Privacy Notice

DHL Paket GmbH (hereinafter called 'DHL') is pleased that you have visited our website and are interested in our company, products and services. It is important to us to protect your personal data during handling throughout the entire business process. 

Please be aware that the national legal requirements for data protection and the handling of personal data may vary from country to country. Therefore, if you visit the relevant DHL country websites you will learn more about country specific information on data protection.

In the following, we explain what information DHL collects when you visit our website and how this information is processed and for what specific purposes.

General Information

Personal data means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes information such as your real name, address, telephone number and date of birth. Information which cannot be linked to your real identity - such as favorite websites or number of users of a site - is not considered personal data.

This Privacy Notice applies for the data processing carried out by:

Controller’s name and contact details:

DHL Paket GmbH (subsidiary, if applicable) is the controller within the meaning of the General Data Protection Regulation (GDPR):

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

If you have queries with regard to the processing of your personal data, please contact the Data Protection Officer. The Data Protection team is also available to help with information requests, take suggestions or handle complaints.

Data Protection Officer’s contact details:

Deutsche Post AG
Global Data Protection
53250 Bonn
datenschutz@dpdhl.com

We process your data in order, for instance, to

  • perform the contract concluded with you or a sender,
  • make visits to our websites/apps as pleasant as possible,
  • send you the newsletter if you subscribe to it,
  • send or display to you - where permitted - targeted advertising,
  • carry out a credit check, where necessary,
  • handle your requests via our customer service department,
  • fulfil obligations as part of statutory requirements (e.g., Strafprozessordnung (German code of criminal procedure), Außenwirtschaftsgesetz (German foreign trade and payments act)),
  • fulfil our security requirements (e.g., for crime detection purposes),
  • compile statistics
  • and for purposes of quality assurance, process optimisation and planning certainty.

You can find further details, including the type of data, the purpose of processing and the legal basis, below under the relevant products.

a) To obtain information regarding the data that we have on file about you.

b) To have any incorrect data that we may have on file about you rectified.

c) To have data that are no longer required for the purpose stated erased or - where a requirement to store data exists - to have the processing thereof restricted.

d) To receive data they provide in a structured, standard and machine-readable format.

e) To file an objection if the processing of your data is based upon a legitimate interest/to its use for advertising purposes/to a decision based solely upon automated processing, including profiling.

f) To lodge a complaint with the competent supervisory authority if you have doubts about whether the processing of your data complies with data protection regulations.

If you would like to assert your rights, please contact the authorities listed under Who is responsible? or send an e-mail to: datenschutz@dpdhl.com

If you would like to exercise your right to object - in particular to the use of your data for advertising purposes - please contact the authorities listed in the respective Products and Services.

If you have given your consent to a certain type of processing, you can revoke it at any time with effect for the future at the address indicated in the consent. This can be found in the Products and Services details for which the consent has been obtained.

The data will be stored for as long as they are required. The necessity ensues either from statutory retention periods. Where such statutory periods do not exist, the data will be stored for contract performance and invoicing purposes and as proof of the correct performance of the contract, until the liability periods expire, and it will subsequently be erased.

The DPDHL Data Privacy Policy regulates the Group-wide standards for data processing with a special focus on so-called third country transfers, meaning transfers of personal data to countries outside the EU, which do not have an adequate level of data protection. If you are interested in learning more about the DPDHL Data Privacy Policy, please use the following link:

DPDHL Privacy Policy (Summary) (Type: Acrobat Reader file, Size: 147.3 KB)

Visiting our Website

DHL is committed to preserving the privacy of users of our websites. When you visit our web pages, our web servers always temporarily save for connection and set up and security purposes the connection data of the computer connecting to our site, a list of the web pages that you visit within our site, the date and duration of your visit, the IP address of your device, the identification data of the type of browser and operation system used as well as the website through which you linked to our site. Additional personal information such as your name, address, telephone number or e-mail address is not collected unless you provide this data voluntarily, e.g. while completing an online contact form, as part of a registration, survey, competition, fulfillment of contract or an information request.

The legal basis for the processing of the aforementioned data categories is Art. 6 (1) (a) of the European General Data Protection Regulation (GDPR). Due to the said purposes, in particular to guarantee security and a smooth connection setup, we have a legitimate interest to process this data.

Furthermore we are using cookies, tracking-tools and targeting measures. You will find more details hereto below under Online presence and website optimization.

As far as you have enabled geo localization functions in your browser, respectively in your operating system we will use this data to offer you location-based services (e. g. location of the nearest branch, packing station etc.). We will not use this data for any other purpose. If you disable this function your data will be immediately deleted.

