INFORMATION ON THE PROCESSING OF PERSONAL DATA

Controller of personal data

The data controller will beDHL eCommerce (Poland) Sp. z o.o., with its registered office in Warsaw (address: Osmańska 2, 02-823 Warsaw), hereinafter referred to as "DHL".

DHL Data Protection Officer

DHL has appointed a Data Protection Officer, Michal Czarnecki, who you can contact on all matters concerning the processing of your personal data and the exercise of your rights in relation to data processing via the following email: dpo.parcel@dhl.com.

Purposes and legal basis for data processing, legitimate interest in processing

Below we present to you all the standard purposes of data processing by DHL in DHL's business.

The detailed purpose of the processing of your data is communicated to you each time by DHL at the time of the collection of your data.

Personal data shall be processed by DHL for the purpose of fulfilling your order, including any additional services ordered by you, as well as when services - ordered by another entity - are provided with your participation or on your behalf, for registering, handling and ensuring the operation of your customer account on dhl24.com.pl or other DHL websites (if you have created one), for registering, handling and ensuring the operation of your account on efaktura.dhl.parcel. pl account (if you have created such an account), to contact you in relation to the provision and quality of services, to respond to interventions, complaints, claims or changes in instructions, to send you financial and billing information, to carry out promotions, to fulfil DHL's legal obligation, to correspond with you in relation to communications you send to us and for marketing purposes in order to present you with DHL's and third parties' service offers, as well as for internal administrative purposes of DHL Group (reports, statistics, testing of new business solutions).

The legal basis for the processing of your personal data will be:

• an agreement between you and DHL for the performance of your order, including the anassual services you have requested and for the performance of DHL's other obligations to you, to conduct contacts in connection with the provision of services, to respond to interventions, complaints, complaints or changes of disposition (pursuant to Article 6(1)(b) of the GDPR);
• an agreement between you and DHL to maintain and maintain your customer account on DHL services, e.g. dhl24.com.pl (pursuant to Article 6(1)(b) of the GDPR);
• the processing is necessary for the purposes of DHL's legitimate interests, which include the provision of services - ordered by another party - provided to or for you, to prepare a response or deal with the issue that has been raised in your message, sent to DHL's email address or via a form on DHL's website or chat as well as testing the quality of the services provided, which in some cases may include the transfer of your data to other DHL group companies to the extent necessary (based on Article 6(1)(f) RODO);
• the necessity of processing for purposes arising from DHL's legitimate interests in direct marketing of DHL services and third parties (including through the preparation of a dedicated offer based on estimated shipments), the establishment, redress or protection against claims, and including actions necessary for the performance of a contract to which a natural person is not a party (pursuant to Article 6(1)(f) of the GDPR);
• the legal obligation incumbent upon DHL, in particular relating to the right to transport or postal services, the transmission of certain information to public authorities, including law enforcement authorities, and the documentation of economic events for tax and accounting purposes (based on Article 6(1)(c) of the DPA);
• voluntarily given consent to the communication of commercial information through a specific communication channel (pursuant to Article 6(1)(a) of the GDPR);
• necessity of processing for purposes arising from DHL's legitimate interests of verifying the parties to the contract - US, EU, local sled letters (pursuant to Article 6(1)(f) GDPR). We will collect information about whether the page is listed. Entities that have a more permanent business relationship with DHL are subject to verification. Both the ordering party and the receiver (the basis may also be the law – Article 6(1) 1 lit c RODO – at the EU sanctions lists) will be verified when shipping foreign shipments. In case of doubt, we will ask for additional information.
  
• the necessity of processing for purposes which are the legitimate interests of the DHL Group (Article 6(1)(f) of the GDPR) constituting internal administrative objectives of the DHL Group (reports, statistics, testing new business solutions).

For personal data processed in the process of joint customer acquisition, for which the joint controllers are DHL eCommerce and GERLACH Sp. z o.o., ul. 30 Batorowska Street, Dąbrowa, 62-070 Dopiewo, (hereinafter referred to as "Gerlach") (contact point Michał Czarnecki, dpo.parcel@dhl.com):

• legitimate interest of the controllers, which constitutes the maintenance of a common customer base (Article 6(1)(f) of the GDPR); 
• a common service to attract customers with individual customs clearance (Article 6(1)(b) of the GDPR);

• the legal obligation for controllers to exercise the rights of persons whose data are processed in the course of the process - (Article 6(1)(c) of the GDPR).

To whom and where can DHL transfer your data? Who can be the recipient of your data outside of DHL? (information about recipients of data)

In addition to employees, agents and members of DHL bodies, persons and entities providing the operation, maintenance and service of DHL's IT systems and solutions will have access to your data.

