Privacy Notice

Deutsche Post AG (hereinafter called 'DHL') is pleased that you have visited our social media presences and are interested in our company and our products and services. In the following, we would like to inform you about certain issues related to data protection that apply when you visit our social media presences.

• Our social media presences are made available by the respective operators of the social media platform pursuant to the applicable terms and conditions of use. The respective platform operator is solely responsible for the technical operation of this profile.
• DHL is solely responsible for the content that DHL posts on this page (such as information about our company, products, services, sweepstakes, campaigns) and for our interaction with visitors to our profile.
• The operators of the social media platform operate the entire IT infrastructure of the platforms. It makes its privacy policy available to users and has its own separate relationship with registered users of the platform. The operators of the social media platforms are solely responsible for all data protection topics involving your user profile, to which we have no access.
• We have no influence over the data processing by the operators of social media platforms who collect them. Furthermore, we have no information regarding the extent to which, the purposes for which or the length of time that the operators of the social media platforms store personal data and possibly analyze, link or transfer them to third parties.
• Please note that your personal data can, under certain circumstances, also be processed outside of the European Union/European Economic Area. This could result in data protection risks for users because an adequate level of data protection cannot be guaranteed in such cases and the ability to assert data subject rights is limited.
• Please see the respective privacy policies and cookie policies for the social media platforms to learn more about their data processing activities and how you can exercise your rights vis-á-vis the operators of the social media platforms.
  
  Facebook
  Instagram
  X
  LinkedIn
  YouTube
  TikTok
• If you would like to contact DHL directly – in other words, without the involvement of the social media platforms – please contact customer service

DHL is the data controller for the information it posts and also for the data processing that falls in its area of responsibility for the following social media presences:

• Facebook
• Instagram
• X
• LinkedIn
• YouTube
• TikTok

To the extent that it concerns the processing of personal data as part of page insights, the following platform operators are jointly responsible, along with us, for data processing. Joint data processing is based on an agreement between the joint controllers pursuant to Article 26 of the General Data Protection Regulation (GDPR).

• Facebook/Instagram: Facebook
• LinkedIn: LinkedIn Pages Joint Controller Addendum

3.1. Data processing in connection with our social media presences

We make use of our social media presences to inform you about, for example, our company, products, services, campaigns and sweepstakes and to interact with you regarding various topics and respond to your inquiries. The data processing performed in this connection is undertaken to safeguard our legitimate interests in accordance with Article 6(1)(f) of the GDPR. Our legitimate interest lies in public relations work and communication.

The social media platform operator publishes the information you provide on our profile, such as comments, likes, images and videos, and we process this information solely for the abovementioned purposes. We reserve only the right to erase illegal content should this be necessary. This applies, for example, to posts that constitute infringements of the law or are unlawful, hate comments, suggestive comments (explicitly sexual content) or attachments (such as images or videos), which under circumstances violate copyrights, privacy rights, criminal law or Deutsche Post AG’s ethics rules.

Data are also collected for the purpose of holding and processing sweepstakes. The details, such as which data are processed and the purpose of the processing, can be found in the privacy notices and terms and conditions of the respective contest.

If you would like to exchange personal data with us, we recommend that you contact our customer service. 

3.2. Data processing of page insights for statistical purposes

The social media platform operators from Facebook, Instagram and LinkedIn provide us with page insights, for which we are jointly responsible together with the platform operators. Page insights are anonymous statistics that are generated as a result of certain events and are tracked by social media platforms via cookies and similar technologies when a user such as you interacts with our social media profile. We can use the page insights, which contain no personal data, to see which content is particularly accessed by which group of individuals. This allows us to optimize our social media presence. This represents a legitimate interest on our part for the processing that takes place. The legal basis for data processing related to page insights is Article 6(1)(f) of the GDPR. We would like to point out that data processing can also take place independent of whether you are logged in or registered on the social media platform. We are unable to influence the use of cookies and similar technologies on the social media platform and, in this respect, refer you to your ability as a user to change your settings regarding the related data processing via the respective cookie banner on the social media platform (granting or not granting your consent). 

