Dear User,

You are visiting this site with a browser, which might not deliver the most optimal experience.

You are still able to proceed, but in order to best experience this page, we recommend using Edge, Firefox and Chrome.

 

 

Scope of this Privacy Notice

Deutsche Post AG and its subsidiaries operating under the brand DHL (hereinafter called 'DHL') is pleased that you have visited our website and are interested in our company, products and services. It is important to us to protect your personal data during handling throughout the entire business process. 

In the following, we explain what information DHL collects when you visit our website and how this information is used.

This Privacy Notice applies to all users of our services, websites, applications, features or other services anywhere in the world, unless covered by a separate Privacy Notice. This Privacy Notice applies to the following categories of individuals:

  • Shippers: shippers, including their employees, or individuals who send a shipment
  • Shipment receivers: any individual who receives a shipment
  • Persons showing interest in us and our services
  • Business partners: business partners, including their employees
  • Employment candidates: individuals that apply for a job with us

 

All the above subjects are referred to as “you” or “your”.

 

What is Personal Data?

Personal data means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes information such as your real name, address, telephone number and date of birth. Information which cannot be linked to your real identity - such as favorite websites or number of users of a site - is not considered personal data.

  • This Privacy Notice applies for the data processing carried out by:

    Deutsche Post AG
    Charles-de-Gaulle-Str. 20
    53113 Bonn
    Germany


    Data Protection Officer of controller, contact details:

    Deutsche Post AG
    Global Data Protection
    53250 Bonn

    If you have queries with regard to the processing of your personal data, please contact the Data Protection Officer.

    If you have any further queries regarding data protection in connection with our website or the services offered there, please contact data protection:


Types of Data We Process

We only process your personal data when required for a specific and allowed purpose. 

CONTACT DATA

Information to contact you e.g. when you use one of our services. 

Such as: your name, phone number, address, email address

PROFILE DATA

Information on your dhl profile e.g. to set your delivery preferences.

Such as: your delivery preferences, order

SHIPMENT DATA

Information enabling the pick-up and delivery of your shipment e.g. status of your shipment.

Such as: your address, shipment documents, shipment no.

SURVEY DATA

Information communicated by you to one of our employees or by filling in an online survey e.g. when you call our customer service.

Such as: your name, email, phone number


What Are the Purposes of and the Legal Basis for the Processing of Personal Data?

  • DHL is committed to preserving the privacy of users of our websites. When you visit our web pages, The following data are collected: IP address, hostname of the accessing computer, website from which you accessed this website, a list of the sites you visited within the scope of our overall Internet presence, the date and duration of your visit, notification of whether the visit was successful, volume of data transferred, information about the identification data of the browser type and operating system used by you.  Temporary storage of this data is necessary during your visit to the website in order to allow the website to be delivered to you. Further storage in log files is performed to ensure the functionality of the website and the security of our IT systems. The legal basis for the processing of the aforementioned data categories is therefore Art. 6 (1) (f) of the European General Data Protection Regulation (GDPR). Due to the said purposes, in particular to guarantee security and a smooth connection setup, we have a legitimate interest to process this data.

    Additional personal information such as your name, address, telephone number or e-mail address is not collected unless you provide this data voluntarily, e.g. while completing an online contact form, as part of a registration, survey, competition or an information request.

    The data are deleted as soon as they are no longer needed to achieve the purpose for which they were collected. For the provision of the website, this is the case when the session terminates. The log files (access logs) are kept for administrators to access directly and exclusively for a period of 24 hours. After that, they are only available indirectly through a restore from backup tapes and are permanently deleted after 30 days.

    As far as you have enabled geo localization functions in your browser, respectively in your operating system we will use this data to offer you location-based services (e.g. location of the nearest branch, packing station etc.). The legal basis for geo-localization is your consent according Art. 6 (1) (a) GDPR by enabling the respective function. We will not use this data for any other purpose. If you disable this function your data will be deleted in due time.

  • This website uses cookies and similar technologies, (hereafter “technologies”), which enable us, for example, to determine how frequently our internet pages are visited, the number of visitors, to configure our offers for maximum convenience and efficiency and to support our marketing efforts.