Furthermore, depending on the nature of the case, your personal data may only be transferred by DHL to the following entities:

• entities cooperating with DHL and providing services to DHL, including transport services, or
• DHL insurers, or
• entities providing accounting, accounting, financial, legal or tax advice to DHL, or
• public authorities, including courts, at their reasonable request, or
• public authorities, including courts and agents, DHL insurers and DHL advisors, where necessary to defend DHL against claims or to pursue claims by DHL, or
• dhl partners, the current full list of which can be found in the HereOr
• other companies in the DHL group participating in a specific task, or
• entities from the group supporting DHL in the process of verifying the parties to the contract (sledging lists), as well as AEB Gesellschaft zur Entwicklung von Branchen-Software mbH, Sigmaringer Straße 109, D-70567 Stuttgart.

Transfer of data outside the European Economic Area or to international organisations

As a general rule, your personal data will not be transferred outside the European Economic Area or to international organisations. Only if complaints are processed can your personal data be transferred to other companies in the DHL group for internal administrative purposes. In this case, our IT service providers may process such data outside the European Economic Area. This will be based on the mechanisms indicated in Chapter V of the GDPR, in particular the so-called approved contractual clauses. The basis for data transfer to Great Britain and Northern Ireland are decisions of the European Commission stating that they ensure an adequate level of protection. More information in this regard can be obtained by contacting our Data Protection Officer.

How long will DHL keep your data? (information about the storage period)

• The period of storage of your data by DHL will depend on the purpose of the processing of your data by DHL.
• Where your data is processed by DHL for the performance of a contract between you and DHL (e.g. DHL). contract of carriage) or to perform other obligations on your behalf by DHL (e.g. to maintain a customer account on DHL services, including dhl24.com.pl), your personal data will be stored by DHL for the period necessary to perform DHL's obligations to you, e.g. under the contract of carriage (order) and until the expiry of the limitation period of any of your claims against DHL and DHL's claims against you , related to such obligations, e.g. arising from the contract of carriage (order), unless the storage of data is necessary longer for the purposes of tax obligations – in which case the deletion will take place immediately after the expiry of the limitation period of tax obligations related to the obligation, e.g. with the contract of carriage (order) (e.g. for billing purposes related to the order, your data will be stored for 5 years from the end of the calendar year , in which the due date for payment of the tax relating to the contract has expired).
• In the event that your data is processed by DHL due to the necessity of processing for purposes arising from DHL's legitimate interests, your personal data will be stored by DHL for the period necessary to achieve the purposes of such interests, with the aim of direct marketing for the duration of the existence of a legitimate marketing interest, unless you exercise your right and object to the processing of this data for marketing purposes. In this case, DHL may retain your data for the period of limitation of your claims against DHL or DHL's claims against you, arising from the law, if the processing of such data is necessary for the establishment or enforcement of claims, as well as for the purpose of defending against such claims.
• In order to pursue DHL's legitimate interests in establishing and pursuing claims or defending against claims, DHL may retain your data for the limitation period of your claims against DHL or DHL's claims against you under the law (for example, the general limitation period for business-related claims is 3 years, and the general limitation period for consumer claims against DHL is 6 years; the above retention periods may change with a change in generally applicable laws).
• In order to pursue DHL's legitimate interests in responding to your message, question, complaint or suggestion, DHL may retain your data for the period necessary to respond to or settle the matter you turn to DHL, and DHL may extend that period by the limitation period of your claims against DHL or DHL's claims against you under the law if the processing of such data is necessary to establish or pursue claims , and to defend against such claims.
• In addition, in the event of an increase in claims against DHL or by DHL, e.g. in connection with a contract of carriage (order) concluded between you and DHL, your data will be stored no longer than is necessary in connection with the relevant proceedings for such claims.
• In the event that your data is processed by DHL due to a legal obligation incumbers DHL, DHL will keep this data for as long as dhl has an appropriate legal obligation. If your data is necessary to document economic events for accounting purposes, your data in this regard will be stored by DHL for as long as there is a legal obligation for DHL to hold a document of these events.
• Where your data is processed by DHL on the basis of your freely given consent, they will be processed until its withdrawal or the purpose of the processing ceases.
• In the case of verification of the parties to the contract, the data may be archived for up to 5 years (if more detailed verification is needed).

For personal data processed in the joint acquisition process, for which DHL eCommerce and Gerlach are co-controllers:

• the period required by law to keep accounting records, i.e. for a period of 5 years from the end of the tax year or financial year,
• •3 years for data processed in the exercise of rights,
• •duration of the contract - in terms of running a common customer base.

Information about your rights

As DHL processes your personal data, you have many rights. Below is a brief description of them. In order to exercise these rights or to obtain additional information in this regard, we encourage you to contact DHL's IOD via email: dpo.parcel@dhl.com

If you request DHL to exercise your rights, DHL may request additional information to confirm your identity if you have reasonable doubt about your identity. DHL will respond to requests without undue delay, as soon as one month from the date of receipt of the request.

If DHL demonstrates that your requests are manifestly unfounded or excessive, in particular because of its continuing nature, DHL may: a) charge a reasonable fee, taking into account the administrative costs of providing information, conducting communications or taking the requested action; or (b) refuse to take action on the request.