3.3. Social media monitoring

We use social media monitoring in order to obtain a picture of how our business, our products and our services are viewed and, based on this, identify potential for improvement. This entails analyzing posts on the social media platform based on the channel links used and relevant hashtag links. Only those posts to which you allow full public access will be used for this. The legal basis for processing personal data as part of social media monitoring is Article 6(1)(f) of the GDPR because we have a legitimate interest in identifying in freely accessible statements possible deficits in our products or services and responding appropriately. 

You may exercise your rights as set forth in this Privacy Notice by contacting data protection.

If you would like to exercise your rights as a data subject vis-à-vis the social media platform operators, please use the contact options provided by the platform operators on the social media platforms. Should we receive an inquiry that falls within the area of responsibility of the social media platforms, we will forward it to them for further processing.

The length of time during which your data are stored will depend on the particular context of the processing and will be based on the parameters imposed by data protection law. All public posts you make on our profiles will remain on our profiles for an unlimited time, unless we erase them on the basis of an update of the original post, a breach of law or an infringement of our guidelines. You may of course erase your posts, comments and the like at any time yourself or exercise your right to have us erase them.

In the case of the social media platform operators’ erasure of your data, we have no influence over this and therefore refer you to the privacy policy of the respective platform operator.

In order to get back to you via email or phone to make you an offer, you can use one of our Get a Quote services. Depending on the country you are residing and in order to get you to the right expert team or tool within DHL, we either ask whether you would like to ship parcels or documents, cargo / freight or international business mail and whether you are a business or private customer. 

Based on this information your request will be directed to our business units  [DHL Express, DHL Global Forwarding, DHL Freight, DHL eCommerce, DHL Paket] and you will immediately receive a product card with price and further details from the business unit(s) which offer best suits your request. It could also be that we ask you for the following details: country of origin and destination including city and postcode (we need an approximate origin and destination in order to give you a quote for your shipment as accurate as possible) and weight and dimension of the shipment. Depending on your request we might also ask the quantity, whether documents or dangerous goods are involved or whether it is palletized or stackable. This information is also forwarded to one of our business units  [DHL Express, DHL Global Forwarding, DHL Freight, DHL eCommerce, DHL Paket]  and you will immediately receive a product card shown with price and further details regarding your shipment and optional add-ons.

By clicking on the “continue to booking” button you will be forwarded to the respective business unit´s  booking tool system [MyDHL+, myDHLi, MyDHL Parcel]. Hence, on dhl.com we basically do not collect or otherwise process your personal data for our Get a Quote service. However, if data is nevertheless considered personal, such as the city and postcode, the legal basis for this is the contract in progress (Art. 6 (1) b) GDPR) and a legitimate interest in being able to submit our offer as accurately as possible (Art. 6 (1) f) GDPR).

Provided that no statutory or contractual retention periods needs to be observed, your request will be stored for a maximum of 30 days with the relevant business unit which finally made the quote as proof of proper processing and for the purpose of further optimizing services. On dhl.com the respective data is stored for a maximum of 30 days if you have used the safe shipment service and unless not earlier deletes by yourself.

If you are using or DHL for Business service we ask you for the shipping destination, the volume and the frequency of the shipment. Based on this information and your shipping needs, your request will be send to our business units [DHL Express, DHL Global Forwarding, DHL Freight, DHL eCommerce, DHL Paket]  and allocated to those which services best fit your requirements. In order to get in touch with you as soon as possible we also ask you for your company´s name, your name, business address, email address and phone number. This data will also be forwarded to the respective business units and is necessary to take steps at your request prior to entering into a contract and / or for the performance of a contract. The legal basis is therefore Art. 6 (1) b) GDPR.

Provided that no statutory or contractual retention periods need to be observed, your request will be stored for a maximum of 30 days with the relevant business unit which finally made the quote as proof of proper processing and for the purpose of further optimizing services.

