PRIVACY NOTICE

DHL Parcel Portugal, Unipessoal Lda. (hereinafter called DHL) is committed to protecting your personal information and this notice explains how we handle your data throughout the entire business process.

In the following, we explain what information DHL collects when you visit our website and how this information is processed and for what specific purposes.

DHL reserves the right to change its privacy notice at any time with or without prior notice. Please check back frequently to be informed of any changes. By using DHL's websites, you agree to this Privacy Notice.

Notice of Change

We wanted to let you know that DHL Parcel Portugal, Unipessoal Lda. is now part of CTT Expresso.

As part of this transaction, CTT Expresso and DHL Parcel Portugal, Unipessoal Lda. are bringing together our operations, systems and data protection practices as part of the CTT Holding.

During this transition period, both organizations will manage your personal data in accordance with their own privacy practices, while working together to harmonize privacy, security, and data management standards. This is to ensure that your personal information remains protected and is handled consistently as we move toward full alignment across both businesses.

Until this alignment is complete, your personal data may be processed by both CTT Expresso and DHL Parcel Portugal, Unipessoal Lda. under their respective privacy frameworks. The lawful bases we rely on include, in particular, our legitimate interests and any contractual relationship we have or may establish with you.

We are working closely to ensure that:

your personal data continues to only be used for the same purposes for which it was originally collected;
any updates to our processing activities are reflected in our privacy notices; and
your rights under the EU GDPR remain unaffected.

Once our privacy and operational practices are fully aligned, we will issue an updated privacy notice explaining how the two organizations manage your information. Significant changes will be by way of a Notice of Change banner, much like this one.

If you have any questions about how this transaction affects your personal data, please contact the relevant team:

DHL Parcel Portugal, Unipessoal Lda. – rgpd.parcelportugal@dhl.com
CTT Express – privacidade.cliente@ctt.pt

General information

Personal data is provided for information relating to an identified or identifiable natural person ("data holder"); an identifiable person who can be identified, directly or indirectly, is considered to be identified by reference to an identifier, such as a name, an identification number, location data, electronic identifiers or to one or more elements specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual. This includes information such as your real name, address, phone number and date of birth. Information that cannot be linked to your true identity, such as favorite websites or number of users of a website, are not considered personal data.
Who is responsible for data processing?

This Privacy Notice applies to the processing of personal data in connection with the use of this website and the services offered therein.

Overview of Responsibilities

Deutsche Post AG is responsible for the operation and technical maintenance of the website dhl.com, including related infrastructure and website functionality.
DHL Parcel Portugal, Unipessoal Lda., a company owned by CTT, is responsible for the processing of customer and business-related personal data in connection with services offered in Portugal.

Each entity acts as a data controller within its respective area of responsibility in accordance with the General Data Protection Regulation (GDPR).

Data Controller – Website Operation and Maintenance
Deutsche Post AG
Charles-de-Gaulle-Str. 20
53113 Bonn
Germany

Data Protection Officer
Deutsche Post AG
Global Data Protection
53250 Bonn
Germany

If you have queries regarding the processing of your personal data in connection with the operation of this website, please contact the Data Protection Officer of Deutsche Post AG. For further questions related to data protection in connection with our website, you may also contact DHL Data Protection.

Data Controller – Processing of customer and service related data
DHL Parcel Portugal, Unipessoal Lda.
Av. Álvaro Cunhal, no. 6
2660-341 Loures
Portugal

DHL Parcel Portugal, Unipessoal Lda. is responsible for the processing of personal data related to customers, contracts, and service delivery in Portugal, in accordance with the GDPR.

Contact for data protection issues
If you have any questions regarding the processing of your personal data, inquiries or complaints, please contact:

DHL Parcel Portugal, Unipessoal Lda.
Av. Álvaro Cunhal, no. 6
2660-341 Loures
Portugal

rgpd.parcelportugal@dhl.com
We process your data for the following purposes, among others:

execute the contract with you or a sender;
making visits to our websites/applications as pleasant as possible;
send you the newsletter if you subscribe;
send or present to you, where permitted, targeted advertising;
conduct a credit check where necessary;
treating your requests through our customer service department;
comply with obligations as part of legal requirements;
comply with our security requirements (e.g. for crime detection purposes);
compile statistics;
ensure quality, optimize processes and get planning security.

