For what purpose does DPD process your data?

DPD processes personal data mainly for the purpose of fulfilling transport services on behalf of shippers. You can download our privacy policy for parcel shipping here as a PDF document . Subject to your consent, data is also occasionally processed for advertising purposes and to optimise our online and delivery services. Data processing is also carried out for the purpose of invoicing you for our services and for processing the salaries and social security contributions of our employees.

Where does DPD receive your data from, and what data is involved?

DPD receives data for processing from various sources and for various purposes.

If you are a shipper DPD receives your data when you contact us, visit one of our shipping websites or ship parcels with us. For this purpose DPD and its affiliated companies in the Geopost Group saves your invoice address, details of pickup times, contact persons or selected/offered products. As a rule DPD receives this data directly from you, or in rare cases you are brought to our attention via the Internet or our sales partners.

If you are a consignee DPD receives your data from shippers. They provide us with your data, as well as information about the parcel, notification instructions, and possible ID documentation data mainly in electronic form, via their own shipping systems or shipping systems made available by DPD. They normally do so in that they have entered into a contractual relationship with you in accordance with Article 6 Para. 1 (b) of the GDPR. In addition, DPD receives your data from other providers of postal services which act on DPD's behalf in delivering shipments, e.g. if the shipment comes from abroad and if a different provider of postal services which cooperates with DPD has been entrusted with the delivery there.

DPD processes your personal data as an alternative consignee within the scope of § 68 of the Postal Services Act. For the purpose of ensuring a functioning postal system, this authorises the processing of personal data in matters of special public interest within the meaning of Art. 6 Para. 1e of the GDPR. This also includes the authorisation in accordance with § 68 Para. 3 sentence 1 of the Postal Services Act to process the personal data of alternative consignees (neighbours or other third parties), insofar as this is necessary for the proper delivery of postal shipments.

The processing primarily serves the purposes of documenting the delivery, providing (potential) proof of delivery to the parties involved (sender, consignee,  alternative consignee) and informing the actual consignee about the party from whom the shipment can be collected.

As a system partner, parcel shop operator or delivery driver you provide DPD with your data when you contact DPD or a system partner and would like to work for DPD. Due to various legal requirements and a specific legitimate interest, DPD is obliged to request some further information about you. This ranges from evidence of reliability to insurance cover, the vehicles used and existing licences or other information.

As a website visitor, you transmit your data via various functions on the DPD website. For this purpose DPD sets cookies or requests information directly from you. The main purpose of this is to optimise the presentation of the website or to introduce you to various services. You have the option at any time of restricting or deactivating these services by making an appropriate selection or clicking on a link. (On this subject please see: Web analysis, cookies and advertising).

As an applicant, you transmit your data when you contact DPD and send us your application documents. DPD uses this data exclusively for its own purposes. (Vorschlag: DPD uses this data exclusively for the purpose of processing the application.
Sie als Bewerber übermitteln Ihre Daten, wenn Sie mit DPD in Kontakt treten und Ihre Bewerbungsunterlagen zukommen lassen. DPD verwendet diese Daten ausschließlich für eigene Zwecke.

As an application developer and partner to DPD, you submit your data for the purpose of registering on the eSolutions portal.

To whom does DPD transfer your data?

DPD transfers your data to various bodies. However, only for the intended purposes.

DPD transmits the data of shippers mainly to the depots which are responsible for the collection and delivery of shipments, and to the system partners and delivery drivers involved there.

To assess the creditworthiness of (new) customers and service providers DPD uses probability values based on automated mathematical-statistical procedures (scoring). These are determined by reputable credit agencies and trade credit insurers on our behalf. For this purpose, we pass on data to these service providers on the basis of corresponding contractual agreements that have been reviewed in accordance with data protection law. In order not to unreasonably disadvantage your interests in individual cases with the credit assessment, DPD carries out a balancing of interests.

DPD transmits consignee data exclusively to the relevant system partners, parcel shops and delivery drivers (or other postal service providers required for delivery). The data always remains in DPD's systems. If a parcel is damaged, DPD also transfers the data to its insurers.

