PRIVACY NOTICE

Personal data means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes information such as your real name, address, telephone number and date of birth. Information that cannot be linked to your actual identity, such as favourite websites or the number of users of a website, is not considered personal data.

Who is responsible for data processing?

This Privacy Notice applies to the processing of personal data relating to the use of this website and the services offered on it.

Overview of responsibilities

CTT Expresso, the CTT Group company that markets Products and/or provides Services and that provides access to the Platforms, is the data controller within the meaning of the GDPR.

DHL AG is responsible for the operation and technical maintenance of the dhl.com website, including the associated infrastructure and its functionalities.

Each entity acts as a data controller within its respective area of responsibility, in accordance with the General Data Protection Regulation (GDPR).

Data controller – Website operation and maintenance
DHL AG
Charles-de-Gaulle-Str. 20
53113 Bonn
Germany

Data Protection Officer
DHL AG
Global Data Protection
53250 Bonn
Germany

If you have any questions regarding the processing of your personal data in connection with the operation of this website, please contact the DHL AG Data Protection Officer. For other questions relating to data protection in connection with our website, you may also contact the DHL Data Protection team.

Data controller – Processing of customer- and service-related data

CTT Expresso - Serviços Postais e Logística, S.A.

Avenida dos Combatentes, n.º 43, 14th Floor, 1643-001 Lisboa

CTT Expresso is responsible for the processing of personal data relating to customers, contracts and the provision of services in Portugal, in accordance with the GDPR.

Contact for data protection matters
If you have any questions regarding the processing of your personal data, requests for information or complaints, please contact:

CTT Expresso - Serviços Postais e Logística, S.A.

Avenida dos Combatentes, n.º 43, 14th Floor, 1643-001 Lisboa

privacidade.cliente@ctt.pt

We process your data for the following purposes, among others:

• to perform the contract concluded with you or with a sender;
• to make your visits to our websites/apps as pleasant as possible;
• to send you our newsletter if you subscribe to it;
• to send or show you targeted advertising, where permitted;
• to carry out a credit check, where necessary;
• to handle your requests through our customer service department;
• to comply with obligations arising from legal requirements;
• to meet our security requirements (e.g. for the purpose of detecting crime);
• to compile statistics;
• to ensure quality, optimise processes and achieve planning certainty.

Further information, including the type of data, the purpose of processing and the legal basis, can be found below, under the relevant products.

You have the following rights:

• You may request information about which of your personal data is stored.
• You may ask us to rectify, erase or block your personal data, provided that this is legally permitted and in accordance with the existing contractual terms.
• You may request to receive the personal data you have provided in a structured, commonly used and machine-readable format.
• You may lodge a complaint with the supervisory authority.

Right to obtain information

You can obtain your information by contacting the data protection department.

Right to object

The right to object applies to all processing of personal data based on Art. 6(1)(f) GDPR.

Right to Withdraw your Consent

You have the right to withdraw your consent at any time, with effect for the future.

To exercise your right, simply contact us using the contact details given under "Who is responsible?"

We retain your data for as long as necessary to fulfil our purposes, perform our contracts and comply with any legal obligation. This necessity is based on statutory retention periods. Where no statutory periods apply, the data will be stored for the purposes of contract performance and invoicing, and as proof of the proper performance of the contract, until the relevant liability periods have expired, after which it will be erased. The retention period may differ between countries depending on the applicable national laws.

We continuously seek to minimise the data retention period wherever the purpose, the law or contracts allow us to do so. Data we collect on the basis of your consent will be retained until you withdraw your consent.

The CTT Group Data Protection Policy sets out the group’s standards for the processing of personal data. If you would like to find out more about the CTT Group Privacy Policy, please see the following link:

CTT Group | Privacy Policy

When you visit this website, the following data is collected: the IP address, the host name of the accessing computer, the website from which you accessed this website, a list of the pages you visited within our overall online presence, the date and duration of your visit, notification of whether the visit was successful, the volume of data transferred, and information on the identification data of the browser type and operating system you use. Temporary storage of this data is necessary during your visit to the website in order to deliver this website to you. We additionally retain log files to ensure the functionality of the website and the security of our IT systems. The legal basis for processing these categories of data is therefore Art. 6(1)(f) of the European General Data Protection Regulation (GDPR). Given the purposes mentioned, namely ensuring security and establishing a smooth connection, we have a legitimate interest in processing this data.

