1. Introduction

Deutsche Post AG (hereinafter called DPAG) is pleased that you have visited our Supplier Innovation website and are interested in our company, products and services. It is important to us to protect your personal data during handling throughout the entire business process.
Please be aware that the national legal requirements for data protection and the handling of personal data may vary from country to country. Therefore, if you visit the relevant DHL country websites you will learn more about country specific information on data protection.
In the following, we explain what personal data DPAG collects when you visit our Supplier Innovation website and how this data is processed and for what specific purposes.

2. What is personal data?

Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes information such as your real name, address, telephone number and date of birth. Information which cannot be linked to your real identity – such as favorite websites or number of users of a site – is not considered personal data.

3. Who is responsible (identity and contact details of the controller and the data protection officer / contact)?

This Privacy Notice applies for the data processing carried out by:

Deutsche Post AG
Charles-de-Gaulle-Str. 20
53113 Bonn

If you have queries with regard to the processing of your personal data, please contact us via:
Deutsche Post AG
Konzerndatenschutz
53250 Bonn
datenschutz[at]dpdhl.com

4. What are the purposes of and the legal basis for the processing of personal data? / What are the controller´s or third party´s legitimate interests?

4.1. Visiting our Supplier Innovation website

DPAG is committed to preserving the privacy of users of our websites. When you visit our web pages, our web servers temporarily save the connection data of the computer connecting to our site. These connection data include: a list of the web pages that you visit within our site; the date and duration of your visit; the IP address of your device; the identification data of the type of browser and operation system used as well as the website through which you linked to our site. Additional personal information such as your name, address, telephone number or e-mail address is not collected unless you provide this data voluntarily, e.g. while completing an online contact form, as part of a registration, survey, competition, fulfillment of contract or an information request.
The legal basis for the processing of the aforementioned data categories is consent as provided in Art. 6 (1) (a) of the European General Data Protection Regulation (GDPR). The way how the user is able to withdraw the consent for future processing is prescribed in the process of obtaining the relevant consent. Due to the said purposes, in particular to guarantee security and a smooth connection setup, we have also a legitimate interest to process this data as provided in Art. 6 (1) (f) of the GDPR.
The data will be stored for a maximum period of 2 years and then automatically deleted.

4.2. Processing for collaboration purposes

Your data is used by Deutsche Post AG and the affiliated companies e.g. for learning more about your services or products, sharing that information with interested projects team within DPAG and the affiliated companies and getting in touch for further collaboration. The information provided would usually include: company name and address, Contact person name, email address, details about your innovative solutions and ideas, e.g. description, maturity level, geographical scope and supporting documents etc.
This website contains contact forms that can be used to contact us electronically. If the user makes use of this option, the data entered in the input mask are transmitted to the relevant company and processed accordingly.

4.3 Use of Cookies

“Cookies” are small files that enable us to store information related to your device and you, the user, specifically, while you visit one of our websites. Cookies help us to determine how frequently our internet pages are accessed as well as the number of users. And they help us configure our offers so that they are as convenient and efficient as possible for you.

On the basis of legitimate interests as stated in Art. 6 (1) (f) GDPR, we are using “session cookies” in order to optimize our website and to guarantee a convenient and undisturbed user experience. These cookies are stored exclusively for the duration of your visit to our internet pages. They are automatically deleted when you close your browser.

The categories of cookies are:

Strictly Necessary: These cookies are essential in order to enable you to move around the website and use its features. Without these cookies, services you have asked for cannot be provided.

Performance: These cookies collect information about how visitors use a website, for instance which pages visitors go to most often. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works.

 

5. Will my data be passed on to third parties?

DPAG does not share, sell, transfer or otherwise disseminate your personal data to third parties and will not do so in future, unless required by law, unless required for the purpose of the contract or unless you have given explicit consent to do so. For instance, it may be necessary to pass on your address and order data to our contractors when you order products.
External service providers that process data on our behalf are contractually obliged to maintain strict confidentiality as per Art. 28 GDPR. DPAG retains responsibility for safeguarding your information in such circumstances. The service providers follow the instructions of DPAG and this is guaranteed by technical and organizational measures, as well as by means of checks and controls.

6. What is the DP DHL Data Privacy Policy?

The DPDHL Data Privacy Policy regulates the Group-wide standards for data processing with a special focus on so-called third country transfers, meaning transfers of personal data to countries outside the EU, which do not have an adequate level of data protection. If you are interested in learning more about the DPDHL Data Privacy Policy, please use the following link:
https://www.dhl.com/de-en/home/footer/local-privacy-notice.html

7. What are my data subject’s rights?

7.1. Overview

Apart from the right to obtain you have the following rights:

• You can request information as to what personal data is stored
• You can request that we correct, delete or block your personal data provided these actions are permitted by law and in compliance with existing contractual conditions.
• You can request to receive personal data you have provided in a structured, commonly used and machine-readable format.
• You may lodge a complaint with the supervisory authority. The competent data protection authority is:

The Federal Commissioner for Data Protection and Freedom of Information (der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit – BfDI)
Graurheindorfer Straße 153
53117 Bonn

7.2. Right to object

The right to object applies for all processing of personal data which is based on Art. 6 (1) f) GDPR.
To exercise your right, simply get in touch with us by using the contact details mentioned above under sec. 3.

8. How about data security

DPAG takes all of the necessary technical and organizational security measures to protect your personal data from being lost or misused. For instance, your data is saved in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer technology (SSL) during transmission. This means that an approved encryption procedure is used for communication between your computer and the DHL servers if your browser supports SSL. Should you wish to contact DHL by e-mail, we would like to point out that the confidentiality of the information sent cannot be guaranteed. The contents of e-mail messages can be read by third parties.

9. Changes to Privacy Notice

We keep our Privacy Notice under regular review.
DPAG reserves the right to change its Privacy Notice at any time with or without prior notice. Please check back frequently to be informed of any changes. By using the Supplier Innovation website / Application you agree to this Privacy Notice.
This statement was last updated on 05/31/2021