    When you access our website, a Privacy Preference Center will inform you that technically necessary cookies are set and, in addition, that your consent is required to the use of certain technologies, such as analytical cookies or similar technologies.

    The processing of data by means of technically necessary cookies is based on our legitimate interest according to Art. 6 (1) f) GDPR to ensure that you can use our website the best possible way, to ensure that our website operates correctly and to guarantee an convenient and undisturbed user experience. These kinds of cookies are stored exclusively for the duration of your visit to our website. They are automatically deleted when you close your browser.

    In addition, you will be informed via the Privacy Preference Center  that we use other technologies  (performance, functional or analytics technologies) for storing information about visitors who repeatedly access one of our internet pages. The purpose of using these technologies is to be able to offer you optimal user guidance as well as to "recognize" you and thus be able to present (as much as possible) diversified internet pages and new contents during repeated use. These technologies will only be processed on the basis of your prior given consent according to Art. (1) a) GDPR.

    You will find more information under the Privacy Preference Center  including the option to revoke a given consent.

    Notwithstanding the information in the Preference Center, and only if you have consented to the use of cookies and other technologies as described above, we also use them for the purposes described below.

  • We provide you our social media fan pages, such as Facebook, Instagram or LinkedIn to give you even more insights in our services and products, to better manage our relationship with you and to communicate with you. For more information, please visit our Privacy Notices on our social media fan pages.

    Therefore, our website contains links to the following social media networks:

    • Facebook (operated by: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
    • Instagram (operated by: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
    • LinkedIn (operated by: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
    • YouTube (operated by: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)[TM(D1] [KI2]

    In these cases, a transfer of data to the social media operators mentioned before only takes place if the corresponding icon (e.g. the "f" of Facebook) is clicked. If you click on one of these icons, a page of the corresponding social media operator opens in a separate window.

  • 1. Introduction

    Deutsche Post AG and its subsidiaries operating under the brand DHL (hereinafter called 'DHL') is pleased to welcome you to our Facebook fan page. Thank you for your interest in our company, products and services. In the following document, we would like to inform you about certain issues related to data protection laws that apply when you visit our fan page. 

    • Our fan page was provided to us by Facebook in accordance with valid terms of use. Facebook is solely responsible for the technical operation of the fan page. 
    • We are solely responsible for the content that we post on the page.
    • Your visit and your interaction on our fan page are tracked by Facebook. This information will be provided to us in anonymized form (as page insights). If you have a Facebook account, Facebook will process your data in accordance with Facebook's own terms of use. If you are not a member of Facebook, your interactions on our fan page will be anonymously tracked and will also be provided to us in the form of statistical analysis (page insights). Both Facebook and we are jointly responsible for processing personal data in events related to page insights (insight data). 
    • Pursuant to the agreement between Facebook and us (a page insights addendum), every joint controller shall fulfill its information obligations on its own. 
    • You may exercise your rights as the data subject (see Item 4) by contacting the officer responsible for insights data. Should we receive an inquiry that falls into Facebook's area of responsibility, we shall forward it to Facebook for further processing. 
    • We have no say in Facebook's processing of the data. Furthermore, we possess no information regarding the degree, purposes and length of time that Facebook will store the data and possibly evaluate, link and transmit the information to third parties. Please note, that your data can also be transferred to the United States of America (USA). It is the opinion of the European Court of Justice that the USA does not provide an adequate level of data protection. In particular, there is a risk that your data may be subject to access by US authorities for control and monitoring purposes and that no effective legal remedies may be available. You will find additional information regarding data processing for which Facebook is solely responsible in Facebook's data policy https://facebook.com/policy.php and cookie policy https://www.facebook.com/policy/cookies/
    • If you would like to contact us directly, i.e. without the participation of Facebook, please use the contact details on our website at https://www.dhl.com/global-en/home/contact-us.html

    2. Contact details of the data controller and data protection officer 

    Deutsche Post AG, Charles-de-Gaulle Str. 20, 53113 Bonn, Germany, is responsible for the information it posts and also for its processing. 