You can use the Track and Trace service to track shipments addressed to you or sent by you, and also view the expected time of delivery. To this end the tracking information is sent to the respective business unit [DHL Express DHL Global Forwarding, DHL Freight, DHL eCommerce, DHL Supply Chain]to find the status of the shipment. You will also receive all important detailed information about your shipment from the respective business unit. In addition, the sender or recipient can also receive further information about the shipment in question by e-mail or SMS. For this purpose, the e-mail address or mobile phone number of the recipient of the notification can be stored and the notification activated. In this context, the person entering the data must ensure that the notification recipient agrees to the processing of e-mail address, mobile phone number and notification.

The following data are processed as part of shipment tracking: shipment number, name and address of the sender, name and address of the recipient, e-mail address of the sender/recipient if applicable, name and address of the alternative recipient if applicable, customer data of the sender, product or service name, shipment history, signature of the recipient, confirmation that a minimum age has been checked (over 16/over 18).

The data are processed for the purpose of fulfilling the contract on the basis of Art. 6(1) (b) GDPR.

To enhance user convenience, when using shipment tracking DHL automatically generates a list of the last shipment number searched for via the shipment search: This function saves you having to re-enter the shipment number when checking the shipping status of your shipment. In this context, you can name individual shipments according to your preference (“Shipment title"). For this purpose, the application saves a list of the last shipment searches in a cookie. 

Our Ship Now service leads you to our various customer portals of our business units [DHL Express, DHL Global Forwarding, DHL Freight, DHL eCommerce, DHL Paket] (e.g. MyDHL+, DHL eCommerce Web Portal, my DHLi or DHL Interactive). You can also continue as guest and you will be forwarded to our business unit which best meets you shipping needs. In any case we will not process your personal data at this stage. Same applies if you would like to schedule a redelivery. After a few questions about your shipment you will be directed to our various customer portals where you can arrange the redelivery in detail.

You can contact us at any time with questions via our Customer Service. Depending on the respective business unit, you will either be forwarded directly to the website of the respective business unit or we ask you to fill out a contact form beforehand, which requests the following data categories and then forwards them to the respective responsible business unit: your customer reference no., your name, the name of your company, postal address, email address and telephone no. country / region and the sector you are working for. The legal basis is Art. 6 (1) (b) GDPR, as this processing is carried out in order to prepare or to fulfil a contract. Furthermore, you provide the data voluntarily for the purpose of contacting us, so your consent is another legal basis, Art. 6 (1) (a) GDPR.

In addition you have the option to consent to promotional emails about our services. To this end we also forward your contact data to our business units [DHL Express, DHL Global Forwarding, DHL Freight, DHL eCommerce, DHL Paket] . The legal basis for this is your consent according to Art. 6 (1) (a) GDPR.

If you would like to participate in one of our Events and/or Webinars, you will be redirected to the appropriate registration page. There we basically collect the following personal data: your name, your email address and who is your main contact at DHL. Depending on the respective sector we may also ask for your company name, your seniority and whether you have previously done business with DHL. The legal basis is Art. 6 (1) (b) GDPR, as this processing is carried out in order to fulfil the contract (attending the event).

If you subscribe to Delivered to know first about new articles we only collect your email address and it is not used for any other purpose. The legal basis for this is your consent according to Art. 6 (1) (a) GDPR. You may unsubscribe at any time by clicking the relevant link at the bottom of the Delivered mail. You can also revoke the consent at any time with effect for the future using the contact address provided. If you unsubscribe from Delivered or revoke your consent, the corresponding data will be removed or blocked from the mailing list and will no longer be processed for these purposes.

