Information on data protection at a glance

Introduction

Strict data protection standards are an integral part of the Deutsche Post DHL Group's brand, much as the security of our IT systems is of the utmost importance for our company. As a global company whose business model is founded on networking and exchanging sensitive data, we believe that we have a special responsibility here.

The following notes summarize how we go about processing the data made available to us. Please consult the General Part for information that applies to all our products and services. The section entitled Products and Services contains more in-depth information on data processing.

A) General information

Contact details

a) Name and contact details of
    the competent controller:
    The competent controller within the meaning of the General Data Protection Regulation (GDPR) is Deutsche Post AG.
    Deutsche Post AG
    Charles-de-Gaulle-Straße 20
    53113 Bonn


b)  Name and contact details of the
     data protection officer
     Deutsche Post AG
     Gabriela Krader, LL.M
     53250 Bonn

     datenschutz@dpdhl.com


c)   Competent supervisory authority
      Data processing in connection with
      mail and telecommunication services:
     

      Die Bundesbeauftragte für den
      Datenschutz und die
      Informationsfreiheit
      Husarenstraße 30
      53117 Bonn

      Other data processing by the data controller:

      Die Landesbeauftragte für den Datenschutz Nordrhein Westfalen
      Kavalleriestraße 2-4
      40213 Düsseldorf

Personal data

Personal data is specific information about personal or factual circumstances relating to an identified or identifiable natural person. This includes information such as your real name, address, telephone number and date of birth. Information which cannot be directly linked to your real identity – such as favorite websites or the number of users of a site – is not considered personal data.

Purpose of data processing

We process your data, for example

  • to satisfy the terms of the contract we signed with you or with a sender,
  • to ensure that your visit to our websites/apps is as pleasant as possible,
  • to send you a newsletter if you are a subscriber,
  • to send you or display relevant advertising, insofar as this is permitted,
  • to check your creditworthiness, where necessary,
  • to satisfy legal requirements (e.g. the Criminal Procedure Code, Federal Regulation on Foreign Trade),
  • to meet security requirements (e.g. to detect criminal offenses),
  • to produce statistics,
  • to secure payment,
  • and for quality assurance, process optimization and reliable planning.

You will find further details on e.g. the type of data, the purpose of data processing, and the legal basis in the sections on the respective products.

Please use our contact form if you wish to exercise any of your rights

You have the following rights:

a) to obtain information on the data stored about you,

b) to rectify incorrect data,

c) to have your personal data erased or, if statutory retention periods apply, restrict the processing of data no longer required for the specified purpose,

d) to access the personal data you provided in a structured, commonly used and machine-readable format,

e) to raise an objection if your data is being processed on the grounds of a legitimate interest / to the use of your data for advertising purposes / to your being subject to a decision based solely on automated processing, including profiling

f) to file a complaint with the competent supervisory authority if you suspect that your data have not been processed in compliance with data protection legislation.

If you do not provide the data indicated as being necessary, a contract cannot be established.

Should you wish to exercise any of your rights, please send a mail found here:

www.deutschepost.de/datenschutz/kontakt.

If you exercise your right to object – especially to the use of your data for advertising purposes – please contact the address given in the relevant “Products and Services” section.

In you have consented to your data being used for a certain type of processing, you may withdraw such consent at any time with future effect by notifying us at the address specified when you gave your consent. You will find this in the details of the “Products and Services” for which your consent was obtained.

Duration of storage

That data will be stored for as long as they are required. This is based either on the statutory retention periods, for example, as set out in Section 257 of the German Commercial Code (HGB) or Section 127 of the German Fiscal Code (AO). If there are no such statutory retention periods, the data will be stored for the purpose of contract performance and invoicing, and as evidence of correct performance until the end of the liability periods and subsequently erased.

Group Data Privacy Policy

The DPDHL Data Privacy Policy governs Group-wide standards for data processing, with a specific focus on so-called third-country transfers, meaning the sharing of personal data to countries outside the EU which do not offer a suitable standard of data protection. If you would like to learn more about the Group Data Privacy Policy, please use this link:

Download Group Data Privacy Policy (summary) (PDF, 362 KB)

B) Data processing

On our web platforms and apps

Web platforms

By using our websites, you have given your consent to the use of cookies in accordance with Article 6 (1) letter a GDPR. If you wish to withdraw your consent, you can use the opt-outs described in the following paragraphs.
 