Shipment data or details of the contents of shipments will only be transmitted or made available to third parties in exceptional circumstances. Such third parties are above all the customs authorities, the state prosecution service or insurance companies. You can obtain information about the status of shipments at any time via the DPD app or the tracking functions on the DPD website. This information is only available to authorised users and can only be obtained by the entry of the consignee postcode and the parcel number.

Application documents are only sent to the departments concerned or, in the case of applications as delivery drivers, to DPD's system partners if the applicant has provided the appropriate consent.

In order to maintain our privileged customs status as an "authorised economic operator (AEO)" and to avoid penalties for breaches of the EU counter-terrorism regulations (EC 881/2002 and 2580/2001) and the Foreign Trade and Payments Act (AWG), at defined intervals DPD checks the names and address data of consignors, consignees, partners and employees against the official sanctions list databases.

Occasionally DPD also uses service providers to carry out specific tasks and activities. Unless they are sub-contractors in the logistics chain, all service providers are bound by our specifications for processing the data by means of a processing contract. DPD does not rent, lend or sell personal data to third parties. However, it is possible that data is passed on to affiliated companies, as is joint processing/controllership of data in accordance with Art. 26 of the GDPR.

Data on international shipments may also be processed in a non-EU country, i.e. forwarded to a country outside the European Union (EU)/European Economic Area (EEA) or accessed from there. This data transfer is necessary for the fulfilment of the relevant transport contract (e.g. delivery, customs clearance). If transfer to a non-EU country takes place by the controllers, this only takes place on the basis of the DPD privacy policy, EU standard contractual clauses or within the framework of the exemptions provided for by the GDPR.

What is the storage period for your data?

Like all other companies under private law, DPD must comply with various obligations regarding the storage of data. These include, above all, the retention periods in accordance with Germany's tax code, e.g. for consignment notes, delivery lists, delivery tour schedules and out-for-delivery processing lists, damage reports, liability records, invoices and balance sheets. In addition, for security reasons we keep tracking data of parcels for different periods, ranging from 30 to 180 days per platform.

In the absence of consent to a longer storage period, job application documents will be deleted in accordance with data protection legislation at the latest within six months after the rejection of the application.

DPD account data is deleted 2 years after deactivation. Objections to delivery notifications (Predict) are kept in a blocking list until the objection is revoked.

For the storage period of cookies, please refer to the table on cookies set in Web analysis, cookies and advertising.

Under the name "myDPD" DPD provides digital platforms on web servers or mobile terminals which enable shippers and consignees to send parcels and to monitor or manage their delivery. These functions are referred to below as the "service" or "services". myDPD distinguishes between private and business use of the services.

Basically the service can be used without registration. To be able to use the convenience functions, however, registration is required. This is done either by registering via the service with an email address and password or by using an existing Facebook or Google account. DPD does not transmit any parcel information to Facebook or Google in this respect, and only uses these services for authentication purposes. After authentication, a uniform DPD account is created for all our services. Business customers need to request their access data directly through their sales contact.

DPD Group processes information about the location, time and deliverability of your parcels, for example in order to improve our operational processes or to point out suitable optimisation opportunities to you. This data is processed in accordance with Article 6 Para. 1 (f) of the GDPR.

Login with Apple ID

If you use your Apple ID when logging in to DPD, you can register or log in with your Apple account. You will then be forwarded to the Apple website. For the iOS app the process takes place entirely within the operating system. For the login you will need the email address which is stored with Apple. This is required for identification purposes in order to create a secure DPD account for you and is stored with us. Your Apple profile and your DPD account are permanently linked via the email address. You can remove this link at any time on the Apple website.
DPD never learns your Apple access data. You can read how Apple handles privacy settings in the Apple data protection notices, which also include the valid regulations governing this possibility of logging in and registering with DPD.