For personal data processed in the process of joint customer acquisition, for which DHL eCommerce and Gerlach are co-controllers in order to exercise your rights or to obtain additional information in this regard, please contact DHL’s DHL DOD via email: dpo.parcel@dhl.com

Right of access to data

You have the right to request access to your personal data, including in particular information about whether DHL processes your personal data and the scope of the data held by DHL, the purposes of data processing or categories of recipients of your data, if possible, about the planned retention period, about your rights regarding personal data, information about the sources of your data acquisition by DHL if they haven't been collected from you. In addition, you have the right to obtain a copy of the data, provided that obtaining the first copy of the data is free of charge and that each subsequent copy may incur a reasonable fee taking into account the administrative costs of preparing such a copy of the data.

Right to rectification

You have the right to request the immediate rectification of incorrect data or, taking into account the purposes of the processing, the completion of incomplete data.

Right to erasure (right to be forgotten)

You have the right to request the deletion of your data if one of the following circumstances occurs:

(a) personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b) you have made an effective objection to the processing;
(c) the personal data are unlawfully processed;
(d) the personal data must be erased in order to comply with a legal obligation;
e) you have withdrawn/withdrew your consent to the processing of your personal data and the personal data have been processed on the basis of your consent and there is no other legal basis for their processing.

However, you will not be able to exercise your right to erasure m.in. if such data are necessary to establish or pursue claims or defend against claims.

Right to restrict data processing

You have the right to request restriction of processing in the following cases: a) if you dispute the accuracy of your personal data - for a period of time to verify the accuracy of such data; b) the processing is unlawful and you object to the deletion of personal data, requesting in return to limit their use; c) personal data is no longer needed by DHL but you need to establish, investigate or defend against claims; d) if you object, until it is as long as it is found that the legitimate grounds on the part of DHL override the grounds for your objection.

Right to data portability

You have the right to receive in a structured, commonly used machine-readable format your personal data that you have provided to DHL and you have the right to transfer this personal data to another controller without hindrance from DHL if:

a) the processing takes place on the basis of your consent or on the basis of a contract with you and at the same time
(b) the processing is carried out by automated means.
At the same time, you have the right to request that personal data be transferred by DHL directly to another data controller, if technically possible.

Right to withdraw consent

If you agree to the specific purpose of the data processing, you have  right to withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to object to data processing

You have the right at any time to object - for reasons related to your particular situation - to the processing of your data, if the legal basis for the processing is the legitimate interest of DHL.

As a result of the objection, DHL will cease to process your personal data unless it demonstrates the existence of valid legitimate grounds for processing overriding your interests, rights and freedoms or grounds for establishing, pursuing claims or defending against claims.

If your personal data is processed for direct marketing purposes, you can object to such processing, including profiling, at any time without having to show any reasons related to your particular situation and DHL is obliged to stop such processing immediately.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the President of the Office for Personal Data Protection if you believe that the processing of your personal data violates the law in this regard.

Information whether the provision of personal data is a statutory or contractual requirement or a condition for concluding a contract and the lack of obligation to provide data

You provide all data voluntarily.

Depending on the situation in which DHL may obtain your data, providing certain data (defined by DHL as required data) may be a condition for entering into a contract with DHL or a condition for the start of the provision of services by DHL, e.g. the opening and operation by DHL of a customer account on DHL services, e.g. dhl24.com.pl.

You must provide the sender's name, address, and address in order to order the service. The provision of the recipient's telephone is necessary for the use of additional services consisting in sms notification and pre-delivery information service. In some circumstances, it may be necessary to provide a telephone number or e-mail address, due to the nature of the service. Providing your name, address and TAX ID number may be a statutory requirement and may be necessary to prepare documentation for tax purposes.

When sending messages or requests to DHL (e.g. to send an offer to DHL), providing contact details is not a statutory or contractual requirement or a condition for concluding a contract, however, providing the required data is necessary to enable DHL to respond.

Information about the consequences of not provide data

Depending on the situation in which DHL may obtain your data, failure to provide certain information may prevent you from entering into a contract with DHL, placing an order, using additional services, opening and operating your customer account on DHL services, e.g. dhl24.com.pl, receiving correct tax documents from DHL, receiving an offer or response to a message addressed to DHL, submitting complaints, complaints, intervention or changes to the order order order from DHL.

Information on the use of data for automated decision-making, including profiling

Your personal data will not be used for automated decision-making, including profiling.

Additional information for shipment recipients

Your personal data contained in the consignment note (data category) has been provided to us by the service provider.

1. Who is the controller of your personal data?

 DHL eCommerce (Poland) Sp. z o.o. with its registered office in Warsaw at ul. Osońska 2, 02-823 Warszawa (“DHL”).

2. How can you contact the Data Protection Officer?

Michał Czarnecki, The Data Protection Officer, has been appointed to the DHL. This is a person you can contact in all cases regarding the processing of your personal data and the use of rights related to the processing of your data by written or following email: dpo.parcel@dhl.com  

We recommend that you contact the inspector in particular where you wish to exercise your rights to access, rectify, erase, or restrict processing, the right to object to processing, as long as the reasons for your particular situation are reasonable.