    You can reach our data protection officer(s) at 
    Deutsche Post AG
    Global Data Protection
    53250 Bonn, Germany

    https://www.dhl.com/global-en/home/footer/global-privacy-notice/data-protection-contact.html

    Facebook Ireland Ltd, 4 Grand Canal Harbour, Dublin 2, Ireland, and Deutsche Post AG are jointly responsible for processing the personal data in events for page insights (Insights data). Collective processing is based on an agreement between the joint controllers pursuant to Article 26 of the GDPR, which you can view at: https://www.facebook.com/legal/terms/page_controller_addendum

    3. Purpose and legal basis of processing 

    3.1 Data processing of page insights for statistical purposes 

    For our fan page, Facebook provides us with page insights: https://www.facebook.com/business/a/page/page-insights. Page insights are anonymous statistics that are generated as a result of certain events and are tracked by Facebook when a fan page visitor such as you interacts on our fan page. We can use the page insights, which contain no personal data, to see which content is particularly accessed by which group of individuals. We can also use these data to optimize our fan page itself. This represents a legitimate interest for processing (processing of personal data in events for page insights). The legal basis for data processing related to page insight is Article 6 (1), Letter f of the GDPR.

    3.2 Data processing resulting from contact with us and other communications 

    We ourselves do not collect personal data when you get in touch with us by using a contact form or Messenger, among other options. This data are stored and used solely for replying to your inquiry or contacting you, as well as for carrying out related technical administration activities. Our legitimate interest is to properly address your matter as quickly as possible. The legal basis for the processing is Article 6 (1), Letter f of the GDPR. If the contact is initiated for contract inception or conclusion, Article 6 (1), Letter b of the GDPR will serve as the legal basis. If you provide us with personal data on our fan page (e.g., as part of comments), this process shall be conducted on the basis of your consent in accordance with Article 6 (1), Letter a of the GDPR. You may revoke your consent at any time with effect for the future. If you would like to exchange personal data with us, we recommend that you contact our customer service at https://www.dhl.com/global-en/home/contact-us.html

    3.3 Data processing for direct marketing purposes

    We process personal data in order to inform you about our offers, innovations, products and services. Personal data are processed for direct marketing purposes within the context of our legitimate interests. The legal basis for this data processing is Article 6 (1), Letter f of the GDPR. You have the right at all times to object to the processing for direct marketing purposes (see Item 4). Once your objection has been expressed, your personal data shall no longer be processed for these purposes.

    4. Rights of data subjects 

    Under the GDPR, data subjects shall have the following rights: 

    • Under Article 15 of the GDPR, they have the right to receive information regarding the personal data that are processed by the respective controller. 
    • They may request a rectification under Article 16 of the GDPR, provided that their data are not or are no longer correct. 
    • Under Article 17 of the GDPR, the data subjects may demand that their personal data be erased. 
    • Under Article 18 of the GDPR, they have the right to demand a restriction on the processing of their personal data. 
    • If the conditions of Article 20 (1) of the GDPR have been met, the data subjects have the right to receive their data in a structured, commonly used and machine-readable format. 
    • Under Article 77 (1) of the GDPR, they have the right to lodge a complaint with the responsible data-protection authority. 
    • Under Article 21 of the GDPR, the data subjects have the right to object, provided that their data are processed on the basis of a legitimate interest in terms of Article 6 (1), Letter f of the GDPR (see Items 3.1 and 3.2) and provided that they can cite grounds relating to their own particular situation. They may submit their objection to our customer service (https://www.dhl.com/global-en/home/contact-us.html) by providing their contact data, the specific processing to which they are objecting, the grounds relating to their own particular situation and the name of the fan page. They may submit their objection to Facebook if the objection involves the processing of page insights for statistical purposes (see Item 3.1). Should we receive an inquiry that falls into Facebook's area of responsibility, we shall forward it to Facebook for further processing. 