Collection and processing of personal data

When you visit our websites, our webservers temporarily save the connection data of the computer requesting the connection for the purpose of system security, the pages you visit, the date and duration of your visit, the data showing the type of browser and operating system used and the website from which you visit us. Other personal data, such as your name, address, telephone number or e-mail address are not collected unless you provide these data voluntarily, for example as part of a registration procedure, survey, competition, performance of a contract or request for information.

Use and forwarding of personal data

We use the personal data provided by you exclusively for the purpose of technical administration of our websites and to fulfill your wishes and requirements, i.e. generally to perform the contract concluded with you or to respond to your enquiry.

We only use such data for product-related surveys and marketing purposes if you have given us your prior consent and if you have not filed an objection, insofar as this is permitted by law.

Your data are not forwarded, sold or transmitted to third parties unless this is necessary for the purpose of performing the contract your you have explicitly given your consent. For example, if you order products it may be necessary to forward your address and order data to our suppliers.

Information about the Group

The companies in Deutsche Post DHL Group would like to contact you with information about offers and other news relating to our products and services. If you register with our websites, we will therefore ask you to tell us whether you would like to receive direct promotional messages from us. As a customer of Deutsche Post, you will naturally continue to receive the necessary information on important changes relating to existing contracts (e.g. price changes).

Use of web tracking

We use tracking software on our websites to monitor frequency of use and the number of users. This software does not collect personal data and IP addresses. The data are used exclusively in anonymized, summarized form for statistical purposes and for the development of the website.

Newsletter

If you register for the Deutsche Post newsletter, you declare that you agree to receive quarterly information by email about seasonal products and offers, new services and the latest competitions.
You can withdraw your consent at any time and unsubscribe from the newsletter by clicking on the unsubscribe link in the email you receive.
Your data will be used exclusively to send you the Deutsche Post newsletter and never passed on to third parties or used for purposes other than those specified here.

Use of cookies

Cookies are small files that enable us to store information related specifically to you, the user, on your PC while you visit one of our websites. Cookies help us to determine how frequently our Internet pages are accessed as well as the number of users. And they help us configure our offers so that they are as convenient and efficient as possible for you.

On the one hand, “session cookies”, i.e. cookies that are stored exclusively for the duration of your visit to one of our Internet pages. On the other, we use "permanent cookies” to retain information about visitors who repeatedly access one of our Internet pages. The purpose of using cookies is to be able to offer you optimal user guidance as well as to "recognize” you and thus be able to present (as far as possible) diversified Internet pages and fresh content during repeated use. The content of a permanent cookie is limited to an identification number. Name, IP address, etc. are not saved. We do not create an individual profile of your online activities.

You can use our offers without cookies. In your browser, you can deactivate the saving of cookies, limit them to certain websites or have a message sent to you as soon as a cookie is sent. You can also delete cookies from your PC at any time (“cookies” folder). However, please note that in this case you will have to expect restricted page presentation and user guidance.

Purpose and duration of storage
Type
of cookie
Name Purpose
Authentication cookie
JESSIONID This cookie is used to authenticate the session.
JESSIONID is a randomly generated value which the server uses to unambiguously identify the user's session.
Form cookie PA_JESSIONID This cookie is used by our FGEN form generator. When multistage forms are used, the values (data) are cached here. The cookie is deleted when the form is completed and closed. PA_JESSIONID is a randomly generated value which the server uses to unambiguously identify the user's session.
Web tracking cookie
Adobe SiteCatalyst
s_cc JavaScript code sets and reads this cookie to determine whether cookies have been activated.
This cookie is a session cookie and expires when the browser is closed.
Web tracking cookie
Adobe SiteCatalyst
s_sq This cookie collects information in anonymous form on the links the user clicks on. This is done to find out which links are used and which are not used, with the aim of improving the website.
This cookie is a session cookie and expires when the browser is closed.
Web tracking cookie
Adobe SiteCatalyst
S_vi This cookie is used to recognize a repeat visitor as being one and the same visitor and to collect information on how our website is used.
We continually improve our website and provide users with  more customized content on the basis of this information.
The cookie collects the above information in anonymous form (individual visitor ID, time and date stamp). This is a permanent cookie which has a lifetime of 2 years.
nugg.add Cookies      d, ut, ci nugg.ad identifies relevant target groups for advertising on the basis of socio-demographic attributes and product interests.
Only statistical patterns from the use of online advertising and editorial content are processed. The d cookie, like the dp cookie, is used for target group analysis purposes and contains the number of page hits in various thematic areas. The ci cookie is used to record how often you are shown a particular advertisement.
These cookies only contain general information about your Internet use and have a lifetime of 26 weeks.
Security

