Information on data protection at a glance

Introduction

Strict data protection standards are an integral part of the Deutsche Post DHL Group’s brand and, like the security of our IT systems, is of the utmost importance for our business. As a global company whose business model entails connecting people and exchanging sensitive data, we believe that we have a special responsibility in this regard.

The following information is intended to give you an overview of how we process your data. Please consult the General Part for information that applies to all of our products and services. For details on data processing, please refer to the section entitled “Products and Services.”

A. General Part

B. Data processing

C. Products and Services

A) General information

Contact details: a) Name and contact details of
    the competent controller:

    The competent controller within the
    meaning of the General Data Protection
    Regulation (GDPR) is Deutsche Post AG.
    Deutsche Post AG
    Charles-de-Gaulle-Straße 20
    53113 Bonn, Germany

b) Contact details to exersice
    any of your rights:

Please use our contact form if you wish to exercise any of your rights.

c) Competent supervisory authority
    for data processing in connection
    with mail and telecommunications
    services:

    Der Bundesbeauftragte für den
    Datenschutz und die Informationsfreiheit
    (Federal Commissioner for Data
    Protection and Freedom of Information)
  Graurheindorfer Straße 153
    53117 Bonn, Germany

    Other data processing by the controller:

    Die Landesbeauftragte für den Datenschutz
    Nordrhein-Westfalen (State Commissioner
    for Data Protection of North Rhine-Westphalia)
    Kavalleriestraße 2-4
    40213 Düsseldorf, Germany

d) Name and contact details of the
    Data Protection Officer:

   Deutsche Post AG
     Gabriela Krader, LL.M
     53250 Bonn, Germany

     datenschutz@dpdhl.com

Personal data

Personal data denotes any information concerning the personal or material circumstances of an identified or identifiable natural person. This includes, for example, your real name, address, telephone number and date of birth. Information that is not directly linked to your true identity – such as favorite websites or a site’s number of users – does not constitute personal data.

Google reCAPTCHA

We use the reCAPTCHA service from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to protect our website against spam and misuse. reCAPTCHA prevents automated software (termed “bots”) from engaging in abusive activities on the website, i.e. it helps check whether the inputs are actually made by a human being. In order to determine this, the following data is transferred to Google:

Referrer (the address of the site on which the CAPTCHA is used)
The user’s IP address
The user’s Google account (the account is recognized and assigned if the user is logged on to Google)
The user’s input behavior (such as answering of the reCAPTCHA question, the speed at which inputs are made in the form fields, the sequence in which the user selected the input fields) is used to improve pattern recognition in Google. The browser, its size and resolution, browser plug-ins, date, and language setting
Display instructions (CSS) and scripts (JavaScript) for the website
Mouse and touch events on the page

Google also reads the cookies from other Google services, such as Gmail, Search and Analytics. All the specified data is sent to Google in encrypted form. Google’s subsequent analysis determines the form in which the CAPTCHA is shown on the page: as a checkbox or a box in which text is entered. Personal data from the input fields of the form in question is not read or stored.

The data is processed on the basis of Article 6(1) letter (f) GDPR. Deutsche Post AG has a legitimate interest in protecting the websites of deutschepost.de against abusive automated attempts to access them and spam.

You can find more information on Google’s Privacy Policy at www.google.com/policies/privacy/.

Purpose of data processing

We process your data, for example,

to satisfy the terms of the contract we signed with you or with a sender;
to ensure that your visit to our websites/apps is as pleasant as possible;
to send you a newsletter if you are a subscriber;
to send or show you tailored advertising, to the extent permissible;
to conduct a creditworthiness check as necessary;
to satisfy legal requirements (e.g. the German Code of Criminal Procedure (StPO) or German Foreign Trade and Payments Act (AWG));
in connection with our security requirements (e.g. to uncover criminal activity);
to produce statistics;
to secure payment;
and for purposes of quality assurance, process optimization and reliable planning.

You will find further details on, for example, the type of data, the purpose of data processing, and the legal basis in the sections on the respective products.

Please use our contact form if you wish to exercise any of your rights.

As a data subject, you have the right:: a) to obtain information on and access to the data stored about you,

b) to demand that incorrect data we store concerning you be rectified,

c) to have your personal data erased or, if statutory retention periods apply, restrict the processing of data no longer required for the specified purpose,

d) to access the personal data you provided in a structured, commonly used and machine-readable format,

e) to raise an objection if your data is being processed on the grounds of a legitimate interest / to the use of your data for advertising purposes / to your being subject to a decision based solely on automated processing, including profiling,

f) to file a complaint with the competent supervisory authority if you suspect that your data has not been processed in compliance with data protection legislation.

If you do not provide the data indicated as being necessary, a contract cannot be established.

Should you wish to exercise any of your rights, please contact us

by contact form: www.deutschepost.de/datenschutz/kontakt.

If you exercise your right to object – especially to the use of your data for advertising purposes – please contact the address given in the relevant “Products and Services” section.

If you have consented to your personal data being used for a certain type of processing, you may withdraw such consent at any time with future effect by notifying us at the address we specified when you gave your consent. You will find this in the details regarding the “Products and Services” for which your consent was obtained.

Duration of storage: The data will be stored for as long as necessary. The need therefor follows either from statutory retention periods, for example, as set forth in Section 257 of the German Commercial Code (HGB) or Section 147 of the German Fiscal Code (AO). In the absence of statutory retention periods, the data is stored for the purpose of fulfilling and settling the given contract and for evidencing proper fulfillment until the expiration of applicable liability periods; it is erased thereafter. Please also note that your data will be stored in our backup system and that backup files are continually overwritten whenever the system is updated.

Group Data Privacy Policy: The DPDHL Data Privacy Policy defines Group-wide standards for data processing, with a specific focus on so-called third-country transfers, meaning the transmission of personal data to countries outside the EU which do not offer an adequate level of data protection. If you would like to know more about the Group Data Privacy Policy, please use this link:

Download the Group Data Privacy Policy (summary) (PDF, 204 KB)

B) Data processing

On our web platforms and apps

Web platforms

By using our websites, you have given your consent to the use of cookies in accordance with Article 6 (1) letter (a) GDPR. If you wish to withdraw your consent, you can use the opt-outs described in the following paragraphs.

deutschepost.de

Collection and processing of personal data: When you visit our websites, our web servers temporarily store the following information as standard for the purpose of system security: the connection data of the requesting computer system, which of our websites you visit, the date and length of your visit, the data identifying the type of browser and operating system used, and the website from which you visit us. Other personal data, such as your name, address, telephone number or e-mail address, is not collected unless you provide this data voluntarily, for example as part of a registration procedure, survey, competition, performance of a contract or request for information.

Use and forwarding of personal data: We use the personal data provided by you exclusively for the purpose of technical administration of our websites and to fulfill your wishes and requirements, i.e. generally to perform the contract concluded with you or to respond to your inquiry.

We only use such data for product-related surveys and marketing purposes if you have given us your prior consent and if you have not filed an objection, insofar as this is permitted by law.

Your personal data is not disclosed, sold or otherwise transferred to third parties, unless that is necessary for handling the contract or you have given your explicit consent. It may be necessary, for example, for us to disclose your address and order data to our suppliers when you order products.

Information from the Group: The companies in the Deutsche Post DHL Group would like to contact you with information about offers and other news relating to our products and services. If you register with our websites, we will therefore ask you to tell us whether you would like to receive direct promotional messages from us. As a customer of Deutsche Post, you will naturally continue to receive the necessary information on important changes relating to existing contracts (e.g. price changes).

Use of web tracking: We use tracking software on our websites to monitor their frequency of use and the number of users. This software does not collect personal data and IP addresses. The data is used exclusively in anonymized, summarized form for statistical purposes and for the development of the website.

Newsletter: If you register for the Deutsche Post newsletter, you declare that you agree to receive quarterly information by e-mail about seasonal products and offers, new services and the latest competitions.

You can withdraw your consent at any time and unsubscribe from the newsletter by clicking on the unsubscribe link in the e-mail you receive.

Your data will be used exclusively to send you the Deutsche Post newsletter and never passed on to third parties or used for purposes other than those specified here.

Use of cookies: Cookies are small files that enable us to store information related specifically to you, the user, on your PC while you visit one of our websites. Cookies help us to determine how frequently our Internet pages are accessed as well as the number of users. They also help us configure our offerings so that they are as convenient and efficient as possible for you.

On the one hand, we use, “session cookies”, i.e. cookies that are stored exclusively for the duration of your visit to one of our Internet pages. On the other, we use “persistent cookies” to retain information about visitors who repeatedly access one of our Internet pages. The purpose of using these cookies is to be able to offer you optimal user guidance as well as to “recognize” you and thus be able to present (as far as possible) diversified Internet pages and fresh content if you use the pages repeatedly. The content of a persistent cookie is limited to an identification number. Your name, IP address, etc. are not saved. We do not create an individual profile of your online activities.

You can also use our offerings without cookies. In your browser, you can deactivate the saving of cookies, limit them to certain websites or set your browser so that you are notified as soon as a cookie is sent. You can also delete cookies from your PC at any time (“cookies” folder). However, please note that in this case you will have to expect restricted page presentation and user guidance.

Purpose and duration of storage

Type of cookie	Name	Purpose
Authentication cookie	JESSIONID	This cookie is used to authenticate the session. JESSIONID is a randomly generated value which the server uses to uniquely identify the user’s session.
Form cookie	PA_JESSIONID	This cookie is used by our FGEN form generator. When multistage forms are used, the values (data) are cached here. The cookie is deleted when the form is completed and closed. PA_JESSIONID is a randomly generated value which the server uses to uniquely identify the user’s session.
Web tracking cookie Adobe SiteCatalyst	s_cc	JavaScript code sets and reads this cookie to determine whether cookies have been activated. This cookie is a session cookie and expires when the browser is closed.
Web tracking cookie Adobe SiteCatalyst	s_sq	This cookie collects information in anonymous form on the links the user clicks on. This is done to find out which links are used and which are not used, with the aim of improving the web offering. This cookie is a session cookie and expires when the browser is closed.
Web tracking cookie Adobe SiteCatalyst	S_vi	This cookie is used to recognize a repeat visitor as being one and the same user and to collect information on how our website is used. We continually improve our website and provide users with more customized content on the basis of this information. The cookie collects the above information in anonymous form (individual visitor ID, time and date stamp). This is a persistent cookie which has a lifetime of 2 years.
Web tracking cookie Adobe SiteCatalyst	icSearchClickDetail	This cookie collects information in anonymous form regarding the search result on which the user clicks. This information is used to optimize the internal search function. This cookie is a session cookie and remains active until the user next visits the site.
nugg.add Cookies	d, ut, ci	nugg.ad identifies relevant target groups for advertising on the basis of socio-demographic attributes and product interests. Only statistical patterns from the use of online advertising and editorial content are processed. The d cookie, like the dp cookie, is used for target group analysis and contains the number of page hits in various thematic areas. The ci cookie is used to record how often you are shown a particular advertisement. These cookies only contain general information about your Internet use and have a lifetime of 26 weeks.
	ratingDateCookie	This cookie is used to control the customer satisfaction survey on Deutsche Post websites. It records whether the survey has already taken place and ensures that it does not reappear immediately after participation. Valid for one year.
	ratingDateCookie2	This cookie is used to control general customer surveys on Deutsche Post websites. It records whether the survey has already taken place and ensures that it does not reappear immediately after participation. Valid for one year.
	feedbackDates	This cookie is used to manage customer satisfaction surveys on Deutsche Post websites. It records whether a survey has already been taken and ensures that the survey does not reappear immediately after participation. Duration: 6 months.
Analytical cookie	adform	Adform is a major online marketing service provider, which can saves or can read cookies on users’ devices for its own purposes, but also on behalf of other companies. You agree that an Adform cookie may be saved to your device and that this cookie identifier (“cookie ID”) may be forwarded to Deutsche Post AG for use within the framework of Concentric Services. This also includes subsequent transfer of the cookie ID to Adform for use for Adform services, provided that Adform has corresponding consent for the further use of the cookie ID. Further data protection details, including the possibility of revoking consent, can be found here. Valid for one year.

Security: Deutsche Post takes all necessary technical and organizational security measures to protect your personal data from being lost or misused. For instance, your data is saved in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer (SSL) technology during transmission. This means that an approved encryption procedure is used for communication between your computer and the Deutsche Post servers if your browser supports SSL.

Should you wish to contact Deutsche Post by e-mail, we would like to point out that the confidentiality of the information sent cannot be guaranteed. The contents of e-mail messages can be read by third parties. We therefore advise you to send us confidential information solely by post.

How to manage cookies

It is also possible to use our products and services without cookies. You can normally deactivate the saving of cookies in your browser or limit them to certain websites. The browser can be set to notify you when a cookie is sent. You can also delete cookies from your hard drive at any time (“cookies” folder). However, in this case you will have to expect restricted page presentation and user guidance.

For detailed information on cookies, such as how to see which cookies have been set and how to manage and delete them, visit:

All About Cookies

For further EU-specific recommendations on cookies and the various opt-out options, please visit the following website:

Your Online Choices

If you wish to switch off general web tracking by Adobe SiteCatalyst (web-tracking cookies), you can find further information on the following website:

Link for individual cookies

Adobe Sitecatalist Tracking Opting OUT

If you wish to switch off some or all of the advertising cookies set on your computer, you can find further information on the following website:

Network Advertising Initative (NAI)

Reference to address matching technology

Use of Deutsche Post AG’s address matching technology – your right to object

Our website uses Deutsche Post AG’s address matching technology to determine statistical parameters and to form target groups for advertising purposes (offline and online). For this measurement, your stored delivery or billing address is assigned by a commissioned service provider to an anonymous microcell of Deutsche Post Direkt GmbH (Ø 6.6 households), and this code is stored in encrypted form with another service provider (address matching).

