Privacy Notice
1. Introduction
DHL Supply Chain Management GmbH (hereinafter called DHL Supply Chain), appreciates your visit to our website and your interest in our company, products and services. The protection of your personal data is an important concern for us. Below we explain what information DHL Supply Chain collects when you visit our website and how this information is used.
This privacy notice applies to all users of the MySupplyChain portal, whose personal data, meaning any information relating to an identified or identifiable natural person ('data subject') is being processed by DHL Supply Chain :
· Shipper: Shippers, including their employees, or individuals sending a shipment
· Consignee: Any person who receives a Consignment
· People who show an interest in us and our services
· Business partners: business partners including their employees
in respect to the below products and services:
· Track & Trace: Customer, Warehouse and Transport order visibility solution
· Inventory: Visibility of your warehouse inventory and product stock level. Daily or near real time.
· Operational Performance: KPI and exception operational visibility.
· Business Analytics: Reporting, data analysis and insights.
· Customer Services: Customer Queries and Reporting.
· Documents: Document management and storage solution.
· Claims Management: Transport claims, create new and view existing.
· Transport Management: Monitor your order entry, release and rate lookup. Delivery status.
· Risk Management: Supply chain risk management, with dynamic view of sourcing, procurement and logistical risks.
When you are using our website, you acknowledge and agree to the collection and processing of your personal data by DHL Supply Chain as explained in this notice.
2. Who is responsible (identity and contact details of the controller and the data protection officer / contact)?
This Privacy Notice applies for the data processing carried out by:
DHL Supply Chain Management GmbH
Charles-de-Gaulle-Str.20
53113 Bonn
Germany
If you have queries with regard to the processing of your personal data, please contact the Data Protection Contact Person:
Global Head of Data Protection
DHL Supply Chain Management GmbH
Charles de Gaulle Str. 20
53113 Bonn, Germany
3. What are the purposes of and the legal basis for the processing of personal data?
3.1. Customer account creation
The following mandatory information is required when creating user accounts on mysupplychain.dhl.com based on the performance of your contract (Art. 6 (1) b) GDPR): username, first and last name, email address, country and language preference, salutation, phone number, company name, job role and job function are optional and may be stored in the personal account record, if provided.
3.2. Shipping information
For contractual reasons, we also need personal data to provide our services and comply with the obligations arising from contractual agreements concluded with you. This data is used e. g. for performing a (shipment) contract, managing customer data, handling payments and, as the case may be, assessing creditworthiness. Certain shipment data will also be provided to the authorities of the country of transit or destination for customs and tax clearance or for security screening, as required by the laws of such country. The information provided would usually include: shipper name and address, receiver name and address, description of the goods, number of pieces, weight and value of shipment.
The legal basis is usually Art. 6 (1) b) and c) GDPR since the processing is required to comply with legal obligations in connection with the performance of a contract to which you are a party.
3.3. Processing for advertising purposes
When you visit our web page we offer you a broad variety of information about DHL Supply chain, about our products and services and events. In particular you can get information about our:
1. Events
2. Newsletters
If you are an existing customer of DHL Supply Chain your contact data (e.g. name, email address) will be processed to contact you in order to provide you with the latest information about our offers, news, related only to the products and services we are offering to you. Legal basis for the aforementioned processing is carried out pursuant to our legitimate interest (Art. 6 (1) f) GDPR).
You have right to object at any time to the said processing. To exercise your right, simply get in touch with us by using the contact details mentioned above under section 2.
If you register for one of our newsletters, we are entitled to use your e-mail address for this purpose. You may unsubscribe from the newsletter at any time by clicking the relevant link at the bottom of the newsletter. In case you file an objection or unsubscribe from our newsletter services the respective data will be removed from the mailing list or blocked, respectively deleted and no longer be processed for such purposes.
Otherwise, if we wish to contact you for our new products and services we may do so only if you have prior consented to said communication.