Deutsche Post takes all necessary technical and organizational security measures to protect your personal data from being lost or misused. For instance, your data is saved in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer (SSL) technology during transmission. This means that an approved encryption procedure is used for communication between your computer and the Deutsche Post servers if your browser supports SSL.

Should you wish to contact Deutsche Post by email, we would like to point out that the confidentiality of the information sent cannot be guaranteed. The contents of email messages can be read by third parties. We therefore recommend that you send us confidential information only by post.

How to manage cookies

It is possible to use our products and services without cookies. You can normally deactivate the saving of cookies in your browser or limit them to certain websites. The browser can be set to notify you when a cookie is sent. You can also delete cookies from your hard drive at any time (folder: “cookies”). However, in this case you will have to expect restricted page presentation and user guidance.

For detailed information on cookies, e.g. how to see which cookies have been set and how to manage and delete them, visit:

All about Cookies

For further EU-specific recommendations on cookies and the various opt-out options please visit the following website:       

Your Online Choices
        
If you wish to switch off general web tracking by Adobe SiteCatalyst (web-tracking cookies), you can find further information on the following website:

Link for individual cookies

Adobe Sitecatalist Tracking Opting OUT

If you wish to switch off some or all of the advertising cookies set on your computer, you can find further information on the following website:      

Network Advertising Initative (NAI)

This website uses technology from nugg.ad AG (www.nugg.ad) to monitor data to control advertising. In order to do this, nugg.ad saves the frequency of use of various website topics in cookies. These cookies are stored in the browser on your device (e.g. your PC, laptop, smartphone, etc.) for a maximum of 26 weeks. nugg.ad’s technology may also save basic information on your use of other websites in order to make a rough estimate of what advertising might interest you most.

If you wish to see advertising on websites that are of interest to you, you can opt in to allow further theme-based analysis of your usage behavior. If you give your consent, this opt-in cookie will also be stored in the browser on your device. It will be stored for 1 year. If nugg.ad has already stored information in cookies that had previously been placed on the browser in your device, setting an opt-in cookie will have the following effect: As a result of your consent, the lifetime of the cookie that nugg.ad has already set will be extended to a total of 1 year (calculated from the date when the cookie was set). Therefore, the information stored in the cookies prior to your opt-in will be retained following your consent and deleted upon expiration of the lifetime of the cookie, in other words, after max. 1 year.

On www.deutschepost.de we set cookies from our technology partner “The ADEX GmbH”, Rotherstrasse 22, 10245 Berlin, Germany, to collect data on surfing behavior for marketing purposes. These do not collect any personal data allowing conclusions to be drawn about users of the deutschepost.de website. You can find further information on data protection on the website of The ADEX; an opt-out option is available at de.theadex.com/company/consumer-opt-out.

C) Products and services

You can find data protection information on parcel products at https://www.dhl.de/en/toolbar/footer/privacy-notice.html

You can find data protection information on EPOST services at www.epost.de/datenschutz

You can find data protection information for Postident and Post ID at https://www.deutschepost.de/content/dam/dpag/html/ext/postid/Datenschutzhinweise.pdf

 

Domestic and international mail, including additional services, postcards and other mail products (including franking methods and payment procedures)