3. What are the purposes for which we process your personal data?

DHL will process your personal data for the following purposes:

• for the purpose of concluding and executing a contract concluded with your company – for a party to the contract, the basis will be the necessity for the performance of the contract to which the data subject is a party, or to take action at the request of the data subject before the conclusion of the contract (Article 6(1)(b) GDPR), and for the representative or employee the legal basis for the processing will be the legitimate interest of DHL , consisting in the conclusion and ongoing implementation of this agreement (Article 6(1)(f) GDPR);
• our storage or transmission of certain information to public authorities, including law enforcement authorities, and documentation of economic events for tax and accounting purposes, which constitutes a legal obligation incumbers DHL (pursuant to Article 6(1)(c) of the GDPR);
• in order to establish, pursue or defend against claims, the legal basis for data processing will be our legitimate interest in being able to establish, assert or defend against claims (Art. 6 para. 1 lit. f GDPR);
• in order to verification of the parties to the agreement – US, EU, local (pursuant to Article 6(1)(f) GDPR). We will collect information about whether the page is listed. In case of doubt, we will ask for additional information. Ensuring compliance with the above requirements is a legitimate interest of DHL;
• for the contracting party to prevent money laundering and terrorist financing (Article 6(1) 1 lit c GDPR), which is a legal obligation of DHL.
• to send marketing information to the selected communication channel based on the consent (Article 6 section 1 letter a GDPR).

4. What categories of your personal data will we process?

DHL will process the following categories of your personal data:

• First name, last name,
• Work phone number
• Work email address,
• Position.
• Data related to the conclusion and performance of the contract.
• For representatives of legal entities also: PESEL and function in the organization.

5. Who do we share your personal information with?

In addition to employees, agents and members of DHL bodies, persons and entities providing the operation, maintenance and service of DHL's IT systems and solutions will have access to your data.

Furthermore, depending on the nature of the case, your personal data may only be transferred by DHL to the following entities:

• entities cooperating with DHL and providing services to DHL, including transport and or
• dhl supporters in the process of verifying the parties to the contract (sledging lists), as well as AEB Gesellschaft zur Entwicklung von Branchen-Software mbH, Sigmaringer Straße 109, D-70567 Stuttgart and or
• DHL insurers, or
• entities providing accounting, accounting, financial, archiving legal or tax advice to DHL, other companies in the DHL group participating in the performance of a specific task, or
• public authorities, including courts, at their reasonable request, or
• public authorities, including neighbors and agents, DHL insurers and DHL counselors, where necessary to defend DHL from claims or to investigate DHL.

6. Do we transfer your data outside the European Economic Area and International Organization?

Your data will not be transferred outside the European Economic Area and International Organization.

7. How long will we retain your data?

We will use your personal data for the period necessary to perform the contract with your company (and subsequently the limitation of claims related to it). If you are a party to the contract - the data will be processed for the periods indicated in the law (tax, accounting law).

We may store your personal data for the purposes of our legitimate interests as set out above.

In case of review of the parties, data may be archived up to 5 years (for more accurate review).

If you have given your consent, your data will be processed until you withdraw your consent.

8. What are your rights?

As DHL processes your personal data, you have many rights. Below is a brief description of them. In order to exercise these rights or to obtain additional information in this regard, we encourage you to contact the DHL IOD via email: dpo.parcel@dhl.com

Right to object to data processing and other rights

You have the right to object at any time – for reasons related to your particular situation – to the processing of your data, if the legal basis for the processing is the legitimate interest of DHL.

As a result of the objection, DHL will cease to process your personal data unless it demonstrates the existence of valid legitimate grounds for processing overriding your interests, rights and freedoms or grounds for establishing, pursuing claims or defending against claims.

You also have the following rights in connection with the processing of your personal data:

Right of access to data

You have the right to request access to your personal data, including in particular information about whether DHL processes your personal data and the scope of the data held by DHL, the purposes of data processing or categories of recipients of your data, if possible, about the planned retention period, about your rights regarding personal data, information about the sources of your data acquisition by DHL if they haven't been collected from you. In addition, you have the right to obtain a copy of the data, provided that obtaining the first copy of the data is free of charge and that each subsequent copy may incur a reasonable fee taking into account the administrative costs of preparing such a copy of the data.

Right to rectification

You have the right to request the immediate rectification of incorrect data or, taking into account the purposes of the processing, the completion of incomplete data.

Right to transfer data to another administrator

You have the right to transfer data (processed pursuant to consent or agreement) provided by DHL to another administrator.  

Right to remove data (right to be forgotten)

You have the right to request the deletion of your data if one of the following circumstances occurs:

(a) personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

b) you have made an effective objection to the processing;

(c) the personal data are unlawfully processed;

(d) the personal data must be erased in order to comply with a legal obligation;

e) you have withdrawn/withdrew your consent to the processing of your personal data and the personal data have been processed on the basis of your consent and there is no other legal basis for their processing.