    If you wish to exercise data subject rights against Facebook, please contact Facebook Ireland Ltd., 4 Grand Canal Harbour, Dublin 2, Ireland. You may exercise these rights online by using the contact form provided on the Facebook site: https://www.facebook.com/help/contact/540977946302970. In addition to this, we would also like to point out the settings options made available to you by Facebook in your profile. 

    If you would like to exercise your rights as a data subject in dealings with us, please contact our customer service or use the contact data included in Item 2. 

    5. Storage period 

    We erase your personal data as soon as the purpose of storage ceases to apply. The length of time during which your data are stored will depend on the context of the processing itself. The storage period related to contractual matters generally lasts for three years; with regard to customer service activities, this period is up to two years. With regard to data storage, deactivation and the deletion of your Facebook profile, we would direct you to further information, as provided by Facebook.

    As of: December 12, 2020

  • 1. Introduction

    Deutsche Post AG and its subsidiaries operating under the brand DHL (hereinafter called 'DHL', "we", "us") is pleased to welcome you to our Instagram page. Thank you for your interest in our company, products and services. We would like to inform you about certain issues related to data protection laws that apply when you visit our fan page in the following. 

    • Our fan page was provided to us by Instagram in accordance with valid terms of use. Instagram is solely responsible for the technical operation of the fan page. 
    • We are solely responsible for the content that we post on the page (e.g. information about our company, products, services, competitions, promotions) and for the interaction with visitors of our page.
    • Your visit and your interaction on our fan page are tracked by Instagram. This information will be provided to us in anonymized form (as page insights). If you have an Instagram account, Instagram will process your data in accordance with Instagram's own terms of use. If you are not a member of Instagram, your interactions on our fan page will be anonymously tracked and will also be provided to us in the form of statistical analysis (page insights). You can find more information about this in the Data Policy of Instagram. Both Facebook, as the owner of Instagram, and we are jointly responsible for the collection (but not the further processing) of data of the visitors of our fan page regarding the page insights.  
    • We have concluded a special arrangement with Facebook (Page Insights Controller Addendum), which regulates  in particular which obligations we and Facebook must fulfill to protect your data.
    • You may exercise your rights by contacting Facebook or us. Should we receive an inquiry that falls into Instagram's area of responsibility, we shall forward it to Instagram for further processing. 
    • We have no say in Instagram's processing of the data. Furthermore, we possess no information regarding the degree, purposes and period of time that Instagram will store the data and possibly evaluate, link and transmit the data to third parties. Please note, that your data can also be processed outside the European Union/European Economic Area.  This may result in privacy risks for users, as an adequate level of data protection may not be ensured and the enforcement of data subject rights may be impeded. Please inform yourself about the Data Policy and Cookie Policy of Instagram.
    • If you would like to contact us directly, i.e. without the participation of Instagram, please use the contact details on our website at https://www.dhl.com/global-en/home/contact-us.html

    2. Contact details of the controller and data protection officer 

    Responsible for the collection and processing of personal data as described below is partly Deutsche Post AG, Charles-de-Gaulle Str. 20, 53113 Bonn, Germany and partly Facebook Ireland Ltd, 4 Grand Canal Harbour, Dublin 2, Ireland as operator of the social media platform. For certain processing operations, we and Facebook also act as joint controllers according to Art. 26 GDPR and have concluded an arrangement to this effect, which you can view here

    You can reach our data protection officer at 

    Deutsche Post AG
    Global Data Protection
    53250 Bonn, Germany

    https://www.dhl.com/global-en/home/footer/global-privacy-notice/data-protection-contact.html

    Facebook operates the entire IT infrastructure of the Instagram Platform, provides its own Data Policy and has its own relationship with users registered on the Platform. Facebook is solely responsible for all data protection issues related to the user profile, to which we have no access. You can find more information on data processing by Facebook and privacy settings in Facebook's and Instagram's Data Policy.

    3. Purpose and legal basis of processing 

    3.1 Data processing of page insights for statistical purposes 

    For our fan page, Instagram provides us with page insights: https://help.instagram.com/1533933820244654. Page insights are anonymous statistics that are generated as a result of certain events and are tracked by Instagram when a fan page visitor such as you interacts on our fan page. We can use the page insights, which contain no personal data, to see which content is particularly accessed by which group of individuals. We can also use these data to optimize our fan page itself. This represents a legitimate interest for data processing to generate page insights. The legal basis for data processing related to page insight is Article 6 (1)f)GDPR. For more information on how to exercise your data subject rights and privacy settings see the Data Policy and Cookie Policy of Instagram.