Google reCAPTCHA

We use Google's reCAPTCHA service to protect our website against spam and other misuse. reCAPTCHA prevents automatic software ("bots") from using the website improperly or for malicious purposes. This means that a check is performed to verify that the data has actually been entered by a real person. To make this possible, the following data is collected and processed:

  • Referrer (address of the page on which the Captcha is used)
  • User's IP address
  • Google account (detection and identification of the user if they are logged into Google)
  • The user's input behavior (e.g., response to the reCAPTCHA question, input speed in the form fields, sequence in which the user completed the fields) is used to improve Google's pattern recognition. Browser, browser size and resolution, browser plug-ins, date, language setting
  • Display commands (CSS) and scripts (JavaScript) on the webpage
  • Mouse/touch events on the page

Legal basis for the aformentioned processing is Art. 6 (1) f) GDPR. Protecting the websites of dhl.de from abusive automated access attempts and spam is regarded as carried out for a legitimate interest.

Google also reads the cookies from other Google services, such as Gmail, Search and Analytics. All of the data listed above is sent to Google in encrypted form. Google's subsequent analysis determines which type of Captcha will be displayed on the page, i.e., checkbox or text input. No personal data from the input fields on the respective form is filtered out or stored.

More information on Google's privacy policy can be found here: www.google.com/policies/privacy/.

For contractual reasons, we also need personal data to provide our services and comply with the obligations arising from contractual agreements concluded with you. This data is used e. g. for performing a (shipment) contract, managing customer data, handling payments and, as the case may be, assessing creditworthiness. Certain shipment data will also be provided to the authorities of the country of transit or destination for customs and tax clearance or for security screening, as required by the laws of such country. The information provided would usually include: shipper name and address, receiver name and address, description of the goods, number of pieces, weight and value of shipment.

The legal basis is usually Art. 6 (1) b) GDPR since the processing is for the performance of a contract to which you are a party.

Further information on data protection in specific services and products is available in the section Products and Services.

If you are an existing customer of DHL your postal data (e.g. name, address) will be processed to contact you in order to provide you with the latest information about our offers, news, products and services. Apart from an existing consent, we will process your e-mail address exclusively in order to provide you with information regarding DHL's own and similar products.

Legal basis for the aforementioned processing is Art. 6 (1) f) GDPR. The processing of customer data for own direct marketing purposes is regarded as carried out for a legitimate interest.

You have right to object at any time to the said processing. To exercise your right, simply get in touch with us by using the contact details mentioned above under Who is responsible?.

If you register for one of our newsletters, we are entitled to use your e-mail address for this purpose. You may unsubscribe from the newsletter at any time by clicking the relevant link at the bottom of the newsletter.

In case you file an objection or unsubscribe from our newsletter services the respective data will be blocked, respectively deleted and no longer be processed for such purposes.

DHL does not share, sell, transfer or otherwise disseminate your personal data to third parties and will not do so in future, unless required by law, unless required for the purpose of the contract or unless you have given explicit consent to do so. For instance, it may be necessary to pass on your address and order data to our contractors when you order products. Further information on data protection in specific services and products is available below in section Products and Services.

External service providers that process data on our behalf are contractually obliged to maintain strict confidentiality as per Art. 28 GDPR. DHL retains responsibility for safeguarding your information in such circumstances. The service providers follow the instructions of DHL and this is guaranteed by technical and organizational measures, as well as by means of checks and controls.

We use tracking software to determine how many users visit our website and how often. We do not use this software to collect individual personal data or individual IP addresses. The data are used solely in anonymous and summarized form for statistical purposes and for developing the website.

"Cookies" are small files that enable us to store information related to your device and you, the user, specifically, while you visit one of our websites. Cookies help us to determine how frequently our internet pages are accessed as well as the number of users. And they help us configure our offers so that they are as convenient and efficient as possible for you.

On the basis of Art. 6 (1) f) GDPR, we are using "session cookies" in order to optimize our website and to guarantee and convenient and undisturbed user experience. These cookies are stored exclusively for the duration of your visit to our internet pages. They are automatically deleted when you close your browser.

In addition, we use "persistent cookies" for retaining information about visitors who repeatedly access one of our internet pages. The purpose of using cookies is to be able to offer you optimal user guidance as well as to "recognize" you and thus be able to present (as much as possible) diversified internet pages and new contents during repeated use. Our website contains a cookie banner, which inform you about the fact, that if you continue to navigate the website, this basically constitutes valid consent to the storage of cookies on your device. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1) a GDPR. Of course, you have the right to object and to opt out (see: How to Manage cookies).

Generally, we do not create an individual profile of your online activities. The content of a persistent cookie is limited to an identification number. Name, email address, IP address, etc., are not saved on the majority of our sites. However, there are some exceptions which you can find in our cookie table below.

DHL Table of Cookies and Categories

We have provided details of all cookies used on this websites in the table below.

All cookies in this table have been categorized according to 4 numbered groups – the relevant category numbers are listed in column 1. Please note that cookies can belong to more than one category.

