Privacy notice
Last updated: 2 September 2026
1. Controller
Santander Consumer Leasing GmbH, Santander-Platz 1, D-41061 Mönchengladbach, Germany. BaFin-ID 100051.
2. Data collected
- Order data: name, email, billing address, chosen extension.
- Payment data: SEPA mandate reference or masked card token, processed by our payment service provider.
- Support data: any content sent to support@santander.it.com.
- Cookie preference (see Cookies).
3. Data NOT collected
Extensions read the Santander app data locally on the customer's device. Your transaction feed, balances and account numbers are not transmitted to our servers.
4. Legal basis
Art. 6(1)(b) GDPR (contract) for order and billing; Art. 6(1)(c) GDPR for legal retention; Art. 6(1)(a) for cookie consent.
5. Retention
Order records for 10 years under German Handelsgesetzbuch. Support emails 24 months.
6. Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Email support@santander.it.com to exercise these.
7. Supervisory authority
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf.