Privacy at a Glance

In this document, we, Würth Leasing AG (hereinafter“Würth,” “we,” or“us”), explain what information we collect, how we process it, and, where applicable, the legal basis for doing so. If the processing of personal data is governed by a lease agreement or other specific agreements, those provisions take precedence. Your data is always processed in accordance with applicable data protection laws (in particular the DSG and the GDPR). Which specific regulations apply depends on the circumstances and, in particular, on whether cross-border data processing is involved.

This Privacy Policy is intended for visitors to our website, customers, and prospective customers. It also applies to employees, as well as contacts at business partners, organizations, and government agencies; job applicants; and all other individuals who use our services or come into contact with our offerings or our company.

1. Data Controller

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy listed below this text.

Würth Leasing AG is responsible for the data processing described herein. Inquiries regarding data protection should be directed to the following office:

Würth Leasing AG
Bändliweg 20
8048 Zurich
Switzerland

Or by email to: info@wuerthleasing.ch

2. Categories of Personal Data

Personal data refers to any information relating to an identified or identifiable natural person. We process the categories of personal data listed below, although additional personal data may be processed on a case-by-case basis:

  • Information from your application materials (cover letter, resume, certificates, and diplomas, etc.) regarding your professional activities, job roles, and human resources administration, as well as financial data (e.g., regarding the calculation and payment of wages and compensation);
  • Content from correspondence and meetings (e.g., information from email exchanges or meeting minutes);
  • Information from inquiries you submit via the contact form (e.g., mailing address, email address, phone number, content of the inquiry);
  • Where applicable, image and audio recordings (e.g., photos and videos for marketing purposes, video surveillance, events, recordings of telephone and video conferences);
  • Creditworthiness and credit capacity information (e.g., financial information, credit scores, or information on existing loans and leases);
  • Information necessary for the conclusion, administration, execution, monitoring, and termination of a lease agreement (e.g., master data, the condition of the leased asset);
  • Data related to the provision or use of services by service providers and third parties (e.g., information about your contract, warranty claims, or claims for damages);
  • Address information, as well as, where applicable, your interests and other sociodemographic information (e.g., for personalized offers or invitations to events);
  • Data collected in connection with the use of our website. This includes, in particular, your IP address, the MAC address of your device, information about your device and its settings, cookies used, the date and time of your visit, the pages and content you accessed, the features you used, and the referring website;
  • Location data (e.g., GPS data).

3. Source of Personal Data

We primarily process personal data that is provided to us in the course of our business relationships with our customers and business partners, as well as by other involved individuals and intermediaries, or that we collect from users through their use of our website, applications, and other platforms.

We process personal data about you from various sources. These include information from public registries and sources (e.g., commercial registers, debt collection registers, land registries, the press, publications, social networks), information from administrative or judicial proceedings (e.g., debt collection information or decisions by regulatory authorities), information from government agencies, credit bureaus (in particular CRIF, Creditreform, ZEK/IKO, and Intrum) or other service providers or third parties (e.g., banks, insurance companies, suppliers, car dealers, or sales partners), information from companies within the Würth Group, as well as information about yourself or third parties that you provide to us. By providing data about third parties, you confirm to us that such data is accurate, that you are authorized to disclose it, and that all data subjects have been informed of this Privacy Policy. In addition, individuals in your circle—such as family members, advisors, or legal representatives—may provide us with information about you to the extent that such information is necessary for the conclusion, administration, execution, monitoring, and termination of contracts.

4. Purposes of Data Collection

The data collected by the leasing company is used , in particular , for the review, conclusion, managing, processing, monitoring, and terminating lease agreements and other arrangements within the framework of lease relationships, as well as related supply contracts, and to fulfill our legal obligations both domestically and abroad.

In addition, to the extent permitted by law and appropriate, we also process personal data about you and other individuals for the following purposes, which are in our legitimate interests or, in some cases, in the interests of third parties:

  • Communication: We use your data to communicate with you and third parties, to process inquiries, and to provide customer service and support.
  • Advertising and Marketing: In addition, your data will be used for advertising, informational, marketing, and customer acquisition purposes (e.g., newsletters, events). You may object to the use of your data for marketing purposes at any time.
  • Market Research and Product Development: To improve our services (including our website and other platforms), we conduct analyses, surveys, media monitoring, and user evaluations, among other activities. Whenever possible, we use pseudonymized or anonymized data for these purposes.
  • Security and Prevention: Your data is used for IT security measures, access controls, fraud prevention, and compliance with internal security standards.
  • Employment Relationship: Employee data is used, among other things, for the establishment, administration, processing, monitoring, and termination of the employment relationship, as well as for human resources administration, work scheduling, and employee evaluations.
  • Applications: Information provided by applicants is used exclusively for the application process or—with their express consent—stored for consideration in future job openings.
  • Legal Claims and Criminal Prosecution: We process data to assert and defend legal claims, as well as to prevent, detect, and investigate criminal offenses or other misconduct, including internal investigations and data analyses for fraud prevention.
  • Compliance with Legal Requirements: The processing of your data is necessary to comply with laws, directives, and recommendations from government agencies, as well as regulations and industry standards.
  • Transactions: The purchase and sale of business units, companies, or parts of companies, as well as other corporate transactions and the associated transfer of personal data and business management measures.