The categories are as follows:

[1] Strictly Necessary: These cookies are essential in order to enable you to move around the website and use its features. Without these cookies, services you have asked for cannot be provided. As already stated above, this is based on Art. 6 (1) f) GDPR.

[2] Performance: These cookies collect information about how visitors use a website, for instance which pages visitors go to most often. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works.

[3] Functionality: These cookies allow the website to remember choices you make and provide enhanced, more personal features. For example, these cookies can be used to remember and store the last tracking number that you entered when using a tracking application. Information these cookies collect may be anonymized and they cannot track your browsing activity on other websites.

[4] Targeting or Advertising: These cookies are used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as helping measure the effectiveness of an advertising campaign. They are usually placed by advertising networks with the website operator’s permission.

Cookie Name Purpose More Information
Allow cookies for site dhlpcp If set to 1 the user has allowed the site to write cookies. If this cookie doesn’t exist, no cookies are allowed.  
  dhlah Closed article (was viewed). Expires after 365 days.
 
  dhlolc Closed overlay (was viewed). Expires after 30 days.

 
  eDeviceID The cookie is assigned to your browser and device individually when you visit dhl.de. Expires after 90 days.  
  eMeta The cookie will be created if you log onto dhl.de and select "Remain logged in" or "Trusted device". You will remain logged on permanently. Expires after 90 days.  
  eToken This cookie makes user information available to the integrated sub-systems (shipment tracking, availability, online franking, bonus) in order to be validated there. Expires after 90 days.
 
Recaptcha-Cookie nocap This cookie is created e.g. when you log in to dhl.de and have successfully solved the Recaptcha or send us a message via contact form. You do not need to solve the Recaptcha the next time you log in.  
Fast Track Cookie [3] No fixed name This cookie is used to store both the last tracking number value entered and the shipment type selected from the dropdown when using our smaller Fast Track online tracking applications.
This cookie has been created to improve website functionality and make using DHL websites easier for our customers.
This cookie only stores the previous tracking number value and previous shipment type dropdown option selected until such a time that you return and select new options in the same Fast Track tracking application.
You can find one of our DHL Express Fast Track tracking applications here
Tab System Cookie [3] No fixed name This cookie is used to store the last tab that you selected on a page using a multi-view tab system.
This cookie has been created to improve website functionality and make using DHL websites easier for our customers.
This cookie only remembers the previous tab selected until you return and select another tab on the same tabbed page.
 
Adobe Analytics s_cc This cookie has been set by the JavaScript code and read to determine whether cookies have been enabled. This cookie is a session cookie and will expire when the browser is closed.  
Adobe Analytics
s_sq This cookie collects information anonymously about what link the user has clicked. Its aim is to discover which links are used and which are not, in order to improve web offers. This cookie is a session cookie and will expire when the browser is closed.  
Adobe Analytics
s_vi This cookie is used to detect a return visitor as one and the same user and collect information on how our website is used. We use this information to develop the website further and provide users with content that is more appropriate to them. The cookie collects the above information anonymously (individual visitor ID, time / date stamp). Expires after 6 months.  
Adobe Analytics
s_fid This cookie is used to identify a unique visitor if the standard s_vi cookie is unavailable due to third-party cookie restrictions. Not used for implementations that use first-party cookies. Expires after 2 years.  
Adobe Target Cookie mbox

Target uses cookies to give website operators the ability to test which online content and offers are more relevant to visitors.

Global Opt-Out: https://www.adobe.com/de/privacy/opt-out.html#customeruse

More Information at Adobe
  AMCV_3505782352FCE-66F0A490D4C@AdobeOrg

This cookie is used to identify a unique visitor.  Unique visitor IDs used by the marketing cloud are stored. The visitor ID service uses JavaScript to store a unique visitor-ID in an AMCV_###@AdobeOrg cookie for the current website’s domain, where ### stands for a random character sequence. Example: AMCV_1FD6776A524453CC0A490D44@AdobeOrg.

An array consisting of 3 encrypted, unique IDs containing the user data is stored, e.g.:

0: 1406116232%7CMCIDTS%7C18004-
%7CMCMID%7C360147205814169433-
90876674343640411286%7CMCAAMLH-
1554114660%7C6%7CMCAAMB-
1555489304%7CRKhpRz8krg2tLO6pgu-
XWp5olkAcUniQYPHaMWWgdJ3xzPWQ-
mdj0y%7CMCOPTOUT1555595724s%7-
CNONE%7CMCAID%7CNONE%7CvVersion%7C2.5.0

1: 5

2: 0

Expires after 6 months.

 
Adform & Consentric  

Our website uses cookie ID matching of the Consentric cookie with Adform.

An Adform cookie will only be added if users already have a Consentric cookie in their browsers.

Deutsche Post AG's Consentric technology uses the Consentric cookie to determine statistics for cross-media utilization.

