Privacy Policy

Effective date: 1 January 2026 · Applies to www.gaf-finance.it.com and all client-facing services.

GAF German Asset Finance GmbH ("we", "us", "our") respects your privacy. This policy explains what personal information we collect when you visit www.gaf-finance.it.com, request a facility, or otherwise interact with us, and how we use, share and protect it.

§1Data controller

GAF German Asset Finance GmbH, registered at Hansaallee 243, 40549 Düsseldorf, North Rhine-Westphalia, Deutschland. Registration number BaFin-ID: 10160885 Bak Nr.: 160885 · VAT DE367103331. Regulated by BaFin (Bundesanstalt für Finanzdienstleistungsaufsicht). For any question relating to this policy, contact our data protection team at support@gaf-finance.it.com.

§2Information we collect

Identity & contact. Name, business email, phone, job title, employer, correspondence address.
Financial & commercial. Company financials, aged debtor/creditor listings, asset invoices, VAT number and, where legally required, ultimate beneficial owner information.
Technical. IP address, device and browser type, referring URL, pages viewed, and interaction data collected via first-party analytics.
Marketing preferences. Consent to receive updates, unsubscribe records, and event attendance history.

§3How we use your information

We process personal data on the following legal bases:

Contract. To assess, structure, document and administer the facilities we provide.
Legal obligation. Anti-money-laundering, sanctions screening, tax and regulatory reporting.
Legitimate interest. Product improvement, fraud prevention, secure operation of www.gaf-finance.it.com, business analytics.
Consent. Marketing communications and non-essential cookies. You can withdraw consent at any time.

§4Sharing your information

We share personal data only where necessary and with appropriate safeguards:

Regulatory bodies including BaFin (Bundesanstalt für Finanzdienstleistungsaufsicht), tax authorities and law enforcement where legally required.
Vetted service providers (KYC, credit bureaux, cloud infrastructure, professional advisors) bound by written data-processing agreements.
Funders and credit insurers involved in the specific facility.
Purchasers or successors in the event of a corporate reorganisation, always subject to equivalent protections.

We never sell your personal data.

§5International transfers

Where personal data leaves the Deutschland / European Economic Area, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses, supplemented by technical and organisational measures where required.

§6Retention

We retain personal data only as long as necessary for the purposes described: typically for the life of the facility plus a statutory record-keeping period of up to ten years for anti-money-laundering, tax and prudential purposes. Marketing consents are refreshed periodically.

§7Your rights

Subject to legal exceptions, you have the right to access, rectify, erase, restrict, port or object to the processing of your personal data, and to lodge a complaint with your local supervisory authority. To exercise any of these rights write to support@gaf-finance.it.com.

Withdrawing consent. Where processing relies on consent — most obviously marketing emails and non-essential cookies — you can withdraw it at any time via the unsubscribe link in any email, in your cookie settings, or by writing to support@gaf-finance.it.com. Withdrawal does not affect the lawfulness of prior processing.

§8Security

GAF German Asset Finance GmbH operates under an ISO 27001-certified information security management system. Data in transit is TLS-encrypted; production data at rest is encrypted with rotating keys. Access is role-based and audit-logged. Suspected incidents are triaged within 24 hours.

§9Cookies

www.gaf-finance.it.com uses strictly-necessary cookies to keep sessions active. Analytics and marketing cookies are only set with explicit consent. See our Cookie Policy for the full inventory.

§10Changes to this policy

We may update this policy from time to time. Material changes are notified to registered clients by email at least thirty days before they take effect. The current version and its effective date are always available at www.gaf-finance.it.com/privacy-policy.html.

§11Contact

GAF German Asset Finance GmbH · Hansaallee 243, 40549 Düsseldorf, North Rhine-Westphalia, Deutschland.
Email: support@gaf-finance.it.com · Phone: +49 711 222985-0.
Regulated by BaFin (Bundesanstalt für Finanzdienstleistungsaufsicht). Reg. no. BaFin-ID: 10160885 Bak Nr.: 160885 · VAT DE367103331.