Notwithstanding the foregoing, if you are an existing DHL customer, your postal data (e.g. name, address) will be processed to contact you in order to provide you with the latest information about our offers, news, products and services. Apart from an existing consent, which is based on Art. 6 (1) a) GDPR, we will process your e-mail address exclusively in order to provide you with information regarding DHL own and similar products. Legal basis for the aforementioned processing to keep you updated regarding our own and similar products is Art. 6 (1) f) GDPR. The processing of customer data for own direct marketing purposes is regarded as carried out for a legitimate interest. You have the right to object at any time to the said processing. To exercise your right, simply get in touch with us by using the contact details mentioned under "Who is Responsible".

You have the option there to consent to promotional emails about our services. To this end we also forward your contact data to our business units [DHL Express, DHL Global Forwarding, DHL Freight, DHL eCommerce, DHL Supply Chain]. The legal basis for this is your consent according to Art. 6 (1) (a) GDPR. You may unsubscribe at any time by clicking the relevant link at the bottom of the Delivered mail. You can also revoke the consent at any time with effect for the future using the contact address provided.

If you register for one of our newsletters, we are entitled to use your e-mail address for this purpose. The legal basis for this data processing is your consent pursuant to Art. 6 (1) (a) GDPR. You may unsubscribe from the newsletter at any time by clicking the relevant link at the bottom of the newsletter. You can also revoke the consent at any time with effect for the future using the contact address provided. If you unsubscribe from our e-mail communications or revoke your consent, the corresponding data will be removed or blocked from the mailing list and will no longer be processed for these purposes.
Including your e-mail address in a blocking list is effected in order to safeguard our legitimate interests pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in not sending you any information by e-mail in the future.

When you visit our website, we store your IP address for a short time, but no longer than untill the end of the session. 

If our system detects that you are not performing any activities that could compromise the operation of our website, this information will be automatically deleted.

In the event that our system detects that you are carrying out activities that are manifestly illegal or clearly aimed at disabling the operation of the website, your IP address will be stored permanently and our system will blacklist it from and consequently disable this IP addresses to further use of the website.

More details  
 
Legal basis for the processing of personal data:  based on its own legitimate interest (Article 6(1)f of the General Data Protection Regulation), the controller processes personal data for the purpose of securing the website and preventing illegal activities through it (eg. intrusions, phishing, etc.). 

Recipient categories:  security solution provider.

Recipients process personal data exclusively according to the instructions and under the control of the controller.

Retention period:  no later than the end of the session (general rule) or permanently (for cases of attempted abuse).  

Rights of data subjects:  access to data, correction, objection, restriction of processing and erasure. 

The rights can be exercised by a written application sent to the controllers's address or via the e-mail address: si.gdpr (at) dhl.com. 

Right to lodge a complaint:  a complaint may be lodged with the Information Commissioner of the Republic of Slovenia. 

We look forward to your every message. 

To make your contact with us as easy as possible, we allow you to contact us through our website via the online form. 

In this case, our communication will take place on the basis of our legitimate interest, which is reflected in the communication of the controller with the general public. 

If you do not want to disclose your personal data to us, we will unfortunately not be able to answer your question or inquiry. 

You can terminate the communication at any time (let us know), which will consequently mean that we will delete your personal data. 

More details
 
Legal basis: legitimate interest (communication with the general public) - 6 (1) b of the General Data Protection Regulation.

Recipient categories: maintainers provider. Recipients process personal data exclusively according to the instructions and under the control of the controller.

Retention period: until the end of the communication. 

You can request the termination of communication beforehand - as a result, we will irreversibly destroy your personal data (if there is no legal basis for their further processing). 

Rights of data subjects: access to data, correction, objection, restriction of processing and erasure. 

The rights can be exercised by a written application sent to the controllers's address or via the e-mail address: si.gdpr (at) dhl.com. 

Right to lodge a complaint: a complaint may be lodged with the Information Commissioner of the Republic of Slovenia. 

If you contact us for the purpose of possible cooperation (for example by phone or via the website) or you want us to provide you with an offer, this will mean that we will start the contract negotiation phase, which in terms of the General Data Protection Regulation means that the legal basis for the processing of your personal data will be “implementation of pre-contractual measures”. 