The processing purposes listed below, and the underlying objectives, constitute legitimate interests of ours and/or those of third parties. You will find further details regarding the legal bases for our processing below.

5. Legal Basis for Data Processing

If you have given us your consent to process your personal data for specific purposes (for example, to receive newsletters, or for photo and/or video recordings), your data will be processed on the basis of this consent, unless another legal basis exists or is required. You may withdraw your consent at any time with future effect. However, such withdrawal does not affect the lawfulness of any processing that took place prior to the withdrawal.

Unless we rely on your consent, and to the extent necessary, the processing of your personal data is based on the fact that it is necessary for the conclusion, administration, execution, monitoring, and termination of lease agreements and other agreements within the framework of lease relationships, as well as related supply contracts, or on the basis of a legitimate interest on our part or that of a third party. This includes, in particular, the pursuit of the purposes and objectives set forth in Section 3, as well as the implementation of corresponding measures. Our legitimate interests include, among other things, customer relationship management, the improvement and marketing of our services, a better understanding of our markets, and the further development of our company and its operational activities, security and prevention measures for our processes and infrastructure, the administration of a prospective, existing, or terminated employment relationship, the enforcement of legal claims and active fraud prevention, and compliance with legal requirements. In addition, the law may also constitute a legal basis for data processing if it expressly requires, permits, or implicitly presupposes such processing.

Sensitive data (e.g., religious or philosophical beliefs or health information) may be processed, where necessary, based on your consent, legal obligations, your disclosure of the data, the assertion, exercise, or defense of legal claims, or in connection with judicial proceedings and a substantial public interest.

6. Disclosure of Data

As part of our business activities and for the purposes specified in Section 3, we may also disclose your data to third parties both domestically and abroad, to the extent permitted and required by law. This may occur either because the data is processed on our behalf as a data processor, or because the relevant third parties use it for their own purposes. Recipients include, in particular:

  • Service Providers: These include, in particular, IT providers/IT service providers (e.g., data storage/hosting, cloud services, providers of digital signature services, distribution of email newsletters/text messages, data analysis and processing, etc.), service providers in the areas of printing and/or mailing, service providers in the areas of marketing and/or business development; service providers related to business administration (e.g., accounting), payment service providers, debt collection agencies, credit bureaus, event service providers, banks, insurance companies, and service providers in the areas of maintenance and waste disposal.
  • Manufacturers and suppliers: This includes, in particular, manufacturers and suppliers, along with their affiliates and partners, distributors, subcontractors, and other business partners.
  • Authorities and affected parties: These include, in particular, domestic and foreign authorities, government agencies, courts, parties, and their legal representatives both in Germany and abroad.
  • Companies of the Würth Group: These include, in particular, companies of the Würth Group in Switzerland, Austria, Denmark, and Germany.
  • Associations and industry organizations: These include, in particular, competitors, self-regulatory organizations, advocacy groups, industry associations, and other bodies.
  • Public: This includes, in particular, potential customers, website visitors, existing customers, as well as traditional and social media.

7. Disclosure Abroad

As explained in Section 6, your data may also be transferred abroad, in particular to the EU or the EEA, where some of the Würth Group companies are based, and to the United States. However, you should be aware that your personal data may be transferred worldwide.

If we transfer data to a country that does not have an adequate level of data protection (as defined by the requirements of the DSG and the GDPR), we ensure the protection of your personal data by requiring the recipient to maintain an adequate level of data protection. This obligation is typically based on the European Commission’s so-called Standard Contractual Clauses (available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj? ), with the necessary adaptations for Switzerland, unless the recipient already complies with a legally recognized framework for ensuring data protection. Alternatively, we may rely on exceptions provided for by law, such as when a data transfer is necessary for the performance of a contract, serves to assert legal claims, or is covered by your express consent.

8. Retention Period

We process and store your personal data for as long as necessary to fulfill our contractual and legal obligations or to achieve the purposes for which the data is processed. This covers the entire duration of the business relationship—from the initial contact through the execution and termination of a contract—as well as beyond that for the duration of statutory retention and documentation periods. In addition, your data will be stored for as long as claims can be asserted against our company, we are legally obligated to do so, or legitimate business interests—such as for evidentiary and documentation purposes—require longer retention.

The retention period for your data depends on the specific purposes, statutory retention periods, and other legitimate interests. For example, we generally retain master data and contract data, as well as associated behavioral and preference data, for ten years from the last contractual activity or the end of the contract. We also store communication data for up to ten years. We typically retain technical data, such as log data, for a maximum of twelve months, while cookies generally remain in place for a few days up to two years. The retention period for image and audio recordings varies depending on the purpose, ranging from a few days (e.g., security cameras) to several years (e.g., photo/video recordings, event documentation). We delete application documents six months after the application process is completed, unless we receive your consent to retain the data for a longer period for future job openings. You can revoke this consent at any time by sending an email to jobs@wuerthleasing.ch. Applicants always have the option to withdraw their application.