Right to restrict data processing

You have the right to request restriction of processing in the following cases: a) if you dispute the accuracy of your personal data, for a period of time to verify the accuracy of such data; b) the processing is unlawful and you object to the deletion of personal data, requesting in return to limit their use; c) personal data is no longer needed by DHL but you need to establish, investigate or defend against claims; d) if you object, until it is as long as it is concluded that the legitimate grounds on the part of DHL override the grounds for your objection.

Right to withdraw consent

You have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of the processing based on consent before its withdrawal.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the President of the Privacy Office if you believe that the processing of your personal data violates the law.

9. Source of origin of your personal information

We have received your personal data from you during the contract process or your employer/entity for which you provide services.

Data is required to enter into and execute the contract.

10. Will you be subject to automated processing?

We will not make decisions that are based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affected you.

1) Data controller – who is it and how can you contact us?

The controller of your personal data included in the application is  DHL eCommerce (Poland) Sp. z o.o. with its registered office in Warsaw, at ul. Osmańska 2, 02-823 Warszawa ("DHL").

You can contact us in writing or by the following e-mail: dpo.parcel@dhl.com

2) Data Protection Officer - how to contact him/her?

DHL has appointed a Data Protection Officer, Michał Czarnecki. This is the person you can contact in all matters relating to the processing of personal data and the exercise of data processing rights via the following e-mail: dpo.parcel@dhl.com.

3) What is the legal basis and the purpose of processing your personal data?

DHL will process your personal data contained in the application documents for the following purposes:

    (a) to conduct the recruitment process for the position you have applied for – the legal basis for this processing is the requirement to comply with a legal obligation to which DHL is subject, arising in particular from the provisions of employment law (Article 6(1)(c) of the General Data Protection Regulation No. 2016/679 ("GDPR") in conjunction with the provisions of employment law) and the fact that the data processing is necessary to take steps prior to entering into a contract (Article 6(1)(b) GDPR), and in respect of additional data – the legal basis for this processing is your consent (Article 6(1)(a) GDPR) or Article 9(2)(b) GDPR – where the application documents contain the data referred to in Article 9(1) GDPR (such as data concerning health) necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment law;

    (b) for the purpose of future recruitment, if you have given your consent to the processing of data for this purpose - the legal basis for data processing will be your consent (Art. 6 para. 1 lit. a GDPR);

    (c) in justified cases, for the purpose of possibly establishing, asserting or defending against claims, the legal basis for data processing will be our legitimate interest in our ability to establish and pursue claims (receivables) or to defend against such claims (Art. 6 para. 1 point f GDPR);

    (d) Your e-mail address may be used to send you an invitation to complete a survey related to the candidate satisfaction survey regarding the quality of the recruitment process. The basis for processing your data in this regard will be our legally justified interests in conducting such a survey (Article 6(1)(f) GDPR). You have the right, at any time, to object to such processing - to make use of that right, contact our Data Protection Supervisor (contact details above).

4) To whom will we be transferring your personal data?

We will transfer your personal data to our subcontractors, i.e. providers of IT services and solutions, recruitment firms, including providers of online recruitment portals and advertisers, and in particular Avature Private Limited Company, New York, NY, US (HQ) 45 Rockefeller Plaza (for details of personal data processing in a recruitment application see HERE), eRecruitment Solutions sp. z o.o., ul. Prosta 68, 00-838 Warsaw and Sonru Ltd, Chelsea House, Distillery Road, Wexford, Ireland. 

5) How long do we store your data?

Your data will be processed throughout the recruitment process and for 6 months thereafter (in justified situations, this period may be extended for the purpose of establishment, exercise or defence of legal claims). To the extent that your personal data are processed based on your consent, it will continue to be processed until you withdraw your consent. If you have consented to the use of your personal data for the purpose of future recruitment processes, your data will be used for that purpose for no more than 12 months after DHL receives the data/the candidate submits the recruitment application. 

6) What are your rights with respect to processing of personal data?

You have the right to object to processing of your data on grounds relating to your particular situation.

You also have the following rights with respect to processing of personal data:

• the right to access your personal data, including in particular information about whether DHL processes your personal data and about the scope of your personal data held by DHL, the purposes of the processing of the data and the categories of recipients of your personal data;
• the right to request rectification of your personal data or to have incomplete personal data completed;
• the right to request erasure of personal data that pertains to you;
• the right to request restriction of processing of your personal data;
• the right to request data portability, including the right to receive from DHL in a structured, commonly used and machine-readable format the personal data concerning you which you have provided to DHL, and the right to transmit those data to another controller without hindrance from DHL and the right to have the personal data concerning you transmitted by DHL directly to another controller, where technically feasible.

You have the right to complain to the President of the Personal Data Protection Office.

Any statements of withdrawal of consent, objection or exercise of other rights shall be sent in writing to the address of the Data Protection Officer provided above or by electronic means to the email address provided in point 2 above. 

