Privacy Notice
Electronic shipping solutions including but not limited to: MyDHL+, Intraship, Online Shipping, Import Express Online, Express Logistics Platform
Type of data
Purposes and legal basis of processing
The data are processed primarily for carrying out the contract pursuant to Article 6 (1) (b) of the GDPR.
Pursuant to Article 6 (1) (c) GDPR, processing also occurs in order to comply with legal obligations, e.g., in the case of duties of disclosure to investigating authorities.
Finally, processing is also carried out for the purposes listed below, based upon a legitimate interest pursuant to Article 6 (1) (f) of the GDPR:
The controller has a legitimate interest in the above with a view to ensuring a smooth process and to improving products and services on an on-going basis. No conflicting legitimate interest exists as the intrusiveness of the processing is kept to a minimum, e.g., through pseudonymization.
Recipients or categories of recipients:
a) Disclosure occurs to companies involved in providing express shipping services.
b) Disclosure occurs as part of statutory obligations (e.g., to investigating authorities).
Transfer to a third country (i.e., the data are transmitted to a country outside the European Economic Area (EEA))
a) Your data are processed in a third country on a contractual basis if you have authorised us to do so (e.g., to transport an item to a third country).
b) A Group-internal service provider may be commissioned to provide IT or other services on the basis of our Binding Corporate Rules.
Type of data
- Name, Address, Phone Number and Email Address of Sender
- Name, Address, Phone Number and Email Address of Receiver
- Name, Address, Phone Number and Email Address of Payer
- Name, Address, Phone Number and Email Address of Requestor
- If applicable, Tax ID of Sender
- If applicable, Tax ID of Receiver
- If applicable, Data required for customs clearance processing
- If applicable, payment details
Purposes and legal basis of processing
The data are processed primarily for carrying out the contract pursuant to Article 6 (1) (b) of the GDPR.
Pursuant to Article 6 (1) (c) GDPR, processing also occurs in order to comply with legal obligations, e.g., in the case of duties of disclosure to investigating authorities.
Finally, processing is also carried out for the purposes listed below, based upon a legitimate interest pursuant to Article 6 (1) (f) of the GDPR:
- as part of our security requirements (e.g., for crime detection purposes),
- for compiling statistics,
- for purposes of quality assurance, process optimisation and planning certainty
The controller has a legitimate interest in the above with a view to ensuring a smooth process and to improving products and services on an on-going basis. No conflicting legitimate interest exists as the intrusiveness of the processing is kept to a minimum, e.g., through pseudonymization.
Recipients or categories of recipients:
a) Disclosure occurs to companies involved in providing express shipping services.
b) Disclosure occurs as part of statutory obligations (e.g., to investigating authorities).
Transfer to a third country (i.e., the data are transmitted to a country outside the European Economic Area (EEA))
a) Your data are processed in a third country on a contractual basis if you have authorised us to do so (e.g., to transport an item to a third country).
b) A Group-internal service provider may be commissioned to provide IT or other services on the basis of our Binding Corporate Rules.
Type of data
Purposes and legal basis of processing
The Net Promoter Approach (NPA) is one of DHL’s way to capture the voice of our customer and measure our customer’s experience. We do this by engaging our people in proactively listening to our customers experiences, seek feedback for improvement opportunities and drive actions. Customer interactions are randomly sampled to help us understand our customer’s experience and look for ways to improve the service we deliver to our customers.
Processing is also necessary for the purposes of the legitimate interests pursued by the controller or a third party pursuant to Article 6 (1) f) of the GDPR.
Processing for other purposes
The controller has a legitimate interest in data processing for the purpose of contacting people who have recently used our service in order to improve our customer’s experience, ensure a smooth process and/or improve products and services on an on-going basis. No conflicting legitimate interest exists as the intrusiveness of the processing is kept to a minimum and special protective measures are taken, e.g., pseudonymisation.
Recipients or categories of recipients:
In some cases, the contacting of customers is performed by a contracted 3rd party with whom we have controller process agreements.
Transfer to a third country (i.e., the data are transmitted to a country outside the European Economic Area (EEA))
A Group-internal service providers around the world have been commissioned to provide IT services on the basis of our Binding Corporate Rules.
- Contact details – Name (person who had the interact with DHL), phone, address (street, city, post code are visible in Delivery and Pick up Touchpoints), email (in limited Touchpoints)
Purposes and legal basis of processing
The Net Promoter Approach (NPA) is one of DHL’s way to capture the voice of our customer and measure our customer’s experience. We do this by engaging our people in proactively listening to our customers experiences, seek feedback for improvement opportunities and drive actions. Customer interactions are randomly sampled to help us understand our customer’s experience and look for ways to improve the service we deliver to our customers.
Processing is also necessary for the purposes of the legitimate interests pursued by the controller or a third party pursuant to Article 6 (1) f) of the GDPR.
Processing for other purposes
The controller has a legitimate interest in data processing for the purpose of contacting people who have recently used our service in order to improve our customer’s experience, ensure a smooth process and/or improve products and services on an on-going basis. No conflicting legitimate interest exists as the intrusiveness of the processing is kept to a minimum and special protective measures are taken, e.g., pseudonymisation.
Recipients or categories of recipients:
In some cases, the contacting of customers is performed by a contracted 3rd party with whom we have controller process agreements.
Transfer to a third country (i.e., the data are transmitted to a country outside the European Economic Area (EEA))
A Group-internal service providers around the world have been commissioned to provide IT services on the basis of our Binding Corporate Rules.