a) Name and contact details of
    the competent controller:
    The competent controller within the meaning of the General Data Protection Regulation (GDPR) is Deutsche Post AG.
    Deutsche Post AG
    Charles-de-Gaulle-Straße 20
    53113 Bonn

b)  Name and contact details of the
     data protection officer
     Deutsche Post AG
     Gabriela Krader, LL.M
     53250 Bonn

     datenschutz@dpdhl.com

c)   Competent supervisory authority
      Data processing in connection with
      mail and telecommunication services:      

      Die Bundesbeauftragte für den
      Datenschutz und die
      Informationsfreiheit
      Graurheindorfer Straße 153
      53117 Bonn

      Other data processing by the data controller:

      Die Landesbeauftragte für den Datenschutz Nordrhein Westfalen
      Kavalleriestraße 2-4
      40213 Düsseldorf

Personal data is specific information about personal or factual circumstances relating to an identified or identifiable natural person. This includes information such as your real name, address, telephone number and date of birth. Information which cannot be directly linked to your real identity – such as favorite websites or the number of users of a site – is not considered personal data.

We process your data, for example

• to satisfy the terms of the contract we signed with you or with a sender,
• to ensure that your visit to our websites/apps is as pleasant as possible,
• to send you a newsletter if you are a subscriber,
• to send you or display relevant advertising, insofar as this is permitted,
• to check your creditworthiness, where necessary,
• to satisfy legal requirements (e.g. the Criminal Procedure Code, Federal Regulation on Foreign Trade),
• to meet security requirements (e.g. to detect criminal offenses),
• to produce statistics,
• to secure payment,
• and for quality assurance, process optimization and reliable planning.

You will find further details on e.g. the type of data, the purpose of data processing, and the legal basis in the sections on the respective products.

Please use our contact form if you wish to exercise any of your rights

a) to obtain information on the data stored about you,

b) to rectify incorrect data,

c) to have your personal data erased or, if statutory retention periods apply, restrict the processing of data no longer required for the specified purpose,

d) to access the personal data you provided in a structured, commonly used and machine-readable format,

e) to raise an objection if your data is being processed on the grounds of a legitimate interest / to the use of your data for advertising purposes / to your being subject to a decision based solely on automated processing, including profiling

f) to file a complaint with the competent supervisory authority if you suspect that your data have not been processed in compliance with data protection legislation.

If you do not provide the data indicated as being necessary, a contract cannot be established.

Should you wish to exercise any of your rights, please send a mail found here:

www.deutschepost.de/datenschutz/kontakt.

If you exercise your right to object – especially to the use of your data for advertising purposes – please contact the address given in the relevant “Products and Services” section.

In you have consented to your data being used for a certain type of processing, you may withdraw such consent at any time with future effect by notifying us at the address specified when you gave your consent. You will find this in the details of the “Products and Services” for which your consent was obtained.

That data will be stored for as long as they are required. This is based either on the statutory retention periods, for example, as set out in Section 257 of the German Commercial Code (HGB) or Section 127 of the German Fiscal Code (AO). If there are no such statutory retention periods, the data will be stored for the purpose of contract performance and invoicing, and as evidence of correct performance until the end of the liability periods and subsequently erased.

The DPDHL Data Privacy Policy governs Group-wide standards for data processing, with a specific focus on so-called third-country transfers, meaning the sharing of personal data to countries outside the EU which do not offer a suitable standard of data protection. If you would like to learn more about the Group Data Privacy Policy, please use this link:

Download Group Data Privacy Policy (summary) (PDF, 204 KB)

When you visit our websites, our webservers temporarily save the connection data of the computer requesting the connection for the purpose of system security, the pages you visit, the date and duration of your visit, the data showing the type of browser and operating system used and the website from which you visit us. Other personal data, such as your name, address, telephone number or e-mail address are not collected unless you provide these data voluntarily, for example as part of a registration procedure, survey, competition, performance of a contract or request for information.

We use the personal data provided by you exclusively for the purpose of technical administration of our websites and to fulfill your wishes and requirements, i.e. generally to perform the contract concluded with you or to respond to your enquiry.