At no point in time are individual users identified by name. Their identity remains protected.

Cookie matching is used to enable the service provider Adform to work with Deutsche Post AG's Consentric services.

The goal of these services is first of all to determine the activation performance statistics of physical advertising on a website. 

In concrete terms, this means identifying how many of the people who received a catalog (or other mailing) subsequently visited the website of the company concerned. Information about which micro-cell visited a participating website can, in turn, provide an impetus for sending physical advertising to the micro-cell thus recognized. At no point in time are individual users identified by name. Their identity remains protected. You can object to data processing as part of the procedure described under: https://pixel.consentric.de/optout or https://site.adform.com/privacy-center/platform-privacy/opt-out/

Please note: The opt-out cookie set by you makes it possible for the system to recognize that you no longer wish to be recorded. 

If you delete all cookies, this cookie will also be deleted. In this case, we would ask you to cancel your participation in the procedure once again. 

The Consentric procedure was developed in accordance with the statutory data protection requirements and was awarded the ADCERT Privacy Audit GmbH (www.adcert.eu) data protection seal of approval by virtue of its outstanding data protection compliance.

 

 

If you use the DHL Tracking, we also set the following Cookies:

Cookie Name Purpose More Information
  verfolgenCsrfToken This cookie contains the anonymous shipment list in the form of a session token. The following information is stored by it: shipment number, role, package routing slip and the date of inclusion in the shipment list. Expires after 25 minutes.  
Permanent verfolgen_SL
This cookie contains the anonymous shipment list. The following information is stored with it: Shipment number, role, package card ID and the insertion date in the tracking list.  
Session lb-cookie This cookie contains the encrypted session ID. It is used by the portal to preserve the session. This cookie is a session cookie and will expire when the browser is closed.  
  NOLSESSIONID Allows the backend to identify the user’s session. This cookie is a session cookie and will expire when the browser is closed.  

 

If you use the DHL Online Franking, we also set the following cookies:

Cookie Name Purpose More Information
  ofi.domain
Allows the backend to technically and easily identify on which domain the user is currently operating. Is set on entry or based upon URL parameters.
  ofi.lang
Allows the backend to technically and easily identify in which language the user is currently operating. Is set on entry or based upon URL parameters.
  OFISESSIONID Allows the backend to identify the user’s session. This cookie is a session cookie and will expire when the browser is closed. Is set by the Tomcat.

 

If you use the DHL Finder (location search), we also set the following cookies:

Cookie Name Purpose More Information
  i18next This cookie is used to recognize the language setting of the visitor, with a view to making the website experience more pleasant. This information is used to determine which language is suitable for the visitor and the language setting is set accordingly. The cookie collects the above information anonymously. It will only be used confidentially within DHL to improve the websites and the user experience. This cookie is a session cookie and expires when the browser is closed.
 
  br_<primaryKey>

This cookie is used to recognize a returning visitor as one and the same user. This information is used to determine whether the visitor has already given a rating for a location. The cookie collects the above information anonymously (individual visitor ID, time/date stamp). The cookie expires after only 24 hours.
 

 

Third Party Cookies in embedded content

Please note that on some pages of our websites you may notice that cookies have been set that are not related to DHL. When you visit a page with content embedded from, for example, YouTube or Vimeo, these service providers may set their own cookies on your web browser. DHL does not control the use of these cookies and cannot access them due to the way that cookies work, as cookies can only be accessed by the party who originally set them. You should check the third party websites for more information about these cookies.

Web Beacons

In order to keep DHL’s online content relevant, easy to use and up-to-date, we use web analytics services such as Webtrends (See Webtrends entry in DHL Table of Cookies above for more information.) to help us understand how people use our websites. These services use data collection technologies such as web beacons. Web beacons are small electronic images that deliver cookies, count visits, and understand usage and website effectiveness. In turn, this lets us know what content is of interest to our visitors and helps us provide tailored information on our websites. These web beacons are anonymous and do not contain or collect any information that identifies you. The information is anonymous and only used for statistical purposes. These web analytics data and cookies cannot be used to identify you as a natural person as they never contain personal information such as your name or email address.

How to Manage Cookies

Using our products and services without cookies is also possible. In your browser, you can deactivate the saving of cookies, limit them to particular websites, or set the browser to notify you when a cookie is sent. You can also delete cookies from your PC hard drive at any time (file: "cookies"). Please note that in this case you will have to expect a limited page presentation and limited user guidance.

Most web browsers allow some control of most cookies through the browser settings.
To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit:
All About Cookies

For further EU-specific advice on cookies and the various opt out options available to you, you can also visit the following website:
Your Online Choices

You can also choose to opt out of some or all of the advertising cookies set on your PC by visiting the Network Advertising Initiative (NAI) website

Not everyone who visits our site will do so using a web browser. For example, some users will access DHL websites or applications using a mobile device. If so, it may not be possible to disable cookies or adjust web browser settings.