Additional personal information, such as your name, address, telephone number or email address, is not collected unless you provide this data voluntarily, e.g. by completing an online contact form as part of a registration, survey, competition or request for information.

Data is erased as soon as it is no longer needed for the purpose for which it was collected. For the provision of the website, this is the case when the session ends. Log files (access logs) are kept by administrators for direct and exclusive access for a period of 24 hours. After that period, they are available only indirectly by restoring backup tapes and are permanently erased after 30 days.

Insofar as you have enabled geolocation functions in your web browser or operating system, we will use this data to offer you location-based services (for example, finding the nearest branch, parcel locker, etc.). The legal basis for geolocation is your consent under Art. 6(1)(a) GDPR, given by activating the corresponding function. We will not use this data for any other purpose. If you deactivate this function, your data will be deleted in due course.

CTT Expresso processes personal data in order to provide its services and to ensure compliance with the obligations arising from contractual agreements concluded with you. This data is used, for example, to perform a (shipping) contract, manage customer data, process payments and, where applicable, assess creditworthiness. Certain shipment data will also be provided to the authorities of the country of transit or destination for customs clearance and tax assessment purposes, or for security screening, as required by the laws of that country. The information provided usually includes: the sender’s name and address, the recipient’s name and address, a description of the goods, the number of items, and the weight and value of the shipment.

The legal basis is usually Art. 6(1)(b) GDPR, as the processing is necessary for the performance of a contract to which you are a party.

Further information on data protection for specific services and products is available under Products and Services

If you are already a CTT Expresso customer, your postal data (e.g. name, address) will be processed in order to contact you and provide you with the latest information about our offers, news, products and services. Beyond any existing consent, we will process your email address solely to provide you with information about the products you have contracted and other similar products.

The legal basis for the processing described above is Art. 6(1)(f) GDPR. The processing of customer data for our own direct marketing purposes is regarded as being carried out in pursuit of a legitimate interest.

You have the right to object to such processing at any time. To exercise your right, please contact us using the contact details given under "Who is responsible?"

If you have registered to receive one of our newsletters, we are entitled to use your email address for this purpose. You can unsubscribe from the newsletter at any time by clicking the relevant link at the bottom of the newsletter.

If you object or unsubscribe from our newsletter services, the relevant data will be blocked or erased and will no longer be processed for these purposes.

Your data is not shared, sold, transferred or otherwise distributed to third parties, unless this is required by law, is necessary for contractual purposes, or you have given your explicit consent. For example, it may be necessary to pass your address and order data on to our suppliers when you order products. Further information on data protection for specific services and products is available below, under Products and Services.

External service providers that process data on our behalf (processors) are contractually bound to maintain strict confidentiality, as required by Art. 28 GDPR.

CTT Expresso remains responsible for safeguarding your information in these circumstances. Processors follow CTT Expresso’s instructions, which is ensured through technical and organisational measures as well as through checks and controls.

We use tracking software to determine how many users visit our website and how often. We do not use this software to collect individual personal data or individual IP addresses. The data is used only in anonymised and aggregated form, for statistical purposes and for the development of the website.

This website uses cookies and similar technologies (hereinafter “technologies”) which enable us, for example, to determine how often our web pages are visited or the number of visitors, to configure our offers so as to achieve maximum convenience and efficiency, and to support our marketing activities.

When you access our website, the Privacy Preference Center informs you that technically necessary cookies are set and, in addition, that your consent is required for the use of certain technologies, such as statistical analysis cookies or similar technologies.

The processing of data by means of technically necessary cookies is based on our legitimate interest under Art. 6(1)(f) GDPR in ensuring that you can use the website in the best possible way, that our website functions correctly and that you have a convenient and uninterrupted user experience. These types of cookies are stored exclusively for the duration of your visit to our website. They are automatically deleted when you close your browser.