The legal basis for this use of the address, in shared responsibility between us and Deutsche Post AG, is Article 6 (1) sentence 1 letter (f) GDPR. The address is deleted at the service provider’s end immediately after matching. It is therefore the website operator who is responsible for this initial processing step – the use of the stored address for the purpose of matching it against the microcell database. The same applies to the pixelization of the website described below and the forwarding of a user’s request to Deutsche Post AG for subsequent labeling using a cookie.

If you have given your consent, after you have accessed our website, an inquiry from the device used by you is initiated on a server operated by a service provider commissioned by Deutsche Post AG, which stores two cookies on the PC or other device used by you. This consent also includes the authorization to subsequently read the cookies stored by Deutsche Post AG and sync them with other providers’ cookies (cookie syncing a.k.a. cookie matching). To this end, a third-party provider’s cookie ID stored on your device is forwarded to Deutsche Post AG, assigned to the cookie ID issued by the latter and used to implement the purposes mentioned. As the website operator, we document the consent given on our website and provide it to Deutsche Post AG if required.

The cookies are used to help record you as a visitor to a website participating in the measurement. This information is then aggregated on the basis of the abovementioned anonymous microcell of Deutsche Post Direkt GmbH and can therefore no longer be assigned to your person.

The consent required includes the purposes listed below:

Measurement of access to websites I have visited that are participating in Deutsche Post AG’s Consentric procedure, for anonymous inclusion in statistics;
Measurement of access to websites I have visited that are participating in Deutsche Post AG’s Consentric procedure, in order to identify relevant anonymous microcells of Deutsche Post Direkt GmbH;
Transfer of cookie IDs to partner companies for the purpose of target group formation for the transmission of online advertising. The cookie IDs used for this purpose were selected in advance as a relevant target group based on the indirectly assigned microcell;
Match against cookies from other providers (cookie matching). A third-party provider’s cookie ID stored on my device may be forwarded to Deutsche Post AG, stored there as a unique cookie ID and used to implement the purposes mentioned above.

You can object to data processing as part of the procedure described or revoke the consent given at the following link:

https://pixel.consentric.de/optout
https://login.intelliad.com/optout.php

Please note: we can only recognize you and assign your opt-out based on the cookie you have set. For that reason, the cookie remains set even after an opt-out.

If you have any further queries regarding the handling of personal data, and in particular if you wish to obtain information about processed personal data or assert additional rights, please contact the website operator first. Further information on data protection in the Consentric procedure mentioned here can be found at https://www.deutschepost.de/de/c/consentric/datenschutz.html.

The right to assert your rights as a data subject, also vis-à-vis Deutsche Post AG, remains unaffected. If you have any queries, please contact: consentric@deutschepost.de.

The Trade Desk Cookie

We set cookies from The UK Trade Desk Ltd. 10th Floor, 1 Bartholomew Close London EC1A 7BL United Kingdom (for users from the European Economic Area and Switzerland) or from The UK Trade Desk Ltd, Global Privacy Office 2 Park Avenue, 5th Floor New York, NY 10016 (for other users). For more details, please see theTradeDesk privacy policy. The legal basis for this processing is your consent; Art. 6 para. 1 p. 1 lit. a) DSGVO.

Analysis by WiredMinds: Our website uses counting pixel technology provided by WiredMinds GmbH (www.wiredminds.de) to analyze visitor behavior. In connection with this, the IP address of the visitor is processed. The processing occurs only for the purpose of collecting company based information such as company name, for example. IP addresses of natural persons are excluded from any further processing by means of a whitelist. An IP address is not stored in LeadLab under any circumstances.

While processing data, it is our outmost interest to protect the rights of natural persons. Our interest in processing data is based on Article 6(1)(f) GDPR. At no time is it possible to draw conclusions from the collected data on an identifiable person.

WiredMinds GmbH uses this information to create anonymized usage profiles of the visit behavior on our website. Data obtained during this process is not used to personally identify visitors of our website.

Exclude from tracking.

shop.deutschepost.de

Collection and processing of personal data: When you visit our website shop.deutschepost.de, the website from which you visit us, the pages you visit on our website, and the date and time of access are stored. Other personal data, such as your name, address, telephone number or e-mail address, is not collected unless you provide this data voluntarily, for example during registration, when you order a product or service online, or as part of a survey, competition or request for information. If you place an order in our Internet shop, your purchaser data is stored for the period of time customary under commercial law. Your IP address is also stored as part of an order. This data is stored explicitly to ensure IT security and to prevent and investigate fraud.

If you purchase Internet stamps, the sets of printed stamps are provided by means of a download link. The link is sent to you in an unencrypted e-mail. If you have selected the option “Internetmarken mit Adressen” (“Internet stamps with addresses”), it is not possible to fully rule out third parties accessing the sender and recipient data of the printed set, which is sent in unencrypted form.

The data owner is Deutsche Post AG.

Use and forwarding of personal data: We use the personal data provided by you for the purpose of technical administration of our websites and to fulfill your wishes and requirements, i.e. generally to perform the contract concluded with you or to respond to your inquiry.

Moreover, Deutsche Post reserves the right to send the surname, first name and full address of the customer to the credit reporting agency Verband der Vereine Creditreform e.V., Postfach 10 15 53, 41415 Neuss, company address: Hellersbergstraße 12, 41460 Neuss, Germany, so that the customer’s creditworthiness can be checked. Further checks on the customer’s creditworthiness may be conducted, depending on the order value.

We also use your postal address, where permitted by law, to send you offerings and information of interest to you. You can object to this use of your data at any time. To do so, please contact our customer service: service-shop[at]deutschepost.de.

We would also be pleased to contact you by e-mail so as to supply you with information on offers and further news about our products and services. If you register with our online shop, we will ask you to tell us whether you would like to receive direct promotional messages from us in the form of a newsletter. It goes without saying that you, as a customer of Deutsche Post AG, will continue to receive the necessary information and details of important changes in connection with existing service agreements, regardless of such consent to or any objection to use of your data for advertising purposes.

Your data is not forwarded, sold or transmitted to third parties unless that is necessary for the purpose of performing the contract or you have given your explicit consent. It may be necessary, for example, for us to disclose your address and order data to our suppliers when you order products. We will disclose data to government bodies only if required by law to do so.

Use of web tracking: We use tracking software (Adobe Analytics) on our website to monitor their frequency of use and the number of users. This software does not collect personal data and IP addresses. The data is used exclusively in anonymized, summarized form for statistical purposes and for the development of the website.

You can find an opt-out, i.e. means of deactivating web tracking on our website for your browser, on the following site:

Web tracking opt-out

Newsletter

By subscribing to Deutsche Post’s newsletter, you give your consent to receiving an e-mail newsletter that is sent out, compiled and tailored to your personal interests on the basis of your user behavior. Our objective is, where possible, to present you only those offerings that are of interest to you. To enable that, we collect and process the following data:

Opening and click rate for the newsletter
Usage behavior on the website (e.g. purchases)

The analysis takes place using the technology of Episerver GmbH with the help of what’s known as “cookies” – small text files that are saved on your computer or mobile terminal device. These cookies enable us to recognize your browser the next time you visit our website. You can delete the cookies in your browser or change the authorization to use certain cookies at any time under the cookie settings (in the footer).

The data is never disclosed to third parties or used for purposes other than those specified here. You can revoke your consent at any time with future effect. Notifying us by e-mail at service-shop[at]deutschepost.de is sufficient for that.

How to manage cookies

Reference to address matching technology

Use of Deutsche Post AG’s address matching technology – your right to object

The consent required includes the purposes listed below:

Measurement of access to websites I have visited that are participating in Deutsche Post AG’s Consentric procedure, for anonymous inclusion in statistics;
Measurement of access to websites I have visited that are participating in Deutsche Post AG’s Consentric procedure, in order to identify relevant anonymous microcells of Deutsche Post Direkt GmbH;
Transfer of cookie IDs to partner companies for the purpose of target group formation for the transmission of online advertising. The cookie IDs used for this purpose were selected in advance as a relevant target group based on the indirectly assigned microcell;
Match against cookies from other providers (cookie matching). A third-party provider’s cookie ID stored on my device may be forwarded to Deutsche Post AG, stored there as a unique cookie ID and used to implement the purposes mentioned above.

You can object to data processing as part of the procedure described or revoke the consent given at the following link:
https://pixel.consentric.de/optout
https://login.intelliad.com/optout.php

Please note: we can only recognize you and assign your opt-out based on the cookie you have set. For that reason, the cookie remains set even after an opt-out.

The right to assert your rights as a data subject, also vis-à-vis Deutsche Post AG, remains unaffected. If you have any queries, please contact: consentric@deutschepost.de.

intelliAd Media GmbH

This website uses the web analytics service with bid management from intelliAd Media GmbH, Sendlinger Str. 7, 80331 Munich, Germany. To design and optimize this website to suit the requirements, anonymized usage data is processed and saved in aggregated form, and used to create usage profiles. When intelliAd tracking is used, cookies are stored locally. You have the right to object to the processing of your usage data. Please use the intelliAd opt-out function for this purpose.

Adform

Sections 2 to 4 of the website have already provided you with information on how your personal data is used. We also wish to provide you with information on usage-based online advertising. As part of that, usage behavior on some of our websites is collected and processed anonymously so that advertising can be tailored optimally to you. We are committed to protecting your data when it is processed throughout the entire business process and we want you to feel secure when you visit these Internet pages. The technology from Adform A/S (http://www.adform.com) uses browser cookies to store the preferences of website visitors, such as an opt-out and a unique visitor ID, and to store information relating to the functionality of the Adform ad server, such as frequency capping, ad rotation and click attribution.

Adform reads browser cookies whenever an HTTP GET request is sent to the Adform ad server and passes on either the unique user ID, or the information that cookies are disabled or that the visitor has opted out, for every transaction – an impression, click, website visit or event.

Adform sets cookies in the visitor’s browser with the aid of HTTP GET response headers when that makes sense, for example if certain features of the ad server are used or in order to renew the cookie’s lifetime.

Adform does not use any other cookies (such as flash cookies) or a similar functionality to track visitors or their browsers. Adform does not store any personal data, such as the visitor’s name or address, in browser cookies.

No personal data, such as the visitor’s name or address, is passed on to Adform.

Adform opt-out link: http://site.adform.com/privacy-policy/de/

Use of Google (Universal) Analytics for web analytics

This website uses Google (Universal) Analytics, a web analytics service from Google Inc. , to analyze use of the website. We use it solely to measure the success of our Google Ads. This safeguards our overriding legitimate interest, based on a weighing of interests, in ensuring optimum presentation of our offering. Google (Universal) Analytics uses methods, such as cookies, that enable analysis of how you use the website. The automatically collected information on your use of this website is usually transferred to and stored on a server operated by Google in the USA. If IP anonymization is activated on this website, the IP address will be truncated before being sent within the member states of the European Union or in other countries that are party to the Agreement on the European Economic Area. The complete IP address is sent to a Google server in the USA and truncated there only in exceptional cases. The IP address sent from your browser as part of Google Analytics is not combined by Google with other data.

Google LCC is headquartered in the USA and is certified under the EU-US Privacy Shield. You can find an up-to-date certificate here. Pursuant to this agreement between the USA and the European Commission, the latter has confirmed that companies certified under the Privacy Shield Framework have an adequate level of data protection.

You can prevent recording of the data relating to your use of the website and generated by the cookie (including your IP address) and processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en

Alternatively to the browser plug-in, you can click on this link to prevent recording by Google Analytics on this website in the future. An opt-out cookie is then stored on your device. If you delete your cookies, you must click on the link again.

Overview and description of the cookies we use

Type of cookie	Name	Purpose
Authentication cookie	JESSIONID	This cookie is used to authenticate the session. JESSIONID is a randomly generated value which the server uses to uniquely identify the user’s session.
Web tracking cookie Adobe SiteCatalyst	s_cc	JavaScript code sets and reads this cookie to determine whether cookies have been activated. This cookie is a session cookie and expires when the browser is closed.
Web tracking cookie Adobe SiteCatalyst	s_sq	This cookie collects information in anonymous form on the links the user clicks on. This is done to find out which links are used and which are not used, with the aim of improving the web offering. This cookie is a session cookie and expires when the browser is closed.
Web tracking cookie Adobe SiteCatalyst	S_vi	This cookie is used to recognize a repeat visitor as being one and the same user and to collect information on how our website is used. We continually improve our website and provide users with more customized content on the basis of this information. The cookie collects the above information in anonymous form (individual visitor ID, time and date stamp). This is a persistent cookie which has a lifetime of 2 years.
Web tracking cookie Adobe SiteCatalyst	icSearchClickDetail	This cookie collects information in anonymous form regarding the search result on which the user clicks. This information is used to optimize the internal search function. This cookie is a session cookie and remains active until the user next visits the site.
nugg.add Cookies	d, ut, ci	nugg.ad identifies relevant target groups for advertising on the basis of socio-demographic attributes and product interests. Only statistical patterns from the use of online advertising and editorial content are processed. The d cookie, like the dp cookie, is used for target group analysis and contains the number of page hits in various thematic areas. The ci cookie is used to record how often you are shown a particular advertisement. These cookies only contain general information about your Internet use and have a lifetime of 26 weeks.
	ratingDateCookie	This cookie is used to control the customer satisfaction survey on Deutsche Post websites. It records whether the survey has already taken place and ensures that it does not reappear immediately after participation. Valid for one year.
	ratingDateCookie2	This cookie is used to control general customer surveys on Deutsche Post websites. It records whether the survey has already taken place and ensures that it does not reappear immediately after participation. Valid for one year.