To opt out of being tracked by Adobe Analytics across all websites, you can do so by clicking on the Adobe Analytics Opt-Out link below:
Adobe Analytics Opt-Out

If you've previously opted out, and would like to reverse your setting, click the Adobe Analytics Opt-In link below:.
Adobe Analytics Opt-In

Please remember that if you delete your cookies, or use a different browser or computer you will need to set your opt-out status again.

There are contact forms on our website that can be used to contact us via electronic means. If the user takes advantage of this option, the data entered in the form will be transmitted to us and stored.

We use the personal data you provide solely for the technical administration of the websites and to fulfill your wishes and requirements – i.e. primarily to process contracts concluded with you or your enquiries.

In the following you will find examples of the type of data that is processed within the scope of the contact forms: 

The customer’s first and last name  
If applicable, the customer’s e-mail address  
If applicable, the customer’s telephone number  
If applicable, the customer’s fax number  
Address (country, street, house number, postcode, town/city and, if applicable, additional place name)  
Comments/customer’s messages  
If applicable, company name  
If applicable, customer number (sender, recipient, third party)  
Corporate data E.g., becoming a service partner
Details of weight and dimensions of an item E.g., assistance with products and services
Item details E.g., item tracking, item complaint
Delivery documents including signatures E.g., item tracking
Details needed for customs clearance purposes E.g., item tracking
Invoice-relevant information  
Co-users’ first and last name, e-mail address  

 

The processing of the personal data from the form primarily enables us to handle the contact processing. In addition, data may be processed in the course of processing a customer request.

The data will be processed primarily for the performance of the contract in accordance with Article 6 (1) b) GDPR and to safeguard legitimate interests in accordance with Article 6 (1) f) GDPR.

Disclosure occurs to companies involved in providing postal services. Disclosure also occurs as part of statutory obligations (e.g., to investigating authorities). In addition, customer care services or also IT-related services are outsourced to service providers. External service providers who process data on our behalf provide reasonable assurance that appropriate technical and organisational measures are taken to ensure that processing complies with the requirements of the European Union General Data Protection Regulation (EU GDPR). Pursuant to Article 28 of the GDPR they are contractually committed to, amongst other things, strict secrecy. In these cases, DHL Paket GmbH remains responsible for protecting your personal data. The external service providers process the personal data only on DHL Paket GmbH’s documented instructions.

Your data are also processed in a so-called ‘third country’, i.e., in a country outside the European Economic Area (EEA), or are accessed from there. Specifically, this concerns the recipient country of the item. This occurs either because the transfer is required to fulfil the contract (e.g., for delivery or customs clearance), based upon our Binding Corporate Rules or the EU standard contractual clauses.

DHL takes all of the necessary technical and organisational security measures to protect your personal data from being lost or misused. For instance, your data is saved in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer technology (SSL) during transmission. This means that an approved encryption procedure is used for communication between your computer and the DHL servers if your browser supports SSL.

Should you wish to contact DHL by email, we would like to point out that the confidentiality of the information sent cannot be guaranteed. The contents of email messages can be read by third parties. We therefore recommend you send us confidential information only by post.

We keep our data protection statement under regular review.

DHL reserves the right to change its data protection statement at any time with or without prior notice. Please check back frequently to be informed of any changes. By using DHL's websites you agree to this Privacy Policy.

This statement was last updated on 25.05.2018.

Products and Services

A parcel notification informs you, free of charge, about the expected delivery day of the parcel you have ordered to your home address. In order to be able to notify you by e-mail of the expected delivery day for your shipment, DHL requires your e-mail address. The parcel notification is a part of DHL Services which is activated as an integral element of the contract when you register with DHL. The processing of the e-mail address for the purpose of the parcel notification is carried out for the performance of a contract, on the basis of Art. 6 (1) (b) GDPR. If you are not a registered DHL customer, DHL will receive your e-mail address from the sender of the shipment if he/she wishes to utilise DHL's parcel notification service. DHL subsequently processes the e-mail address purely in order to send you the parcel notification. The legal basis for this is Art. 6 (1) (f) GDPR. The processing of the e-mail address for the purpose of the parcel notification is carried out in order to deliver the shipment as quickly and as efficiently as possible. Every parcel notification includes an opt-out for future parcel notifications.

With DHL Online Franking, Deutsche Post AG allows you to purchase your own DHL shipping labels for national and international shipping of your parcels and small packages. Personal data of the buyer of the DHL shipping label as well as of the sender and recipient of the shipment will be processed for the purpose of contract performance and fulfilment as well as compliance with legal requirements (e.g. § 99 StPO, § 40 PostG, § 257 HGB, § 147 AO). Depending on which product or service you have ordered, the shipment data is sent to the companies involved in the provision of postal services (here: DHL Paket GmbH, DHL Express Germany GmbH) in order to ensure the proper delivery of the shipment. The legal basis for the processing of personal data is Art. 6 (1) (b) and (c) GDPR.