We only use such data for product-related surveys and marketing purposes if you have given us your prior consent and if you have not filed an objection, insofar as this is permitted by law.

Your data are not forwarded, sold or transmitted to third parties unless this is necessary for the purpose of performing the contract your you have explicitly given your consent. For example, if you order products it may be necessary to forward your address and order data to our suppliers.

The companies in Deutsche Post DHL Group would like to contact you with information about offers and other news relating to our products and services. If you register with our websites, we will therefore ask you to tell us whether you would like to receive direct promotional messages from us. As a customer of Deutsche Post, you will naturally continue to receive the necessary information on important changes relating to existing contracts (e.g. price changes).

We use tracking software on our websites to monitor frequency of use and the number of users. This software does not collect personal data and IP addresses. The data are used exclusively in anonymized, summarized form for statistical purposes and for the development of the website.

If you register for the Deutsche Post newsletter, you declare that you agree to receive quarterly information by email about seasonal products and offers, new services and the latest competitions.
You can withdraw your consent at any time and unsubscribe from the newsletter by clicking on the unsubscribe link in the email you receive.
Your data will be used exclusively to send you the Deutsche Post newsletter and never passed on to third parties or used for purposes other than those specified here.

Cookies are small files that enable us to store information related specifically to you, the user, on your PC while you visit one of our websites. Cookies help us to determine how frequently our Internet pages are accessed as well as the number of users. And they help us configure our offers so that they are as convenient and efficient as possible for you.

On the one hand, “session cookies”, i.e. cookies that are stored exclusively for the duration of your visit to one of our Internet pages. On the other, we use "permanent cookies” to retain information about visitors who repeatedly access one of our Internet pages. The purpose of using cookies is to be able to offer you optimal user guidance as well as to "recognize” you and thus be able to present (as far as possible) diversified Internet pages and fresh content during repeated use. The content of a permanent cookie is limited to an identification number. Name, IP address, etc. are not saved. We do not create an individual profile of your online activities.

You can use our offers without cookies. In your browser, you can deactivate the saving of cookies, limit them to certain websites or have a message sent to you as soon as a cookie is sent. You can also delete cookies from your PC at any time (“cookies” folder). However, please note that in this case you will have to expect restricted page presentation and user guidance.

Deutsche Post takes all necessary technical and organizational security measures to protect your personal data from being lost or misused. For instance, your data is saved in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer (SSL) technology during transmission. This means that an approved encryption procedure is used for communication between your computer and the Deutsche Post servers if your browser supports SSL.

Should you wish to contact Deutsche Post by email, we would like to point out that the confidentiality of the information sent cannot be guaranteed. The contents of email messages can be read by third parties. We therefore recommend that you send us confidential information only by post.

It is possible to use our products and services without cookies. You can normally deactivate the saving of cookies in your browser or limit them to certain websites. The browser can be set to notify you when a cookie is sent. You can also delete cookies from your hard drive at any time (folder: “cookies”). However, in this case you will have to expect restricted page presentation and user guidance.

For detailed information on cookies, e.g. how to see which cookies have been set and how to manage and delete them, visit:

All about Cookies

For further EU-specific recommendations on cookies and the various opt-out options please visit the following website:       

Your Online Choices
        
If you wish to switch off general web tracking by Adobe SiteCatalyst (web-tracking cookies), you can find further information on the following website:

Link for individual cookies

Adobe Sitecatalist Tracking Opting OUT

If you wish to switch off some or all of the advertising cookies set on your computer, you can find further information on the following website:      

Network Advertising Initative (NAI)

This website uses technology from nugg.ad AG (www.nugg.ad) to monitor data to control advertising. In order to do this, nugg.ad saves the frequency of use of various website topics in cookies. These cookies are stored in the browser on your device (e.g. your PC, laptop, smartphone, etc.) for a maximum of 26 weeks. nugg.ad’s technology may also save basic information on your use of other websites in order to make a rough estimate of what advertising might interest you most.