Adform Cookies

Type of cookie	Name	Purpose
Web tracking cookie Adform	C	Identifies whether the user’s browser accepts cookies. 1 = cookies are permitted, 3 = opt-out
	TPC	Identifies whether the user’s browser accepts third-party cookies
	GCM	Identifies if there is a need to re-check partner cookies for matching existence
	token	Security token for opt out functionality
	otsid	Advertiser specific opt-out
	uid	Unique identifier
	cid	Cookie ID (legacy) – same as uid
	SR<RotatorID>	Sequential rotator information – contains total impressions, daily impressions, total clicks, daily clicks, and last impression date
	CT<TrackingSetu pID>	Identifies last click membership for third-party pixels on the advertiser’s page
	EBFCD<BannerID>	Identifies daily frequency capping for expanding banners
	EBFC<BannerID>	Identifies total frequency capping for expanding banners
	CFFC<TagID>	Compound banner frequency capping

Google Analytics cookies

Type of cookie	Name	Purpose
Ad Serving Services	id	Contains a unique identifier to help distinguish which ads have been displayed on a device on behalf of the Google Inc. advertising platform “DoubleClick”. Enables the effectiveness of ads to be identified and allows them to be tailored better to the user.
Ad Serving Services	IDE	Not classified
Web Analytics	__utma	This cookie is used to distinguish users and sessions. The cookie is created when the JavaScript library executes and no existing __utma cookie exists. The cookie is updated every time data is sent to Google Analytics.
Web Analytics	__utmb	This cookie is used to determine new sessions/visits. The cookie is created when the JavaScript library executes and no existing __utmb cookie exists. The cookie is updated every time data is sent to Google Analytics.

Security: We have taken extensive technical and organizational security precautions to protect your personal data stored by us against unauthorized access and misuse. Our security procedures are reviewed regularly and adapted to technological advances.

Standortfinder

Collection and processing of personal data: When you visit our websites, our web servers temporarily store the following information as standard for the purpose of system security: the connection data of the requesting computer system, which of our websites you visit, the date and length of your visit, the data identifying the type of browser and operating system used, and the website from which you visit us. Other personal data, such as your name, address, telephone number or e-mail address, is not collected unless you provide this data voluntarily, for example as part of a registration procedure, survey, competition, performance of a contract or request for information.

Use and forwarding of personal data: We use the personal data provided by you exclusively for the purpose of technical administration of our websites and to fulfill your wishes and requirements, i.e. generally to perform the contract concluded with you or to respond to your inquiry.

We only use such data for product-related surveys and marketing purposes if you have given us your prior consent and if you have not filed an objection, insofar as this is permitted by law.

Your personal data is not disclosed, sold or otherwise transferred to third parties, unless that is necessary for handling the contract or you have given your explicit consent. It may be necessary, for example, for us to disclose your address and order data to our suppliers when you order products.

Information from the Group: The companies in the Deutsche Post DHL Group would like to contact you with information about offers and other news relating to our products and services. If you register with our websites, we will therefore ask you to tell us whether you would like to receive direct promotional messages from us. As a customer of Deutsche Post, you will naturally continue to receive the necessary information on important changes relating to existing contracts (e.g. price changes).

Use of web tracking: We use tracking software on our websites to monitor their frequency of use and the number of users. This software does not collect personal data and IP addresses. The data is used exclusively in anonymized, summarized form for statistical purposes and for the development of the website.

Use of cookies: Cookies are small files that enable us to store information related specifically to you, the user, on your PC while you visit one of our websites. Cookies help us to determine how frequently our Internet pages are accessed as well as the number of users. They also help us configure our offerings so that they are as convenient and efficient as possible for you.

On the one hand, we use, “session cookies”, i.e. cookies that are stored exclusively for the duration of your visit to one of our Internet pages. On the other, we use “persistent cookies” to retain information about visitors who repeatedly access one of our Internet pages. The purpose of using these cookies is to be able to offer you optimal user guidance as well as to “recognize” you and thus be able to present (as far as possible) diversified Internet pages and fresh content if you use the pages repeatedly. The content of a persistent cookie is limited to an identification number. Your name, IP address, etc. are not saved. We do not create an individual profile of your online activities.

You can also use our offerings without cookies. In your browser, you can deactivate the saving of cookies, limit them to certain websites or set your browser so that you are notified as soon as a cookie is sent. You can also delete cookies from your PC at any time (“cookies” folder). However, please note that in this case you will have to expect restricted page presentation and user guidance.

Overview and description of the cookies we use

Type of cookie	Name	Purpose
Authentication cookie	JESSIONID	This cookie is used to authenticate the session. JESSIONID is a randomly generated value which the server uses to uniquely identify the user’s session.
Form cookie	PA_JESSIONID	This cookie is used by our FGEN form generator. When multistage forms are used, the values (data) are cached here. The cookie is deleted when the form is completed and closed. PA_JESSIONID is a randomly generated value which the server uses to uniquely identify the user’s session.
Web tracking cookie Adobe SiteCatalyst	s_cc	JavaScript code sets and reads this cookie to determine whether cookies have been activated. This cookie is a session cookie and expires when the browser is closed.
Web tracking cookie Adobe SiteCatalyst	s_sq	This cookie collects information in anonymous form on the links the user clicks on. This is done to find out which links are used and which are not used, with the aim of improving the web offering. This cookie is a session cookie and expires when the browser is closed.
Web tracking cookie Adobe SiteCatalyst	S_vi	This cookie is used to recognize a repeat visitor as being one and the same user and to collect information on how our website is used. We continually improve our website and provide users with more customized content on the basis of this information. The cookie collects the above information in anonymous form (individual visitor ID, time and date stamp). This is a persistent cookie which has a lifetime of 2 years.
nugg.add Cookies	d, ut, ci	nugg.ad identifies relevant target groups for advertising on the basis of socio-demographic attributes and product interests. Only statistical patterns from the use of online advertising and editorial content are processed. The d cookie, like the dp cookie, is used for target group analysis and contains the number of page hits in various thematic areas. The ci cookie is used to record how often you are shown a particular advertisement. These cookies only contain general information about your Internet use and have a lifetime of 26 weeks.

Security: Deutsche Post takes all necessary technical and organizational security measures to protect your personal data from being lost or misused. For instance, your data is saved in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer (SSL) technology during transmission. This means that an approved encryption procedure is used for communication between your computer and the Deutsche Post servers if your browser supports SSL.

Should you wish to contact Deutsche Post by e-mail, we would like to point out that the confidentiality of the information sent cannot be guaranteed. The contents of e-mail messages can be read by third parties. We therefore advise you to send us confidential information solely by post.

Bing Maps

By integrating Bing Maps for location searches, Deutsche Post has improved the user experience on this website. You can use the location finder on this website to look for Packstations and Paketshops, which are shown on a Bing Maps map.

To display the map, we use Bing Maps from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, United States). The following data is transferred to Microsoft:

Referrer (address of the page on which Bing Maps is being used)
IP address of the user
The browser being used, browser preferences such as the browser size and resolution, browser plugins, date, language setting
User’s location – only if the user explicitly confirms the “Allow www.dhl.de to access your location?” browser prompt
Data is processed on the basis of Article 6(1)(a) GDPR. By clicking on “Enable map” you authorize the transfer of data to the service provider. In the context of a location search, the map shows customers the route from their current location to the retail outlet/Packstation. This service would not be possible without displaying a map.

During the location search, only the search address entered by the user is forwarded. We will not link the search to the user, nor will it be saved.

The processing relating to the use of Bing Maps and the information obtained through Bing Maps takes place in accordance with the Microsoft Bing Maps Terms of Use (Microsoft Bing Maps and MapPoint Web Service End User Terms of Use and Embedded Maps Service Terms of Use). The Microsoft Privacy Statement and the Microsoft Services Agreement are also applicable.

portokalkulator.de

Collection and processing of personal data: When you visit our websites, our web servers temporarily store the following information as standard for the purpose of system security: the connection data of the requesting computer system, which of our websites you visit, the date and length of your visit, the data identifying the type of browser and operating system used, and the website from which you visit us. Other personal data, such as your name, address, telephone number or e-mail address, is not collected unless you provide this data voluntarily, for example as part of a registration procedure, survey, competition, performance of a contract or request for information.

Use and forwarding of personal data: We use the personal data provided by you exclusively for the purpose of technical administration of our websites and to fulfill your wishes and requirements, i.e. generally to perform the contract concluded with you or to respond to your inquiry.

We only use such data for product-related surveys and marketing purposes if you have given us your prior consent and if you have not filed an objection, insofar as this is permitted by law.

Your personal data is not disclosed, sold or otherwise transferred to third parties, unless that is necessary for handling the contract or you have given your explicit consent. It may be necessary, for example, for us to disclose your address and order data to our suppliers when you order products.

Information from the Group: The companies in the Deutsche Post DHL Group would like to contact you with information about offers and other news relating to our products and services. If you register with our websites, we will therefore ask you to tell us whether you would like to receive direct promotional messages from us. As a customer of Deutsche Post, you will naturally continue to receive the necessary information on important changes relating to existing contracts (e.g. price changes).

Use of web tracking: We use tracking software on our websites to monitor their frequency of use and the number of users. This software does not collect personal data and IP addresses. The data is used exclusively in anonymized, summarized form for statistical purposes and for the development of the website.

Use of cookies: Cookies are small files that enable us to store information related specifically to you, the user, on your PC while you visit one of our websites. Cookies help us to determine how frequently our Internet pages are accessed as well as the number of users. They also help us configure our offerings so that they are as convenient and efficient as possible for you.

On the one hand, we use, “session cookies”, i.e. cookies that are stored exclusively for the duration of your visit to one of our Internet pages. On the other, we use “persistent cookies” to retain information about visitors who repeatedly access one of our Internet pages. The purpose of using these cookies is to be able to offer you optimal user guidance as well as to “recognize” you and thus be able to present (as far as possible) diversified Internet pages and fresh content if you use the pages repeatedly. The content of a persistent cookie is limited to an identification number. Your name, IP address, etc. are not saved. We do not create an individual profile of your online activities.

You can also use our offerings without cookies. In your browser, you can deactivate the saving of cookies, limit them to certain websites or set your browser so that you are notified as soon as a cookie is sent. You can also delete cookies from your PC at any time (“cookies” folder). However, please note that in this case you will have to expect restricted page presentation and user guidance.

Overview and description of the cookies we use

Type of cookie	Name	Purpose
Authentication cookie	JESSIONID	This cookie is used to authenticate the session. JESSIONID is a randomly generated value which the server uses to uniquely identify the user’s session.
Form cookie	PA_JESSIONID	This cookie is used by our FGEN form generator. When multistage forms are used, the values (data) are cached here. The cookie is deleted when the form is completed and closed. PA_JESSIONID is a randomly generated value which the server uses to uniquely identify the user’s session.
Web tracking cookie Adobe SiteCatalyst	s_cc	JavaScript code sets and reads this cookie to determine whether cookies have been activated. This cookie is a session cookie and expires when the browser is closed.
Web tracking cookie Adobe SiteCatalyst	s_sq	This cookie collects information in anonymous form on the links the user clicks on. This is done to find out which links are used and which are not used, with the aim of improving the web offering. This cookie is a session cookie and expires when the browser is closed.
Web tracking cookie Adobe SiteCatalyst	S_vi	This cookie is used to recognize a repeat visitor as being one and the same user and to collect information on how our website is used. We continually improve our website and provide users with more customized content on the basis of this information. The cookie collects the above information in anonymous form (individual visitor ID, time and date stamp). This is a persistent cookie which has a lifetime of 2 years.
nugg.add Cookies	d, ut, ci	nugg.ad identifies relevant target groups for advertising on the basis of socio-demographic attributes and product interests. Only statistical patterns from the use of online advertising and editorial content are processed. The d cookie, like the dp cookie, is used for target group analysis and contains the number of page hits in various thematic areas. The ci cookie is used to record how often you are shown a particular advertisement. These cookies only contain general information about your Internet use and have a lifetime of 26 weeks.

Security: Deutsche Post takes all necessary technical and organizational security measures to protect your personal data from being lost or misused. For instance, your data is saved in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer (SSL) technology during transmission. This means that an approved encryption procedure is used for communication between your computer and the Deutsche Post servers if your browser supports SSL.

Should you wish to contact Deutsche Post by e-mail, we would like to point out that the confidentiality of the information sent cannot be guaranteed. The contents of e-mail messages can be read by third parties. We therefore advise you to send us confidential information solely by post.

Portoberater

Collection and processing of personal data: When you visit our websites, our web servers temporarily store the following information as standard for the purpose of system security: the connection data of the requesting computer system, which of our websites you visit, the date and length of your visit, the data identifying the type of browser and operating system used, and the website from which you visit us. Other personal data, such as your name, address, telephone number or e-mail address, is not collected unless you provide this data voluntarily, for example as part of a registration procedure, survey, competition, performance of a contract or request for information.

Use and forwarding of personal data: We use the personal data provided by you exclusively for the purpose of technical administration of our websites and to fulfill your wishes and requirements, i.e. generally to perform the contract concluded with you or to respond to your inquiry.

We only use such data for product-related surveys and marketing purposes if you have given us your prior consent and if you have not filed an objection, insofar as this is permitted by law.

Your personal data is not disclosed, sold or otherwise transferred to third parties, unless that is necessary for handling the contract or you have given your explicit consent. It may be necessary, for example, for us to disclose your address and order data to our suppliers when you order products.

Information from the Group: The companies in the Deutsche Post DHL Group would like to contact you with information about offers and other news relating to our products and services. If you register with our websites, we will therefore ask you to tell us whether you would like to receive direct promotional messages from us. As a customer of Deutsche Post, you will naturally continue to receive the necessary information on important changes relating to existing contracts (e.g. price changes).

Use of web tracking: We use tracking software on our websites to monitor their frequency of use and the number of users. This software does not collect personal data and IP addresses. The data is used exclusively in anonymized, summarized form for statistical purposes and for the development of the website.

Use of cookies: Cookies are small files that enable us to store information related specifically to you, the user, on your PC while you visit one of our websites. Cookies help us to determine how frequently our Internet pages are accessed as well as the number of users. They also help us configure our offerings so that they are as convenient and efficient as possible for you.