Various payment methods are offered when purchasing the DHL shipping label.

Deutsche Post AG has commissioned the payment service provider heidelpay GmbH to process payments by credit card or direct debit. If you pay by credit card or direct debit, the data required for payment processing will be collected and processed by the payment service provider. The legal basis for data processing is Art. 6 (1) (b) GDPR, as the processing of the data is necessary for payment by credit card or direct debit and thus for the performance of the contract.

If necessary, your data will be transmitted to a credit agency to protect the legitimate interests of Deutsche Post AG in order to carry out an identity and credit check. This is particularly the case if Deutsche Post AG makes advance payment and bears the economic risk (e.g. in the case of payment by direct debit). The legal basis for data processing as part of a credit check by a credit agency is Art. 6 (1) (f) GDPR.

In addition, there is the option of processing the payment transaction using the online payment service PayPal. The European operating company of PayPal is PayPal (Europe) S.á.r.l. & Cie. S.C.A. 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. If you choose PayPal as the payment method, your data required for the payment process will be transmitted to PayPal. By selecting this payment option, you consent to the transfer of personal data required for payment processing. The following data is routinely transmitted to PayPal: Name, address, company, email address, telephone and mobile number, IP address. In order to process the contract, such personal data is also required that is related to the respective shipping order. The legal basis for data processing is Art. 6 (1) (b) GDPR, as the processing of the data is necessary for payment by PayPal and thus for the performance of the contract.

Furthermore, the customer has the option to conclude a billing agreement with PayPal during the payment process. In this context, no personal data is exchanged with Deutsche Post AG. The data transmitted to PayPal may be transmitted by PayPal to credit agencies. The purpose of this transfer is to check identity and creditworthiness. The applicable data protection regulations of PayPal can be accessed here.

Deutsche Post AG does not store any payment details besides the name of the payment service provider used and anonymous IDs. The entire handling of payments and the use of the payment data required for this purpose is carried out exclusively by the payment service providers.

The table below is intended to give you a summary of the data processed by DHL Online Franking.

Type of data Description and example
Type of shipment Shipping using DHL Paket or DHL Express
Type of DHL product e.g. DHL parcel up to 2kg
Special services Optional; e.g. transport insurance, preferred delivery day
Item number Number used to identify the item during transport within the Deutsche Post DHL network
Pick-up address Optional if a pick-up of the item is booked
Name, company name and address of sender

Postal address of sender

Name, company name and address of recipient Postal address of recipient
Post number of sender Optional if the sender is a registered customer of DHL Paket
Post number of recipient Optional if the recipient is a registered customer of DHL Paket
Telephone number of recipient Only for shipments to other countries
Information on the customs declaration Optional; detailed description of the item’s contents for international, customs-dutiable shipments
Email address of sender Valid email address of the sender for sending the order confirmation
Email address of recipient Optional; valid email address of the recipient for sending the parcel notification
Coupon code Optional if a coupon code is used to pay for the parcel stamp in part or in full
Payment method Indication of which payment service provider (e.g. PayPal) was used

Finally, processing is also carried out for the purposes listed below:

  • To fulfill our security requirements (e.g. for crime detection purposes),
  • To compile statistics,
  • and for purposes of quality assurance, process optimization and planning certainty.

Deutsche Post AG has a legitimate interest in this in order to ensure smooth processing and to constantly improve its products and services. In the opinion of Deutsche Post AG, there is no overriding interest worthy of protection, since the processing operations are carried out as little as possible owing to their intensity, e.g. by using pseudonyms. The legal basis for this is Art. 6 (1) (f) GDPR.

With DHL shipment tracking, you can track your parcels and view the estimated time of delivery. For tracking, simply enter your shipment number and the current status of your parcel will be displayed. You will also receive all important detailed information about your parcel. The data is processed for the purpose of fulfilling the contract on the basis of Art. 6 (1) (b) GDPR. Further detailed information can be found in the table below:

Type of data Example External access to data
Item number   Sender and recipient
Name of sender
  Sender and recipient
Address of sender
  Sender and recipient (after entering the postcode)
Name of recipient   Sender and recipient (after entering the postcode or as a looged-in and identified recipient)
Address of recipient   Sender
Name of substitute recipient, if applicable Neighbor Sender and recipient (after entering the postcode or as a logged-in and identified recipient)
Address of substitute recipient, if applicable Neighbor Sender
Customer data of sender (EKP number, billing number)   Sender
Product name / service name (currently only in shipment tracking for business customers NOLB) DHL Paket, DHL Paket International, COD, Bulky Goods Sender and recipient (only for services relevant to the recipient, such as Bulky Goods and COD)
Shipment progress   Sender and recipient
Signature of recipient (POD)   Sender
Confirmation of minimum age verification +16 / +18 Visual age check Sender

In selected cases, you will be offered live tracking for your parcel in DHL shipment tracking. As part of live tracking, you can follow the route of your parcel live on a map on the day of delivery.