In addition, the Privacy Preference Center informs you that we use other technologies (performance, analytics or functional technologies) to store information about visitors who repeatedly access one of our web pages. The use of such technologies allows us to provide you with optimal user guidance and to "recognise" you, making it possible to present varied web pages (as far as possible) and new content on repeat visits. These technologies will only be used on the basis of your prior consent under Art. 6(1)(a) GDPR.

Further information, including the option to withdraw the consent you have given, can be found in the Privacy Preference Center.

In general, we do not create an individual profile of your online activities. The content of a persistent cookie is limited to an identification number. Names, email addresses, IP addresses, etc. are not stored on most of our sites. However, there are some exceptions, which you can find in our cookie table below.

There are two exceptions:

1) MediaMind Tracking Cookies. These persistent tracking cookies collect your IP address and use it to provide geographic location data to help monitor and manage advertising campaigns. The cookies are fully encrypted and do not collect any other personal data that identifies you, so the IP address cannot be linked to personal data and is not shared with third parties. The IP address is stored securely and is used only confidentially and internally to provide aggregated reports. The cookies expire after 30 days.

You can find out more about MediaMind Tracking Cookies in the Cookie Table below.

Alternatively, if you do not agree to MediaMind tracking across all websites, you can click the following MediaMind opt-out link: 
MediaMind Opt-Out

If you have already clicked the opt-out link and wish to reverse this setting, click the following MediaMind opt-in link: MediaMind Opt-In

2) Google Analytics Cookies. A small number of countries may use Google Analytics cookies on a small scale for location-specific purposes. These cookies use your IP address for recognition but do not identify you as an individual; in other words, the information is collected anonymously. The cookies collect information about how visitors use our local sites, and this information is used to compile reports and help us improve the local sites.

You can find out more about Google Analytics in the Cookie Table below.

Alternatively, to opt out of being tracked by Google Analytics across all websites, visit:
Google Analytics Opt-out Browser Add-on

DHL Cookie Table and Categories

The table below provides detailed information on all cookies used on these websites.

All cookies in this table have been categorised into 4 numbered groups – the relevant numbers for each category are listed in column 1. Please note that cookies may belong to more than one category.

The categories are as follows:

1. Strictly necessary cookies: These cookies are essential to enable you to move around the website and use its features. Without these cookies, the services you have requested cannot be provided. As stated above, this is based on Art. 6(1)(f) GDPR.
2. Performance cookies: These cookies collect information about how visitors use a website, for example which pages visitors go to most often. These cookies do not collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is used only to improve how a website works.
3. Functionality cookies: These cookies allow the website to remember the choices you make and provide enhanced, more personal features. For example, these cookies can be used to remember and store the last tracking number you entered when using a tracking application. The information these cookies collect may be anonymised, and they do not track your browsing activity on other websites.
4. Targeting or advertising cookies: These cookies are used to deliver adverts that are more relevant to you and your interests. They are also used to limit the number of times you see an advert and to help measure the effectiveness of an advertising campaign. They are usually placed by advertising networks with the website operator’s permission.

If you use the DHL Finder (location search), we also set the following cookies:

Third-party cookies in embedded content

On some sections of our website, you may have noticed third-party cookies. When you visit a page with embedded content, for example from YouTube or Vimeo, these service providers may place their own cookies in your web browser. CTT Expresso does not control the use of these cookies and cannot access them due to the way cookies work, as only the party that originally placed them can access them. Please check the third-party websites for more information about these cookies.

Web beacons

To keep our online content relevant, easy to use and up to date, we use web analytics services such as Webtrends (see Webtrends in the Cookie Table above for more information) to help us understand how people use our websites. These services use data collection technologies such as web beacons. Web beacons are small electronic images that deliver cookies, count visits and help us understand website usage and effectiveness. This allows us to know which content is of interest to our visitors and helps us offer personalised information on our websites. These web beacons are anonymous and do not contain or collect information that identifies you. The information is anonymous and is used only for statistical purposes. This web analytics data and these cookies cannot be used to identify you as an individual, as they never include personal information such as your name or email address.