If you submit a request to exercise your rights to DHL, DHL may require you, in the event of any reasonable doubt as to your identity, to provide additional information in order to confirm your identity. DHL will respond to your requests without undue delay – as far as possible within one month of the receipt of a request.

7) Do you have the right to withdraw consent to the processing of your personal data?

Where processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. To do this, write to the IOD dpo.parcel@dhl.com.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

8) Is the provision of personal data voluntary?

The provision of the personal data required by DHL is necessary for DHL for the purpose of the recruitment process.

If you refuse to provide your personal data, we will be unable to process your application in the recruitment process. The provision of any other data is voluntary.

9) Will you be subject to automated processing?

We shall not make any decisions based solely on automated processing, including profiling, which would produce legal effects concerning you or would similarly significantly affect you.

1. Who is the controller of your personal data?

The controller of your personal data included in the application is  DHL eCommerce (Poland) Sp. z o.o. with its registered office in Warsaw, at ul. Osmańska 2, 02-823 Warszawa ("DHL").

You can contact us in writing or by following e-mail: dpo.parcel@dhl.com

2. How can you contact the Data Protection Officer?

DHL has appointed a Data Protection Officer, Michał Czarnecki. This is the person you can contact in all matters relating to the processing of personal data and the exercise of data processing rights via the following e-mail: dpo.parcel@dhl.com.

3. What is the legal basis and the purpose of processing your personal data?

DHL will process your personal data contained in the application documents for the purposes of:

a) future recruitment processes – the legal basis for this processing is your consent (Article 6(1)(a) of the General Data Protection Regulation No. 2016/679 ("GDPR").

b) Your email can be used to invite you to fill out a questionnaire in our job candidate satisfaction survey concerning the quality of the recruitment process. The legal basis for this processing is our legitimate interest in the conduct of the survey (Article 6(1)(f) GDPR). You have the right to object against such processing at any time – to exercise this right, please contact our Data Protection Officer (DPO) (contact details above).

c) in justified situations, your data may be retained by us for the purposes of establishment, exercise or defence of legal claims – the legal basis for this processing is our legitimate interest in establishing, exercising or defending legal claims (Article 6(1)(f) GDPR);

d) in respect of any additional data you have provided – the legal basis for this processing is your consent (Article 6(1)(a) GDPR) or Article 9(2)(b) – where the application documents contain the data referred to in Article 9(1) GDPR (such as data concerning health) necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment law;

4. To whom will we transfer your personal data?

We will transfer your personal data to our subcontractors, i.e. providers of IT services and solutions, recruitment firms, including providers of online recruitment portals and advertisers, and in particular Avature Private Limited Company, New York, NY, US (HQ) 45 Rockefeller Plaza (for details of personal data processing in a recruitment application see HERE), eRecruitment Solutions sp. z o.o., ul. Prosta 68, 00-838 Warsaw and Sonru Ltd, Chelsea House, Distillery Road, Wexford, Ireland.

5. How long will we store your personal data?

Your personal data will be retained until you withdraw your consent but for no more than 12 months after DHL receives the data/the candidate submits the recruitment application.

If you participate in an ongoing recruitment process, your personal data will be retained for 6 months after the end date of the recruitment process (in justified situations, this period may be extended for the purpose of establishment, exercise or defence of legal claims). 

6. What are your rights with respect to processing of personal data?

You have the right to object to processing of your personal data on grounds relating to your particular situation.

You also have the following rights with respect to processing of your personal data:

• the right to access your personal data, including in particular information about whether DHL processes your personal data and about the scope of your personal data held by DHL, the purposes of the processing of the data and the categories of recipients of your personal data;
• the right to request rectification or to have your incomplete personal data completed;
• the right to request erasure of your personal data;
• the right to request restriction of processing of your personal data;
• the right to request data portability, including the right to receive from DHL in a structured, commonly used and machine-readable format the personal data concerning you which you have provided to DHL, and the right to transmit those data to another controller without hindrance from DHL and the right to have the personal data concerning you transmitted by DHL directly to another controller, where technically feasible. 

You have the right to complain to the President of the Personal Data Protection Office.

Any statements of withdrawal of consent, objection or exercise of other rights shall be sent in writing to the address of the Data Protection Officer provided above or by electronic means to the email address provided in point 2 above.

If you submit a request to exercise your rights to DHL, DHL may require you, in the event of any reasonable doubt as to your identity, to provide additional information in order to confirm your identity. DHL will respond to your requests without undue delay – as far as possible within one month of the receipt of a request.

7. Can you withdraw consent to the processing of personal data?

Where processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. To do this, write to the IOD dpo.parcel@dhl.com.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

8. Is providing your personal data voluntary?

The provision of the personal data required by DHL is necessary for DHL for the purpose of the recruitment process.

If you refuse to provide your personal data, we will be unable to process your application in the recruitment process. The provision of any other data is voluntary.

9. Will you be subject to automated processing?

We will not make decisions that are based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affected you.

1) Who is the controller of your personal data and how can you contact us?