More information, including the type of data, the purpose of treatment and the legal basis below in the relevant products.
You have the following rights:

You can request information about what personal data is stored
You may ask us to rectify, erase or block your personal data as long as these actions are legally permitted and comply with existing contractual conditions.
You can ask to receive the personal data you have provided in a structured, commonly used and automatic read format.
You can lodge a complaint with the supervisory authority.

Right to obtain

You can obtain your information by contacting the data protection division.

Right to object

The right to object applies to all personal data processing based on art. 6(1)(f) GDPR.

Right to Withdraw Your Consent

You have the right to withdraw your consent with future effect at any time.

To exercise your right, simply contact us using the contact details mentioned in "Who is responsible?"
We retain your data for as long as necessary to fulfill our purposes, to perform our contracts and to comply with any legal obligation. The need is based on regulatory retention periods. Where there are no regulatory periods, the data will be stored for contract execution and billing purposes, and as evidence of the correct execution of the contract, until expiration of the liability periods, then deleted. The retention period may differ between countries based on applicable national laws.

We continuously seek to minimize the retention period of the data where the purpose, law or contracts allow us to do so. The data we collect based on your consent will be retained until you withdraw your consent.
DHL’s Data Protection Policy regulates the group’s data processing standards, with a special emphasis on so-called transfers to third countries, meaning transfers of personal data to countries outside the EU that do not have an adequate level of data protection. If you are interested in learning more about DHL’s Data Protection Policy, please use the following link:

DHL Group Data Protection Policy (Summary)

How We Use Your Data

DHL is committed to preserving the privacy of users of our websites. When you visit our web pages, the following data is collected: The IP address, host name of the computer you are accessing, website through which you have accessed this website, a list of websites you have visited within our general online presence, the date and duration of your visit, the notification regarding the success of the visit, the volume of data transferred, information about the browser type identification data and the operating system you use. Temporary storage of this data is necessary during your visit to the website in order to allow this website to be provided to you. We further maintain log files to ensure website functionality and the security of our IT systems. The legal basis for processing such categories of data is therefore Art. 6, no. 1, paragraph f) of the European General Data Protection Regulation (GDPR). Due to the said purposes, in particular to guarantee security and a smooth connection setup, we have a legitimate interest to process this data.

Additional personal information such as your name, address, telephone number or email address is not collected unless you voluntarily provide this data, e.g. by completing an online contact form as part of a registration, survey, contest or inquiry.

Data is deleted as soon as it is no longer needed for the purpose for which it was collected. To make the website available, this occurs when the session ends. Log files (access logs) are saved by administrators for direct and exclusive access for a period of 24 hours. After that time, they are available only indirectly through a backup tape restore and are permanently erased after 30 days.

As far as you have enabled geo localization functions in your browser, respectively in your operating system we will use this data to offer you location-based services (e.g. location of the nearest branch, packing station etc.). The legal basis for geolocation is your consent in accordance with Art. 6, No. 1, subparagraph a) of the GDPR, through the activation of the corresponding function. We will not use this data for any other purpose. If you disable this function your data will be deleted in due time.
For contractual reasons, we also need personal data to offer our services and fulfil obligations arising from contractual agreements with you. This data is used e.g. for the performance of a (shipping) contract, managing customer data, processing payments and, if so, the solvency assessment. Some shipping data will also be provided to the country of transit or destination authorities for customs clearance and settlement, or for security control, as required by the laws of that country. The information provided typically includes: sender name and address, ship to name and address, description of products, number of units, weight and value of the shipment.

The legal basis is normally Art. 6, no. 1, b) of the GDPR, as the processing is intended to perform a contract of which it is a party.