Login via Facebook

Facebook Connect is a service from Facebook Ireland Limited (Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland). Its use is voluntary and optional. When using Facebook Connect, Facebook profile data and public data from your Facebook profile are transferred to DPD. We use and process your first and last name, gender, age, home town, email address, and Facebook ID for simplified registration to use the Parcel Navigator. If you are already a DPD customer, only the Facebook ID will be processed. Your Facebook account is linked to the DPD account via the Facebook ID. This makes it possible for you to register for the service using your Facebook access data via the "Login with Facebook" button. In addition, every time you log in, Facebook will know that you are using the DPD service. The link to Facebook can be revoked at any time on Facebook itself. Please also read Facebook's privacy policy on this subject.

Login with Google

The same applies to the use of the Google login as to the use of the Facebook login. This Google service is provided by Google Inc. (Google; Amphitheatre Parkway, Mountain View, CA 94043, USA). Registration and use of Google's services are subject to Google's Privacy Policy and Terms of Use, which you can view at www.google.com/intl/de/policies/privacy.

Login with netID

If you use the netID button when logging in to DPD, you can register or log in with your netID account. You will then be redirected to the netID website. Your email address, which is stored with netID, is required for the login. This is necessary for identification in order to create a secure DPD account for you and is stored with us. Your netID profile and your DPD account will be permanently linked via the email address. You can remove this link at any time on the netID website.

DPD does not learn your netID access data at any stage. You can read how netID handles privacy settings in the netID privacy notices; these are also the applicable requirements for this possibility for logging in and registering with DPD.

DPD processes the following data from you in order to provide the relevant services and information: email address, mobile phone number, password, a standard postcode (usually your consignee postcode), Predict status (whether you want parcel notifications or not), the names of the devices you use, and shipment related information from our delivery systems.

Whether or not our service may send you messages is up to you to decide on the settings of the app in your mobile device, or in the user account of the services.

Service rating

When a parcel has been successfully delivered, the consignee has the opportunity to rate our service. The data on customer satisfaction is required for the purpose of constantly adapting our work to the needs of our customers and market developments. In order to improve our products and quality, the rating is determined in conjunction with the parcel label number from the delivery. If the rating of our service has been saved, there is also the option to give a rating on Google. After clicking on the "Rate on Google" button, the user is then redirected from the DPD platform to the Google website via a link.

Tipping function

When a parcel has been successfully delivered and this has been rated positively by the consignee, there is the option of giving the delivery driver a digital tip via PayPal. A requirement is that the delivery driver has registered for the tipping function. Here the user can select an amount and is then redirected by the DPD platform to the PayPal website, where he or she has to log in with the relevant PayPal access data.  After logging in the user is shown the transaction details (account linked to PayPal and the amount of the tip). After confirming the transaction on the PayPal website, the user is redirected back to the DPD platform, where he or she has to confirm the payment details for the tip once more. A click on the button "Pay now" triggers the transaction in which the user gives the delivery driver the tip. Finally the user is shown a page which confirms the successful transaction.

Use of the platform

The platform makes it easier for shippers to transfer data to DPD as part of their shipping orders and to manage the necessary addresses. DPD uses this data exclusively for shipment processing as described under the "DPD parcel delivery service". The basis for the use of the platform is the transfer of data for the performance of postal services in accordance with Art. 6 Para. 1 (b) of the GDPR and the Postal Act on the basis of the resulting shipping order.

Advertising / information

If you have previously given us your consent under your "Profile" or have not objected (where required by law), DPD also processes and uses this data for its own product-related information, surveys, competitions and marketing purposes. Service providers are also used for this purpose. These work exclusively in accordance with our instructions under the terms of contract processing in accordance with Art. 28 et seq. of the GDPR.

With your consent we at DPD Group also process information about your user behaviour and your shipping activities in order to provide you with relevant and interesting promotional offers from us or our partners. Until you revoke it this processing takes place on the basis of your voluntary consent in accordance with Art. 6 Para. 1 (a) of the GDPR.

Usage analysis

As with our website, we use so-called cookies in several places in the tools. They serve to make our offering more user-friendly, effective and secure. How we use cookies and how you can prevent this is described under "Web analysis, cookies and services by third parties". These serve primarily for the quality assurance of the platform and for the maintenance of IT security. 