1. Type of data
Type of data Product
Sender's name and address Briefe national (domestic letters), Briefe international (international letters), Postkarte national (domestic postcards), Postkarte international (international postcards), Postzustellungsauftrag (formal delivery orders), Büchersendung national (domestic book shipments), Warensendung national (domestic merchandise shipments), Warenpost national (domestic merchandise shipments), Warenpost international (international merchandise shipments), Pressesendung national (standard periodicals, domestic), Pressesendung international (standard periodicals, international), Additional service: Premiumadress, Doppel Auslieferungsbeleg (duplicate delivery receipt), Nachnahme national (COD domestic),  Anschriftenprüfung (Produktvariante: Anschriftenprüfkarte) (Address check (product variant: address verification card)), Einschreiben national (Domestic registered mail), Prio, Wert national (insured domestic items), Einkaufaktuell, Dialogpost national, Responseplus, TRIGGERDIALOG, TRIGGERIMPULS, POSTAKTUELL, Track&Match, Adressdialog, Handyporto, Portokasse, Online Franking / Internetmarke (internet stamp), Driver services (e.g. HIN+WEG), Postzustellungsauftrag (PZA) / elektronischer Postzustellungauftrag (ePZA), GOGREEN / GOGREEN eMobility, Rental trays / pallet frames
Name and address of contract partner Postfach-Zugang (PO box access), Adress-Zugang (Address access), Mietbehälter / Aufsetzrahmen (Rental trays / pallet frames), Anschriftenprüfung (Produktvariante: Anschriftenprüfkarte, Datei Check/ Datei Check Comfort) (Address check (product variant: address verification card, file check/ comfort file check)), Fotopost, Bücher-/Warensendung (Book/goods shipment), Warenpost national (Domestic merchandise shipments), NAchnahme national (Domestic cash on delivery (COD))
Name and/or address of recipient Briefe national (domestic letters), Briefe international (international letters), Postkarte national (domestic postcards), Postkarte international (international postcards), Postzustellungsauftrag (formal delivery orders), Büchersendung national (domestic book shipments), Warensendung national (domestic merchandise shipments), Warenpost national (Domestic merchandise shipments), Warenpost international (international merchandise shipments), Pressesendung national (standard periodicals, domestic), Pressesendung international (standard periodicals, international), Bücher-/Warensendung (Book/goods shipment), Alterssichtprüfung (Visual age check), Prio, Anschriftenprüfung (Produktvariante: Anschriftenprüfkarte, Datei Check/ Datei Check Comfort) (Address check (product variant: address verification card, file check/ comfort file check)), Additional service: Premiumadress, Einschreiben national (domestic registered mail), Eigenhändig national (delivery to addressee only, domestic), Rückschein national (advice of delivery, domestic), Einschreiben Einwurf (registered mail to addressee’s mailbox), Doppel Auslieferungsbeleg (duplicate delivery receipt), Wert National (insured domestic items), other services: Schlüsselversand (shipment of keys), electroreturn, TRIGGERDIALOG, TRIGGERIMPULS, Online Franking / Internetmarke (internet stamp), Fahrservices (z.B. HIN+WEG) (Driver services (e.g. HIN+WEG)), Postzustellungsauftrag (PZA) / elektronischer Postzustellungauftrag (ePZA), GOGREEN / GOGREEN eMobility
Name of substitute recipient, where applicable Additional service: Einschreiben national (domestic registered mail), Eigenhändig national (delivery to addressee only, domestic), Rückschein national (advice of delivery, domestic), Einschreiben Einwurf (registered mail to addressee’s mailbox), Wert National (insured domestic items), Telegramm, TRIGGERDIALOG, TRIGGERIMPULS, Alterssichtprüfung (Visual age check)