More information on data protection on specific services and products is available in the section Products & Services.
If you are a customer of DHL already, your postal details (e.g. name, address) will be handled to contact you and provide you with the latest information about our offers, news, products and services. In addition to an existing consent, we will process your email address solely to provide you with information regarding DHL products and other similar products.

The legal basis for the processing above is Art. 6(1)(1) GDPR. The processing of customer data for direct marketing purposes is considered to be made for a legitimate interest.

You have the right to object at any time to such treatment. To exercise your right, please contact us at the contact details listed at "Who is responsible?"

If you have registered to receive one of our newsletters, we will have the right to use your email address for this purpose. You can unsubscribe from the newsletter at any time by clicking on the relevant link at the bottom of the newsletter.

If you file an objection or unsubscribe from our newsletter services, your data will be blocked or deleted, no longer processed for these purposes.
DHL does not share, sell, transfer or otherwise distribute your personal data to third parties, and will not do so in the future, unless required by law, for contractual purposes or if you have given your explicit consent to do so. For example, it may be necessary to transmit your address and order data to our suppliers when ordering products. More information on data protection on specific services and products is available below in the section Products & Services.

Third party service providers that process data on our account (processors) are contractually obligated to ensure strict confidentiality as required by Art. 28 of the GDPR. DHL retains responsibility for safeguarding your information in these circumstances. Subcontractors comply with DHL’s instructions and this is warranted by technical and organizational measures, as well as through checks and controls.

This website uses cookies and similar technologies, (hereinafter referred to as “technologies”), which allow us, for example, to determine how often our websites are visited or the number of visitors, to set up our offers in order to achieve maximum convenience and efficiency, and to support our marketing activities.

When you access our website, the Privacy Preference Center reports that technically necessary cookies are set and, additionally, that your consent is required in relation to the use of certain technologies, such as statistical analysis cookies or similar technologies.

The processing of the data through technically necessary cookies is based on our legitimate interest in accordance with Art. 6, No. 1, paragraph f) of the GDPR to ensure that you can use the website in the best possible way, to ensure that our website operates correctly and to ensure a convenient and uninterrupted usage experience. These types of cookies are stored exclusively during your visit to our website. They are automatically deleted when you close your browser.

Additionally, the Privacy Preference Center informs us that we use other technologies (performance, analytics or functional technologies) to keep information about visitors who repeatedly access one of our websites. The use of such technologies allows you to provide optimal user guidance as well as "recognize" the user, thereby enabling the display of diverse web pages (as much as possible) and new content during a recurring use. These technologies will only be used based on your prior consent in accordance with Art. 6, no. 1, subparagraph a) of the GDPR.

You can find more information on the Privacy Preference Center , including the option to withdraw consent granted.

Overall, we do not create an individual profile of your online activities. The content of a persistent cookie is limited to an identification number. The name, email address, IP address, etc., is not stored on most of our sites. However, there are some exceptions that you can find in our cookie table below.

There are two exceptions:

1) MediaMind Screening Cookies. These persistent tracking cookies collect your IP address and use it to provide geographic location data to help DHL control and manage advertising campaigns. Cookies are fully encrypted and do not collect other personal data that identifies the user, so the IP address cannot be linked to personal data and is not shared with third parties. The IP address is securely stored and is only used confidentially by DHL internally to provide aggregate reports. The cookies expire after 30 days.

You can learn more about MediaMind Screening Cookies in the DHL Cookie Table below.

Alternatively, if you do not agree with MediaMind screening on all websites, you can click on the following MediaMind opt-out link:
MediaMind Opt-Out

If you have already clicked the opt-out link and want to reverse this setting, click the following MediaMind opt-in link: MediaMind Opt-In

2) Google Analytics cookies. A small number of countries may use Google Analytics’ small-scale cookies for site-specific purposes. These cookies use your IP address as recognition, but do not identify you as a person. That is, information is collected anonymously. Cookies collect information about how visitors use our local sites and use the information to compile reports and help us to better serve local sites.

You can learn more about Google Analytics in the DHL Cookie Table below.