As soon as your personal data is no longer needed for the purposes mentioned and there are no further legal, contractual, or technical reasons for retaining it, it will generally be deleted or anonymized.

9. Data Security

We implement appropriate technical and organizational security measures to ensure the confidentiality, integrity, and availability of your personal data and to protect it from unauthorized access, misuse, loss, unintentional changes, or unintended disclosure. These measures include, among other things, the issuance of guidelines, regular training, IT and network security solutions, access controls and restrictions, the encryption of data storage media and transmissions, pseudonymization, and regular monitoring mechanisms. Our goal is to ensure that your personal data is protected at all times from unauthorized or unlawful processing.

10. Profiling and Automated Individual Decisions

We are authorized to automatically evaluate certain personal characteristics about you based on your data (see Section 2) for the purposes specified in Section 3 (“profiling”). This may be done, for example, to analyze preferences (e.g., usage data from our website), identify potential misuse or security risks, make more informed business credit decisions, optimize business processes, or conduct statistical analyses. In addition, to achieve these purposes, we may create profiles by combining behavioral, financial, and preference data with master data, contractual data, and technical data. Through this analysis, we aim to gain a more comprehensive understanding of your interests and preferences in order to tailor our services specifically to your needs. When conducting such analyses, we ensure that the results are objective, proportionate, and reliable. We also take appropriate measures to prevent the improper or abusive use of profiles or their creation. Should a decision based on such a profile have legal implications or cause you significant harm, we ensure that our employees conduct an individual, manual review.

As a general rule, we do not use fully automated decision-making. Should we nevertheless use such processes, we will inform you separately, to the extent required by law, and explain your related rights.

11. Social Networks

We operate pages and other online presences on social media and other third-party platforms, and in this context, we process data about you. In doing so, we receive data from you (e.g., when you communicate with us or comment on our content) and from the platforms (e.g., statistics). The platform providers may analyze your usage and process this data together with other data they hold about you. They also process this data for their own purposes (e.g., marketing and market research purposes and to administer their platforms) and act as separate data controllers for this purpose. For more information on processing by the platform operators, please refer to the privacy policies of the respective platforms.

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Dublin, Ireland. For more information on data protection on the LinkedIn platform, please refer to LinkedIn’s Privacy Policy. Some of your data will be transferred to the United States in this process. You can object to LinkedIn’s processing of your data here. Additional settings can be configured using the opt-out form. In connection with the operation of our LinkedIn profile, we use LinkedIn Page Analytics. This provides us with information about how our content is used. We have addressed our data protection responsibilities in accordance with the relevant guidelines.

We have the right, but are not obligated, to review third-party content before or after it is published on our online platforms, to delete content without notice, and, if necessary, to report it to the provider of the relevant platform. Some platform operators may be located outside of Switzerland. Information regarding the transfer of data abroad can be found under Section 6.

12. Cookies and Similar Technologies

When you use our website, data is generated and stored in logs (particularly technical data). In addition, we may use cookies and similar technologies (e.g., pixel tags or fingerprints) to recognize website visitors, analyze their behavior, and identify their preferences. A cookie is a small file that is transmitted between the server and your system and enables the recognition of a specific device or browser.

For more information about how we use our cookies and the purposes for which they are used, please see our Cookie Policy

To this end, we use our own tools as well as third-party services (which may themselves use cookies) on our website, in particular to improve the functionality or content of our website (e.g., integration of videos or maps), to compile statistics, and to display advertisements. Currently, we may use services from the following service providers and advertising partners in particular; their contact information and further details regarding the specific data processing activities can be found in their respective privacy policies:

Some of the third-party providers we use may be located outside of Switzerland. For information on the transfer of data abroad, please see Section 6.

13. Your Rights

Under the data protection laws applicable to you, and to the extent provided for therein, you have the following rights:

  • To request information about the personal data we have stored about you;
  • to have incorrect or incomplete personal information corrected;
  • To object to our data processing;
  • to request the deletion or anonymization of your personal data;
  • to request the restriction of the processing of your personal data;
  • to request that certain personal data be provided in a commonly used electronic format or transferred to another data controller;
  • to revoke your consent with future effect, to the extent that our processing is based on your consent;
  • to file a complaint with the relevant supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (www.edoeb.admin.ch). For the European Economic Area (EEA), you can find an overview of the competent authorities at the following link: https://edpb.europa.eu/about-edpb/board/members_de.

All requests regarding the exercise of these rights may be directed to Würth using the contact information provided. Please note that the exercise of these rights may be denied or restricted in certain cases for legal reasons or based on data protection laws, and that we may verify your identity by requesting a copy of an official identification document.

14. Changes

We may update this Privacy Policy at any time. The most recent version, as published on our website, is the one that applies.

Version dated October 6, 2026