The controller of your personal data included in the application is  DHL eCommerce (Poland) Sp. z o.o. with its registered office in Warsaw, at ul. Osmańska 2, 02-823 Warszawa ("DHL").

You can contact us in writing or by the following e-mail: dpo.parcel@dhl.com

2) How can you contact the Data Protection Officer?

A Data Protection Officer has been appointed in DHL "IOD", Michał Czarnecki, who you can contact in all matters relating to the processing of personal data and the exercise of data processing rights by the following e-mail: dpo.parcel@dhl.com.

3) What is the legal basis and the purpose of processing your personal data?

DHL will process your personal data contained in the application documents for the following purposes:

    a) to conduct an ongoing recruitment process – the legal basis for this processing is the fact that it is necessary to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation No. 2016/679 ("GDPR"), and in respect of any additional data you have provided – the legal basis for this processing is your consent (Article 6(1)(a) GDPR) or Article 9(2)(b) GDPR – where the application documents contain the data referred to in Article 9 (1) GDPR (such as data concerning health) necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment law. In the case of courier candidates – data will be shared with selected carriers who employ such persons under cooperation with DHL – the basis is DHL’s legitimate interest, which is the acquisition of associates (Art. 6(1)(f) GDPR).

    (b) for the purpose of future recruitment, if you have given your consent to the processing of data for this purpose - the legal basis for data processing will be your consent (Art. 6 para. 1 lit. a GDPR).

    (c) in justified cases, for the purpose of possibly establishing, asserting or defending against claims, the legal basis for data processing will be a legitimate interest in our ability to establish, assert or defend against claims (Art. 6 para. 1 point f GDPR).

4) To whom will we transfer your personal data?

We will transfer your personal data to our subcontractors, i.e. providers of IT services and solutions, recruitment firms, including providers of online recruitment portals and advertisers, and in particular Avature Private Limited Company, New York, NY, US (HQ) 45 Rockefeller Plaza (for details of personal data processing in a recruitment application see HERE), eRecruitment Solutions sp. z o.o., ul. Prosta 68, 00-838 Warsaw and Sonru Ltd, Chelsea House, Distillery Road, Wexford, Ireland. In the case of courier candidates – data will be shared with selected carriers.

5) How long do we store your data?

Your data will be processed throughout the recruitment process and for 6 months thereafter (in justified situations, this period may be extended for the purpose of establishment, exercise or defence of legal claims). To the extent that your personal data are processed based on your consent, it will continue to be processed until you withdraw your consent. If you have consented to the use of your personal data for the purpose of future recruitment processes, your data will be used for that purpose for no more than 12 months after DHL receives the data/the candidate submits the recruitment application.

6) What are your rights with respect to processing of personal data?

You have the right to object to processing of your data on grounds relating to your particular situation.

You also have the following rights with respect to processing of personal data:

• the right to access your personal data, including in particular information about whether DHL processes your personal data and about the scope of your personal data held by DHL, the purposes of the processing of the data and the categories of recipients of your personal data;
• the right to request rectification of your personal data or to have incomplete personal data completed;
• the right to request erasure of personal data that pertains to you;
• the right to request restriction of processing of your personal data;
• the right to request data portability, including the right to receive from DHL in a structured, commonly used and machine-readable format the personal data concerning you which you have provided to DHL, and the right to transmit those data to another controller without hindrance from DHL and the right to have the personal data concerning you transmitted by DHL directly to another controller, where technically feasible.

You have the right to complain to the President of the Personal Data Protection Office.

Any statements of withdrawal of consent, objection or exercise of other rights shall be sent in writing to the address of the Data Protection Officer provided above or by electronic means to the email address provided in point 2 above.

If you submit a request to exercise your rights to DHL, DHL may require you, in the event of any reasonable doubt as to your identity, to provide additional information in order to confirm your identity. DHL will respond to your requests without undue delay – as far as possible within one month of the receipt of a request.

7) Can you withdraw consent to the processing of personal data?

Where to the extent that the processing of your personal data is based on consent, you have the right to withdraw your consent at any time. To do this, write to the IOD dpo.parcel@dhl.com.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

8) Is providing your personal data voluntary?

Providing personal data requested by DHL is required by DHL for the purpose of conducting the recruitment process.

If you refuse to provide your personal data, we will be unable to process your application in the recruitment process. Provision of other data is voluntary.

9) Will you be subject to automated decision-making?

We shall not make any decisions based solely on automated processing, including profiling, which would produce legal effects concerning you or would similarly significantly affect you.

