Privacy Notice for DHL Freight Driver App

1. Introduction
   
   It is important to us to protect your personal data during handling throughout the entire business process. In the following, we explain what personal data DHL Freight GmbH (hereinafter referred to as “DHL”) collects when you download and use Global Driver app and how this data is processed and for what specific purposes.


2. Definition of personal data
   
   Personal data means any information relating to an identified or identifiable natural person ('data subject'). This includes information such as your real name, address, telephone number and date of birth. Information which cannot be linked to your real identity a number of users of a site is not considered personal data.


3. Controller; Contact details
   
   This Privacy Notice applies for the data processing carried out by:
   DHL Freight GmbH
   Godesberger Allee 102-104,
   53175 Bonn


4. Data Protection Officer of DHL Freight GmbH; Contact details
   
   Data Protection Officer of Controller; contact details:
   Deutsche Post AG
   Global Data Protection
   53250 Bonn
   
   If you have queries with regard to the processing of your personal data, please contact:
   
   dataprotectionDGFF@dhl.com


5. Categories of personal data
   
   DHL processes the following categories of personal data depended on the purposes mentioned under section 6:
   
   
   • Contact data (i.e. mobile phone number)
   • Signatures of driving personnel
   • License plate data
   • (GPS) location data
   • Activity status information (moving or standing still)
   • Geofencing entry/exit alerts, general alerts, alerts relating to operational non-conformance
   • Trailer/Swap Body ID


6. Purposes and legal grounds regarding the processing of your personal data
   
   As a user, you have certain rights regarding your personal data, including:
   
   
   • For the performance of the contract, we process the personal data of the carrier. The personal data usually includes contact details of the carrier’s contact person (e.g., mobile phone number). The legal basis is Article 6 (1) (b) GDPR.
   • Performance of transportation services and fulfillment of contracts with our customers: We need your personal data in order to perform our transportation services and to fulfill the obligations that arise as a result of the contractual agreement with our customers. In particular personal data such as license plate data and (GPS) location data is used and also be made available to DHL customers to monitor shipments, to check shipment status, to plan time slots (e.g., loading time, arrival time) or to anticipate the observance of planned time slots. The availability of the afore mentioned data to DHL customers is limited to the period one hour before the planned loading time and during the transport services carried out on behalf of DHL. In the event that a Carrier's truck is fully chartered by DHL, the duration of the processing of personal data shall be the charter period. The legal basis is Article 6 (1)(f) GDPR. DHL has a legitimate interest to process your personal data in order to coordinate and secure the transportation services, for route optimization and to perform the contracts with its customers.
   • To increase the security of our transports certain transports will be monitored via GPS-tracking by security agents of a security organization who will receive your contact details and the respective (GPS) location data. The legal basis is Article 6 (1) (f) GDPR. DHL has a legitimate interest to ensure the security of (high value) transports.
   • To optimize the algorithms used for the track & trace services. The legal basis is Article 6 (1) (f) GDPR. DHL has a legitimate interest to optimize its services offered to the customers.
   • To inform public authorities in case of (suspicion of) theft fraud or any other misconduct regarding our transports. The legal basis is Article 6 (1) (c) GDPR. The processing of your personal data is necessary for compliance with a legal obligation to which DHL is subject to. Additionally, DHL has a legitimate interest to provide public authorities personal data in case of (suspicion of) misconduct. The legal basis is Article 6 (1) (f) GDPR.
   • For confirmation by the driving personnel that the goods have been received in a proper condition (signature of the driver via “Sign-on-Glass”). The legal basis is Article 6 (1) (c) GDPR.
   • For identifying the person handing over or receiving the cargo. The legal basis is Article 6 (1)(f) GDPR. DHL has a legitimate interest to ensure the quality and safety of the transport services. Identification documents of the driving personnel are identified by visual inspection.
   • To request and to provide you with a “Air Waybill”, a specific Identification document (ID) that you, being the truck driver, will need to access restricted and secured areas of any airport for air cargo. The legal basis is Article 6 (1) (f) GDPR. DHL has a legitimate interest to provide you access to restricted and secured airport areas.
   • To prevent and register:
     • Theft,
     • (On purpose) damaging of properties of DHL, DHL customers and suppliers,

DHL has implemented camera surveillance on its premises. The legal basis is Article 6 (1) (f) GDPR. DHL has a legitimate interest to prevent theft and damages to property of before mentioned parties and to monitor compliance with regulations, requirements and guidelines by utilizing a CCTV system on its premises.