Storage duration

DPD processes the data stored on the platforms only as long as it is legally required. Sometimes you can delete the data yourself (if this does not violate legal retention periods). We will maintain your myDPD account until you delete it yourself under your "Profile". Shipment data is stored in varying levels of detail between 40 days and 10 years. We keep invoice information for 7/11 years.

Matomo and Google Analytics

In order to optimise our service DPD applies Google Analytics and Matomo. Details on the use of these services are described above under Web analysis, cookies and third-party services. DPD only makes data from the use of the services and about the service itself available to authorised internal users.

Chat function

The chat function enables logged-in business customers to get in touch with our employees in almost real time. When the chat request is sent, the following partly personal data is collected:

• date and time of the request

• specified name

• if provided voluntarily: email address, parcel number, invoice number

• customer number

• content of the communication

Depending on the course of the conversation, the communication may require additional personal data that you enter in the chat. The nature of this data depends largely on your enquiry and on the matter which you wish to discuss. The purpose of processing this data is to enable a quick response to your enquiry and its content.

DPD stores the chat history for a period of six months, after which the data is automatically archived.

The data is processed primarily for the fulfilment of the contract in accordance with Art. 6 Para. 1 (b) of the GDPR, and for the protection of legitimate interests in accordance with Art. 6 Para. 1 (f) of the GDPR. A legitimate interest on the part of DPD is in particular to ensure smooth processing and service, and to improve this on a permanent basis.

When you visit our websites https://business.dpd.de and https://portal.dpd.de/home_mydpd.aspx, the chat widget is loaded in the form of a JavaScript file. The chat widget technically represents the source code that is executed on your computer and enables the chat.

DPD stores the chat history for a period of six months, after which the data is automatically archived.

In order to deliver shipments correctly to the correct consignee DPD requires various data which is usually provided by the shipper. In addition to details of the address, parcel type and parcel shipping options, this may also include further information, e.g. on the notification of delivery to the consignee. In the case of a third-party delivery to a neighbour, the name and street including house number of the neighbour will be displayed and processed on our platforms.

The provisions of Section 68 of the Postal Services Act (PostG) allow the processing of personal data to ensure a functioning postal system and are thus in the special public interest as defined by Article 6 Para. 1 (e) of the GDPR. This also includes authorisation under § 68 Para. 3 Sentence 1 PostG in conjunction with. §3 PUDLV to process the personal data of substitute recipients (neighbours or other third parties), insofar as this is necessary for the proper delivery of postal items.

With our free DPD parcel notification consignees are informed about the expected delivery day and delivery time for parcels ordered for delivery to their home address. In addition, we inform consignees in the event of delays in delivery or if the consignee can't be located during delivery.

In order to be able to send parcel notifications to consignees by email or text message, DPD requires the email address or mobile phone number of the consignee. The "parcel notification" component of the service is activated as part of the contract upon registration with DPD. In order to fulfil the contract, the email address is processed for the purpose of parcel notification on the basis of Art. 6 Para. 1 (b) of the GDPR.

If the consignee is not a registered DPD customer, DPD receives the consignee's email address from the shipper of the parcel. The shipper is responsible for the correctness of the email addresses and telephone numbers of its customers (consignees) provided to DPD with regard to spelling, syntax and allocation to a specific shipment. If DPD receives requests from the consignee to block the sending of information by email or text message, DPD is obliged to take this objection into account and to discontinue this service to the consignee concerned.

Consignees who wish to block their email address for the Predict service should send an informal notice of cancellation to [email protected] indicating their name, address and the email address which is to be blocked. The effect of blocking the email address will be that the consignee will receive no further email notifications from DPD relating to shipments. In this case the consignee's email address is recorded in a separate list to ensure that no further messages are sent to this email address. In view of the large amount of consignee data and the fact that DPD does not store such data permanently, this can only be achieved by means of such a blocking list. The data is stored permanently on the blocking list. The basis for the processing is Art 6 Para. 1 (f) of the GDPR with the legitimate interest on the part of DPD in not sending notifications against the will of the consignee. Objections to DPD parcel notifications sent by the shipper must be sent directly to the shipper. These are outside DPD's area of responsibility. The shipper is not notified of the blocking.