1. The controller of your personal data DHL eCommerce (Poland) Sp. z o.o., with its registered office in Warsaw (address: Osmańska 2, 02-823 Warsaw), hereinafter referred to as "DHL".
2. The Controller has appointed a Data Protection Officer (hereinafter: "IOD"), which is available under dpo.parcel@dhl.com dhl mailing address. 
3. Your personal data will be processed in order to:
   a. maintain a contact base, also for the purpose of establishing potential business relations, which constitutes a legitimate interest of the controller (Article 6(1)(f) gdpr) and may lead to cooperation (Article 6(1)(b) GDPR),
   b. conducting direct marketing of DHL services and third parties (including through the preparation of a dedicated offer, created on the basis of estimated quantities of shipments), responding to interventions, complaints, complaints or changes of disposition, preparing a response or dealing with a matter that has been reported in your message, in case of a request to cease contact - designation as an entity that does not wish to do so - which constitutes a legitimate interest of the data controller (Article 6(1)(f) GDPR),
   c. presentation of the offer of our services - after obtaining permission to contact a given communication channel. The basis is the consent given (Article 6(1)(a) of the GDPR),
   d. Conducting a Research Relationship Survey  (pursuant to Article 6(1) of the GDPR),
   e. Archiving of any telephone calls to resolve the matter you report and to evaluate the conduct of our consultant, which is a legitimate interest in DHL (pursuant to Article 6(1) of the GDPR.
   f. review of the parties hereto (including prior to execution) - the U.S. sanctions list, EU, local (the basis for processing for the purposes of the legitimate interests of DHL (pursuant to Article 6(f) of the GDPR). We will collect information about whether the page is listed. In case of doubt, we will ask for additional information,
4. The recipients of your personal data may be entities supporting DHL in the implementation of its processes (other entities of the DHL Group, IT entities, legal advice, entities storing and destroying documents).
5. Retention period of your personal data: the data will be processed accordingly: until you withdraw your consent, object, or verify the database (e.g. cessation of your activity).
6. You have the right to:
   a. withdrawal of consent at any time, which does not affect the lawfulness of processing carried out before its withdrawal,
   b. request access to and rectification of personal data concerning you if they are incorrect,
   c. in cases provided for by law , request the deletion of personal data concerning you,
   d. in cases provided for by law - a request to restrict the processing of your personal data,
   e. in cases provided for by law , the transfer of data to another controller.
7. You also have the right to object to the processing for reasons related to your particular situation. 
8. In order to exercise the rights indicated in paragraphs 6 and 7, please contact the Data Protection Officer, who is available at: dpo.parcel@dhl.com dhl mailing address. 
9. Your personal data is not subject to automated decision-making, including profiling.
10. The controller of your personal data does not intend to transfer your personal data to a third country or international organisation.
11. You have the right to lodge a complaint with the supervisory authority - the President of the Office for Personal Data Protection. 
12. Your data was obtained from information provided during existing contacts, as well as from public sources (CEIDG, KRS, private websites, social media, others: e.g. beneficiaries of EU funds). 
13. Providing additional personal data is voluntary, but may be necessary to establish and implement cooperation. 

1. Personal Data Controller
   The controller of personal data obtained as part of the surveillance of DHL (Package Machine) facilities is DHL eCommerce (Poland) Sp. z o.o., with its registered office in Warsaw (address: ul. Osmańska 2, 02-823 Warsaw), hereinafter referred to as “DHL”.
2. DHL Data Protection Officer
   DHL has been established by a data protection officer, hereinafter referred to as “IOD”. You may contact IOD for all processing related to your personal data and to exercise your rights by sending an email to dpo.parcel@dhl.com.
3. Purposes and legal basis for data processing, legitimate interest in processing
   DHL conducts monitoring of DHL sites and, as a result, processes your personal data to protect DHL property and ensure shipment security and to prevent violations of law and claim protection. In connection with the need for the following purposes, the legal basis for monitoring and processing of personal data is the legitimate interest of DHL (Article 6(1) of the GDPR.
4. Who and where can DHL provide your data? Who can be the recipient of your data outside of DHL? (information about recipients of data)
   You will have access to your audit-fixed data in addition to DHL employees, individuals and entities that ensure the operation, and maintenance of the monitoring system. The monitoring records may also be made available to DHL insurers, as well as those who provide DHL with legal support services.
5. Transfer of data outside the European Economic Area or to international organisations
   Your personal data held under monitoring will not be transferred outside the European Economic Area or international organization.
6. How long will DHL store your data? (data retention period)
   DHL will store the audit record for 3 to 5 months. After this period, only materials that have been extracted for the conduct of the law enforcement authorities, or for claims or protection against claims in connection with the monitoring event are stored. Such segregated materials are retained for the period of conduct that may provide evidence of the matter.
7. Information about your rights
   When appropriate submissions are met, you have the right to access, rectify, restrict processing and delete data. You have the right to object to processing for reasons related to your particular situation.  For these rights or additional information, please contact DHL via email: dpo.parcel@dhl.com.
   You also have the right to lodge a complaint with the President of the Privacy Office if you believe that the processing of your personal data violates the law (more information: uodo.gov.pl).
8. Information whether the provision of personal data is a statutory or contractual requirement or a condition for concluding a contract and the lack of obligation to provide data
   Your provision of personal information that you hold for monitoring is not a statutory or contractual requirement. Data is processed in connection with use of a package vending machine.
9. Information on the use of data for automated decision-making, including profiling
   Your personal data will not be used for automated decision-making, including profiling.