Privacy Notice

Personal data means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes information such as your real name, address, telephone number and date of birth. Information which cannot be linked to your real identity - such as favorite websites or number of users of a site - is not considered personal data.

a) To obtain information regarding the data that we have on file about you.

b) To have any incorrect data that we may have on file about you rectified.

c) To have data that are no longer required for the purpose stated erased or - where a requirement to store data exists - to have the processing thereof restricted.

d) To receive data they provide in a structured, standard and machine-readable format.

e) To file an objection if the processing of your data is based upon a legitimate interest/to its use for advertising purposes/to a decision based solely upon automated processing, including profiling.

f) To lodge a complaint with the competent supervisory authority if you have doubts about whether the processing of your data complies with data protection regulations.

If you would like to assert your rights, please contact the authorities listed under Who is responsible? or send an e-mail to: datenschutz@dpdhl.com

If you would like to exercise your right to object - in particular to the use of your data for advertising purposes - please contact the authorities listed in the respective Products and Services.

If you have given your consent to a certain type of processing, you can revoke it at any time with effect for the future at the address indicated in the consent. This can be found in the Products and Services details for which the consent has been obtained.

The data will be stored for as long as they are required. The necessity ensues either from statutory retention periods. Where such statutory periods do not exist, the data will be stored for contract performance and invoicing purposes and as proof of the correct performance of the contract, until the liability periods expire, and it will subsequently be erased.

The DPDHL Data Privacy Policy regulates the Group-wide standards for data processing with a special focus on so-called third country transfers, meaning transfers of personal data to countries outside the EU, which do not have an adequate level of data protection. If you are interested in learning more about the DPDHL Data Privacy Policy, please use the following link:

DPDHL Privacy Policy (Summary) (Type: Acrobat Reader file, Size: 147.3 KB)

For contractual reasons, we also need personal data to provide our services and comply with the obligations arising from contractual agreements concluded with you. This data is used e. g. for performing a (shipment) contract, managing customer data, handling payments and, as the case may be, assessing creditworthiness. Certain shipment data will also be provided to the authorities of the country of transit or destination for customs and tax clearance or for security screening, as required by the laws of such country. The information provided would usually include: shipper name and address, receiver name and address, description of the goods, number of pieces, weight and value of shipment.

The legal basis is usually Art. 6 (1) b) GDPR since the processing is for the performance of a contract to which you are a party.

Further information on data protection in specific services and products is available in the section Products and Services.

If you are an existing customer of DHL your postal data (e.g. name, address) will be processed to contact you in order to provide you with the latest information about our offers, news, products and services. Apart from an existing consent, we will process your e-mail address exclusively in order to provide you with information regarding DHL's own and similar products.

Legal basis for the aforementioned processing is Art. 6 (1) f) GDPR. The processing of customer data for own direct marketing purposes is regarded as carried out for a legitimate interest.

You have right to object at any time to the said processing. To exercise your right, simply get in touch with us by using the contact details mentioned above under Who is responsible?.

If you register for one of our newsletters, we are entitled to use your e-mail address for this purpose. You may unsubscribe from the newsletter at any time by clicking the relevant link at the bottom of the newsletter.

In case you file an objection or unsubscribe from our newsletter services the respective data will be blocked, respectively deleted and no longer be processed for such purposes.

DHL does not share, sell, transfer or otherwise disseminate your personal data to third parties and will not do so in future, unless required by law, unless required for the purpose of the contract or unless you have given explicit consent to do so. For instance, it may be necessary to pass on your address and order data to our contractors when you order products. Further information on data protection in specific services and products is available below in section Products and Services.

External service providers that process data on our behalf are contractually obliged to maintain strict confidentiality as per Art. 28 GDPR. DHL retains responsibility for safeguarding your information in such circumstances. The service providers follow the instructions of DHL and this is guaranteed by technical and organizational measures, as well as by means of checks and controls.

We use tracking software to determine how many users visit our website and how often. We do not use this software to collect individual personal data or individual IP addresses. The data are used solely in anonymous and summarized form for statistical purposes and for developing the website.