Franking method, including where applicable details integrated by sender, e.g. sender's customer ID or a photo used for franking Briefe national (domestic letters), Briefe international (international letters), Postkarte national (domestic postcards), Postkarte international (international postcards), Postzustellungsauftrag (formal delivery order), Blindensendung international (literature for the blind, international), Warenpost international (international merchandise shipments), Presse und Buch International (international periodicals and book shipments), Telegramm, Briefe International (international letters), Warenretoure Brief International (return of merchandise, international letters); Dialogpost national, Responseplus, Premiumadress, TRIGGERDIALOG, TRIGGERIMPULS, POSTAKTUELL, Track&Match, Handyporto, Portokasse, Online Franking / Internetmarke (internet stamp), Postzustellungsauftrag (PZA) / elektronischer Postzustellungauftrag (ePZA), Einschreiben national (Domestic registered mail), Alterssichtprüfung (Visual age check), Prio, Nachnahme national(Domestic cash on delivery (COD)), Warenpost national(Domestic merchandise shipments), Bücher-/Warensendung (Book/goods shipment)
Type of shipment Standard/Kompakt or Groß/Maxibrief (standard/compact or large/maxi letters), Postzustellungsauftrag (formal delivery order); Warenpost national(Domestic merchandise shipments), Warenpost international (international merchandise shipments), Pressesendung national (standard periodicals, domestic), Pressesendung international (standard periodicals international), Telegramm, Einkaufaktuell, Dialogpost national, Responseplus, Premiumadress, TRIGGERDIALOG, TRIGGERIMPULS, POSTAKTUELL, Track&Match, Handyporto, Online Franking/ Internetmarke (internet stamp), Fahrservices (z.B. HIN+WEG) (Driver services (e.g. HIN+WEG)), Postzustellungsauftrag (PZA) / elektronischer Postzustellungauftrag (ePZA), Bücher-/Warensendung (Book/goods shipment), Alterssichtprüfung (Visual age check), Prio, Einschreiben national (Domestic registered mail), Nachnahme national(Domestic cash on delivery (COD)), Wert national (Insured domestic items)
Shipment number for some additional services Warenpost national (Domestic merchandise shipments), Warenpost international (international merchandise shipments), Sendungsstatus international (delivery status, international), Einschreiben international (international registered mail), Einschreiben national (domestic registered mail), Eigenhändig international (delivery to addressee only, international), Rückschein international (advice of delivery, international), Eigenhändig national (delivery to addressee only, domestic), Rückschein national (advice of delivery, domestic),  Einschreiben Einwurf (registered mail to addressee’s mailbox), Wert International (insured international items), Wert National (insured domestic items), Prio, Ländernachweis (international tracking labels),  Nachnahme national (COD domestic), Nachnahme international (COD  international), Telegramm, Alterssichtprüfung (age check), TRIGGERDIALOG, TRIGGERIMPULS, Track&Match, Online Franking / Internetmarke (internet stamp), Fahrservices (z.B. HIN+WEG) (Driver services (e.g. HIN+WEG)), Postzustellungsauftrag (PZA) / elektronischer Postzustellungauftrag (ePZA), Mietbehälter / Aufsetzrahmen (Rental trays / pallet frames)
Content and images/photos Warenpost national(Domestic merchandise shipments), Warenpost international (Zoll) (international merchandise shipments / customs); Nachnahme national (COD domestic), Bücher-/Warensendung (Book/goods shipment), Funcard, Telegramm, Einkaufaktuell, TRIGGERDIALOG, TRIGGERIMPULS, POSTAKTUELL, Track&Match, Adressdialog, Online Franking / Internetmarke (internet stamp), Postzustellungsauftrag (PZA) / elektronischer Postzustellungauftrag (ePZA)
Information required for customs purposes Warenpost international (international merchandise shipments), TRIGGERDIALOG; TRIGGERIMPULS; Track&Match, Mietbehälter / Aufsetzrahmen (Rental trays / pallet frames)
Item tracking for certain add-on services, i.e. information on delivery status Warenpost national (Domestic merchandise shipments), Warenpost international (international merchandise shipments),  Einschreiben national (domestic registered mail), Eigenhändig national (delivery to addressee only, domestic), Rückschein national (advice of delivery, domestic), Einschreiben Einwurf (registered mail to addressee’s mailbox), Wert National (insured domestic items), Prio, Nachnahme national  (COD domestic), Alterssichtprüfung (age check), Telegram, TRIGGERDIALOG, TRIGGERIMPULS, Track&Match, Online Frankierung / Internetmarke (internet stamp), Fahrservices (z.B. HIN+WEG) (Driver services (e.g. HIN+WEG)), Postzustellungsauftrag (PZA) / elektronischer Postzustellungauftrag (ePZA)