On the one hand, we use, “session cookies”, i.e. cookies that are stored exclusively for the duration of your visit to one of our Internet pages. On the other, we use “persistent cookies” to retain information about visitors who repeatedly access one of our Internet pages. The purpose of using these cookies is to be able to offer you optimal user guidance as well as to “recognize” you and thus be able to present (as far as possible) diversified Internet pages and fresh content if you use the pages repeatedly. The content of a persistent cookie is limited to an identification number. Your name, IP address, etc. are not saved. We do not create an individual profile of your online activities.

You can also use our offerings without cookies. In your browser, you can deactivate the saving of cookies, limit them to certain websites or set your browser so that you are notified as soon as a cookie is sent. You can also delete cookies from your PC at any time (“cookies” folder). However, please note that in this case you will have to expect restricted page presentation and user guidance.

Overview and description of the cookies we use

Type of cookie	Name	Purpose
Authentication cookie	JESSIONID	This cookie is used to authenticate the session. JESSIONID is a randomly generated value which the server uses to uniquely identify the user’s session.
Form cookie	PA_JESSIONID	This cookie is used by our FGEN form generator. When multistage forms are used, the values (data) are cached here. The cookie is deleted when the form is completed and closed. PA_JESSIONID is a randomly generated value which the server uses to uniquely identify the user’s session.
Web tracking cookie Adobe SiteCatalyst	s_cc	JavaScript code sets and reads this cookie to determine whether cookies have been activated. This cookie is a session cookie and expires when the browser is closed.
Web tracking cookie Adobe SiteCatalyst	s_sq	This cookie collects information in anonymous form on the links the user clicks on. This is done to find out which links are used and which are not used, with the aim of improving the web offering. This cookie is a session cookie and expires when the browser is closed.
Web tracking cookie Adobe SiteCatalyst	S_vi	This cookie is used to recognize a repeat visitor as being one and the same user and to collect information on how our website is used. We continually improve our website and provide users with more customized content on the basis of this information. The cookie collects the above information in anonymous form (individual visitor ID, time and date stamp). This is a persistent cookie which has a lifetime of 2 years.
nugg.add Cookies	d, ut, ci	nugg.ad identifies relevant target groups for advertising on the basis of socio-demographic attributes and product interests. Only statistical patterns from the use of online advertising and editorial content are processed. The d cookie, like the dp cookie, is used for target group analysis and contains the number of page hits in various thematic areas. The ci cookie is used to record how often you are shown a particular advertisement. These cookies only contain general information about your Internet use and have a lifetime of 26 weeks.

Security: Deutsche Post takes all necessary technical and organizational security measures to protect your personal data from being lost or misused. For instance, your data is saved in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer (SSL) technology during transmission. This means that an approved encryption procedure is used for communication between your computer and the Deutsche Post servers if your browser supports SSL.

Should you wish to contact Deutsche Post by e-mail, we would like to point out that the confidentiality of the information sent cannot be guaranteed. The contents of e-mail messages can be read by third parties. We therefore advise you to send us confidential information solely by post.

Online Franking Post service

Collection and processing of personal data: When you visit the Online Franking Post service, our web servers store the following information as standard for the purpose of system security: the connection data of the requesting device, which of our websites you visit, the date and length of your visit, data identifying the type of browser and operating system used and the website from which you visit us. If you place an order, your purchaser data is stored for the period required by law. The legal basis for data processing is Art. 6, para. 1, lit. b of the European Union General Data Protection Regulation (GDPR), as data processing is necessary for the performance the contract.

Your IP address is also temporarily stored as part of an order for a period of 6 months. This data is stored explicitly to ensure IT security and to prevent and investigate fraud. Deutsche Post AG has a legitimate interest in this so as to ensure a smooth process. The legal basis for this is Art. 6 para. 1 lit. f of the GDPR.

Other personal data, such as your name, address or telephone number, is not collected by the Online Franking Post service unless you provide this data voluntarily, for example as part of a survey or request for information. The legal basis in these cases is Art. 6, para. 1, sentence 1 lit. a of the GDPR, i.e. your consent.

Use and forwarding of personal data: Deutsche Post AG’s Online Franking Post service allows you to purchase stamps (mobile and online stamps) that you can use to send any of your letters or postcards across the country. In order to comply with legal requirements and to ensure that the contract can be processed and fulfilled, the stamp buyer’s personal data (e.g. method of receipt, the type and quantity of product, the buyer’s e-mail address and the payment method) is processed. The legal basis for processing personal data is Art. 6, para. 1, lit. b and c of the GDPR.

When you buy a stamp via the Online Franking Post service, various payment methods are available.

One payment method is the online payment service PayPal. The European operator of PayPal is PayPal (Europe) S.á.r.l. & Cie. S.C.A. 22-24 Boulevard Royal, 2449 Luxembourg, Luxemburg. If you select PayPal as your payment method, the data required for the payment process will be transmitted to PayPal. By selecting this payment option, you consent to the transmission of your personal data necessary for processing your payment. The legal basis for data processing is Art. 6, para. 1, lit. b of the GDPR as data processing is necessary for payment via PayPal and thus for the performance of the contract.

Alternatively, a credit card can be used for paying for stamps issued by the Online Franking Post service. We use the Braintree payment service offered by PayPal (Europe) S.á.r.l. & Cie. S.C.A. 22-24 Boulevard Royal, 2449 Luxembourg, Luxemburg, for this purpose. The data required to process the transaction (credit card number, expiry data and security code) will be collected and processed by the payment service provider. The legal basis for data processing is Art. 6, para. 1, lit. b of the GDPR as data processing is necessary for payment and thus for the performance of the contract.

With the exception of the name of the payment service provider used and an anonymized ID, Deutsche Post AG does not store any details on the payment. The entire payment process and the use of the payment data required for this purpose is handled solely by the payment service provider.

PayPal’s data protection provisions can be inspected in the PayPal data privacy policy. The data privacy policy for the use of the Braintree service can be found at https://www.braintreepayments.com/legal.

To make it easier for you to use your stamps, purchase-specific data such as your order number, date of purchase and the type of postage purchased is stored locally on your mobile device for 30 days, and can be found in the "Recent Purchases" section of the app. The legal basis for this is Art 6 para. 1, lit. b of GDPR.

For an easier and more pleasant purchasing process, you can also choose to save your e-mail address (we need your e-mail address so we can send you your order confirmation), so your e-mail address will already be filled in when you next want to make a purchase. E-mail address are only stored locally, and so are only saved within the application on your mobile device. The legal basis for this is Article 6, para. 1, sentence 1, lit. a of GDPR, i.e. your consent.

Your data is not forwarded, sold or otherwise transferred to third parties unless this is necessary for the purpose of performing the contract or you have explicitly given your consent. We will disclose data to government bodies only if required by law to do so.

Use of web tracking: We use tracking software (Adobe Analytics) on our website to monitor their frequency of use and the number of users. This software does not collect personal data or IP addresses. The data is used exclusively in anonymized, summarized form for statistical purposes and for the development of the website.

Use of cookies: "Cookies" are small files that allow us to store specific personal information about you, the user, on your device while you are visiting our websites. Cookies help us to determine how frequently our Internet pages are accessed as well as the number of users. And they help us configure our offers so that they are as convenient and efficient as possible for you.

On the one hand, we use "session cookies", i.e. cookies that are stored exclusively for the duration of your visit to one of our Internet pages. On the other, we use "permanent cookies” to retain information about visitors who repeatedly access one of our Internet pages. The purpose of using cookies is to be able to offer you optimal user guidance as well as to "recognize" you and thus be able to present (as far as possible) diversified Internet pages and fresh content during repeated use. The content of a permanent cookie is limited to an identification number. Name, IP address, etc. are not saved. We do not create an individual profile of your online activities.

Using our products and services without cookies is also possible. In your browser, you can deactivate the saving of cookies, limit them to particular websites and set the browser to notify you when a cookie is sent. You can also delete cookies from your computer hard drive at any time (file: "cookies"). Please note that in this case you will have to expect a limited page presentation and limited user guidance.

Security: We have taken extensive technical and organizational security precautions to protect your personal data stored by us against unauthorized access and misuse. Our security procedures are reviewed regularly and adapted to technological advances.

dm.deutschepost.de

Collection and processing of personal data: When you visit the website of the Print-Mailing Planner at dm.deutschepost.de, the website from which you visit us, the pages you visit on our website, and the date and time of access are stored. Other personal data, such as your name, address, telephone number or e-mail address, is not collected unless you provide this data voluntarily, for example during registration, when you place an order for a product or service online, or as part of a survey, competition or request for information. If you place an order, your purchaser data is stored for the period of time customary under commercial law.

Use and forwarding of personal data: We use the personal data provided by you exclusively for the purpose of technical administration of our websites and to fulfill your wishes and requirements, i.e. generally to perform the contract concluded with you or to respond to your inquiry.

We only use such data for product-related surveys and marketing purposes if you have given us your prior consent and if you have not filed an objection, insofar as this is permitted by law.

Your personal data is not disclosed, sold or otherwise transferred to third parties, unless that is necessary for handling the contract or you have given your explicit consent. It may be necessary, for example, for us to disclose your address and order data to our suppliers when you order products.

Use of web tracking: We use tracking software on our websites to monitor their frequency of use and the number of users. This software does not collect personal data and IP addresses. The data is used exclusively in anonymized, summarized form for statistical purposes and for the development of the website.

Use of cookies: Cookies are small files that enable us to store information related specifically to you, the user, on your PC while you visit one of our websites. Cookies help us to determine how frequently our Internet pages are accessed as well as the number of users. They also help us configure our offerings so that they are as convenient and efficient as possible for you.

On the one hand, we use, “session cookies”, i.e. cookies that are stored exclusively for the duration of your visit to one of our Internet pages. On the other, we use “persistent cookies” to retain information about visitors who repeatedly access one of our Internet pages. The purpose of using these cookies is to be able to offer you optimal user guidance as well as to “recognize” you and thus be able to present (as far as possible) diversified Internet pages and fresh content if you use the pages repeatedly. The content of a persistent cookie is limited to an identification number. Your name, IP address, etc. are not saved. We do not create an individual profile of your online activities.

You can also use our offerings without cookies. In your browser, you can deactivate the saving of cookies, limit them to certain websites or set your browser so that you are notified as soon as a cookie is sent. You can also delete cookies from your PC at any time (“cookies” folder). However, please note that in this case you will have to expect restricted page presentation and user guidance.

Purpose and duration of storage

Type of cookie	Name	Purpose
Authentication cookie	JESSIONID	This cookie is used to authenticate the session. JESSIONID is a randomly generated value which the server uses to uniquely identify the user’s session.
Adobe Marketing Cloud - Adobe Analytics	AMCV/ AMCVS	This cookie is used to recognize returning visitors. We continually improve our website and provide users with more customized content on the basis of this information. The cookie collects the above information in anonymous form (individual visitor ID, time and date stamp). This is a persistent cookie which has a lifetime of 2 years.
Adobe Marketing Cloud - Adobe Target	mbox	This cookie allows to present you customized contents and is being used for A/B-testing to improve usability of our website. This cookie is a session cookie and expires when the browser is closed.
Adobe Marketing Cloud - Adobe Audience Manager	AAM	This cookie is used to recognize returning visitors and to provide users with more customized advertisments. The cookie collects the above information in anonymous form (individual visitor ID, time and date stamp). This is a persistent cookie which has a lifetime of 30 days.

Security: Deutsche Post takes all necessary technical and organizational security measures to protect your personal data from being lost or misused. For instance, your data is saved in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer (SSL) technology during transmission. This means that an approved encryption procedure is used for communication between your computer and the Deutsche Post servers if your browser supports SSL.

Should you wish to contact Deutsche Post by e-mail, we would like to point out that the confidentiality of the information sent cannot be guaranteed. The contents of e-mail messages can be read by third parties. We therefore advise you to send us confidential information solely by mail.

How to manage cookies: It is also possible to use our products and services without cookies. You can normally deactivate the saving of cookies in your browser or limit them to certain websites. The browser can be set to notify you when a cookie is sent. You can also delete cookies from your hard drive at any time (“cookies” folder). However, in this case you will have to expect restricted page presentation and user guidance.

For detailed information on cookies, such as how to see which cookies have been set and how to manage and delete them, visit:

All About Cookies

For further EU-specific recommendations on cookies and the various opt-out options, please visit the following website:

Your Online Choices


If you wish to switch off general web tracking by Adobe SiteCatalyst (web-tracking cookies), you can find further information on the following website:

Link for individual cookies

Adobe Analytics Tracking Opting OUT

If you wish to switch off some or all of the advertising cookies set on your computer, you can find further information on the following website:

Network Advertising Initative (NAI)

Analysis by WiredMinds: Our website uses counting pixel technology provided by WiredMinds GmbH (www.wiredminds.de) to analyze visitor behavior. In connection with this, the IP address of the visitor is processed. The processing occurs only for the purpose of collecting company based information such as company name, for example. IP addresses of natural persons are excluded from any further processing by means of a whitelist. An IP address is not stored in LeadLab under any circumstances.

While processing data, it is our outmost interest to protect the rights of natural persons. Our interest in processing data is based on Article 6(1)(f) GDPR. At no time is it possible to draw conclusions from the collected data on an identifiable person.

WiredMinds GmbH uses this information to create anonymized usage profiles of the visit behavior on our website. Data obtained during this process is not used to personally identify visitors of our website.

Exclude from tracking.

tm.deutschepost.de

Collection and processing of personal data: When you visit the website of the TRACK&MATCH service at tm.deutschepost.de, the website from which you visit us, the pages you visit on our website, and the date and time of access are stored. Other personal data, such as your name, address, telephone number or e-mail address, is not collected unless you provide this data voluntarily, for example during registration, when you place an order for a product or service online, or as part of a survey, competition or request for information. If you place an order, your purchaser data is stored for the period of time customary under commercial law.

Use and forwarding of personal data: We use the personal data provided by you exclusively for the purpose of technical administration of our websites and to fulfill your wishes and requirements, i.e. generally to perform the contract concluded with you or to respond to your inquiry.

We only use such data for product-related surveys and marketing purposes if you have given us your prior consent and if you have not filed an objection, insofar as this is permitted by law.