To display the map in the context of live tracking, we use the product Google Maps from the provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which visually displays geographical information. When Google Maps is used, your IP address and any other data required for the Google Maps service are processed by Google Inc. Deviating data protection regulations of Google Inc. apply in this regard. No identifying address information is passed on to Google.

The Google Maps Terms of Use and Privacy Policy can be viewed at Google Privacy Policy and Terms of Use.

The DHL Paketkasten, placed directly in front of your door, means you can receive parcels at home at any time. To ensure convenient and secure receipt, the DHL delivery agent then places your shipments in the DHL Paketkasten or collects returns and pre-franked parcels. When purchasing and using the DHL Paketkasten, the following personal data is processed for the purpose of fulfilling the contract on the basis of Art. 6 (1) (b) GDPR. Furthermore, processing pursuant to Art. 6 (1) (c) GDPR may be carried out in order to fulfil a legal obligation (e.g. pursuant to § 99 StPO, § 40 PostG).

Purchase/hire-purchase of the DHL Paketkasten

  • Order number
  • Contract number (only for hire purchase or rental)
  • Full name
  • Address (street, house number, postal code and city/town)
  • Delivery and billing address if different
  • E-mail address
  • Phone number
  • Configuration of the DHL Paketkasten ordered, order date, delivery date, DHL Paketkasten ID, lock and key data
  • Payment ID, invoice amount, discount code if applicable, cancellation if applicable
  • PostNumber
  • Order status
  • DHL Paketkasten status
  • Contract status (only for hire purchase or rental)

Use of the DHL Paketkasten

  • Full name
  • Address (street, house number, postal code and city/town)
  • DHL Paketkasten ID
  • PostNumber
  • User or administrator status

On our website, we offer business customers the opportunity to conclude a DHL business customer contract or schedule a telephone appointment by providing personal data online. This data is entered on an input screen on dhl.de and, if a contract is concluded, encrypted using SSL, transferred to DHL Paket GmbH and then stored.

The following personal data is collected during the contract process and the scheduling of a telephone appointment (mandatory fields are marked with *):

  • Company: Company name*, Legal form*, Street*, Street number*, Postal code*, City/town*, VAT ID, Commercial register no., Local court, URL of your online shop
  • Owner/Managing Director: Form of address*, Last name*, First name*, Phone*, E-mail*
  • Shipments: Domestic shipping volumes (per year)*, International shipping volumes (per year)*, climate-neutral shipping with DHL GoGreen
  • Bank details: Account holder*, IBAN*, BIC*
  • Point of contact (if chosen*): Form of address, Last name, First name, Phone, E-mail
  • Different pick-up address (if chosen*): Company name, Legal form, Street, Street number, Postal code, City/town
  • Different billing address (if chosen*): Company name, Legal form, Street, Street number, Postal code, City/town

The personal data of business customers is collected for the purpose of contract initiation, processing and fulfillment as well as for compliance with statutory requirements (e.g. Section 99 of the Strafprozessordnung (StPO - German code of criminal procedure), Section 40 of the Postgesetz (PostG - German postal services act), Section 257 of the Handelsgesetzbuch (HGB - German Commercial Code), Section 147 of the Abgabenordnung (AO - German Fiscal Code)). The legal basis for processing personal data is Article 6, Paragraph 1 Letter b and c of the European Union General Data Protection Regulation (GDPR).

This data is not forwarded to third parties, except briefly, and without being stored, for the purpose of legitimizing the bank details using Sofort GmbH's TÜV-approved instant check procedure.

In the event of a possible discontinuation of the contract process or a timeout, the data entered by business customers will be stored by DHL Paket GmbH for thirty days once they click the button "Go to your personal shipping costs" located at the end of the first form page. This data is stored solely for the purpose of offering ease and convenience to business customers who would like to continue the online contract process at a later time. Those customers will receive an e-mail from the system 24 hours after the discontinuation of the online contract process. The e-mail will contain a link that will allow them to take up right where they left off without having to re-enter any information. The data is processed to protect the legitimate interests of DHL Paket GmbH set out above, and is based on Article 6, Paragraph 1, Letter f of the European Union General Data Protection Regulation (GDPR).  

Finally, processing is also carried out for the additional purposes listed below:

  • In the context of security concerns (e.g., for the purpose of solving crime).
  • Compiling statistics.
  • For the purposes of quality assurance, process optimization and planning certainty
  • To send you appropriate advertising - if permissible.