The legal basis for the forwarding of the email address by the shipper to DPD is usually the consignee's consent to the shipper in accordance with Art. 6 Para. 1 (a) of the GDPR. The subsequent processing of the email address by DPD is exclusively shipment-related for the purpose of parcel notification and the customer-friendly organisation of the delivery time and place on behalf of the data subject (consignee).

The data is processed primarily on the basis of Chapter 7, Sections 2 and 3 of the Postal Services Act, Article 6 Para. 1 (e) and Article 6 Para. 1 (f) of the GDPR. A legitimate interest on the part of DPD is in particular that the processing meets the form which is generally approved by the legal system and which is socially acceptable.

With each parcel notification the consignee receives an objection option via which future parcel notifications can be excluded. 

As part of the parcel information and parcel delivery notification, the shipper can also send its customers information about itself in the form of customer banners. In addition to the company name and address, the banners may contain the company logo, the website URL and a company-related slogan/claim, but no additional advertising content in the form of text or images. The logos are provided via the Google AdManager order processing functions. DPD assures shippers that it will not send any advertising of its own to their consignees.

Our data protection assessment on Predict / GDPR can also be downloaded as a PDF document .

Suggested text for instructions in the privacy policies of DPD’s shipping customers from 25.5.2018:

”During shipping operations we transmit, on the basis of Art. 6 (1f) of the EU’s General Data Protection Regulation, your data (name, address, if necessary email address and/or mobile phone number for notification options and re-directions, together with further shipment-related data) to our shipping partner DPD Deutschland GmbH. You can reject the transmission of supplementary information such as email or mobile phone data both via our contact form and with DPD direct under [email protected] or, in the case of all parcel notifications, via a link.“

As part of DPD’s Predict-Service, consignors can also provide customers with information about themselves in the form of banner advertising. In addition to the company name and address, the customer’s banner can contain the company logo, the website URL and a company slogan/claim, but no advertising content that goes beyond this in the form of texts or images. DPD undertakes towards shipping customers not to send any advertising of its own to their customers (consignees).

Consignees who wish to block their email address for the Predict-Service should send an informal notice of cancellation to [email protected] indicating their name, address and the email address which is to be blocked. The effect of blocking the email address will be that the consignee will receive no further email notifications from us relating to shipments.

If you decide that you no longer wish to receive email notifications from DPD, we will put your email address on a separate list to ensure that no further messages are sent to you. In view of the large amount of consignee data and the fact that DPD does not in principle save this data in the long term, this can only be achieved by means of a blocking list. The data is saved permanently on the blocking list. The basis of the processing is Art. 6 I f) GDPR, with the legitimate interest on the part of DPD being not to send any notifications against the will of the consignee.

When you send us your online application you declare your consent to the electronic processing of your data, as described below.

Information which is recorded

As part of the application procedure, the DPD group of companies only records and processes the personal data which you submit to us or have entered in the application form.

Access to your data

Access to your data is only provided to such persons who have been trained in the relevant aspects of data protection and data security, and are subject to a contractual obligation of non-disclosure. The data which you make available in a concrete application is only seen by such persons who are responsible for filling the relevant vacancy. These are in particular HR staff within the company to which you apply, as well as any potential line managers.

Of course your data will not be used for any other purposes than for the application procedure, and will never be used for advertising purposes. Under no circumstances will your data be passed on to companies or persons outside the DPD group of companies.

Beyond the application procedure itself your application data may only be made available to other companies in the DPD group of companies for the purpose of filling other possible vacancies. If you do not agree to this, you can revoke your consent by sending an email to [email protected].

Data security

A variety of security procedures are used to protect the application data which is collected. The use of the latest technologies such as secure servers, firewalls and the encryption of application data protects against unauthorised access to your personal data. The security standard involved is continuously reviewed and adapted to the latest technological developments.