Alternatively, to stop being tracked by Google Analytics on all websites, visit:
Google Analytics Opt-out Browser Add-on

DHL and Categories Cookie Table

We provide detailed data from all cookies used on these websites in the table below.

All cookies in this table were categorized according to 4 numbered groups – the numbers relevant for each category are listed in column 1. Please note that cookies may belong to more than one category.

The categories are as follows:

Strictly Necessary Cookies: These cookies are essential to enable you to scroll through the website and use your features. Without these cookies, the services you have requested cannot be provided. As stated above, this is based on Art. 6(1)(1) GDPR.
Performance Cookies: These cookies collect information about how visitors use a website, for example, which pages visitors access most often. These cookies do not collect information that identifies who visits the page. All information collected by these cookies is aggregated and therefore anonymous. They are used only to improve how a website works.
Functionality cookies: These cookies allow the website to remember the choices you make, and offer enhanced and more personal features. For example, these cookies may be used to remember and store the last screening number you entered when using a tracking application. The information these cookies collect can be anonymised, and they do not track your browsing activity on other websites.
Targeting or Advertising Cookies: These cookies are used to display advertisements that are most relevant to you and your interests. They are also used to limit the number of times you see an advertisement and to help evaluate the effectiveness of an advertising campaign. They are usually placed by advertising networks, with the permission of the website operator.

Cookie	Name	Purpose	More information
Allow cookies to site	dhlpcp	If set to 1, the user has allowed the site to register cookies. If this cookie does not exist, cookies are not permitted.
	Dhlah	Closed item (has been viewed). Expires after 365 days.
	Wollolc	Closed overlay (has been viewed). Expires after 30 days.
Recaptcha Cookie	nocap
Campaign name cookie[2]	Campaign Name	This cookie was created when you opened DHL’s web page from a DHL banner or from an existing link in a promotional or campaign email. The cookie stores a campaign ID that uniquely identifies the source of the campaign. If you contact DHL through one of our online or registration forms within 24 hours of arrival on one of our websites, the campaign ID is attached to the email sent to Sales or Customer Service DHL. This information is only used to evaluate the success of our campaigns and to verify that customers have contacted us as a result of a campaign. The cookie does not store any personal client data, only the campaign ID. Cookie expires after just 24 hours.
Google Analytics [2]	_utma _mb _utmz	Some countries also use Google Analytics for specific local purposes. These cookies are used to collect information about how visitors use our local sites. We use the information to compile reports and improve local sites. Cookies collect information in an anonymous form, namely the number of visitors to the local site from where visitors arrived at the local site and the pages they visited	More information on the topic of privacy in Google
Google Analytics [2]	_ga	This cookie is used to distinguish between users. Cookie expires after 2 years.	More information about this cookie in Google
Google Analytics [2]	_gid	This cookie is used to distinguish between users. Cookie expires after just 24 hours.	More information about this cookie in Google
Google Analytics [2]	_gat	This cookie is used to speed up the speed of orders. Cookie expires after only 1 minute.	More information about this cookie in Google
MediaMind Cookies [2]	U2, ActivityInfo, TargetingInfo, Eyeblaster, A3, B4, and C4.	MediaMind cookies are created when you enter DHL-specific campaign websites from a DHL promotional banner from an existing link in a campaign/promotional email or if you have used a campaign link in an offline media advertising. MediaMind cookies track the moment and place where you were exposed to DHL ads online, how you interact with these ads, and at which point you have visited the DHL site after you are exposed to these ads. Information is used to help DHL measure advertising campaign performance. Information is provided in the form of aggregate reports, so individual user information will not be displayed. It does not monitor any other navigation behaviour and is used confidentially only by DHL.	More information on the topic of privacy in MediaMind
Youtube Cookies [2]	use_hitbox CLUB_INFO1_LIVE	We embed videos using Youtube’s privacy increase mode. Some of these videos come from our official Youtube channel This mode puts cookies on your computer after clicking on the Youtube video reader, but Youtube will not save cookie information that identifies people for video reproductions embedded through the mode of increased privacy.	To learn more, visit the page with information regarding embedding videos from Youtube.
Adobe Analytics [2]	s_cc	This cookie was placed by the Javascript code and read to determine whether cookies have been activated. This cookie is a session cookie and will expire when the browser is closed.	More information on the topic of privacy in Adobe
Adobe Analytics [2]	s_sq	This cookie collects information anonymously about the connection the user clicked. It is intended to discover which links are used and what links are not used in order to improve web offers. This cookie is a session cookie and will expire when the browser is closed.	More information on the topic of privacy in Adobe
Adobe Analytics [2]	s_vi	This cookie is used to detect a visitor returning as a single and same user, and to collect information about how our website is used. We use this information to continue to develop the website and to provide users with content that is most appropriate for them. Cookies collect previous information anonymously (individual visitor ID, time stamp/date). This is a permanent cookie which expires after 5 years.	More information on the topic of privacy in Adobe
Adobe Analytics [2]	s_fid	This cookie is used to identify a unique visitor if the standard cookie s_vi is not available due to third party cookie restrictions. Not used for implementations that use original cookies. This is a permanent cookie which expires after 5 years.	More information on the topic of privacy in Adobe
	__cfduid	Cloudflare persistent cookie.	More information on Cloudflare
	X-AUTH-TOKEN	Authentication and login with cookie. Contains information about the user; (user_id, functions, and email), this is a session cookie, so the information is deleted after you close a session.
	XSRF-TOKEN	Session cookie. For secure communication between browser and server.