DHL Paket GmbH has a legitimate interest in the above for specific reasons, namely to ensure a smooth process and to improve products and services on an on-going basis. DHL Paket GmbH is of the opinion that no overriding legitimate interest exists to prevent processing as the intrusiveness of such processing is kept to a minimum, e.g., through pseudonymization. Consequently, Article 6, Paragraph 1, Letter f of the GDPR provides the legal basis.

If a business customer contract is concluded with DHL, the personal data collected through the online customer acquisition process at dhl.de will be archived for ten years after the termination of the business relationship in accordance with the statutory provisions.

If no business customer contract is concluded with DHL despite registration, the personal data collected through the online customer acquisition process at dhl.de will be deleted after sixty days. If you wish to make use of your rights of objection - in particular against the use of your data for advertising purposes - please send an e-mail with the subject Antrag auf Löschung aus dem Mailverteiler (request for deletion from the mailing list) and your company name to geschaeftskunde@dhl.de.

Our sales organization processes business as well as personal data during precontractual checks, and for the purpose of contract performance. We collect the contact details of the respective parties (name, business e-mail address and telephone number) and information on planned annual shipment volumes and the structure of shipments. All other personal information and shipment data gathered in the context of the business relationship (e.g. costing of quotes, contract management, accounting) are stored for the specific purpose of contract performance. The legal basis for processing the abovementioned data is Article 6 (1) (b) of the GDPR.

The data are forwarded to companies involved in the provision of postal services. Data are forwarded also as part of statutory obligations (e.g. to official investigators) referred to Article 6 (1) (c) of the GDPR. Some customer services and services in the field of IT are outsourced to external providers. External service providers who process data on our behalf offer sufficient guarantees that appropriate technical and organizational measures have been taken to ensure that data processing complies with the requirements of the EU's General Data Protection Regulation (GDPR). These providers are contractually bound within the meaning of Article 28 of the GDPR to maintain strict confidentiality. In cases such as these, responsibility for protecting your personal data remains with DHL Paket GmbH. External service providers process personal data only on documented instruction from DHL Paket GmbH. As a matter of principle, your data are not processed in third countries.

During shipping (e.g. all postal products such as parcel and express consignments - both national and international - plus extra services), we need personal data in order to provide our services and to fulfill obligations arising from the contracts we enter into with you. The data are used e.g. to fulfill a (shipping) contract, manage customer data, manage payments and, where necessary, to run a credit check. Certain shipping data are transferred to the authorities of the country of transit or destination to verify compliance with the relevant laws (customs clearance and payment of tax), or for security checks. This data usually include the name and address of the sender, the name and address of the recipient, a description of the goods, and the number of items, the weight, and the value of the consignment.

The legal basis is usually Article 6 (1) (b) of the GDPR as the data are being processed in order to fulfill a contract to which you yourself are party. Processing may also fall under Article 6 (1) (c) of the GDPR for the purpose of complying with legal requirements such as Section 99 StPO or Section 40 PostG.

Below is a summary of our products and the associated data types: Shipping (e.g. DHL Paket, DHL Paket International, DHL Retoure, DHL Europaket, DHL Paket Connect):

  • Name and address of the sender/recipient
  • Name of alternative recipient, where applicable
  • Type of shipment, incl. attributes such as size and weight
  • Shipment number, where applicable
  • Tracking data, where applicable
  • Delivery documentation incl. signatures, where applicable
  • Defined product codes in the routing code specify which product was used
  • Account number
  • Required information for customs clearance, where applicable
  • Commercial invoice
  • Common labels, incl. license plate and routing code

Parcel-shipping services (e.g. COD, parcel notification, routing to Service Point, Ident-Check, age verification, DHL same-day parcel delivery, unde-liverable note, delivery in person):

  • Where applicable, e-mail address of the customer
  • Where applicable, e-mail address of the recipient
  • Where applicable, telephone number of the recipient
  • Where applicable, banking details of the sender in the case of COD shipments
  • Where applicable, ID data to safeguard correct delivery
  • Where applicable, information on services for recipients
  • Where applicable, signing authorities, powers of attorney in the case of delivery in person

A shipping confirmation is provided free of charge and informs the sender or recipient that the shipping docket for your shipment has been successfully generated and that your shipment has either already been passed on or will soon be passed on to DHL. In order to be able to notify you by e-mail of the shipping confirmation for your shipment, DHL requires the e-mail address of the sender or the recipient. DHL will receive the respective e-mail address from the sender of the shipment if he/she wishes to utilise DHL’s shipping confirmation service. DHL subsequently processes the e-mail address purely in order to send the shipping confirmation. The legal basis for this is Article 6 (1) (f) GDPR. Processing of the e-mail address for the purpose of the shipping confirmation is carried out in order to inform you that your shipment has been or will soon be passed to DHL.

Last updated: 11.07.2019