    3.2 Data processing in case of contact and further communication within our Instagram Profile 

    We use our Instagram profile to share information with you, e.g. about our company, products, services, promotions and sweepstakes, and to interact with you on various topics and answer your inquiries accordingly. The related data processing is carried out to protect our legitimate interests pursuant to Art 6 (1) f) GDPR. The legitimate interests we pursue lie in public relations and communications, e.g. to increase your satisfaction and to better manage our relationship with you. We will make sure that these legitimate interests are balanced for both of us.

    If you would like to exchange personal data with us, we recommend that you contact our customer service at https://www.dhl.com/global-en/home/contact-us.html.

    In the context of sweepstakes, data is collected to carry out and process the sweepstakes. The details of this, such as which data is processed for what purpose, can be found in the privacy notice and terms of use of the respective sweepstakes.

    4. Rights of data subjects

    Under the GDPR you have the following rights: 

    • In accordance with Art 15 GDPR, you can request information about your personal data processed. You can request rectification in accordance with Art 16 GDPR if your data are not (or are no longer) correct. You can request the erasure of your personal data in accordance with Art 17 GDPR.
    • In accordance with Art 18 GDPR, you have the right to request a restriction on the processing of your personal data. If the requirements of Art. 20 (1) GDPR are met, you have the right to receive your data in a structured, commonly used and machine-readable format. You have the right to object in accordance with Art 21 GDPR if the processing of your data is based on legitimate interest, 
    • If you have given your consent to a certain type of processing, you can withdraw this consent at any time with effect for the future by contacting us.
    • If you believe that the processing of your personal data violates data protection legislation, you have the right to lodge a complaint with the competent data protection supervisory authority in accordance with Art 77 (1) GDPR.

    You can assert your rights directly against Facebook, in particular your right to object, regarding the processing of page insights for statistical purposes by using the contact form provided on the Facebook site: 
    https://www.facebook.com/help/contact/540977946302970.
    In addition to this, we would also like to point out the settings options made available to you by Instagram in your profile. 

    If you want to assert your rights against us, please contact our customer service or use the contact data mentioned above.  

    5. Storage period 

    The duration of the storage of your data depends on the respective context of the processing taking into account the principles of data protection law. All public posts by you on our profile will remain on our profile indefinitely, unless we delete them due to an update of the original post, a violation of the law or violation of our guidelines. Of course, you can delete your post, comment, etc. yourself at any time or assert your right to deletion against us. 

    Regarding the deletion of your data by Facebook, we have no influence and therefore refer to the Data Policy of Instagram. 

    As of: December 12, 2020

  • We offer you an improved user experience on this website by integrating Google Maps as part of the DHL Finder. With the DHL Finder you can search for our branches, Packstations and parcel shops, which are displayed on a Google Maps map. The use of Google Maps may indicate a transfer of personal data to the United States of America. The USA is not considered by the European Court of Justice to have an adequate level of data protection. In particular, there is a risk that your data may be subject to access by U.S. authorities for control and monitoring purposes and that no effective legal remedies are available. This data transfer will not occur without your prior knowledge or agreement. We will ask for your explicit consent in accordance with Art. 6 (1) a GDPR in conjunction with Art. 49 (1) a) GDPR before Google Maps are activated and data is transferred to the USA. We have no influence on the further data processing by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). We refer to the Privacy Policy of Google. Your consent will be asked again each time you visit the website. Of course you can also get information about DHL locations without using Google Maps. 

Performance of a Contract

For pre-contractual and contractual reasons, we also need personal data to provide our services and comply with the obligations arising from contractual agreements concluded with you.