If you use the DHL Finder, we also place the following cookies:

Cookie	Name	Purpose	Get more information
i18next		This cookie is used to recognize the visitor’s language setting to make the website experience more enjoyable. This information is used to determine the appropriate language for the visitor, the language is defined accordingly. The cookie collects the previous information anonymously. It will only be used confidentially within DHL to improve the websites and user experience. This cookie is a session cookie that expires when the browser is closed.
br_<primaryKey>		This cookie is used to identify a visitor returning as a single and same user. This information is used to determine if the visitor has already given an assessment to a site. The cookie collects the previous information anonymously (individual visitor ID, time stamp/date). Cookie expires after just 24 hours.

Third party cookies in embedded content

Some pages of our websites may have noticed non-DHL cookies. When you enter a page with embedded content, for example by Youtube or Vimeo, these service providers may place their own cookies in your web browser. DHL does not control the use of these cookies and you cannot access them because of the way cookies work, as only the party that originally places them may access them. You will need to check third party websites for more information about these cookies.

Web beacons

In order to keep the relevant DHL online content, easy to use and up to date, we use web analytics services such as Webtrends (see Webtrends in the DHL Cookie Table above for more information) to help us understand how people use our websites. These services use data collection technologies such as web beacons. Web beacons are small electronic images that provide cookies, account for visits, and understand the use and effectiveness of the website. This allows us to know which content is interesting for those who visit and help us provide personalized information on our websites. These web beacons are anonymous and do not contain or collect information that identifies you. Information is anonymous only for statistical purposes. These web analytics and cookies cannot be used to identify you as a natural person as they never include personal information such as your name or email address.

How to manage cookies

Using our products and services without cookies is also possible. In your browser, you can disable the storage of cookies, limit them to certain websites, or set up your browser so that it notifies you when a cookie is sent. You can also delete cookies from your PC hard drive at any time (file: "cookies"). Please note that in this case you will have to rely on a limited page presentation and limited user driving by the page.

Most web browsers allow you to have some control over most cookies through browser settings.

To learn more about cookies, namely how to see cookies that have been placed and how to manage and delete them, see:
All About Cookies

For more EU specific advice on cookies and the various opt-out options available to you, you can also visit the following website:
My Online Choices

To stop being traced by LiveBall, you will need to manage and delete cookies via your browser settings.
To learn more, see:
All About Cookies

You may also choose to stop having some or all of the advertising cookies placed on your PC through the Website Advertising Initiative (NAI) website

Not everyone who visits our site will do this through a web browser. For example, some users will have access to DHL websites or applications via a mobile device. In this case, you may not be able to disable cookies or adapt the web browser settings.