There are contact forms on our website that can be used to contact us via electronic means. If the user takes advantage of this option, the data entered in the form will be transmitted to us and stored.

We use the personal data you provide solely for the technical administration of the websites and to fulfill your wishes and requirements – i.e. primarily to process contracts concluded with you or your enquiries.

In the following you will find examples of the type of data that is processed within the scope of the contact forms: 

The processing of the personal data from the form primarily enables us to handle the contact processing. In addition, data may be processed in the course of processing a customer request.

The data will be processed primarily for the performance of the contract in accordance with Article 6 (1) b) GDPR and to safeguard legitimate interests in accordance with Article 6 (1) f) GDPR.

Your data are also processed in a so-called ‘third country’, i.e., in a country outside the European Economic Area (EEA), or are accessed from there. Specifically, this concerns the recipient country of the item. This occurs either because the transfer is required to fulfil the contract (e.g., for delivery or customs clearance), based upon our Binding Corporate Rules or the EU standard contractual clauses.

DHL takes all of the necessary technical and organisational security measures to protect your personal data from being lost or misused. For instance, your data is saved in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer technology (SSL) during transmission. This means that an approved encryption procedure is used for communication between your computer and the DHL servers if your browser supports SSL.

Should you wish to contact DHL by email, we would like to point out that the confidentiality of the information sent cannot be guaranteed. The contents of email messages can be read by third parties. We therefore recommend you send us confidential information only by post.

We keep our data protection statement under regular review.

DHL reserves the right to change its data protection statement at any time with or without prior notice. Please check back frequently to be informed of any changes. By using DHL's websites you agree to this Privacy Policy.

This statement was last updated on 25.05.2018.

A parcel notification informs you, free of charge, about the expected delivery day of the parcel you have ordered to your home address. In order to be able to notify you by e-mail of the expected delivery day for your shipment, DHL requires your e-mail address. The parcel notification is a part of DHL Services which is activated as an integral element of the contract when you register with DHL. The processing of the e-mail address for the purpose of the parcel notification is carried out for the performance of a contract, on the basis of Article 6 (1) (b) GDPR. If you are not a registered DHL customer, DHL will receive your e-mail address from the sender of the shipment if he/she wishes to utilise DHL's parcel notification service. DHL subsequently processes the e-mail address purely in order to send you the parcel notification. The legal basis for this is Article 6 (1) (f) GDPR. The processing of the e-mail address for the purpose of the parcel notification is carried out in order to deliver the shipment as quickly and as efficiently as possible. Every parcel notification includes an opt-out for future parcel notifications.

Additional data protection information relating to shipment tracking:

1. Purposes of data processing - essential information

We process your data in order, for instance, to

• perform the parcel shipping contract concluded with you or a shipper,
• display the status of a shipment or provide information via our customer service department,
• fulfill obligations as part of statutory requirements,
• fulfill our security requirements (e.g. for crime detection purposes),
• compile statistics on the provision of our services,
• and for purposes of quality assurance, process optimization and planning certainty.

2. Storage period

The data will be stored for as long as they are required. The necessity ensues either from statutory retention periods.

Using DHL online franking, which is available at dhl.de, you can create and purchase a parcel stamp (Paketmarke) for national and international shipping with DHL Paket and DHL Express.

1. Type of data that is collected and stored as part of DHL online franking

DHL online franking does not store any payment details other than the name of the payment service provider used. All payment processing and the use of the payment data required for this purpose (e.g. credit card data and bank details) is carried out exclusively by the payment service providers.

2. Purposes and legal bases of the processing

The data is collected via DHL online franking for the purpose of sending parcels between a sender and a recipient. The legal basis for the processing of data for the purpose of performance of the contract is Article 6 (1) b) GDPR.

Furthermore, pursuant to Article 6 (1) (c) GDPR, the data is also processed to comply with statutory requirements, such as, inter alia, Section 99 of the Code of Criminal Procedure (Strafprozessordnung (StPO)), Section 40 of the Postal Act (Postgesetz (PostG)).