If you wish to see advertising on websites that are of interest to you, you can opt in to allow further theme-based analysis of your usage behavior. If you give your consent, this opt-in cookie will also be stored in the browser on your device. It will be stored for 1 year. If nugg.ad has already stored information in cookies that had previously been placed on the browser in your device, setting an opt-in cookie will have the following effect: As a result of your consent, the lifetime of the cookie that nugg.ad has already set will be extended to a total of 1 year (calculated from the date when the cookie was set). Therefore, the information stored in the cookies prior to your opt-in will be retained following your consent and deleted upon expiration of the lifetime of the cookie, in other words, after max. 1 year.

On www.deutschepost.de we set cookies from our technology partner “The ADEX GmbH”, Rotherstrasse 22, 10245 Berlin, Germany, to collect data on surfing behavior for marketing purposes. These do not collect any personal data allowing conclusions to be drawn about users of the deutschepost.de website. You can find further information on data protection on the website of The ADEX; an opt-out option is available at de.theadex.com/company/consumer-opt-out.

We process the data primarily to fulfill the contract in accordance with Article 6(1), letter b of the GDPR.

In addition, in accordance with Article 6(1) letter c of the GDPR, data are processed to comply with statutory requirements such as Section 99 of the Federal Code of Criminal Procedure (StPO), Section 40 of the Federal Postal Services Act (PostG), etc.

Finally, data are also processed for the following purposes:

– to secure payment
– for our security needs (e.g. to detect criminal offenses)
– to produce statistics
– for quality assurance, process optimization and reliable planning and
– to provide user-related advertising insofar as this is permitted

Deutsche Post AG has a legitimate interest in this in order to ensure a smooth process and to improve products and services on an ongoing basis. Deutsche Post AG is of the opinion that there are no overriding interests to prevent processing because the intensity of interference with rights by such processing is kept to a minimum, e.g. by using pseudonyms. The legal basis for this is Article 6(1) letter f of the GDPR.

If you wish to exercise your right to object – especially to the use of your data for advertising purposes – please contact:

Kundenservice Brief (Customer service – Letter)

Data are passed on to the companies involved in the provision of postal services. Similarly, data are passed on to comply with statutory requirements (e.g. to investigating authorities). Some customer services and services in the field of IT are outsourced to external providers.

Your data are not normally processed in third countries. However, where items are shipped abroad, the data are transmitted to the postal service in that country in order to perform the contract.

We process the data primarily to fulfill the contract in accordance with Article 6(1), letter b of the GDPR.
In addition, in accordance with Article 6(1) letter c of the GDPR, data are processed to comply with statutory requirements such as Section 99 of the Federal Code of Criminal Procedure (StPO), Section 40 of the Federal Postal Services Act (PostG), etc.

Finally, data are also processed for the following purposes:

- for our security needs (e.g. to detect criminal offenses)
- to produce statistics
- for quality assurance, process optimization and reliable planning and to provide user-related advertising insofar as this is permitted.

Deutsche Post AG has a legitimate interest in this in order to ensure a smooth process and to improve products and services on an ongoing basis. Deutsche Post AG is of the opinion that there are no overriding interests to prevent processing because the intensity of interference with rights by such processing is kept to a minimum, e.g. by using pseudonyms. The legal basis for this is Article 6(1) letter f of the GDPR.

If you have given your consent for a certain type of processing, you can withdraw this at any time with future effect at the following address “Deutsche Post AG, Nachsendezentrum, 81997 Munich, Germany” or by calling 0 18 02 44 45 46 (€0.06 per fixed-line call). You can also use this address to exercise your right to object to data processing.

Data are passed on to the companies involved in the provision of postal services. Similarly, to comply with statutory requirements such as section 40 of the Postgesetz (PostG - German postal act) data are passed on directly to authorities that derive a corresponding notification claim from these provisions. Some customer services and services in the field of IT are outsourced to external providers.

If you have given your consent in connection with a redirection service, Deutsche Post itself and/or a service provider used for updating the address makes the permanent address change available to those who already know the old address in order to update the address. However, this happens for a maximum of two years. The recipients of the new address may use them in accordance with the applicable data protection laws and if necessary further process and transmit them.

Your data are not normally processed in third countries. However, if mail is to be redirected to a foreign address, the data will be passed on to the postal service in that country for the purpose of performance of the contract.

We process the data primarily to fulfill the contract in accordance with Article 6(1), letter b of the GDPR.