Your personal data is not disclosed, sold or otherwise transferred to third parties, unless this is necessary for handling the contract or you have given your explicit consent. It may be necessary, for example, for us to disclose your address and order data to our suppliers when you order products.

Use of web tracking: We use tracking software on our websites to monitor their frequency of use and the number of users. This software does not collect personal data and IP addresses. The data is used exclusively in anonymized, summarized form for statistical purposes and for the development of the website.

Use of cookies: Cookies are small files that enable us to store information related specifically to you, the user, on your PC while you visit one of our websites. Cookies help us to determine how frequently our Internet pages are accessed as well as the number of users. They also help us configure our offerings so that they are as convenient and efficient as possible for you.

On the one hand, we use, “session cookies”, i.e. cookies that are stored exclusively for the duration of your visit to one of our Internet pages. On the other, we use “persistent cookies” to retain information about visitors who repeatedly access one of our Internet pages. The purpose of using these cookies is to be able to offer you optimal user guidance as well as to “recognize” you and thus be able to present (as far as possible) diversified Internet pages and fresh content if you use the pages repeatedly. The content of a persistent cookie is limited to an identification number. Your name, IP address, etc. are not saved. We do not create an individual profile of your online activities.

You can also use our offerings without cookies. In your browser, you can deactivate the saving of cookies, limit them to certain websites or set your browser so that you are notified as soon as a cookie is sent. You can also delete cookies from your PC at any time (“cookies” folder). However, please note that in this case you will have to expect restricted page presentation and user guidance.

Purpose and duration of storage

Type of cookie	Name	Purpose
Authentication cookie	JESSIONID	This cookie is used to authenticate the session. JESSIONID is a randomly generated value which the server uses to uniquely identify the user’s session.
Adobe Marketing Cloud - Adobe Analytics	AMCV/ AMCVS	This cookie is used to recognize returning visitors. We continually improve our website and provide users with more customized content on the basis of this information. The cookie collects the above information in anonymous form (individual visitor ID, time and date stamp). This is a persistent cookie which has a lifetime of 2 years.
Adobe Marketing Cloud - Adobe Target	mbox	This cookie allows to present you customized contents and is being used for A/B-testing to improve usability of our website. This cookie is a session cookie and expires when the browser is closed.
Adobe Marketing Cloud - Adobe Audience Manager	AAM	This cookie is used to recognize returning visitors and to provide users with more customized advertisments. The cookie collects the above information in anonymous form (individual visitor ID, time and date stamp). This is a persistent cookie which has a lifetime of 30 days.

Security: Deutsche Post takes all necessary technical and organizational security measures to protect your personal data from being lost or misused. For instance, your data is saved in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer (SSL) technology during transmission. This means that an approved encryption procedure is used for communication between your computer and the Deutsche Post servers if your browser supports SSL.

Should you wish to contact Deutsche Post by e-mail, we would like to point out that the confidentiality of the information sent cannot be guaranteed. The contents of e-mail messages can be read by third parties. We therefore advise you to send us confidential information solely by mail.

How to manage cookies: It is also possible to use our products and services without cookies. You can normally deactivate the saving of cookies in your browser or limit them to certain websites. The browser can be set to notify you when a cookie is sent. You can also delete cookies from your hard drive at any time (“cookies” folder). However, in this case you will have to expect restricted page presentation and user guidance.

For detailed information on cookies, such as how to see which cookies have been set and how to manage and delete them, visit:

All About Cookies

For further EU-specific recommendations on cookies and the various opt-out options, please visit the following website:

Your Online Choices


If you wish to switch off general web tracking by Adobe SiteCatalyst (web-tracking cookies), you can find further information on the following website:

Link for individual cookies

Adobe Analytics Tracking Opting OUT

If you wish to switch off some or all of the advertising cookies set on your computer, you can find further information on the following website:

Network Advertising Initative (NAI)

E-POST

Collection and processing of personal data: When you visit our websites, our web servers store the following information as standard for the purpose of system security: the connection data of the requesting device, which of our websites you visit, the date and length of your visit, data identifying the type of browser and operating system used and the website from which you visit us. The legal basis for data processing, for the purpose of system security, is art. 6, para. 1, lit. b of the European Union General Data Protection Regulation (GDPR), as data processing is necessary to the performance the contract.

In addition to this, personal data such as your name, address, mobile telephone number or e-mail address is only recorded by E-POST when you voluntarily register for the service; the legal basis in this case is Art. 6, para. 1, sentence 1, lit. a of the European Union General Data Protection Regulation (GDPR), i.e. your consent.

Use and forwarding of personal data: We use the personal data provided by you exclusively for the purpose of technical administration of our websites and to fulfill your wishes and requirements, i.e. generally to perform the contract concluded with you or to respond to your inquiry. The legal basis for data processing is art. 6, para. 1, lit. b of GDPR.

Your personal data is not forwarded, sold or otherwise transferred to third parties, unless this is necessary for performing the contract. The legal basis for data processing is art. 6, para. 1, lit. b of GDPR.

Use of web tracking: Deutsche Post DHL generally uses tracking software (Adobe Analytics) on all of its websites to monitor their frequency of use and the number of users. This software does not collect personal data or IP addresses. The data is used exclusively in anonymized, summarized form for statistical purposes and for the development of the website.

Use of cookies: "Cookies" are small files that allow us to store specific personal information about you, the user, on your device while you are visiting our websites. Cookies also help us to determine how frequently sites are accessed, as well as the number of users, and help us to configure our offers so that they are as convenient and efficient as possible for you.

We only use what are called “session cookies”, that is to say, cookies that are stored only for the duration of your visit to our sites.

Using our products and services without cookies is also possible. In your browser, you can deactivate the saving of cookies, limit them to certain websites or be notified as soon as a cookie is sent. You can also delete cookies from your computer at any time (“cookies” folder). Please note that in this case you will have to expect a limited page presentation and limited user guidance.

Security: Deutsche Post takes all of the necessary technical and organizational security measures to protect your personal data from being lost or misused. For instance, your data is stored in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer (SSL) technology during transmission. This means that an approved encryption procedure is used for communication between your computer and the Deutsche Post servers if your browser supports SSL.

Apps

Post mobil app

Collection and processing of personal data: When you use our app, the servers used store by default the date, the type of device you use, the type and version of your operating system, and the type and version of the browser you used, with the objective of enhancing system security and conducting statistical analyses. Personal particulars above and beyond that, such as your name, address, phone number or e-mail address, are not recorded. That means Deutsche Post is informed, for example, that an unknown iPhone 5 with iOS 7 installed on it clicked on the “Postfinder” function in the Post mobil app.

Use of app tracking: We use software such as Flurry (see the section “Privacy statement on Flurry“) and Crashlytics
(http://try.crashlytics.com/terms/) to ascertain the frequency of use and number of users of our Post mobil app and any stability problems with it. This software does not collect personal data. The data is used exclusively in anonymized, summarized form for statistical purposes and for the development of the app.

Privacy statement on Flurry: We use Flurry Analytics to keep on improving our app and identify errors in a timely manner. The tool also helps us ascertain user behavior in the app by creating anonymized usage reports. We do not send any personal data to Flurry; in addition, all the data is anonymized. You can find a means of opting out from the services of Flurry at: https://dev.flurry.com/secure/optOut.do. You can find Flurry’s privacy policy at: http://www.flurry.com/resources/privacy.html

Use of the Portocode function: If you use the Portocode function and scan a Portocode shipment you have received, the ID of your device is stored for a limited period of time (a maximum of 7 days) for security reasons. However, no personal data is stored. The sender of the Portocode shipment is informed, in anonymized and summarized form, about how often the matrix codes are scanned and how often further actions, such as calling of URLs, have been performed. However, the sender does not obtain any personal usage data.

We point out that the information that can be called using the Portocode function may be advertising content of the sender and Deutsche Post AG.

Use of cookies: No cookies are used in the Post mobil app. They are also not used in the banners that are displayed.

Social networks

Facebook

Data privacy statement on use of the Facebook page www.facebook.com/Deutschepost

1. Introduction

Deutsche Post AG is pleased to welcome you to our Facebook fan page, thank you for your interest in our company, products and services. In the following document, we would like to inform you about certain issues related to data protection laws that apply when you visit our fan page.

Our fan page was provided to us by Facebook in accordance with valid terms of use. Facebook is solely responsible for the technical operation of the fan page.
We are solely responsible for the content that we post on the page.
Your visit and your interaction on our fan page are tracked by Facebook. This information will be provided to us in anonymized form (as page insights). If you have a Facebook account, Facebook will process your data in accordance with Facebook's own terms of use. If you are not a member of Facebook, your interactions on our fan page will be anonymously tracked and will also be provided to us in the form of statistical analysis (page insights). Both Facebook and we are jointly responsible for processing personal data in events related to page insights (insight data).
Pursuant to the agreement between Facebook and us (a page insights addendum), every joint controller shall fulfill its information obligations on its own.
You may exercise your rights as the data subject (see Item 4) by contacting the officer responsible for insights data. Should we receive an inquiry that falls into Facebook's area of responsibility, we shall forward it to Facebook for further processing.
We have no say in Facebook's processing of the data. Furthermore, we possess no information regarding the degree, purposes and length of time that Facebook will store the data and possibly evaluate, link and transmit the information to third parties. If you would like to contact us directly, i.e. without the participation of Facebook, please use the contact details on our website at https://www.dhl.de/meinkundenservice.
You will find additional information regarding data processing for which Facebook is solely responsible in Facebook's data policy https://facebook.com/policy.php and cookie policy https://www.facebook.com/policy/cookies/.

2. Who is responsible for data processing?: Deutsche Post AG, Charles-de-Gaulle Str. 20, 53113 Bonn, Germany, is responsible for the information it posts and also for its processing.

You can reach our data protection officer(s) at
Deutsche Post AG
Corporate Data Protection
53250 Bonn, Germany
datenschutz@dpdhl.com

Facebook Ireland Ltd, 4 Grand Canal Harbour, Dublin 2, Ireland, and Deutsche Post AG are jointly responsible for processing the personal data in events for page insights (Insights data). Collective processing is based on an agreement between the joint controllers pursuant to Article 26 of the GDPR, which you can view at: https://www.facebook.com/legal/terms/page_controller_addendum.

3. Which data do we process, and how and why do we process your data?: 3.1 Data processing of page insights for statistical purposes

For our fan page, Facebook provides us with page insights: https://www.facebook.com/business/a/page/page-insights. Page insights are anonymous statistics that are generated as a result of certain events and are tracked by Facebook when a fan page visitor such as you interacts on our fan page. We can use the page insights, which contain no personal data, to see which content is particularly accessed by which group of individuals. We can also use these data to optimize our fan page itself. This represents a legitimate interest for processing (processing of personal data in events for page insights). The legal basis for data processing related to page insight is Article 6 (1), Letter f of the GDPR.
You can adjust your Facebook ad preference settings in your Facebook account under https://www.facebook.com/settings?tab=ads.

3.2 Data processing resulting from contacting us and from other communications

We ourselves do not collect personal data when you get in touch with us by using a contact form or Messenger, among other options. This data is processed exclusively for the purpose of responding to the inquiry, for establishing contact, for the associated technical administration and, unless other statutory or contractual retention periods apply, will be used for a maximum of two years to prove correct and proper processing and for further optimization of services.

Our legitimate interest is to properly address your matter as quickly as possible. The legal basis for the processing is Article 6 (1), Letter f of the GDPR. If the contact is initiated for contract inception or conclusion, Article 6 (1), Letter b of the GDPR will serve as the legal basis.

If you provide us with personal data on our fan page (e.g., as part of comments), this process shall be conducted on the basis of your consent in accordance with Article 6 (1), Letter a of the GDPR. You may revoke your consent at any time with effect for the future. If you would like to exchange personal data with us, we recommend that you contact our customer service at https://www.dhl.de/meinkundenservice.

Data is also collected for the purpose of holding and processing competitions. The respective details, such as which data is processed for which purpose, can be found in the data protection notices and terms and conditions of the respective competition.

3.3 Data processing for direct marketing purposes

We process personal data in order to inform you about our offers, innovations, products and services. Personal data are processed for direct marketing purposes within the context of our legitimate interests. The legal basis for this data processing is Article 6 (1), Letter f of the GDPR. You have the right at all times to object to the processing for direct marketing purposes (see Item 4). Once your objection has been expressed, your personal data shall no longer be processed for these purposes.

4. What rights do users have?

Under the GDPR, data subjects shall have the following rights:

Under Article 15 of the GDPR, they have the right to receive information regarding the personal data that are processed by the respective controller.
They may request a rectification under Article 16 of the GDPR, provided that their data are not or are no longer correct.
Under Article 17 of the GDPR, the data subjects may demand that their personal data be erased.
Under Article 18 of the GDPR, they have the right to demand a restriction on the processing of their personal data.
If the conditions of Article 20 (1) of the GDPR have been met, the data subjects have the right to receive their data in a structured, commonly used and machine-readable format.
Under Article 77 (1) of the GDPR, they have the right to lodge a complaint with the responsible data-protection authority.
Under Article 21 (2) of the GDPR, you may at any time object to the processing of your personal data for direct marketing purposes.
Under Article 21 of the GDPR, the data subjects have the right to object, provided that their data are processed on the basis of a legitimate interest in terms of Article 6 (1), Letter f of the GDPR (see Items 3.1 and 3.2) and provided that they can cite grounds relating to their own particular situation. You can lodge an objection with our Facebook customer service at https://www.deutschepost.de/meinkundenservice by stating your contact details, the specific processing to which you are objecting, the grounds for objection arising from your particular situation and the name of the fan page.

or in the case of an objection to the processing of page insights for statistical purposes (see Item 3.1) with Facebook. Should we receive an inquiry that falls into Facebook's area of responsibility, we shall forward it to Facebook for further processing.