Deletion of data

Data which is provided in connection with a specific unsuccessful application for an advertised vacancy is deleted six months after the applicant has been notified. Applications which are included in the pool of applicants are automatically deleted after one year.

Applications on paper

You of course have the option of submitting your application documents to us on paper instead of electronically. However, please note that we do not return written application documents, and subsequently destroy them in accordance with data protection regulations.

Right to information and revocation

Applicants have the right to revoke their consent to the application process at any time. They can also request information about the data stored by DPD. To exercise these or other data protection rights, please contact [email protected].

Application as a delivery driver or system partner

As DPD employs only a few of its own delivery personnel, application data is forwarded to suitable system partners after it has been evaluated. By giving your consent at the end of the data collection process, you as an applicant agree to this forwarding of the data collected. DPD itself deletes your data after 6 months.

Application as a system partner

A precondition for suitability as a DPD system partner is a valid business licence and road haulage permit for the persons/company involved. DPD uses data entered in the application process for a preliminary classification and then contacts you directly as a business. The data is used by DPD exclusively for the selection and screening process, and is deleted after 6 months if you are not accepted as a system partner.

Candidate search

As part of our search for suitable candidates, we research job platforms. With the help of automated searches, we use the personal data published by potential candidates to check whether the person is a good fit for us and to make contact if necessary. However, no automated decision is made. This data is deleted after the selection process has ended,  unless an application process follows. The basis for the research is our legitimate interest in filling vacancies with suitable persons. You have the right to object.

To assess the creditworthiness of new customers DPD uses a probability value (scoring) based on automated mathematical-statistical procedures from e-crefo GmbH, Hellersbergstraße 12, 41460 Neuss for business customers, and from Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss for private customers. This information is used as a decision-making aid. Subjective value judgements or personal financial circumstances are not requested. Data is only stored and transmitted if this is necessary to protect the legitimate interests of DPD. In the event that insufficient data on the company concerned is available at e-crefo GmbH at the time of the enquiry regarding business customers, for the purpose of making individual decisions a probability value relating to the owner or managing director of the company concerned is also requested from Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss. In order not to unreasonably disadvantage your interests in individual cases with the creditworthiness check, DPD weighs up the interests involved. If the credit check is negative, DPD reserves the right to change the terms of payment or to subject the cooperation to monitoring.

If you use contact forms to contact DPD in electronic form, your voluntarily provided personal data will be collected and stored.

DPD uses the personal data provided by you exclusively for the purpose of answering your inquiry and fulfilling your requirements.

The processing of the personal data from the contact form serves DPD primarily for the purpose of responding to the establishment of contact. The data is processed for the fulfilment of the contract in accordance with Art. 6 Para. 1 (b) of the GDPR, as well as for the protection of legitimate interests in accordance with Art. 6 Para. 1 (f) of the GDPR. A justified interest on the part of DPD is, in particular, to ensure efficient processing and service, and to improve these on a permanent basis.

Your data will be stored as long as it is necessary to process the relevant contact enquiries.

DPD distinguishes between the following applications of video technology

• camera systems for the purpose of parcel tracking (in the vicinity of sorting facilities) and

• the use of video systems for site and building surveillance

These are then used for the following purposes:

1. Parcel tracking for error detection and error correction in parcel handling on the conveyor equipment and the infeed and outfeed points to the system

2. Security within the company

3. Safeguarding of domiciliary rights and property security against burglary, theft, vandalism and unauthorised entry

4. Compliance with the requirements of the customs AEO-F certification to maintain the status of an authorised economic operator.

The underlying legal basis for purposes 1, 2 and 3 is provided by Art. 6 Para. 1 (f) of the GDPR and in the case of postal secrecy by §64 of the Postal Services Act (PostG) as well as Art. 6 Para. 1 (c) of the GDPR, the Customs Code Implementation Decree (based on the EU Customs Code / Regulation (EU) No. 952/2013) and by the conclusion of works agreements with the relevant works councils based on §26 of the Federal Data Protection Act (BDSG) or the Works Council Constitution Act (BetrVG).

