THE FOLLOWING INFORMATION EXPLAINS HOW AND WHY PERSONAL DATA IS PROCESSED IN THE CONTEXT OF AN EMPLOYMENT RELATIONSHIP WITH A COMPANY OF DEUTSCHE POST DHL GROUP BASED ON THE REQUIREMENTS OF THE GENERAL DATA PROTECTION REGULATION (GDPR).
Why is this Information being Provided?
The protection of your personal data is very important to us. The transparency of data processing is a key principle of the European General Data Protection Regulation (GDPR) and other applicable data protection laws. Your data will be processed by us for the establishment and execution of your employment contract in compliance with the provisions of the GDPR and other data protection regulations. This processing includes in particular the collection, storage, use, modification and deletion of data.
Who is Responsible for processing your data?
Responsible (controller) is the DPDHL Group Company where you are employed.
Who is the Pointed Data Protection Representative?
A Data Protection Representative has been appointed by the DPDHL Group Company where you are employed. Contact details are available locally.
What data do we PROCESS from you?
In connection with the handling of your employment relationship, the following employment & personal data are processed in particular:
Master data (such as employee ID, name, date of birth, nationality, working assignment, working location address, correspondence language, work assignment start date, hire date, work account type, Business unit, legal entity, personal contacts)
Contact data such as private phone number and where applicable private e-mail address.
Contract data such as working assignment, working location address, work assignment start date, hire date, work account type.
How Will Your data be Used?
Your data is used for the establishment, performance and termination of your employment relationship with your respective Group Company at Deutsche Post DHL Group. The following list provides you with the purposes of processing we pursue.
Sending invitation for DHL IT account activation.
Enable account reset password permissions.
Identify your IT account status.
Set your current IT account status in system, that is visible for your Line Manager.
Identify your working location.
Business reporting.
External communication with customers and providers.
Security of our IT infrastructure* (protection of company resources)
Termination of the employment relationship
Identification of your Line Manager.
How do we collect your data?
In order to employ you and to fulfil the employment relationship with you, we require, in addition to your master and contact data, all personal data which we are legally obliged to process and which we may have to pass on to other parties. You provide us with this data and inform us of any changes to this data. The same applies to specific personal data such as the status of severe disability or equivalent. In addition, your work with us also generates data of various kinds, e.g. performance evaluation. In individual cases, we may also receive data about our employees, e.g. from tax authorities, health insurance companies, courts or other supervisory authorities.
What is the legal basis for processing your data?
The processing serves primarily to establish, implement and terminate the contract on which your employment relationship is based, Article 6 (1) b GDPR. Within the scope of this contract, we have to fulfil, among other things, obligations under labor, social security and tax law which require the processing of data, Article 6 (1) c GDPR. The applicable data protection legislation allows us to process data in certain individual cases on the basis of legitimate interests, Article 6 (1) f GDPR. Processing operations marked with "*" are some use cases and are carried out for the purpose specified therein. The legitimate interests are in particular: improving the quality of service and the cooperation, centralization and coordination of processes as well as protection of goods and rights. You have the right to object to this on grounds relating to your particular situation. Processing for this purpose will be stopped unless compelling legitimate grounds which override your interests and right for processing can be demonstrate. If we base further processing on legitimate interests, we will inform you. An example of this is marketing activities for special employee offers. In some cases we are also entitled to process your data if you give us your explicit consent to do so, Article 6 (1) a GDPR. In such cases, we will ask you separately for your consent and inform you of your right to withdraw your consent. The legal basis for the processing of personal data can be found in Article 6 paragraph 1 of the General Data Protection Regulation (GDPR) and, where applicable, in other available legal regulations.
Who has access to your data?
In any case, your data will only be made available to authorized employees. Group-wide processes, e.g. within the scope of outsourced IT and personnel administration and management, or your employment contract may provide that, in addition to the authorized employees of your Group company, employees in other Group companies also have authorized access to your data. To the extent permitted or required by law, we may transfer data to non-group parties such as social security institutions, government agencies, courts, banks, tax authorities, creditors, insolvency administrators and providers outside the Deutsche Post DHL Group. If another Group company or an external company acts as provider, this is ensured by a contractual agreement. If personal data is transferred to Group companies in countries outside the European Economic Area, it will be handled in accordance with the provisions of the Deutsche Post DHL Privacy Policy. This ensures that our Group companies around the world process personal data in accordance with standards that meet the adequate data protection level in accordance with GDPR. Our Deutsche Post DHL Privacy Policy has been approved by the European Supervisory Authorities as a set of Binding Corporate Rules (BCR). A summary is available on myNet under "Data Protection" or from your responsible HR department.
How long will your data be stored for?
We store your data for as long as is necessary to fulfil the intended purpose of the processing, or for as long as we are legally obliged to do so.
What is the process for making a decision about your application?
Applications are generally assessed by employees of the HR department that is responsible for the job advertisement. If in exceptional cases an automated decision is taken within a permissible framework or certain information about you is automatically processed and assessed and a prediction is made about you (for the purposes of building a profile), the Group Company to which you apply will inform you about your rights to be heard and/or to object.
WHAT RIGHTS DO YOU HAVE?
According to the applicable legal regulations you have the right to
Request access regarding your data that we have stored,
Request rectification of in accurate data that we have stored about you,
Request erasure of data about you that we are no longer allowed to store,
Be heard in case of automated decision making and to object to it,
Object to processing of your personal data based on legitimate interests,
Withdraw your consent given,
Receive a copy of your stored data (potentially in electronic form).
How do you exercise your rights?
To assert your rights, please contact your responsible personnel department. In case of correction or deletion, we will also inform the recipient of your data about the action.
The responsible data protection representative is also available to answer your questions.
If you conclude that your rights are not being adequately respected, you can also lodge a complaint with the competent data protection supervisory authority, if available.
Changes to this information
This information is current as of May 2026, please note that we reserve the right to change this information if necessary.