If you wish to exercise data subject rights against Facebook, please contact Facebook Ireland Ltd., 4 Grand Canal Harbour, Dublin 2, Ireland. You may exercise these rights online by using the contact form provided on the Facebook site: https://www.facebook.com/help/contact/540977946302970.
If you would like to exercise your rights as a data subject in dealings with us, please use the contact data included in Item 2.

Instagram

Information about Privacy

1. Information on the Collection of Personal Data und Contact Details of the Controller

Deutsche Post AG is pleased to welcome you to its Instagram fan page and thanks you for your interest in our company, products and services. In the following document, we would like to inform you about certain issues related to data protection laws that apply when you visit our fan page.

Our fan page was provided to us by Instagram in accordance with valid terms of use. Instagram is solely responsible for the technical operation of the fan page.
We are solely responsible for the content that we post on the page.
Your visit and your interaction on our fan page are tracked by Instagram. This information will be provided to us in anonymized form (page insights). If you have an Instagram account, Instagram will process your data in accordance with Instagram’s own terms of use. If you are not a member of Instagram, your interactions on our fan page will be anonymously tracked and will also be provided to us in the form of statistical analysis (page insights). Both Facebook as the operator of Instagram and we are jointly responsible for processing personal data in events related to page insights (insights data).
Pursuant to the agreement between Instagram and us (a page insights addendum), every joint controller shall fulfill its information obligations on its own.
You may exercise your rights as the data subject (see Item 4) by contacting the officer responsible for insights data. Should we receive an inquiry that falls into Instagram’s area of responsibility, we shall forward it to Instagram for further processing.
We have no say in Instagram’s processing of the data. Furthermore, we possess no information regarding the degree, purposes and length of time that Instagram will store the data and possibly evaluate, link and transmit the information to third parties. If you would like to contact us directly, i.e., without the participation of Instagram, please use the contact details on our website at https://www.deutschepost.de/meinkundenservice.
You will find additional information regarding data processing for which Instagram is solely responsible in Instagram’s data policy https://help.instagram.com/519522125107875 and cookie policy https://help.instagram.com/1896641480634370?ref=ig.

2. Who is responsible for data processing?: Deutsche Post AG, Charles-de-Gaulle Str. 20, 53113 Bonn, Germany, is responsible for the information it posts and also for its processing.

You can reach our data protection officer(s) at

Deutsche Post AG
Corporate Data Protection
53250 Bonn
Germany
datenschutz@dpdhl.com

Facebook Ireland Ltd, 4 Grand Canal Harbour, Dublin 2, Ireland, as the provider of Instagram and Deutsche Post AG are jointly responsible for processing the personal data in events for page insights (insights data). Collective processing is based on an agreement between the joint controllers pursuant to Article 26 of the General Data Protection Regulation.

3. Which data do we process, and how and why do we process your data?: 3.1 Data processing of page insights for statistical purposes

Instagram provides us with page insights https://help.instagram.com/1533933820244654. Page insights are anonymous statistics that are generated as a result of certain events and are tracked by Instagram when a fan page visitor such as you interacts on our fan page. We can use the page insights, which contain no personal data, to see which content is particularly accessed by which group of individuals. We can also use these data to optimize our fan page itself. This represents a legitimate interest for processing (processing of personal data in events for page insights). The legal basis for data processing related to page insight is Article 6 (1), Letter f of the GDPR.

You can adjust your Instagram ad preference settings in your Instagram account at https://www.Instagram.com/settings?tab=ads.

3.2 Data processing resulting from contacting us and from other communications

We ourselves do not collect personal data when you get in touch with us by using a contact form or Messenger, among other options. This data is processed exclusively for the purpose of responding to the inquiry, for establishing contact, for the associated technical administration and, unless other statutory or contractual retention periods apply, will be used for a maximum of two years to prove correct and proper processing and for further optimization of services.

Our legitimate interest is to properly address your matter as quickly as possible. The legal basis for the processing is Article 6 (1), Letter f of the GDPR. If the contact is initiated for contract inception or conclusion, Article 6 (1), Letter b of the GDPR will serve as the legal basis.

If you provide us with personal data on our fan page (e.g., as part of comments), this process shall be conducted on the basis of your consent in accordance with Article 6 (1), Letter a of the GDPR. You may revoke your consent at any time with effect for the future. If you would like to exchange personal data with us, we recommend that you contact our customer service at https://www.deutschepost.de/meinkundenservice.

Data is also collected for the purpose of holding and processing competitions. The respective details, such as which data is processed for which purpose, can be found in the data protection notices and terms and conditions of the respective competition.

3.3 Data processing for direct marketing purposes

We process personal data in order to inform you about our offers, innovations, products and services. Personal data are processed for direct marketing purposes within the context of our legitimate interests. The legal basis for this data processing is Article 6 (1), Letter f of the GDPR. You have the right at all times to object to the processing for direct marketing purposes (see Item 4). Once your objection has been expressed, your personal data shall no longer be processed for these purposes.

4. What rights do users have?

Under the GDPR, data subjects shall have the following rights:

Under Article 15 of the GDPR, they have the right to receive information regarding the personal data that are processed by the respective controller.
They may request a rectification under Article 16 of the GDPR, provided that their data are not or are no longer correct.
Under Article 17 of the GDPR, the data subjects may demand that their personal data be erased.
Under Article 18 of the GDPR, they have the right to demand a restriction on the processing of their personal data.
If the conditions of Article 20 (1) of the GDPR have been met, the data subjects have the right to receive their data in a structured, commonly used and machine-readable format.
Under Article 77 (1) of the GDPR, they have the right to lodge a complaint with the responsible data-protection authority.
Under Article 21 (2) of the GDPR, you may at any time object to the processing of your personal data for direct marketing purposes.
Under Article 21 of the GDPR, the data subjects have the right to object, provided that their data are processed on the basis of a legitimate interest in terms of Article 6 (1), Letter f of the GDPR (see Items 3.1 and 3.2) and provided that they can cite grounds relating to their own particular situation. You may lodge an objection with our Instagram customer service at https://www.deutschepost.de/meinkundenservice by stating your contact details, the specific processing to which you are objecting, the grounds for objection arising from your particular situation and the name of the fan page

or, in the case of an objection to the processing of page insights for statistical purposes, (see Item 3.1) with Instagram. Should we receive an inquiry that falls into Instagram’s area of responsibility, we shall forward it to Instagram for further processing.

If you wish to exercise data subject rights against Instagram, please contact Facebook Ireland Ltd., 4 Grand Canal Harbour, Dublin 2, Ireland. If you would like to exercise your rights as a data subject in dealings with us, please use the contact data included in Item 2.

1. Introduction

We are pleased that you are visiting our LinkedIn account / fan page and are interested in our company, products and services. Below, we would like to inform you about some data protection aspects in the context of your visit to our fan page.

Our fan page was made available to us by LinkedIn in accordance with the applicable terms of use. LinkedIn is solely responsible for the technical operation of the fan page.
We bear sole responsibility for the content we post on this site.
Your visit and interaction on our fan page are recorded by LinkedIn and made available to us in anonymised form (page insights). If you have a LinkedIn account, LinkedIn processes your data in accordance with the LinkedIn terms of use. If you are not a LinkedIn member, your interactions on our fan page are recorded anonymously and also made available to us as a statistical evaluation (page insights). We and LinkedIn Ireland are jointly responsible for the processing of personal data in events for page insights (insights data).
In accordance with the agreement applicable to LinkedIn and us (known as the page insights supplement), each joint controller is responsible for fulfilling its own information obligations.
Please exercise your rights as a data subject (see section 4) against one of the Insights data controllers. If we receive a request that falls within LinkedIn's area of responsibility, we pass it on to LinkedIn for further processing.
In addition, on the one hand, we have no influence on the data processing by LinkedIn and, on the other hand, it is not apparent to us to what extent, for what purposes and for how long the data is stored by LinkedIn and, if applicable, evaluated, linked and passed on to third parties. If you wish to contact us directly, i.e. without the involvement of LinkedIn, please use the contact options on our website.
For more information on the data processing for which LinkedIn Ireland is solely responsible, please see LinkedIn's Privacy Policy and Cookie Policy.

2. Who is responsible for data processing?: Deutsche Post AG, Charles-de-Gaulle Str. 20, 53113 Bonn, Germany, is the responsible party for the information it posts and the processing for which it is responsible.

You can reach our data protection officer at
Deutsche Post AG
Konzerndatenschutz
53250 Bonn
datenschutz[at]dpdhl.com

As far as the processing of personal data in Events for Page Insights (Insights Data) is concerned, LinkedIn Ireland Unlimited Company ("LinkedIn Ireland"), as the provider of LinkedIn in the countries of the European Union (EU) and the European Economic Area (EEA) as well as Switzerland, is the data controller in addition to us. Joint processing is carried out on the basis of an agreement between the joint controllers in accordance with Article 26 of the GDPR.

3. What data do we process and how and why do we process your data?: 3.1 Data processing of page insights for statistical purposes
LinkedIn provides us with so-called page insights for our fan page. Page insights are anonymous statistics created based on certain events and collected by LinkedIn when fan page visitors like you take action on our fan page. Based on the page insights, which do not contain any personal data, we are able to identify which content is most frequently requested by which group of people. Based on this, we can optimise our fan page appearance. This constitutes a legitimate interest for the processing taking place (processing of personal data in events for site insights). The legal basis for data processing as part of the page insights is Art. 6(1)(f) GDPR.

You can change your LinkedIn advertising preferences settings in your LinkedIn account at https://www.linkedin.com/campaignmanager/accounts/508274196/campaign-groups and
at https://www.linkedin.com/campaignmanager/accounts/508015026/campaign-groups

3.2 Data processing when contacting us and further communication
We process personal data when you contact us, e.g. via contact form or by comment. This data is processed exclusively for the purpose of responding to the request, for contacting you and for the associated technical administration and, provided that no other legal or contractual retention periods apply, is used for a maximum of two years to provide evidence of proper processing and further optimisation of services.

Our legitimate interest is to process your request properly and as quickly as possible. The legal basis for this processing is Art. 6(1)(f) GDPR. If the contact is made for the purpose of initiating or concluding a contract, Art. 6 (1)(b) GDPR is used as the legal basis.

If you provide us with personal data via our fan page (e.g. in comments), this is done on the basis of your consent pursuant to Art. 6 (1)(a) GDPR. You can revoke this consent at any time with effect for the future. If you wish to exchange personal data with us, we recommend that you contact our customer service.

In the context of competitions, data is collected for their implementation and processing. The details of this, such as which data is processed for which purpose, can be found in the data protection information and conditions of participation of the respective competition.

3.3 Data processing for direct marketing purposes
We process personal data to inform you about our offers, news, products and services. Personal data is processed for our own direct marketing purposes within the scope of our legitimate interest. The legal basis for this data processing is Art. 6(1)(f) GDPR. You have the right to object to processing for direct marketing purposes at any time (see Point 4). If you object, your personal data will no longer be processed for these purposes.

4. What rights do users have?

Under the GDPR, data subjects are entitled to the following rights:

In accordance with Art. 15 GDPR, you can request information about your personal data processed by the particular controller.
You can request rectification in accordance with Art. 16 GDPR if your data is not (or is no longer) correct.
You can request the deletion of your personal data in accordance with Art. 17 GDPR.
In accordance with Art. 18 GDPR, you have the right to request a restriction on the processing of your personal data.
If the requirements of Art. 20(1) GDPR are met, you have the right to receive your data in a structured, commonly used and machine-readable format.
In accordance with Art. 77 (1) GDPR, you have the right to complain to the competent data protection supervisory authority.
In accordance with Art. 21 (2) GDPR, you may object to the processing of personal data relating to you for direct marketing purposes at any time.
You have the right to object in accordance with Art. 21 GDPR if the processing of your data is based on a legitimate interest within the meaning of Art. 6(1)(f) GDPR (see Sections 3.1 and 3.2) and if you can provide reasons for this arising from your particular situation. You can submit the objection to our Instagram customer service, stating your contact details, the specific processing you are objecting to, the reasons for objection resulting from your particular situation and the name of the fan page.

or in the case of an objection to the processing of page insights for statistical purposes (see Point 3.1) to LinkedIn. If we receive a request that falls within LinkedIn's area of responsibility, we pass it on to LinkedIn for further processing.

If you wish to exercise data subject rights against LinkedIn, please contact:

LinkedIn Ireland Unlimited Company
Attn: Legal Dept (Privacy Policy and User Agreement)
Wilton Plaza
Wilton Place,
Dublin 2
Ireland

If you would like to exercise your data subject rights against us, please contact us using the contact details provided under Point 2.

TikTok

Data Protection Information regarding the Use of Deutsche Post’s TikTok Profile

1. Introduction

Deutsche Post AG (hereinafter referred to as “we” or “us”) is pleased to welcome you to our TikTok profile and thanks you for your interest in our company, products and services. In the following document, we would like to inform you about certain issues related to data protection laws that apply when you visit our profile.

Our profile was made available to us by TikTok Technology Limited (hereinafter referred to as “TikTok”) in accordance with the applicable terms of use. TikTok is solely responsible for the technical operation of this profile.
We are solely responsible for the content that we post on this page (such as information about our company, products, services, contests, campaigns) and for our interaction with visitors to our profile.
TikTok operates the entire IT infrastructure of the TikTok platform. It makes its Privacy Policy available to users and has its own separate relationship with registered users of the TikTok platform. TikTok is solely responsible for all data protection topics involving your user profile, to which we have no access.
We have no influence over TikTok’s processing of the data it collects. Furthermore, we have no information regarding the extent to which, the purposes for which or the length of time that TikTok stores personal data and possibly analyzes, links or transfers it to third parties. Please note that your personal data can, under certain circumstances, also be processed outside of the European Union / European Economic Area. This could result in data protection risks for users because an adequate level of data protection cannot be guaranteed in such cases and the ability to assert data subject rights is limited. Please see TikTok’s Privacy Policy and Cookie Policy for the TikTok platform to learn more about TikTok’s data processing activities and how you can exercise your rights vis-á-vis TikTok.
If you would like to contact us directly – in other words, without the involvement of TikTok – please use the contact service on our website.