The storage period of the recordings is 40 days, for still images it is 12 months and in DPD stores 72 hours.

You have the option of subscribing to our free newsletter by email. The newsletter will keep you informed on a regular basis in order to provide you with offers and services tailored to your interests and preferences, as well as targeted tips on our products and services.

When you register for the newsletter, the personal data to be entered is transmitted to us from the input mask. For this purpose you have to enter your email address as a mandatory field. The purpose of collecting the email address is to ensure that emails are delivered correctly. In some cases, further voluntary details are requested for the individual dispatch of information such as your surname, first name and address data. In addition, your IP address and the date and time of the enquiry are automatically collected and stored.

Data collection during registration and double opt-in

When you sign up for our newsletter for the first time, a confirmation email will be sent to the email address you have provided. This confirmation email contains a link that you have to click on in order to confirm your registration. This so-called double opt-in procedure serves to check whether the owner of the email address has actually authorised receipt of the newsletter and agrees to receive this newsletter.

All registration processes are logged, so that it can be proved that the registration process was implemented in accordance with the applicable legal requirements. This includes the storage of the times of registration and confirmation, as well as the data transferred to us.

If consent has been provided by the user, the legal basis for the processing of the data after registration by the user for the newsletter is Art. 6 Para. 1 (a) of the GDPR.

Use of newsletter service providers

We use the services of external service providers for the dispatch and evaluation as well as for the technical processing of our newsletters. These services are under an express obligation to comply with data protection regulations on the basis of Art. 28 of the GDPR.

Newsletter tracking

DPD records your use of our newsletter, such as when emails are opened or clicked on, using tracking technology provided by the service provider.

On this basis the service provider can create reports for us on the success or failure of an email campaign, so that we can optimise the content of our newsletter. If the user has given his or her consent the legal basis for the processing of data in this context is Art. 6 Para. 1 (a) of the GDPR.

Duration of storage, right of revocation

The personal data which is processed in the context of the subscription to and the dispatch of the newsletter is stored by us for as long as the subscription to the newsletter is active. You can cancel your subscription to the newsletter and your consent to the processing of your data for the above-mentioned purposes at any time by using the unsubscribe link provided in the newsletter, or by sending an email to [email protected].

A separate revocation of your consent with regard to the described tracking process only is not possible. However, you have the option of configuring the email programme you use so that emails are displayed in text form and not in HTML format. This hides image and graphic files so that tracking is not possible. In these cases, however, the newsletter will not be displayed in full and you may not be able to use all the available functions.

The eSolutions portal offers solutions for various DPD services. Various DPD shipping applications and interfaces as well as information on the offers of DPD's partners are available to consignors and consignees. In addition, DPD offers documentation and implementation guides to all application developers who want to access our systems. Test systems are also available for DPD web services, for example to use the cloud parcel label printing function.

Additional personal data such as your name, address, telephone number or email address will only be recorded if you provide this information for the purpose of registration on the portal. A distinction is made between mandatory data, which is necessary for the correct communication, verification of user authorisation and information about the services used, and further voluntary data. This may help to improve services and the associated information. This voluntary information is also explicitly marked as such. When using the forum provided by DPD it may also be possible to provide additional profile data such as photos or descriptions of your profile, e.g. skills. This is also voluntary. Please note the rules of use in the DPD terms of use for the forum.

If you have given us your consent or - insofar as stipulated by legal regulations - if you have not raised an objection, DPD will also use this data for its own product-related surveys and marketing purposes. As with its website, DPD uses so-called cookies in several places in the tools. Cookies serve to make our services more user-friendly, effective and secure. How we use cookies and how you can prevent this is described under Web analysis, cookies and third-party services.

If you log into DPD's portal to use our services or request information about the services or use our test servers, these activities are logged for security purposes within the framework of our security concept on the basis of Article 6 Para. 1 (f) of the GDPR. Only a few administrators are allowed access to it and the logs are used exclusively for the prosecution of criminally relevant enquiries.