On dhl.com we offer the following services:

  1. Get a Quote
  2. DHL for Business
  3. Track & Trace
  4. Ship Now
  5. Customer Service
  • In order to get back to you via email or phone to make you an offer, you can use one of our Get a Quote services. Depending on the country you are residing and in order to get you to the right expert team or tool within DHL, we either ask whether you would like to ship parcels or documents, cargo / freight or international business mail and whether you are a business or private customer. 

    Based on this information your request will be directed to our business units  [DHL ExpressDHL Global ForwardingDHL FreightDHL ParcelDHL eCommerce SolutionsDHL Paket] and you will immediately receive a product card with price and further details from the business unit(s) which offer best suits your request. It could also be that we ask you for the following details: country of origin and destination including city and postcode (we need an approximate origin and destination in order to give you a quote for your shipment as accurate as possible) and weight and dimension of the shipment. Depending on your request we might also ask the quantity, whether documents or dangerous goods are involved or whether it is palletized or stackable. This information is also forwarded to one of our business units  [DHL ExpressDHL Global ForwardingDHL FreightDHL ParcelDHL eCommerce SolutionsDHL Paket]  and you will immediately receive a product card shown with price and further details regarding your shipment and optional add-ons.

    By clicking on the “continue to booking” button you will be forwarded to the respective business unit´s  booking tool system [MyDHL+myDHLiMyDHL Parcel]. Hence, on dhl.com we basically do not collect or otherwise process your personal data for our Get a Quote service. However, if data is nevertheless considered personal, such as the city and postcode, the legal basis for this is the contract in progress (Art. 6 (1) b) GDPR) and a legitimate interest in being able to submit our offer as accurately as possible (Art. 6 (1) f) GDPR).

    Provided that no statutory or contractual retention periods needs to be observed, your request will be stored for a maximum of 30 days with the relevant business unit which finally made the quote as proof of proper processing and for the purpose of further optimizing services. On dhl.com the respective data is stored for a maximum of 30 days if you have used the safe shipment service and unless not earlier deletes by yourself.

  • If you are using or DHL for Business service we ask you for the shipping destination, the volume and the frequency of the shipment. Based on this information and your shipping needs, your request will be send to our business units [DHL ExpressDHL Global ForwardingDHL FreightDHL ParcelDHL eCommerce SolutionsDHL Paket]  and allocated to those which services best fit your requirements. In order to get in touch with you as soon as possible we also ask you for your company´s name, your name, business address, email address and phone number. This data will also be forwarded to the respective business units and is necessary to take steps at your request prior to entering into a contract and / or for the performance of a contract. The legal basis is therefore Art. 6 (1) b) GDPR.

    Provided that no statutory or contractual retention periods need to be observed, your request will be stored for a maximum of 30 days with the relevant business unit which finally made the quote as proof of proper processing and for the purpose of further optimizing services.

  • You can use the Track and Trace service to track shipments addressed to you or sent by you, and also view the expected time of delivery. To this end the tracking information is sent to the respective business unit [insert link to divisions] to find the status of the shipment. You will also receive all important detailed information about your shipment from the respective business unit. In addition, the sender or recipient can also receive further information about the shipment in question by e-mail or SMS. For this purpose, the e-mail address or mobile phone number of the recipient of the notification can be stored and the notification activated. In this context, the person entering the data must ensure that the notification recipient agrees to the processing of e-mail address, mobile phone number and notification.

    The following data are processed as part of shipment tracking: shipment number, name and address of the sender, name and address of the recipient, e-mail address of the sender/recipient if applicable, name and address of the alternative recipient if applicable, customer data of the sender, product or service name, shipment history, signature of the recipient, confirmation that a minimum age has been checked (over 16/over 18).

    The data are processed for the purpose of fulfilling the contract on the basis of Art. 6(1) (b) GDPR.

    To enhance user convenience, when using shipment tracking DHL automatically generates a list of the last shipment number searched for via the shipment search: This function saves you having to re-enter the shipment number when checking the shipping status of your shipment. In this context, you can name individual shipments according to your preference (“Shipment title"). For this purpose, the application saves a list of the last shipment searches in a cookie. 