Delivery documentation, including signatures Warenpost international (international merchandise shipments; registered mail); Additional service: Eigenhändig national (delivery to addressee only, domestic), Additional service: Rückschein national (advice of delivery, domestic), Additional service: Einschreiben Einwurf (registered mail to addressee’s mailbox), Additional service: Doppel Auslieferungsbeleg (duplicate delivery receipt), Additional service: Wert National (insured domestic items), Additional service: Nachnahme national (COD domestic), Nachnahme national (COD domestic), Fahrservices (z.B. HIN+WEG) (Driver services (e.g. HIN+WEG)), Postzustellungsauftrag (PZA) / elektronischer Postzustellungauftrag (ePZA), Mietbehälter / Aufsetzrahmen (Rental trays / pallet frames)
Delivery information (e.g. information for the sender on why delivery was not possible, for example, recipient has moved to an unknown address, etc.) Premiumadress, Prio, Warenpost national(Domestic merchandise shipments), Einschreiben national (Domestic registered mail), Nachnahme national(Domestic cash on delivery (COD)), Wert national (Insured domestic items)
Confirmation of minimum age check; Over 16 / over 18 Alterssichtprüfung (age check)
Sender's bank account details Postzustellungsauftrag (formal delivery order), Büchersendung national (domestic book shipments/discount agreement), Warensendung national (domestic merchandise shipments/discount agreement), Pressesendung national (standard periodicals, domestic), Pressesendung international (standard periodicals, international), Premiumadress; Nachnahme national (COD domestic), Nachnahme international (COD international), Einkaufaktuell; Responseplus; POSTAKTUELL; Portokasse, Fahrservices (z.B. HIN+WEG) (Driver services (e.g. HIN+WEG)), Postzustellungsauftrag (PZA) / elektronischer Postzustellungauftrag (ePZA), GOGREEN / GOGREEN eMobility, Teilleistungen (Partial services), Postfach-Zugang (PO box access), Adress-Zugang (Address access), Mietbehälter / Aufsetzrahmen (Rental trays / pallet frames), Anschriftenprüfung (Produktvariante: Anschriftenprüfkarte, Datei Check/ Datei Check Comfort) (Address check (product variant: address verification card, file check/ comfort file check)), Bücher-/Warensendung (Book/goods shipment), Warenpost national(Domestic merchandise shipments)
Sender's email address Portokasse, Telegram, Warenpost national(Domestic merchandise shipments), Sendungsverfolgung (Item tracking), Einschreiben (registered mail)
Sender's mobile phone no. Handyporto
Date and, if available, time of delivery Postzustellungsauftrag (PZA) / elektronischer Postzustellungauftrag (ePZA), Einschreiben (registered mail),  Nachnahme national (Domestic cash on delivery (COD)), Wert national (Insured domestic items), Prio, Warenpost national(Domestic merchandise shipments)
Reference number Postzustellungsauftrag (PZA) / elektronischer Postzustellungauftrag (ePZA)
Holding address Postzustellungsauftrag (PZA) / elektronischer Postzustellungauftrag (ePZA)
First and last name of contact person Postfach-Zugang (PO box access), Adress-Zugang (Address access), Anschriftenprüfung (Produktvariante: Datei Check/ Datei Check Comfort) (Address check (product variant: file check/ comfort file check)), Warenpost national (Domestic merchandise shipments)
Telephone, fax and email of contact person Postfach-Zugang (PO box access), Adress-Zugang (Address access), Anschriftenprüfung (Produktvariante: Datei Check/ Datei Check Comfort) (Address check (product variant: file check/ comfort file check)), Warenpost national (Domestic merchandise shipments)
Contractually agreed routing region (first two digits of the postal code) Postfach-Zugang (PO box access), Adress-Zugang (Address access)
2. Purpose and legal basis of processing

