Privacy Notice

Privacy Notice
 

It is important to DHL to protect your personal data during entire business process of using our products and services. Below details how DHL Express collects your personal data when you visit our websites and how this information is used.

Electronic Shipping Solutions
Close
Electronic Shipping Solutions


Electronic shipping solutions including but not limited to: MyDHL+, IntraShip, Online Shipping, Import Express Online, Express Logistics Platform

Type of data

  • Name, Phone Number and Email Address of Sender
  • Name, Phone Number and Email Address of Receiver
  • Name, Phone Number and Email Address of Payer
  • Name, Phone Number and Email Address of Requestor
  • If applicable, Tax ID of Sender               
  • If applicable, Tax ID of Receiver
  • If applicable, Data Required for Customs Clearance Processing
  • If applicable,

Purposes and legal basis of processing

The data are processed primarily for carrying out the contract pursuant to Article 6 (1) (b) of the GDPR.
Pursuant to Article 6 (1) (c) GDPR, processing also occurs in order to comply with legal obligations, e.g., in the case of duties of disclosure to investigating authorities.

Finally, processing is also carried out for the purposes listed below, based upon a legitimate interest pursuant to Article 6 (1) (f) of the GDPR:

  • as part of our security requirements (e.g., for crime detection purposes),
  • for compiling statistics,
  • for purposes of quality assurance, process optimisation and planning certainty.

The controller has a legitimate interest in data processing for the purpose of contacting people who have recently used our service in order to improve our customer’s experience, ensure a smooth process and/or improve products and services on an on-going basis. No conflicting legitimate interest exists as the intrusiveness of the processing is kept to a minimum, e.g., pseudonymization. 

Recipients or categories of recipients

a) Disclosure occurs to companies involved in providing express shipping services.
b) Disclosure occurs as part of statutory obligations (e.g., to investigating authorities). 

Transfer to a third country (i.e., the data are transmitted to a country outside the European Economic Area (EEA))

a) Your data are processed in a third country on a contractual basis if you have authorised us to do so (e.g., to transport an item to a third country). 
b) A Group-internal service provider may be commissioned to provide IT or other services on the basis of our Binding Corporate Rules.

Personal Identification Data Collected
Close
Personal Identification Data Collected


Collection of images of government issued ID documentation (e.g. passport, driving license)

Type of data

  • Name, Address, of Sender
  • Name, Address, of Receiver
  • Name, Address, of Payer
  • Name, Address, of Requestor
  • ID number (e.g. passport number, national ID card number), of Sender
  • ID number (e.g. passport number, national ID card number), of Receiver
  • ID number (e.g. passport number, national ID card number), of Payer
  • ID number (e.g. passport number, national ID card number), of Requestor
  • Date of Birth, of Sender
  • Date of Birth, of Receiver
  • Date of Birth, of Payer
  • Date of Birth, of Requestor
  • Place of Birth, of Sender
  • Place of Birth, of Receiver
  • Place of Birth, of Payer
  • Place of Birth, of Requestor
  • Nationality, of Sender
  • Nationality, of Receiver
  • Nationality, of Payer
  • Nationality, of Requestor
  • Any other data that appears on the ID document

Purposes and legal basis of processing

To comply with the applicable export control and sanctions laws in cases where processing shipper and consignee data raises red flags ("high-match") for potential breach of applicable sanctions and/or export control law.

Recipients or categories of recipients

Disclosure occurs as part of statutory obligations (e.g. to the applicable export control authority in cases disclosure obligatory by law).

Denied Party Screening Solutions (DPSS)
Close
Denied Party Screening Solutions (DPSS)


Type of data

  • Name, Phone Number and Email Address of Sender
  • Name, Phone Number and Email Address of Receiver
  • Name, Phone Number and Email Address of Payer
  • Name, Phone Number and Email Address of Requestor
  • If applicable, Tax ID of Sender               
  • If applicable, Tax ID of Receiver
  • If applicable, Data Required for Customs Clearance Processing
  • If applicable, Payment Details

Purposes and legal basis of processing
To comply with the applicable export control and sanctions laws

Recipients or categories of recipients
Disclosure occurs as part of statutory obligations (e.g. to the applicable export control authority in cases disclosure obligatory by law).

Transfer to a third country (i.e., the data are transmitted to a country outside the European Economic Area (EEA))
a) Your data are processed in a third country on a contractual basis if you have authorised us to do so (e.g., to transport an item to a third country). 
b) A Group-internal service provider may be commissioned to provide IT or other services on the basis of our Binding Corporate Rules.
The DPDHL Data Privacy Policy regulates the Group-wide standards for data processing with a special focus on so-called third country transfers, meaning transfers of personal data to countries outside the EU, which do not have an adequate level of data protection. If you are interested in learning more about the DPDHL Data Privacy Policy, please visit here.

We may use service providers that process personal data under our control and on our behalf. In cases where data is transferred outside of European Economic Area, we take all reasonably necessary steps to ensure that this happens in accordance with applicable data protection laws and regulations.

Net Promoter Approach
Close
Net Promoter Approach


Type of data

  • Contact details – Name (person who had the interaction with DHL), phone, address (street, city, post code are visible in Delivery and Pick up Touchpoints), email (in limited Touchpoints)

Purposes and legal basis of processing

The Net Promoter Approach (NPA) is one of DHL’s way to capture the voice of our customer and measure our customer’s experience. We do this by engaging our people in proactively listening to our customers experiences, seek feedback for improvement opportunities and drive actions. Customer interactions are randomly sampled to help us understand our customer’s experience and look for ways to improve the service we deliver to our customers.

Processing is also necessary for the purposes of the legitimate interests pursued by the controller or a third party pursuant to Article 6 (1) f) of the GDPR.

Processing for other purposes 

The controller has a legitimate interest in data processing for the purpose of contacting people who have recently used our service in order to improve our customer’s experience, ensure a smooth process and/or improve products and services on an on-going basis. No conflicting legitimate interest exists as the intrusiveness of the processing is kept to a minimum, e.g., pseudonymization. 

Recipients or categories of recipients

In some cases, the contacting of customers is performed by a contracted 3rd party with whom we have controller process agreements. 

Transfer to a third country (i.e., the data are transmitted to a country outside the European Economic Area (EEA))

A Group-internal service provider may be commissioned to provide IT or other services on the basis of our Binding Corporate Rules.

Read more about Privacy Notice

DHL and DHL Express are subsidiaries of Deutsche Post AG.