Electronic shipping solutions including but not limited to: MyDHL+, IntraShip, Online Shipping, Import Express Online, Express Logistics Platform

Type of data

• Name, Phone Number and Email Address of Sender
• Name, Phone Number and Email Address of Receiver
• Name, Phone Number and Email Address of Payer
• Name, Phone Number and Email Address of Requestor
• If applicable, Tax ID of Sender               
• If applicable, Tax ID of Receiver
• If applicable, Data Required for Customs Clearance Processing
• If applicable,

Purposes and legal basis of processing

The data are processed primarily for carrying out the contract pursuant to Article 6 (1) (b) of the GDPR.
Pursuant to Article 6 (1) (c) GDPR, processing also occurs in order to comply with legal obligations, e.g., in the case of duties of disclosure to investigating authorities.

Finally, processing is also carried out for the purposes listed below, based upon a legitimate interest pursuant to Article 6 (1) (f) of the GDPR:

• as part of our security requirements (e.g., for crime detection purposes),
• for compiling statistics,
• for purposes of quality assurance, process optimisation and planning certainty.

The controller has a legitimate interest in data processing for the purpose of contacting people who have recently used our service in order to improve our customer’s experience, ensure a smooth process and/or improve products and services on an on-going basis. No conflicting legitimate interest exists as the intrusiveness of the processing is kept to a minimum, e.g., pseudonymization. 

Recipients or categories of recipients

a) Disclosure occurs to companies involved in providing express shipping services.
b) Disclosure occurs as part of statutory obligations (e.g., to investigating authorities). 

Transfer to a third country (i.e., the data are transmitted to a country outside the European Economic Area (EEA))

a) Your data are processed in a third country on a contractual basis if you have authorised us to do so (e.g., to transport an item to a third country). 
b) A Group-internal service provider may be commissioned to provide IT or other services on the basis of our Binding Corporate Rules.

Collection of images of government issued ID documentation (e.g. passport, driving license)

Type of data

• Name, Address, of Sender
• Name, Address, of Receiver
• Name, Address, of Payer
• Name, Address, of Requestor
• ID number (e.g. passport number, national ID card number), of Sender
• ID number (e.g. passport number, national ID card number), of Receiver
• ID number (e.g. passport number, national ID card number), of Payer
• ID number (e.g. passport number, national ID card number), of Requestor
• Date of Birth, of Sender
• Date of Birth, of Receiver
• Date of Birth, of Payer
• Date of Birth, of Requestor
• Place of Birth, of Sender
• Place of Birth, of Receiver
• Place of Birth, of Payer
• Place of Birth, of Requestor
• Nationality, of Sender
• Nationality, of Receiver
• Nationality, of Payer
• Nationality, of Requestor
• Any other data that appears on the ID document

Purposes and legal basis of processing

To comply with the applicable export control and sanctions laws in cases where processing shipper and consignee data raises red flags ("high-match") for potential breach of applicable sanctions and/or export control law.

Recipients or categories of recipients

Disclosure occurs as part of statutory obligations (e.g. to the applicable export control authority in cases disclosure obligatory by law).

Type of data

• Name, Phone Number and Email Address of Sender
• Name, Phone Number and Email Address of Receiver
• Name, Phone Number and Email Address of Payer
• Name, Phone Number and Email Address of Requestor
• If applicable, Tax ID of Sender               
• If applicable, Tax ID of Receiver
• If applicable, Data Required for Customs Clearance Processing
• If applicable, Payment Details

Purposes and legal basis of processing
To comply with the applicable export control and sanctions laws

Recipients or categories of recipients
Disclosure occurs as part of statutory obligations (e.g. to the applicable export control authority in cases disclosure obligatory by law).

Transfer to a third country (i.e., the data are transmitted to a country outside the European Economic Area (EEA))
a) Your data are processed in a third country on a contractual basis if you have authorised us to do so (e.g., to transport an item to a third country). 
b) A Group-internal service provider may be commissioned to provide IT or other services on the basis of our Binding Corporate Rules.
The DPDHL Data Privacy Policy regulates the Group-wide standards for data processing with a special focus on so-called third country transfers, meaning transfers of personal data to countries outside the EU, which do not have an adequate level of data protection. If you are interested in learning more about the DPDHL Data Privacy Policy, please visit here.

We may use service providers that process personal data under our control and on our behalf. In cases where data is transferred outside of European Economic Area, we take all reasonably necessary steps to ensure that this happens in accordance with applicable data protection laws and regulations.