How to manage cookies

It is also possible to use our products and services without cookies. In your browser, you can disable the storage of cookies, restrict them to certain websites, or set your browser to notify you when a cookie is sent. You can also delete cookies from your PC’s hard drive at any time (file: "cookies"). Please note that in this case you should expect a limited page display and limited user guidance on the page.

Most web browsers allow you some control over most cookies through the browser settings.

To find out more about cookies, including how to see which cookies have been set and how to manage and delete them, visit:
All About Cookies

For EU-specific advice on cookies and the various opt-out options available to you, you can also visit the following website:
Your Online Choices

To opt out of being tracked by LiveBall, you will need to manage and delete cookies through your browser settings.
To find out more, visit:
All About Cookies

You can also opt out of having some or all advertising cookies placed on your PC by visiting the Network Advertising Initiative (NAI) website

Not everyone who visits our site will do so using a web browser. For example, some users will access DHL websites or applications from a mobile device. In this case, it may not be possible to disable cookies or adjust web browser settings.

To opt out of being tracked by Google Analytics across all websites, visit:
Google Analytics Opt-out Browser Add-on

To opt out of being tracked by MediaMind across all websites, click the following MediaMind opt-out link:
MediaMind Opt-Out

If you have already clicked the opt-out link and wish to reverse this setting, click the following MediaMind opt-in link:
MediaMind Opt-In

To opt out of being tracked by Adobe Analytics across all websites, you can click the following Adobe Analytics opt-out link:
Adobe Analytics Opt-Out

If you have already clicked the opt-out link and wish to reverse this setting, click the following Adobe Analytics opt-in link:
Adobe Analytics Opt-In

Please remember that if you delete your cookies, or use a different browser or computer, you will need to reset your opt-out status.

Our website includes contact forms that can be used by anyone wishing to contact us electronically. If you use this option, the data entered in the form will be transmitted to us and stored.

We use the personal data you provide only for the technical administration of the websites and to fulfil your wishes and requirements – that is, primarily to perform contracts concluded with you or to respond to your requests.

Here you will find examples of the type of data processed in connection with the contact forms.

Processing the personal data from the form enables us to handle your enquiry. In addition, the data may be processed while handling a customer request.

The data will be processed primarily for the performance of the contract under Art. 6(1)(b) GDPR and to safeguard legitimate interests under Art. 6(1)(f) GDPR.

We attach great importance to the security of your data. We implement a range of strategies, controls, policies and measures to keep your data secure. We rigorously and continuously assess our security measures. We use safeguards such as firewalls, network intrusion systems and application monitoring. Where appropriate, we protect your data using encryption and pseudonymisation techniques when storing and transferring it. For example, your data is stored in a secure environment that is not publicly accessible. In some cases, your personal data is encrypted using Secure Socket Layer (SSL) technology for transmission. This means that an approved encryption procedure is used for communication between your computer and our servers, provided your browser supports SSL. We ensure that strict physical access controls are in place at our buildings and certified data centres.

If you wish to contact us by email or through contact forms, please note that the confidentiality of the information sent cannot be guaranteed. The content of (email) messages may be read by third parties. We therefore recommend that you send us confidential information by post only.

Additional information regarding data protection in case of shipment tracking:

1. Purposes of data processing - key information

We process your data for the following purposes, among others:

• to perform the parcel shipping contract concluded with you or with a sender;
• to display the status of a shipment or provide information through our customer service department;
• to comply with obligations arising from legal requirements;
• to meet our security requirements (e.g. for the purpose of detecting crime);
• to compile statistics on the availability of our services;
• and to ensure quality, optimise processes and achieve planning certainty.

2. Retention period

The personal data collected is processed in strict compliance with the applicable legislation and is stored in databases specifically designed for this purpose.

Personal data is processed and retained in accordance with the respective purposes and in compliance with the applicable statutory time limits.