To stop being tracked by Google Analytics on all websites, see:
Google Analytics Opt-out Browser Add-on

To stop being screened by MediaMind on all websites, click on the following opt-out link MediaMind:
MediaMind Opt-Out

If you have already clicked the opt-out link and want to reverse this setting, click the following MediaMind opt-in link:
MediaMind Opt-In

To stop being tracked by Adobe Analytics on all websites, you can click on the following Adobe Analytics opt-out link:
Analytics Opt-Out

If you have already clicked the opt-out link and want to reverse this setting, click the following Adobe Analytics opt-in link:
Adobe Analytics Opt-In

Remember, if you delete your cookies, or if you use a different browser or computer, you will need to reset your opt-out status.

Our website includes contact forms that can be used by anyone who wants to contact us electronically. If you use this option, the data entered on the form will be transmitted to us and stored.

We use the personal data that you provide solely for the technical administration of the websites and to fulfill your wishes and demands – that is, primarily to execute contracts with you or your requests.

Here, you will find examples of the type of data processed within the contact forms.

Processing of personal data from the form allows us to process the contact. In addition, data can be processed during the handling of a customer request.

The data shall be processed primarily for the performance of the contract pursuant to Art. 6(1)(b) of the GDPR and to safeguard the legitimate interests in accordance with Art. 6(1)(f) of the GDPR.
DHL places great importance on the security of your data. We have implemented various strategies, controls, policies and measures to maintain the security of your data. We rigorously and continuously evaluate our security measures. We use safeguards such as firewalls, network intrusion systems, and application monitoring. Where appropriate, we protect your data through encryption and pseudonymisation techniques when storing and transferring your data. For example, your data is stored in a secure environment that is not accessible to the public. In some cases, your personal data is encrypted by Secure Socket Layer (SSL) technology for transmission. This means that an approved encryption procedure is used for communication between your computer and DHL servers if your browser supports SSL technology. We ensure strict physical access controls are in place for our buildings and certified data centers.

If you would like to contact DHL via email or contact forms, we would like to point out that the confidentiality of the information submitted cannot be guaranteed. The contents of (email) messages can be read by third parties. Therefore, we recommend that you send us confidential information only by mail.

Products and Services

Additional information regarding data protection in case of shipment tracking:

Data Type	Example	External Data Access
Article Number		Sender and receiver
Sender Name		Sender and receiver
Sender Address		Sender and receiver (after entering zip code)
Recipient Name		Sender and receiver (after entering the postal code as a recipient who is logged in and identified)
Recipient's address		Sender
Alternate Recipient Name, if applicable	Neighbor	Sender and receiver (after entering the postal code or as a recipient who is logged in and identified)
Alternate recipient address if applicable	Neighbor	Sender
Sender Customer Data (EKP Number, Billing Number)		Sender
Product/Service Name (currently only on shipment tracking for NOLB business customers)	DHL Order, DHL International Order, COD, Voluminous Goods	Sender and receiver (only for services relevant to the recipient such as Voluminous Goods and COD)
Shipment Progress		Sender and receiver
Recipient’s Signature (POD)		Sender
Minimum Age Check Confirmation +16/+18	Visual check	Sender

1. Data Processing Purposes - Essential Information

We process your data for the following purposes, among others:

execute the shipping agreement of the parcel with you or a sender;
display the status of a shipment or provide information through our customer service department;
comply with obligations as part of legal requirements;
comply with our security requirements (e.g. for crime detection purposes);
compile statistics about the availability of our services;
and ensure quality, optimize processes and get planning security.

2. Retention period

Data will be stored as needed. The need is based on regulatory retention periods.

Changes to the Privacy Notice

DHL reserves the right to change its Privacy Notice at any time with or without prior notice. Please check back frequently to be informed of any changes. By using DHL websites, you agree to this Privacy Notice.

This statement was last updated on: 13.05.2026