Please note: Customers of DHL or their contractual parties might in some cases implement additional security measures, for example by providing their goods transported by DHL with a GPS device for collecting location data. In these cases, the customer or their contractual parties is the controller of personal data processed and is obliged to inform you as well as to give you the opportunity to exercise your rights. DHL will inform you about this data processing to the extent that the information was provided by the customer or their contractual parties. If you have any general questions regarding your privacy with these additional security measures, you can also contact us (please see contact details under section 4).


7. Recipients of your personal data
   
   DHL does not share, sell, transfer or otherwise disseminate your personal data to third parties and will not do so in future, unless a) required by law, b) required for the purposes described above or c) you have given explicit consent to do so. For instance, and as described above, we will pass your personal data to our customers. In this context personal data as listed under 5 except for contact data may also be made available to DHL`s customers including via third party shipping platforms. Service providers (processors) that process personal data on our behalf are contractually bound to DHL in conformance of Article 28 GDPR to ensure protection. These service providers follow strictly our instructions regarding the processing of your personal data. DHL remains responsible for the protection of your personal data and rights when your personal data is processed by service providers.


8. Transfer to third countries & DHL Group Data Privacy Policy
   
   Insofar as transfer to a third country is performed by DHL, this is only carried out based on the DHL Group Data Privacy Policy, EU standard contract clauses or within the scope of the exceptions of the GDPR. The DHL Group Data Privacy Policy regulates the DHL Group-wide standards for data processing with a special focus on transfers to DHL organizations in so-called third countries, meaning transfers of personal data to countries outside the EEA, which do not have an adequate level of data protection. If you are interested in learning more about the DHL Group Data Privacy Policy, please visit: DHL Group Data Privacy Policy. DHL has implemented all necessary technical and organizational security measures to protect your personal data from being lost or misused. For instance, your data is saved in a secure operating environment which is not accessible to the public.
   
   
9. Duration of storage
   
   We delete your personal data as soon as the purpose for which we have collected and processed the personal data ceases to apply. Beyond this time period, data storage only takes place to the extent made necessary by the legislation, regulations or other legal provisions to which we are subject in the EU or by legal provisions in third-party countries if these have an appropriate level of data protection.
   
   
10. Your rights regarding the processing of your personal data
    
    You have the following data protection rights with regard to the relevant DHL legal entity:
    
    
    • In accordance with Article 15 GDPR, you can request information about your personal data processed by the particular controller.
    • You can request rectification in accordance with Article 16 GDPR if your data are not (or are no longer) correct.
    • You can request the erasure of your personal data in accordance with Article 17 GDPR.
    • In accordance with Article 18 GDPR, you have the right to request a restriction on the processing of your personal data.
    • If the requirements of Article 20 (1) GDPR are met, you have the right to receive your data in a structured, commonly used and machine-readable format.
    • If you have given your consent to a certain type of processing, you can withdraw this consent at any time with effect for the future by informing the relevant contact addresses.
    • If you believe that the processing of your personal data violates data protection legislation, you have the right to lodge a complaint with the competent data protection supervisory authority in accordance with Article 77 (1) GDPR which is for DHL.
    • You may lodge a complaint with the supervisory authority. To find your competent data protection authority, please click here (Link: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm). To exercise your right, simply get in touch with us by using the contact details mentioned under section 4.
    
    
11. Information on your right to object pursuant to Article 21 GDPR
    
    You have the right to object, on grounds relating from your particular situation, at any time to processing of your personal data, which is based on Article 6 (1)(f) GDPR (data processing for the purposes of the legitimate interests). If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless processing serves the establishment, exercise or defense of legal claims. If you wish to make use of your right to object, please send an email to dataprotectionDGFF@dhl.com. The right to object applies for all processing of personal data which is based on Article 6 (1) f) GDPR. To exercise your right, simply get in touch with us by using the contact details mentioned above.
    
    
12. Changes to Privacy Notice
    
    The content of this privacy notice is reviewed on a regular basis and adapted if necessary. This privacy notice was last updated on June 5, 2025.