  • Our Ship Now service leads you to our various customer portals of our business units [DHL ExpressDHL Global ForwardingDHL FreightDHL ParcelDHL eCommerce SolutionsDHL Paket] (e.g. MyDHL+, DHL eCommerce Web Portal, my DHLi or DHL Interactive). You can also continue as guest and you will be forwarded to our business unit which best meets you shipping needs. In any case we will not process your personal data at this stage. Same applies if you would like to schedule a redelivery. After a few questions about your shipment you will be directed to our various customer portals where you can arrange the redelivery in detail.

  • You can contact us at any time with questions via our Customer Service. Depending on the respective business unit, you will either be forwarded directly to the website of the respective business unit or we ask you to fill out a contact form beforehand, which requests the following data categories and then forwards them to the respective responsible business unit: your customer reference no., your name, the name of your company, postal address, email address and telephone no. country / region and the sector you are working for. The legal basis is Art. 6 (1) (b) GDPR, as this processing is carried out in order to prepare or to fulfil a contract. Furthermore, you provide the data voluntarily for the purpose of contacting us, so your consent is another legal basis, Art. 6 (1) (a) GDPR.

    In addition you have the option to consent to promotional emails about our services. To this end we also forward your contact data to our business units [DHL ExpressDHL Global ForwardingDHL FreightDHL ParcelDHL eCommerce SolitionsDHL Paket] . The legal basis for this is your consent according to Art. 6 (1) (a) GDPR.

Further information on data protection in specific services and products is available at the relevant divisional Customer Portal and / or the respective local privacy notice.


Processing for Advertising Purposes

When you visit our web page we offer you a broad variety of information about DHL, about our products, services and events. In particular you can get information about our:

  1. Events & Webinars
  2. Delivered.
  3. Spotlight
  4. Newsletters
  • If you would like to participate in one of our Events and/or Webinars, you will be redirected to the appropriate registration page. There we basically collect the following personal data: your name, your email address and who is your main contact at DHL. Depending on the respective sector we may also ask for your company name, your seniority and whether you have previously done business with DHL. The legal basis is Art. 6 (1) (b) GDPR, as this processing is carried out in order to fulfil the contract (attending the event).

  • You have the option there to consent to promotional emails about our services. To this end we also forward your contact data to our business units [DHL Global ForwardingDHL FreightDHL ParcelDHL eCommerce SolutionsDHL Supply Chain] . The legal basis for this is your consent according to Art. 6 (1) (a) GDPR. You may unsubscribe at any time by clicking the relevant link at the bottom of the Spotlight mail. You can also revoke the consent at any time with effect for the future using the contact address provided.

  • If you subscribe to DHL Spotlight to know first about new articles we only collect your email address and it is not used for any other purpose. The legal basis for this is your consent according to Art. 6 (1) (a) GDPR. You may unsubscribe at any time by clicking the relevant link at the bottom of the Spotlight mail. You can also revoke the consent at any time with effect for the future using the contact address provided. If you unsubscribe from Spotlight or revoke your consent, the corresponding data will be removed or blocked from the mailing list and will no longer be processed for these purposes.

    Notwithstanding the foregoing, if you are an existing DHL customer, your postal data (e.g. name, address) will be processed to contact you in order to provide you with the latest information about our offers, news, products and services. Apart from an existing consent, which is based on Art. 6 (1) a) GDPR, we will process your e-mail address exclusively in order to provide you with information regarding DHL own and similar products. Legal basis for the aforementioned processing to keep you updated regarding our own and similar products is Art. 6 (1) f) GDPR. The processing of customer data for own direct marketing purposes is regarded as carried out for a legitimate interest. You have the right to object at any time to the said processing. To exercise your right, simply get in touch with us by using the contact details mentioned under "Who is Responsible".

  • If you register for one of our newsletters, we are entitled to use your e-mail address for this purpose. The legal basis for this data processing is your consent pursuant to Art. 6 (1) (a) GDPR. You may unsubscribe from the newsletter at any time by clicking the relevant link at the bottom of the newsletter. You can also revoke the consent at any time with effect for the future using the contact address provided. If you unsubscribe from our e-mail communications or revoke your consent, the corresponding data will be removed or blocked from the mailing list and will no longer be processed for these purposes.
    Including your e-mail address in a blocking list is effected in order to safeguard our legitimate interests pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in not sending you any information by e-mail in the future.