Finally, the data is also processed for the following purposes:

• To fulfill our security requirements (e.g. for crime detection purposes),
• To compile statistics,
• and for purposes of quality assurance, process optimization and planning certainty.

To this end, Deutsche Post AG has a legitimate interest in ensuring a smooth process and in permanently improving products and services. In the view of DHL Paket GmbH, no legitimate interest exists as the intrusiveness of the processing is kept to a minimum, for instance, via pseudonymization. The legal basis is therefore Article 6 (1) f) GDPR.

On our website, we offer business customers the opportunity to conclude a DHL business customer contract online by providing personal data. Personal data are entered on an input screen on dhl.de, encrypted using SSL, transferred to us and then stored. These data are not forwarded to third parties, except briefly, and without being stored, to legitimise the bank details using Sofort GmbH's TÜV-approved instant check procedure.

The following personal data are collected for the purpose of online contract conclusion (mandatory fields are marked with *)

• Company: Company name*, Legal form*, Street*, Street number*, Postal code*, City/town *, URL of your web-shop
• Owner/ Managing Director: Form of address*, Last name*, First name*, Phone*, E-Mail*
• Shipments: Domestic shipping volumes (per year)*, International shipping volumes (per year)*, Use climate-neutral shipping from DHL's GoGreen programme
• Account details: Account holder *, IBAN*, BIC*
• Point of contact (if chosen *): Form of address, Last name, First name, Phone, E-Mail
• Different pick-up address (if chosen *): Company name, Legal form, Street, Street number, Postal code, City/town
• Different billing address (if chosen *): Company name, Legal form, Street, Street number, Postal code, City/town.
  

In addition, business customers with over 3000 items per year can arrange a telephone appointment via an input screen on dhl.de. The following personal data are collected for this purpose (mandatory fields are marked with *). These data are not forwarded to third parties.

• Company: Company name*, Legal form*, Street*, Street number*, Postal code*, City/town *, Customer number (EKP), URL of your web-shop
  
• Owner/ Managing Director: Form of address*, Last name*, First name*, Phone*, E-Mail*
• Shipments: Domestic shipping volumes (per year)*, International shipping volumes (per year)*
  

Purpose and legal basis of processing

The data are collected via DHL Online Customer Acquisition for the purpose of fulfilling the contract for parcel dispatch between a sender and a recipient. The legal basis for processing the data for the purpose of fulfilling the contract is based upon Article 6, Paragraph 1 Letter b of the European Union General Data Protection Regulation (GDPR).

In addition, pursuant to Article 6, Paragraph 1, Letter c of the GDPR, data are also processed to comply with statutory requirements such as Section 99 of the StPO, Section 40 of the Postgesetz (PostG - German postal services act) and so forth.

Finally, processing is also carried out for the additional purposes listed below:

• In the context of security concerns (e.g., for the purpose of solving crime).
• Compiling statistics.
• For the purposes of quality assurance, process optimisation and planning certainty.
• To send you appropriate advertising - if permissible.

Deutsche Post AG has a legitimate interest in the above with a view to ensuring smooth process and to improving products and services on an on-going basis. In Deutsche Post AG's view, no overriding legitimate interest exists as the intrusiveness of the processing is kept to a minimum, e.g., through pseudonymisation. Consequently, Article 6, Paragraph 1, Letter f of the GDPR provides the legal basis.

If a business customer contract is concluded with DHL, the personal data collected through the online customer acquisition process at dhl.de will be archived for ten years after the termination of the business relationship in accordance with the statutory provisions.

If no business customer contract is concluded with DHL, the personal data collected via the online customer acquisition process on dhl.de will be used for a total of sixty days for the purpose of renewed contact by DHL Paket GmbH's Sales department. If you wish to delete the collected data after this period, please send an e-mail message with the subject Antrag auf Löschung von Unternehmensdaten (request for deletion of company data) and your company name to dhl_paket_datenloeschung@dhl.com.