If you do not wish to disclose your personal information to us, we will not be able to enter into a contract with you. 

If we find a common language and conclude a contract, we will also send you our further offers at your physical address or call you, based on our legitimate interest (direct marketing). 

We will use your e-mail or send you SMS notifications for the purpose of direct marketing only if you have given us your consent or you did not state at the time of concluding the contract that you did not wish to receive such content. . 

You can unsubscribe from direct marketing content at any time by notifying us at si.gdpr (at) dhl.com or (in case of email) by clicking on the link in the received message. 

More details
 
Legal basis: implementation of pre-contractual measures and (in case of contract) contract implementation - 6 (1) b GDPR.

In case of direct marketing by snail mail or telephone calls: Article 6 (1) f GDPR (legitimate interest is the implementation of direct marketing, which is also recognised by Article 72 of Slovenian ZVOP-1).

In the event that a data subject becomes a customer of our services, the legitimate interest for e-mail direct marketing is recognised by Article 158 of Slovenian ZEKom-1.

In other cases, the legal basis is consent of the data subject (Article 6 (1) a of the General Data Protection Regulation). 

Recipient categories: no external users. 

Retention period: 5 years from the expiration of the contract or settlement of all obligations. 

Personal data required for tax purposes: 10 years. 

Rights of data subjects: access to data, correction, where legal basis for processing is legitimate interest also objection, restriction of processing and erasure, where legal basis for processing is consent also right to portability and right to withdraw consent. 

The rights can be exercised by a written application sent to the controllers's address or via the e-mail address: si.gdpr (at) dhl.com. 

You can unsubscribe from receiving the e-newsletter at any time by clicking on the link in the received e-mail.

Right to lodge a complaint: a complaint may be lodged with the Information Commissioner of the Republic of Slovenia. 

We will be happy if you sign up for our e-newsletter. 

Since we also hate spam, we promise that we will try to send you useful information and offers that you will be happy to read. 

We will also try to frequent our e-newsletter as optimally as possible so that we do not fill your e-mailbox unnecessarily. 

Because we only send e-newsletters if you give us your personal consent, you can unsubscribe from them (revoke your consent) at any time by clicking on the link in the received e-mail.

More details
 
Legal basis: personal consent under Article 6 (1) a of the GDPR or after para. 158 of ZEKom-1 Article. 

Recepient categories: / 

Retention period: until you unsubscribe.

Rights of data subjects: access to personal data, correction, deletion, to a certain extent restrictions on processing, transferability.  

The rights can be exercised by a written application sent to the controllers's address or via the e-mail address: si.gdpr (at) dhl.com. 

You can unsubscribe from receiving the e-newsletter at any time by clicking on the link in the received e-mail.

Right to lodge a complaint: a complaint may be lodged with the Information Commissioner of the Republic of Slovenia. 

We perform video surveillance (CCTV) in some of our premises. 

Where video surveillance is implemented you will see notifications on the premises.

Video surveillance is intended to secure shipments, protect our employees and ensure that customs procedures comply with the law. 

We carry out video surveillance on the basis of our legitimate interest, which has been demonstrated for the aforementioned purposes, and which is also recognised by Article 75 of Slovenian ZVOP-1.

More details
 
Legal basis: protection of our property and employees and property of our customers – these are the legitimate interests we protect under Article 6 (1) f of the General Data Protection Regulation. 

Video surveillance is additionally regulated by Article 75 of ZVOP-1. 

Recepient categories: no external users. 

Retention period: 6 months from the recording, then the recording is automatically deleted. 

Rights of Data Subjects: access to data (the data subject must indicate at least the approximate time at which he was on the premises, otherwise we will not be able to identify him), correction, objection, restriction of processing and erasure to a certain extent. 

Rights can be exercised by a written application sent to the operator's address or via si.gdpr (at) dhl.com. 

Right to lodge a complaint: a complaint may be lodged with the Information Commissioner of the Republic of Slovenia.