2. Contacting the data controller and data protection officer: Deutsche Post AG, Charles-de-Gaulle Str. 20, 53113 Bonn, Germany, is the data controller for the information it posts and also for the data processing that falls in its area of responsibility.

You can reach our data protection officer(s) at

Deutsche Post AG
Corporate Data Protection
53250 Bonn, Germany
datenschutz[at]dpdhl.com

3. Purpose and legal basis of processing: 1.1 Data processing in connection with our TikTok profile

We use our TikTok profile to inform you about, for example, our company, products, services, campaigns and contests and to interact with you regarding various topics and respond to your inquiries. The data processing performed in this connection is undertaken to safeguard our legitimate interests in accordance with Article 6(1)(f) of the GDPR. Our legitimate interest lies in public relations work and communication.

TikTok publishes the information you provide on our profile, such as comments, likes, images and videos, and we process this information solely for the above-mentioned purposes. We reserve only the right to erase illegal content should this be necessary. This applies, for example, to posts that constitute infringements of the law or are unlawful, hate comments, suggestive comments (explicitly sexual content) or attachments (such as images or videos), which under circumstances violate copyrights, privacy rights, criminal law or Deutsche Post AG’s ethics rules.

Data are also collected for the purpose of holding and processing contests. The details, such as which data are processed and the purpose of the processing, can be found in the data protection notices and terms and conditions of the respective contest.

If you would like to exchange personal data with us, we recommend that you contact our customer service.

3.2 Social media monitoring

We use social media monitoring in order to obtain a picture of how our business, our products and our services are viewed and, based on this, identify potential for improvement. This entails analyzing posts on the TikTok platform based on the channel links used and relevant hashtag links. Only those posts to which you allow full public access will be used for this. The legal basis for processing personal data as part of social media monitoring is Article 6(1)(f) of the GDPR because we have a legitimate interest in identifying in freely accessible statements possible deficits in our products or services, and responding appropriately.

4.Data subject rights

Your rights under the GDPR:

Under Article 15 of the GDPR, you have the right to receive information regarding your personal data.
You may obtain rectification under Article 16 of the GDPR if your data are not or are no longer correct.
Under Article 17 of the GDPR, you may obtain the erasure of your personal data.
Under Article 18 of the GDPR, you have the right to obtain restriction of processing of your personal data.
If the conditions of Article 20(1) of the GDPR have been met, you have the right to receive your data in a structured, commonly used and machine-readable format.
Under Article 21 of the GDPR, you have the right to objectif your data are processed on the basis of a legitimate interest as defined by Article 6(1)(f) of the GDPR and you can cite grounds relating to your own particular situation.
Under Article 77(1) of the GDPR, you have the right to lodge a complaint with the responsible data-protection authority.
You may revoke at any time with effect for the future any consent you have issued us.

If you would like to exercise your rights as a data subject in dealings with us, please write to datenschutz[at]dpdhl.com.

If you would like to exercise your rights as a data subject in dealings with TikTok, please contact TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. You may exercise these rights online by using the contact form provided on the TikTok site. Should we receive an inquiry that falls within TikTok’s area of responsibility, we will forward it to TikTok for further processing.

5. Storage period: The length of time during which your data are stored will depend on the particular context of the processing and will be based on the parameters imposed by data protection law. All public posts you make on our profile will remain on our profile for an unlimited time, unless we erase them on the basis of an update of the original posting, a breach of law, or an infringement of our guidelines. You may of course erase your postings, comments and the like at any time yourself or exercise your right to have us erase them.

In the case of TikTok’s erasure of your data, we have no influence over this and therefore refer you to TikTok’s Privacy Policy.

C) Products and services

You can find data protection information on parcel products at dhl.de/datenschutz

You can find data protection information on E-POST services at www.deutschepost.de/epost/datenschutz

You can find data protection information for POSTIDENT at https://www.deutschepost.de/en/p/postident/postident-datenschutzhinweise.html

You can find data protection information for BRIEFANKÜNDIGUNG at www.deutschepost.de/briefankuendigung/datenschutz

Domestic and international mail, including additional services, postcards and other mail products (including franking methods and payment procedures)

1. Type of data

Type of data	Product
Name and address of the sender/contractual partner	Briefe national (domestic letters), Briefe international (international letters), Postkarte national (domestic postcards), Postkarte international (international postcards), Postzustellungsauftrag (formal delivery order) (including electronically), Büchersendung national (domestic book shipments), Warensendung national (domestic merchandise shipments), Warenpost international (international merchandise shipments), Pressesendung national (standard periodicals, domestic), Pressesendung international (standard periodicals, international), additional service: Premiumadress, additional service: Doppel Auslieferungsbeleg (duplicate delivery receipt), additional service: Einschreiben national (national registered mail) (Einwurf (registered mail to addressee’s mailbox), Eigenhändig (delivery to addressee only), Rückschein (advice of delivery)), additional service: Nachnahme national (COD domestic), additional service: Nachnahme international (COD international), Telegramm, additional service: Wert National (insured domestic items), additional service: Prio, Einkaufaktuell, Dialogpost national, Responseplus, Schlüsselversand (shipment of keys), Electroreturn, PRINT-MAILING AUTOMATION, OFFLINE-RETARGETING, POSTAKTUELL, Track&Match, Adressdialog, Mobile Briefmarke, Portokasse, Online Franking / Internetmarke (Internet stamp), partial services, PO box access, address access, driving services (e.g. HIN+WEG), GOGREEN / GOGREEN eMobility, hired containers / pallet collars
Names and addresses of the recipients and, if applicable, of the alternative recipients	Briefe national (domestic letters), Briefe international (international letters), Postkarte national (domestic postcards), Postkarte international (international postcards), Postzustellungsauftrag (formal delivery order) (including electronically), Büchersendung national (domestic book shipments), Warensendung national (domestic merchandise shipments), Warenpost international (international merchandise shipments), Pressesendung national (standard periodicals, domestic), Pressesendung international (standard periodicals, international), additional service: Premiumadress, additional service: Doppel Auslieferungsbeleg (duplicate delivery receipt), additional service: Einschreiben national (national registered mail) (Einwurf (registered mail to addressee’s mailbox), Eigenhändig (delivery to addressee only), Rückschein (advice of delivery)), additional service: Nachnahme national (COD domestic), additional service: Nachnahme international (COD international), Telegramm, additional service: Wert National (insured domestic items), additional service: Prio, Dialogpost national, Responseplus, Schlüsselversand (shipment of keys), Electroreturn, PRINT-MAILING AUTOMATION, OFFLINE-RETARGETING, Online Franking / Internetmarke (Internet stamp), driving services (e.g. HIN+WEG), GOGREEN / GOGREEN eMobility, hired containers / pallet collars
IP addresses	Portokasse, INTERNETMARKE
Franking method, including where applicable details integrated by sender, e.g. sender’s customer ID or a photo used for franking	Briefe national (domestic letters), Briefe international (international letters), Postkarte national (domestic postcards), Postkarte international (international postcards), Postzustellungsauftrag (formal delivery order) (including electronically), Blindensendung international (literature for the blind, international), Warenpost international (international merchandise shipments), Presse und Buch International (international periodicals and book shipments), Telegramm, Warenretoure Brief International (return of merchandise, international letters); Dialogpost national, Responseplus, Premiumadress, PRINT-MAILING AUTOMATION, OFFLINE-RETARGETING, POSTAKTUELL, Track&Match, Mobile Briefmarke, Portokasse, Online Franking / Internetmarke (Internet stamp), POS box access
Type of shipment	Standard/Kompakt or Groß/Maxibrief (standard/compact or large/maxi letters), Postkarte national (domestic postcards), Postzustellungsauftrag (formal delivery order) (including electronically), Warenpost international (international merchandise shipments), Pressesendung national (standard periodicals, domestic), Pressesendung international (standard periodicals international), Telegramm, additional service: Einschreiben national (international registered mail) (Einwurf (registered mail to addressee’s mailbox), Eigenhändig (delivery to addressee only), Rückschein (advice of delivery)), Einkaufaktuell, Dialogpost national, Responseplus, Premiumadress, PRINT-MAILING AUTOMATION, OFFLINE-RETARGETING, POSTAKTUELL, Track&Match, Mobile Briefmarke, Online Franking / Internetmarke (Internet stamp), driving services (e.g. HIN+WEG)
Shipment number for some additional services	Postzustellungsauftrag (formal delivery order) (including electronically), Warensendung national (domestic merchandise shipments), additional service: Einschreiben national (national registered mail) (Einwurf (registered mail to addressee’s mailbox), Eigenhändig (delivery to addressee only), Rückschein (advice of delivery)), additional service: Einschreiben international (international registered mail), additional service: Nachnahme national (COD domestic), additional service: Nachnahme international (COD international), Telegramm, additional service: Doppel Auslieferungsbeleg (duplicate delivery receipt), additional service: Wert National (insured domestic items), additional service: Wert international (international insured items), additional service: additional service Prio, additional service: Sendungsstatus international (delivery status, international), additional service: Ländernachweis (international tracking labels), PRINT-MAILING AUTOMATION, OFFLINE-RETARGETING, Online Franking / Internetmarke (Internet stamp)
Content and images/photos (independently of customs)	Additional service: Nachnahme national (COD domestic), Nachnahme international (COD international), Funcard, Telegramm, Einkaufaktuell, PRINT-MAILING AUTOMATION, OFFLINE-RETARGETING, POSTAKTUELL, Track&Match, Adressdialog
Required information for customs clearance (only for items destined for abroad)	Warenpost international (international merchandise shipments), Telegramm, PRINT-MAILING AUTOMATION, OFFLINE-RETARGETING, Track&Match, hired containers / pallet collars
Item tracking for certain add-on services, i.e. information on delivery status	Postzustellungsauftrag (formal delivery order) (including electronically), Warenpost international (international merchandise shipments), additional service: Doppel Auslieferungsbeleg (duplicate delivery receipt), additional service: Einschreiben national (national registered mail) (Einwurf (registered mail to addressee’s mailbox), Eigenhändig (delivery to addressee only), Rückschein (advice of delivery)), additional service: Nachnahme national (COD domestic), additional service: Nachnahme international (COD international), additional service: Wert National (insured domestic items), additional service: Prio, PRINT-MAILING AUTOMATION, OFFLINE-RETARGETING, Track&Match
Delivery documentation, including signatures (including any obstacles to delivery)	Postzustellungsauftrag (formal delivery order) (including electronically), Warenpost international (international merchandise shipments; registered mail), additional service: Doppel Auslieferungsbeleg (duplicate delivery receipt), additional service: Einschreiben national (national registered mail) (Einwurf (registered mail to addressee’s mailbox), Eigenhändig (delivery to addressee only), Rückschein (advice of delivery)), additional service: Nachnahme national (COD domestic), additional service: Nachnahme international (COD international), Telegramm, additional service: Wert National (insured domestic items), hired containers / pallet collars, Premiumadress
Confirmation of minimum age check (above 16 / above 18)	Telegramm
Billing data (e.g. bank account details of the sender/contractual partner)	Postzustellungsauftrag (formal delivery order) (including electronically), Büchersendung national (Rabattvertrag) (domestic book shipments/discount agreement), Warensendung national (Rabattvertrag) (domestic merchandise shipments/discount agreement), Pressesendung national (standard periodicals, domestic), Pressesendung international (standard periodicals, international), additional service: Premiumadress, additional service: Nachnahme national (COD domestic), additional service: Nachnahme international (COD international), Einkaufaktuell, Responseplus, POSTAKTUELL, Portokasse, partial services, PO box access, address access, driving services (e.g. HIN+WEG), GOGREEN / GOGREEN eMobility, hired containers / pallet collars
Other data relevant to performance of the contract (e.g. details of service delivery, details of contact persons, number of containers, reference number)	Postzustellungsauftrag (formal delivery order) (including electronically), Portokasse, Mobile Briefmarke, partial services, PO box access, address access, driving services (e.g. HIN+WEG), hired containers / pallet collars

2. Purpose of and legal basis for data processing: The data is processed primarily for purposes of contract fulfillment pursuant to Article 6(1) letter (b) GDPR.

In addition, pursuant to Article 6(1) letter (c) GDPR, data is also processed to comply with statutory requirements such as Section 99 of the Federal Code of Criminal Procedure (StPO), Section 40 of the Federal Postal Services Act (PostG), etc.

Finally, data is also processed for the purposes listed below:

- to secure payment,
- for our security needs (e.g. to detect criminal offenses),
- to produce statistics,
- for quality assurance, process optimization and reliable planning and
- to provide user-related advertising insofar as this is permitted.

The above constitute legitimate interests of Deutsche Post AG so that it can ensure smooth processes and can continually improve its products and services. Deutsche Post AG is of the opinion that there are no overriding interests to prevent processing because the intensity of interference with rights by such processing is kept to a minimum, e.g. by using pseudonyms. Article 6(1) letter (f) GDPR thus provides the legal basis for the data processing.

If you wish to utilize your right of objection, especially to the use of your data for promotional purposes, please contact:
Customer service – Letter

3. Storage period: As a general rule, shipment data is deleted following contract fulfillment, however, certain aspects should be taken into account. Data from shipments for which no proof of delivery is required is stored for a maximum of 15 working days for the purpose of quality assurance and revenue protection, and for the fulfillment of any additional services ordered. For shipments requiring proof of delivery, shipment data is stored for the period of liability (cf. Section 439 (1) HBG) and in accordance with any statutory retention obligations (e.g., Section 257 HGB or Section 147 AO).

4. Recipients or categories of recipients:: Data is passed on to the companies involved in the provision of postal services. Similarly, data is passed on to comply with statutory requirements (e.g. to investigating authorities). Some customer services and IT services are outsourced to external providers.