In addition, in accordance with Article 6(1) letter c of the GDPR, data are processed to comply with statutory requirements such as Section 161 of the Federal Code of Criminal Procedure (StPO), Section 40 of the Federal Postal Services Act (PostG), Section 13a of the German Injunctions Act (UKlaG) etc.

If there is no statutory obligation to pass data on to public offices or third parties, data will only be passed on to third parties if consent has been given by the holder of the PO box. The legal basis is Article 6(1) letter a of the GDPR.

Finally, data are also processed for the following purposes:

- for our security needs (e.g. to detect criminal offenses)
- to produce statistics
- for quality assurance, process optimization and reliable planning

Deutsche Post AG has a legitimate interest in this in order to ensure a smooth process and to improve products and services on an ongoing basis. Deutsche Post AG is of the opinion that there are no overriding interests to prevent processing because the intensity of interference with rights by such processing is kept to a minimum, e.g. by using pseudonyms. The legal basis for this is Article 6(1) letter f of the GDPR.

If you wish to exercise your right to object, please use the

Customer service form.

Data are passed on to the companies involved in the provision of postal services. Data are also passed on to comply with statutory requirements (e.g. to investigating authorities and to third parties, e.g. on the basis of Section 13a of the German Injunctions Act (UKlaG). Further, data are passed on to third parties if consent has been given by the holder of the PO Box. Some customer services and services in the field of IT are outsourced to external providers.

Your data are not normally processed in third countries.

1. See data protection information at https://www.deutschepost.de/dam/dpag/images/E_e/epost/downloads/gk/epost/dp-epost-agb-gk-20230414.pdf

2. If applicable, the type of data listed above under "Domestic and international mail, including additional services, postcards and other mail products (including franking methods and payment procedures)" for OPC/eOPC

See data protection information at https://www.deutschepost.de/dam/dpag/images/E_e/epost/downloads/gk/epost/dp-epost-agb-gk-20230414.pdf

See data protection information at https://www.deutschepost.de/dam/dpag/images/E_e/epost/downloads/gk/epost/dp-epost-agb-gk-20230414.pdf

See data protection information at https://www.deutschepost.de/dam/dpag/images/E_e/epost/downloads/gk/epost/dp-epost-agb-gk-20230414.pdf

Deutsche Post also points out that it will make the personal data provided by the sender available to Deutsche Post E-POST Solutions GmbH and Formware GmbH to the extent that this is required for contract processing in connection with E-Post Brief with OPC hybrid processing.

As a matter of principle, your personal data is not processed in third countries. However, where items are shipped abroad, the data are transmitted to the postal service in that country in order to perform the contract.

We process the data primarily to fulfill the contract in accordance with Article 6(1), letter b of the GDPR.

In addition, in accordance with Article 6(1) letter c of the GDPR, data are processed to comply with statutory requirements such as Section 99 of the Federal Code of Criminal Procedure (StPO), Section 40 of the Federal Postal Services Act (PostG), etc.

Finally, data are also processed for the following purposes:

- for our security needs (e.g. to detect criminal offenses)
- to produce statistics
- for process optimization and reliable planning and to provide user-related advertising insofar as this is permitted

Deutsche Post AG has a legitimate interest in this in order to ensure a smooth process and to improve products and services on an ongoing basis. Deutsche Post AG is of the opinion that there are no overriding interests to prevent processing because the intensity of interference with rights by such processing is kept to a minimum, e.g. by using pseudonyms. The legal basis for this is Article 6(1) letter f of the GDPR.

If wish to exercise your right to object – especially to the use of your data for advertising purposes – please send an email found here:

www.deutschepost.de/Dataenschutz/kontakt

Data are passed on to the companies involved in the provision of postal services. Similarly, data are passed on to comply with statutory requirements (e.g. to investigating authorities). Some customer services and services in the field of IT are outsourced to external providers.

Your data are not normally processed in third countries. However, if mail is to be sent to a foreign address, the data are passed on to the postal service in that country for the purpose of performance of the contract
or
your data may be processed in a third country, i.e. the country of destination of your mail. This takes place because the data have to be passed on for performance of the contract (e.g. delivery, customs procedures), on the basis of either our binding corporate rules or EU standard contractual clauses.