We process the data primarily to fulfill the contract in accordance with Article 6(1), letter b of the GDPR.

In addition, in accordance with Article 6(1) letter c of the GDPR, data are processed to comply with statutory requirements such as Section 99 of the Federal Code of Criminal Procedure (StPO), Section 40 of the Federal Postal Services Act (PostG), etc.

Finally, data are also processed for the following purposes:

– to secure payment
– for our security needs (e.g. to detect criminal offenses)
– to produce statistics
– for quality assurance, process optimization and reliable planning and
– to provide user-related advertising insofar as this is permitted

Deutsche Post AG has a legitimate interest in this in order to ensure a smooth process and to improve products and services on an ongoing basis. Deutsche Post AG is of the opinion that there are no overriding interests to prevent processing because the intensity of interference with rights by such processing is kept to a minimum, e.g. by using pseudonyms. The legal basis for this is Article 6(1) letter f of the GDPR.

If you wish to exercise your right to object – especially to the use of your data for advertising purposes – please contact:

Kundenservice Brief (Customer service – Letter)

3. Recipients or categories of recipient

Data are passed on to the companies involved in the provision of postal services. Similarly, data are passed on to comply with statutory requirements (e.g. to investigating authorities). Some customer services and services in the field of IT are outsourced to external providers.

4. Third-country transfer (i.e. personal data are transmitted to a country outside the European Economic Area (EEA) or the data are accessed from there)

Your data are not normally processed in third countries. However, where items are shipped abroad, the data are transmitted to the postal service in that country in order to perform the contract.

Redirection and storage services

1. Type of data
Customer’s first and last name
Customer's email address, where applicable
Customer’s phone number, where applicable
First and last names of other persons to whom the redirection or storage order applies
(Old) address (street, number, zip code and town, possibly additional address details and/or PO box)
New address (street, number, zip code and town, possibly additional address details and/or PO box) for redirection orders
Reason for redirection
Date and duration of redirection or storage service
Additional services
2. Purpose and legal basis of processing

We process the data primarily to fulfill the contract in accordance with Article 6(1), letter b of the GDPR.
In addition, in accordance with Article 6(1) letter c of the GDPR, data are processed to comply with statutory requirements such as Section 99 of the Federal Code of Criminal Procedure (StPO), Section 40 of the Federal Postal Services Act (PostG), etc.

Finally, data are also processed for the following purposes:

- for our security needs (e.g. to detect criminal offenses)
- to produce statistics
- for quality assurance, process optimization and reliable planning and to provide user-related advertising insofar as this is permitted.

Deutsche Post AG has a legitimate interest in this in order to ensure a smooth process and to improve products and services on an ongoing basis. Deutsche Post AG is of the opinion that there are no overriding interests to prevent processing because the intensity of interference with rights by such processing is kept to a minimum, e.g. by using pseudonyms. The legal basis for this is Article 6(1) letter f of the GDPR.

If you have given your consent for a certain type of processing, you can withdraw this at any time with future effect at the following address “Deutsche Post AG, Nachsendezentrum, 81997 Munich, Germany” or by calling 0 18 02 44 45 46 (€0.06 per fixed-line call). You can also use this address to exercise your right to object to data processing.

3. Recipients or categories of recipient

Data are passed on to the companies involved in the provision of postal services. Similarly, to comply with statutory requirements such as section 40 of the Postgesetz (PostG - German postal act) data are passed on directly to authorities that derive a corresponding notification claim from these provisions. Some customer services and services in the field of IT are outsourced to external providers.

If you have given your consent in connection with a redirection service, Deutsche Post itself and/or a service provider used for updating the address makes the permanent address change available to those who already know the old address in order to update the address. However, this happens for a maximum of two years. The recipients of the new address may use them in accordance with the applicable data protection laws and if necessary further process and transmit them.

4. Third-country transfer (i.e. personal data are transmitted to a country outside the European Economic Area (EEA) or the data are accessed from there)

Your data are not normally processed in third countries. However, if mail is to be redirected to a foreign address, the data will be passed on to the postal service in that country for the purpose of performance of the contract.

PO boxes

1. Type of data
First and last name of the holder of the PO box
Customer number, where available
Email address of the holder of the PO box, where applicable
Phone number of the holder of the PO box
Cell phone number of the holder of the PO box (optional)
First and last names of all other persons using the PO box (co-users)
Postal address of the holder of the PO box (street, number, zip code, place, country and, where applicable, additional address details)
Postal addresses of all co-users (street, number, zip code, place, country and, where applicable, additional address details)
PO box address
Email addresses of all co-users
Phone numbers of all co-users
2. Purpose and legal basis of processing

We process the data primarily to fulfill the contract in accordance with Article 6(1), letter b of the GDPR.

