Cookie ID

• Website and click behavior

• Referrer URL

• Behavior within the application

When you visit our website for the first time, we show a message with an explanation about cookies. In doing so, we will ask for your consent to the use of cookies, if we are required to do so.

In the following table, you will find an overview of the cookies we use.

Enabling and Disabling Cookies

In your web browser, you can set it to only accept the storage of cookies if you agree. For more information, see your browser's manual. Note: Many websites do not function optimally if cookies are disabled.

Deleting Cookies

Most cookies have an expiration date. If an expiration date is set, the cookie is automatically deleted when the expiration date is reached. You can also manually delete cookies before the expiration date. See your browser's manual for this. Below you will find a link to the provider's website for each browser, where it is described step by step how to block or delete cookies.

• Google Chrome

• Firefox

• Edge

• Safari

How Are Your Personal Data Secured?

The protection of personal data is of great importance to us. We therefore take appropriate technical and organizational measures regarding the processing of personal data to prevent loss or any form of unlawful processing (such as unauthorized reading, modification, alteration, or disclosure of personal data). We continuously adjust the security measures and pay attention to what can go wrong.

What Privacy Rights Do You Have?

• Right to access: You have the right to view the personal data we process about you.

• Right to rectification: You have the right to correct or supplement the personal data we process about you if they are incorrect or incomplete.

• Right to object: You can object to the processing of your personal data, including direct marketing.

• Right to erasure: You can request us to delete your personal data.

• Right to withdraw your consent: If you have given us consent to process personal data, you can withdraw this consent at any time.

• Right to data portability: If technically possible, you have the right to have the personal data we process about you transferred to a third party.

• Right to restriction of processing: In certain cases, you can ask us to (temporarily) restrict the processing of your personal data.

When you make a request, we may ask you to identify yourself. We ask for information to ensure that you are the right person to whom the personal data belong.

We will usually respond to your request within 30 days. However, this period may be extended for reasons related to the specific privacy rights or the complexity of the request. If we extend this period, we will inform you in good time.

If you wish to exercise one of your rights, you can inform us via [email protected].

Changes to the Data Protection and Cookie Policy

If our services change, we will, of course, also have to adjust the Data Protection and Cookie Policy. Therefore, always pay attention to the date at the top of this document and check regularly whether there are new versions.

Questions or Complaints

If you have any questions or wish to file a complaint about the use of your personal data, you can send an email to [email protected]. We will handle any question and complaint internally and keep you informed. If you believe that we are not assisting you in the right way, you have the right to file a complaint with the supervisory authority. This is called the "Autoriteit Persoonsgegevens."

Contact Details

DirectLease.de GmbH

Am Seestern 4

D-40547 Düsseldorf

Email address: [email protected]

Telephone: +49 (0)211-528084-0

Commercial Register at the Local Court of Neuss: HRB 73120