If you wish to make use of your rights of objection - in particular against the use of your data for advertising purposes - please send an e-mail message with the subject Antrag auf Löschung aus dem Mailverteiler (request for deletion from the mailing list) and your company name to geschaeftskunde@dhl.de.

Our sales organization processes business as well as personal data during precontractual checks, and for the purpose of contract performance. We collect the contact details of the respective parties (name, business e-mail address and telephone number) and information on planned annual shipment volumes and the structure of shipments. All other personal information and shipment data gathered in the context of the business relationship (e.g. costing of quotes, contract management, accounting) are stored for the specific purpose of contract performance. The legal basis for processing the abovementioned data is Article 6 (1) (b) of the GDPR.

The data are forwarded to companies involved in the provision of postal services. Data are forwarded also as part of statutory obligations (e.g. to official investigators) referred to Article 6 (1) (c) of the GDPR. Some customer services and services in the field of IT are outsourced to external providers. External service providers who process data on our behalf offer sufficient guarantees that appropriate technical and organizational measures have been taken to ensure that data processing complies with the requirements of the EU's General Data Protection Regulation (GDPR). These providers are contractually bound within the meaning of Article 28 of the GDPR to maintain strict confidentiality. In cases such as these, responsibility for protecting your personal data remains with DHL Paket GmbH. External service providers process personal data only on documented instruction from DHL Paket GmbH. As a matter of principle, your data are not processed in third countries.

During shipping (e.g. all postal products such as parcel and express consignments - both national and international - plus extra services), we need personal data in order to provide our services and to fulfill obligations arising from the contracts we enter into with you. The data are used e.g. to fulfill a (shipping) contract, manage customer data, manage payments and, where necessary, to run a credit check. Certain shipping data are transferred to the authorities of the country of transit or destination to verify compliance with the relevant laws (customs clearance and payment of tax), or for security checks. This data usually include the name and address of the sender, the name and address of the recipient, a description of the goods, and the number of items, the weight, and the value of the consignment.

The legal basis is usually Article 6 (1) (b) of the GDPR as the data are being processed in order to fulfill a contract to which you yourself are party. Processing may also fall under Article 6 (1) (c) of the GDPR for the purpose of complying with legal requirements such as Section 99 StPO or Section 40 PostG.

Below is a summary of our products and the associated data types: Shipping (e.g. DHL Paket, DHL Paket International, DHL Retoure, DHL Europaket, DHL Paket Connect):

• Name and address of the sender/recipient
  
• Name of alternative recipient, where applicable
  
• Type of shipment, incl. attributes such as size and weight
  
• Shipment number, where applicable
  
• Tracking data, where applicable
  
• Delivery documentation incl. signatures, where applicable
  
• Defined product codes in the routing code specify which product was used
  
• Account number
  
• Required information for customs clearance, where applicable
  
• Commercial invoice
  
• Common labels, incl. license plate and routing code

Parcel-shipping services (e.g. COD, parcel notification, routing to Service Point, Ident-Check, age verification, DHL same-day parcel delivery, unde-liverable note, delivery in person):

• Where applicable, e-mail address of the customer
  
• Where applicable, e-mail address of the recipient
  
• Where applicable, telephone number of the recipient
  
• Where applicable, banking details of the sender in the case of COD shipments
  
• Where applicable, ID data to safeguard correct delivery
  
• Where applicable, information on services for recipients
  
• Where applicable, signing authorities, powers of attorney in the case of delivery in person

A shipping confirmation is provided free of charge and informs the sender or recipient that the shipping docket for your shipment has been successfully generated and that your shipment has either already been passed on or will soon be passed on to DHL. In order to be able to notify you by e-mail of the shipping confirmation for your shipment, DHL requires the e-mail address of the sender or the recipient. DHL will receive the respective e-mail address from the sender of the shipment if he/she wishes to utilise DHL’s shipping confirmation service. DHL subsequently processes the e-mail address purely in order to send the shipping confirmation. The legal basis for this is Article 6 (1) (f) GDPR. Processing of the e-mail address for the purpose of the shipping confirmation is carried out in order to inform you that your shipment has been or will soon be passed to DHL.