In addition, in accordance with Article 6(1) letter c of the GDPR, data are processed to comply with statutory requirements such as Section 161 of the Federal Code of Criminal Procedure (StPO), Section 40 of the Federal Postal Services Act (PostG), Section 13a of the German Injunctions Act (UKlaG) etc.

If there is no statutory obligation to pass data on to public offices or third parties, data will only be passed on to third parties if consent has been given by the holder of the PO box. The legal basis is Article 6(1) letter a of the GDPR.

Finally, data are also processed for the following purposes:

- for our security needs (e.g. to detect criminal offenses)
- to produce statistics
- for quality assurance, process optimization and reliable planning

Deutsche Post AG has a legitimate interest in this in order to ensure a smooth process and to improve products and services on an ongoing basis. Deutsche Post AG is of the opinion that there are no overriding interests to prevent processing because the intensity of interference with rights by such processing is kept to a minimum, e.g. by using pseudonyms. The legal basis for this is Article 6(1) letter f of the GDPR.

If you wish to exercise your right to object, please use the

Customer service form.

3. Recipients or categories of recipient:

Data are passed on to the companies involved in the provision of postal services. Data are also passed on to comply with statutory requirements (e.g. to investigating authorities and to third parties, e.g. on the basis of Section 13a of the German Injunctions Act (UKlaG). Further, data are passed on to third parties if consent has been given by the holder of the PO Box. Some customer services and services in the field of IT are outsourced to external providers.

4. Third-country transfer (i.e. personal data are transmitted to a country outside the European Economic Area (EEA) or the data are accessed from there)

Your data are not normally processed in third countries.

Further services

1. Type of data
Sender's name and address Processing of customer service enquiries, dealing with reports of damage, processing of orders in our online shop (shop.deutschepost.de).
Recipient’s name and address Processing of customer service enquiries, dealing with reports of damage, processing of orders in our online shop (shop.deutschepost.de).
Name of substitute recipient, where applicable Processing of customer service enquiries, dealing with reports of damage, processing of orders in our online shop (shop.deutschepost.de).
Customer’s bank account details, where applicable Processing of orders in our online shop (shop.deutschepost.de)
2. Purpose and legal basis of processing

We process the data primarily to fulfill the contract in accordance with Article 6(1), letter b of the GDPR.

In addition, in accordance with Article 6(1) letter c of the GDPR, data are processed to comply with statutory requirements such as Section 99 of the Federal Code of Criminal Procedure (StPO), Section 40 of the Federal Postal Services Act (PostG), etc.

Finally, data are also processed for the following purposes:

- for our security needs (e.g. to detect criminal offenses)
- to produce statistics
- for process optimization and reliable planning and to provide user-related advertising insofar as this is permitted

Deutsche Post AG has a legitimate interest in this in order to ensure a smooth process and to improve products and services on an ongoing basis. Deutsche Post AG is of the opinion that there are no overriding interests to prevent processing because the intensity of interference with rights by such processing is kept to a minimum, e.g. by using pseudonyms. The legal basis for this is Article 6(1) letter f of the GDPR.

If wish to exercise your right to object – especially to the use of your data for advertising purposes – please send an email found here:

www.deutschepost.de/Dataenschutz/kontakt

3. Recipients or categories of recipient:

Data are passed on to the companies involved in the provision of postal services. Similarly, data are passed on to comply with statutory requirements (e.g. to investigating authorities). Some customer services and services in the field of IT are outsourced to external providers.

4. Third-country transfer (i.e. personal data are transmitted to a country outside the European Economic Area (EEA) or the data are accessed from there)

Your data are not normally processed in third countries. However, if mail is to be sent to a foreign address, the data are passed on to the postal service in that country for the purpose of performance of the contract
or
your data may be processed in a third country, i.e. the country of destination of your mail. This takes place because the data have to be passed on for performance of the contract (e.g. delivery, customs procedures), on the basis of either our binding corporate rules or EU standard contractual clauses.