Data Retention & Third Parties

  • Career opportunities within Deutsche Post DHL Group are as diverse as our teams all over the world. With approximately 570,000 employees in over 220 countries, we connect people, improving their lives. If you would like to apply for one of our open jobs you will find more information here and, also on data protection, here.

  • We will keep your data for as long as necessary to fulfill our purposes, to execute our contracts and to comply with any legal obligation. The retention period may differ per country based on applicable country laws.

    We continuously strive to minimize the retention period of data where the purpose, the law or contracts allows us to do so. The data that we collect based on your consent will be kept until you withdraw your consent.

  • DHL does not share, sell, transfer or otherwise disseminate your personal data to third parties and will not do so in future, unless required by law, unless required for the purpose of the contract or unless you have given explicit consent to do so. For instance, it may be necessary to pass on your address and order data to our contractors when you order products. Further information on data protection in specific services and products is available at the relevant Customer Portal.

    However, in the context of the data processing as described in this Privacy Notice and the respective legal basis given, DHL will transfer your data to the following categories of recipients:

    • DPDHL Group companies: transfer is required within the DPDHL Group, its legal entities and shared service centers to provide and improve our products and services (e. g. our Get a Quote or Frequent Shipment Services). Transfers can also occur to manage our relationship with you, to identify you, to answer your requests and to comply with your privacy rights.
    • Third party business partners: The transfer to third party business partners is limited to what is required by applicable law and / or in order to fulfill our contractual obligations.
    • Third party processors: which process data are contractually obliged to maintain strict confidentiality as per Art. 28 GDPR. DHL retains responsibility for safeguarding your personal data in such circumstances. The business partners follow the instructions of DHL, and this is guaranteed by technical and organizational measures, as well as by means of checks and controls.
    • Public authorities: transfer is required by applicable law (e.g. to fulfil a legal obligation during shipment processing).

    Your data is only transferred outside the European Economic Area (EEA) to other Deutsche Post DHL Group companies, third party business partners or public authorities when permitted by applicable data protection law. In such cases, we will make sure that appropriate safeguards are in place to ensure the transfer of your data (e.g. our binding corporate rules, standard contractual clauses).


What Are My Data Subject's Rights?

You have the following rights:

You can request information as to what personal data is stored

You can request that we correct, delete or block your personal data provided these actions are permitted by law and in compliance with existing contractual conditions.

You can request to receive personal data you have provided in a structured, commonly used and machine-readable format.

You may lodge a complaint with the supervisory authority. 


How About Data Security

DHL takes the security of your data very seriously. We have implemented various strategies, controls, policies and measures to keep your data secure. We keep our security measures under close review. We use safeguards such as firewalls, network intrusion systems, and application monitoring. Where appropriate, we secure your data by using pseudonymization and encryption techniques when storing and transferring your data. For instance, your data is saved in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer technology (SSL) during transmission. This means that an approved encryption procedure is used for communication between your computer and the DHL servers if your browser supports SSL. We ensure that there are strict physical access controls in our buildings and certified data centers.

As a part of our security strategy, we have set up auditing programs to make sure that our systems and services comply with the DPDHL information security policy, and by extension the ISO 27001 standard.

In addition, we are taking a number of ongoing measures to reduce risk, such as (but not limited to) training our employees regularly and organizing incident simulation exercises by our Cyber Defense Center.

Should you wish to contact DHL by e-mail or contact forms, we would like to point out that the confidentiality of the information sent cannot be guaranteed. The contents of (e-mail) messages can be read by third parties. We therefore recommend you send us confidential information only by post.

Divisional Privacy Notices or Terms & Conditions


Changes to Privacy Notice

DHL reserves the right to change its Privacy Notice at any time with or without prior notice. Please check back frequently to be informed of any changes. By using DHL's websites you agree to this Privacy Notice.

This statement was last updated on:

 10/09/2021