5. Third-country transfer (i.e. personal data is transmitted to a country outside the European Economic Area (EEA) or the data is accessed from there): As a matter of principle, your data is not processed in third countries. However, where items are shipped abroad, the data is transmitted to the postal service in that country in order to perform the contract.

Redirection and storage services

1. Type of data, purposes and legal basis for processing: Your personal data (first and last name, e-mail address where applicable, telephone number where applicable, first and last names of other persons to whom the redirection service should apply where applicable, your (former) address (street name, house number, postal code, city, any additional address information and/or P.O. box), new address (state, street name, house number, postal code, city, any additional address information and/or P.O. box) for redirection, reason for redirection, dates and duration of the redirection service, any additional services) shall be primarily processed for the purpose of mail redirection and therefore performance of a contract pursuant to Article 6 (1b) GDPR in conjunction with Section 41a (1) sentence 3 of the Federal Postal Services Act (Postgesetz, PostG).

In individual cases, the new address shall also be transmitted pursuant to Article 6 (1c) GDPR, in order to comply with statutory requirements such as Section 99 of the Federal Code of Criminal Procedure (Strafprozeßordnung, StPO), Section 40 PostG, etc. If you consent to the address data being shared with senders who were aware of your former address by selecting the relocation notification service, the data shall be processed on the basis of a declaration of consent pursuant to Article 6 (1a) GDPR.

Your personal data shall also be processed for the purpose of producing statistics, for quality assurance, process optimization and reliable planning, and to provide you with user-related advertising insofar as this is permitted. Deutsche Post AG has a legitimate interest in this in order to ensure a smooth process and to improve products and services on an ongoing basis. Deutsche Post AG believes that data subjects’ privacy interests do not override its own interests because, in terms of the potential magnitude of interference with privacy rights, the data processing is kept to a minimum, e.g. by using pseudonyms. Article 6 (1f) GDPR thus provides the legal basis for the data processing.

2. Storage period: Personal data shall be stored for a maximum of two years following submission of the application and then deleted.

3. Recipients or categories of recipients

Your data shall be transmitted to the companies involved in the provision of postal services. Deutsche Post has outsourced certain customer services and services relating to IT to service providers that are involved in processing orders. We can make the relocation address stated in your redirection application available on request to senders who hold your former address for the purpose of updating your address details. However, we will only do this if:

the requestor knows your former address
and you have signed the declaration of consent in the redirection application
and the redirection application has been made due to a permanent change of address and not due to temporary absence, for example.

If the declaration of consent has not been signed, we will only share the relocation address if we are obligated to provide this information by law:

in the event of requests from courts and authorities that require the new address for the purposes of issuing mail (Section 40 PostG),
in the event of requests from consumer protection associations and similar institutions for the purpose of the legal prosecution of breaches of consumer protection and competition law (Section 13 Injunctive Relief Act (Unterlassungsklagengesetz), Section 13 Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb)),
in the event of requests from other postal service providers for their own redirections, provided you have not declined to provide the information to this group of recipients (Section 29 PostG).

If you have signed the declaration of consent and have not objected to Deutsche Post providing your change of address details to other postal service providers, other postal service providers may share the change of address details with the sender of a mail item you have ordered on request for the purpose of ensuring the correct addressing of future mail items. This will therefore ensure that as many future mail items as possible bear the new address immediately. If you do not consent to this particular condition, you may decline to have your relocation address shared with these parties.

Notes regarding the declaration of consent

By requesting a relocation notification, you consent to the storage and transmission of the address data to persons and companies that still hold your former address. We do this in order to meet our customers’ need and desire for all mail to be sent to the correct address. When changing address, people often forget to notify all of their previous communication partners of their new address. To ensure that their mail items continue to reach you, your address shall be transmitted by Deutsche Post itself and/or Deutsche Post Adress GmbH & Co. KG – as well as to other service providers involved in the postal industry where applicable – under the conditions stated above. However, this shall only happen for a maximum of 2 years. Recipients of the new address may use and, if applicable, further process and transmit it in accordance with prevailing data protection legislation. A relocation address outside of Germany shall also only be transmitted under the above conditions, and where the level of data protection in place in the country from which the request originates corresponds with that of the Federal Data Protection Act, i.e. that your address will not be used for any purposes other than those permitted in Germany.

Private customers may include multiple persons on their application for a redirection order with Deutsche Post (for companies, only one company or part of a company may be included per order). In the event that persons making a joint application would prefer to choose different options, this can be amended even after submitting the order. You can withdraw or submit your consent by telephone or online by providing the number on your application confirmation. Our customer service team is available via the following service number +49 (0)228 4333112 (Mon.-Fri. from 8.00 AM - 6.00 PM and Sat. from 8.00 AM - 2.00 PM, excluding national public holidays in Germany) or online at deutschepost.de/meinkundenservice (German only).

Notes on your rights to object

We shall transmit your address details to postal service providers other than Deutsche Post so that they may also redirect your mail items if you do not object to this (Right to Object 1).

To ensure that as many mail items bear your new address as possible going forward and with immediate effect, other postal service providers may also transmit your change of address to senders that have issued mail to your former address if you do not object to this (Right to Object 2, only relevant for redirections due to relocation). If you have not selected the address update service (relocation notification) as part of your order, you will not need to exercise Right to Object 2 as this is exercised automatically.

If you or members of your household would like to exercise a Right to Object, please have the number provided on your application confirmation to hand and contact our customer service team by telephone on +49 (0)228 4333112 (Mon.-Fri. from 8.00 AM - 6.00 PM and Sat. from 8.00 AM - 2.00 PM, excluding national public holidays in Germany) or online at deutschepost.de/meinkundenservice (German only). Please indicate whether each person would like to exercise Right to Object 1, Right to Object 2 or both Rights to Object.

4. Transfer to a third country (i.e. the data is transmitted to a country outside the European Economic Area (EEA) or is accessed from there): As a matter of principle, your personal data is not processed in third countries. However, if mail is to be redirected to a foreign address, the data shall be passed on to the postal service in that country for the purpose of performance of the contract.

PO boxes

1. Type of data

First name and last name of the holder of the P.O. box

Customer number, where available

Email address of the holder of the P.O. box

Phone number of the holder of the P.O. box

Cell phone number of the holder of the P.O. box (optional)

First names and last names of all other persons using the P.O. box (co-users)

Postal address of the holder of the P.O. box (street, number, zip code, place, country and, where applicable, additional address details)

Postal addresses of all co-users (street, number, zip code, place, country and, where applicable, additional address details)

P.O. box address

Email addresses of all co-users

Phone numbers of all co-users

If the additional service letter notification P.O. box/e-mail with image preview is ordered: Image of front of the item placed in the P.O. box (incl. sender and receiver information).

2. Purpose and legal basis of processing

We process the data primarily to fulfill the contract (delivery of the items to the P.O. box plus any additional services ordered) in accordance with Article 6(1), letter b of the GDPR.

In addition, in accordance with Article 6(1) letter c GDPR, data is processed to comply with statutory requirements such as Section 161 of the Federal Code of Criminal Procedure (StPO), Section 40 of the Federal Postal Services Act (PostG), Section 13a of the German Injunctions Act (UKlaG ), etc.

If there is no statutory obligation to pass data on to public offices or third parties, data will only be passed on to third parties if consent has been given by the holder of the P.O. box. The legal basis is Article 6(1) letter a of the GDPR.

Finally, data are also processed for the following purposes:

To fulfill our security requirements (e.g., for crime detection purposes)
For the purpose of compiling statistics
For the purposes of quality assurance, process optimization and planning security

Deutsche Post AG has a legitimate interest in this in order to ensure a smooth process and to improve products and services on an ongoing basis. In Deutsche Post AG’s view, no overriding legitimate interest exists as the intrusiveness of the processing is kept to a minimum, e.g., through pseudonymization. The legal basis for this is Article 6(1) letter f of the GDPR.

If you want to exercise your right to object, please contact us using the following form: Customer service form.

Customers will soon be able to order the additional service of letter notification P.O. box, that is, the forwarding of the letter notification including item images (front of the letters) to the customer’s e-mail address. The legal basis for data processing of the additional service is the commission; that is, the processing of this data is necessary in order to fulfill the contract (Article 6(1) letter b of the GDPR).

If the enhanced service “E-mail with image preview” is commissioned, the customer assumes responsibility. In addition to being displayed in the customer’s DP AG shop account, which is secured via login/PIN, the item images are sent via the internet on behalf of the customer as unencrypted e-mail and are displayed unencrypted.

3. Recipients or categories of recipient:: Data are passed on to the companies involved in the provision of postal services. Data are also passed on to comply with statutory requirements (e.g. to investigating authorities and to third parties, e.g. on the basis of Section 13a of the German Injunctions Act (UKlaG). Further, data are passed on to third parties if consent has been given by the holder of the P.O. Box. Moreover, some customer services and services in the field of IT are outsourced to external providers.

4. Third-country transfer (i.e. personal data are transmitted to a country outside the European Economic Area (EEA) or the data are accessed from there): Your data are not processed in a third country.

Further services

a) Online store

1. Type of data

Customer’s name, address and other contact data
Recipient’s name and address if different
Bank account data
Previous orders

2. Purpose and legal basis of processing: The data is primarily used for performing the contract in accordance with Art. 6(1) b of the GDPR.

In addition, data is processed in accordance with Art. 6(1) c) of the GDPR to fulfill statutory requirements such as Section 99 of the Penal Code, Section 40 of the Postal Services Act etc.

In addition, Deutsche Post AG reserves the right to perform a credit check if it provides any goods or services on a credit basis. Accordingly, Deutsche Post AG has a legitimate interest in accordance with Art. 6(1) f) of the GDPR.

Finally, the data is used to ensure that – as far as legally permitted – you receive advertising in accordance with your needs. Here as well, Deutsche Post AG has a legitimate interest in accordance with Art. 6(1) f) of the GDPR. Deutsche Post believes that there is no overriding interest on the part of the customer as scope for lodging an objection is available. If you wish to make use of your rights of objection – particularly with respect to the use of your data for advertising purposes – please contact Deutsche Post AG using the following form: www.deutschepost.de/datenschutz/kontakt.

3. Recipients or categories of recipients:: Data is transmitted to the companies involved in the provision of postal services. Similarly, data is transmitted to comply with statutory requirements (e.g. to investigating authorities). Some customer services and IT services are outsourced to external providers.

4. Third-country transfer (i.e. data is transmitted to a country outside the European Economic Area (EEA) or the data is accessed from there): Your data is not generally processed in a third country. However, where items are shipped abroad, the data is transmitted to the postal service in that country in order to perform the contract.

b) Processing customer concerns (e.g. customer service, claims management)

1. Type of data

Customer’s name, address and other contact data
Recipient’s name and address, if different
Details of the matter including, where applicable, details of the shipped item etc.
Bank account details, where applicable

Depending on the type of claim, additional data, such as title, date of birth, name at birth, nationality, profession, marital status, motor vehicle holder, date of driving license, arrangements with respect to representation, details of family members, ID data, residential situation, the course of events leading to claim, extent of loss etc., may be requested to handle the claim.

2. Purpose and legal basis of processing: The data is primarily used for performing the contract in accordance with Art. 6(1) b of the GDPR.

In addition, data is processed in accordance with Article 6(1) (c) of the GDPR to comply with statutory requirements such as Section 99 of the Penal Code, Section 40 of the Postal Services Act and regulatory or tax-rated requirements etc.

Finally, the data is also used to collate statistics. Deutsche Post AG believes that there are no overriding interests that prevent processing because the extent of the interference with rights by such processing is kept to a minimum, e.g. by means of anonymization and aggregation. The legal basis for this is Article 6(1) f) of the GDPR.

3. Recipients or categories of recipients:: A matter can be referred to another Group company if this is necessary for processing it. Data may be transmitted to insurance companies in connection with the processing of claims. Similarly, data is transmitted to comply with statutory requirements (e.g. to investigating authorities). Some customer services and IT services are outsourced to external providers.

4. Third-country transfer (i.e. data is transmitted to a country outside the European Economic Area (EEA) or the data is accessed from there): Service providers outside the European Economic Area (EEA) are involved in handling customer concerns. Personal data is only transmitted if the EU Commission has attested that the third country has an appropriate level of data protection or there are other appropriate safeguards ensuring data protection (such as binding data protection regulations within the company or EU standard contractual clauses).

c) Video monitoring at retail outlets

1. Type of data

Image data

2. Purpose and legal basis of processing: The legal basis for processing the data is Section 6 of the Industrial Compensation Society’s Accident Prevention Rules, which has the status of a statutory requirement (Art. 6 (1) c) of the GDPR).

In addition, Deutsche Post AG has a legitimate interest. The legal basis for this is Art. 6 (1) f) of the GDPR as Deutsche Post AG seeks to protect its staff, its property as well as that of its customers and also postal confidentiality.

3. Recipients or categories of recipients:: Data is only accessed if there is any suspicion of criminal activity. In this connection, image data may also be transmitted to the investigating authorities.

4. Third-country transfer (i.e. data is transmitted to a country outside the European Economic Area (EEA) or the data is accessed from there): Your data is not processed in a third country.

d) Reporting phishing activities

1. Type of data

Reporting person’s name and e-mail address
Message contents

2. Purposes of and legal basis for the processing of the data: The data are used solely as a means to process the matter. The legal basis is a consent according to Article 6 (1) a) of the General Data Protection Regulation (GDPR), which is declared by voluntarily reporting the phishing activity.

3. Duration of storage: The received messages are generally deleted after ten weeks. Data are stored longer only in the rare exceptional cases in which the matter could not yet be conclusively processed.

4. Recipients or categories of recipients: Service providers were used to process the notifications. In addition, data are forwarded to the registrar and the host of the website concerned so that they can close the domains concerned.

5. Transfer to a third country (i.e., the data are transmitted in a country outside the European Economic Area (EEA) or are accessed from there): Processing takes place in the European Union. However, it cannot be ruled out that the domain is registered outside the EEA and, consequently, information is transferred to the registrar or host outside the EEA in order to close it.

Updated: 12/13/2021