4. Processing for internal Analytics purposes
DHL Supply Chain may (i) compile statistical and other information related to the performance, operation and use of the products and services, and (ii) use data from MySupplyChain Taack & Trace environment, to create statistical analyses, and for research and development purposes to pursue its legitimate interests based on the Article 6 par. 1 f GDPR. Any commercial information obtained on the course of the provision of the services is considered confidential information of DHL Supply Chain and its customers and is intended for internal use only. Third parties in the meaning of this section do not include DHL’s Group companies or external agents, in particular consultants, used by the DHL Supply Chain in connection with the relevant contractual service. Dissemination to third parties or any other form of disclosure shall require the written approval of DHL Supply Chain’s customers.
5. Use of Cookies and your preferences
This website uses cookies and similar technologies, (hereafter “technologies”), which enable us, for example, to determine how frequently our internet pages are visited, the number of visitors, to configure our offers for maximum convenience and efficiency and to support our marketing efforts. These technologies incorporate data transfers to third-party providers based in countries without an adequate level of data protection (e. g. United States).
We employ third-party technologies together with your IP addresses to monitor and analyze the use of our websites, and to automate certain processes related to the development and operation of our websites.
Our website uses the following categories of cookies:
[1] Strictly Necessary: : These cookies are essential in order to enable you to move around the website and use its features. Without these cookies, services you have asked for cannot be provided. As already stated above, the use of these cookies are based on our legitimate interests (Art. 6 (1) (f) GDPR).
[2] Performance: These cookies collect, subject to your consent (Art. 6 (1) (a) GDPR) information about how visitors use our website, for instance which pages visitors go to most often. It is only used to improve how a website works.
[3] Analytics: These cookies are used subject to your consent (Art. 6 (1) (a) GDPR) to collect information about how people access our online services, to improve the quality of our website and its content – for example, the number of users on this website, how long you stay on the site for, and what parts of the site you liked.
Cookies can either be:
· Session cookies: these are only stored on your computer during your web session and are automatically deleted when you close your browser – they usually store an anonymous session ID allowing you to browse a website without having to log in to each page but they do not collect any personal data from your computer; or
· Persistent cookies: a persistent cookie is stored as a file on your computer and it remains there when you close your web browser. The cookie can be read by the website that created it when you visit that website again.
Please find our detailed list of cookies used on mysupplychain.dhl.com
|
Cookie Name |
Lifespan |
Hostname |
Default Category |
Default Description |
|
everest_g_v2 |
PERSISTENT |
everesttech.net |
Analytics Technologies |
This domain is owned by Adobe. The main business activity is: Advertising |
|
ELQSTATUS |
PERSISTENT |
eloqua.com |
Analytics Technologies |
This domain is owned by Oracle for the delivery of online marketing services that were previously branded under the Eloqua name. |
|
everest_session_v2 |
SESSION |
everesttech.net |
Analytics Technologies |
This domain is owned by Adobe. The main business activity is: Advertising |
|
AMCV_ |
PERSISTENT |
dhl.com |
Analytics Technologies |
This is a pattern type cookie name associated with Adobe Marketing Cloud. It stores a unique visitor identifier, and uses an organisation identifier to allow a company to track users across their domains and services. |
|
AMCV_9D88879D5579828F7F000101%40AdobeOrg |
PERSISTENT |
dhl.com |
Analytics Technologies |
This is a pattern type cookie name associated with Adobe Marketing Cloud. It stores a unique visitor identifier, and uses an organisation identifier to allow a company to track users across their domains and services. |
|
ELOQUA |
PERSISTENT |
eloqua.com |
Analytics Technologies |
Eloqua Business Marketing platform - this cookie collects and transfers contact info from webforms to internal databases. |
|
Demdex |
PERSISTENT |
demdex.net |
Analytics Technologies |
This cookie helps Adobe Audience Manger perform basic functions such as visitor identification, ID synchronization, segmentation, modeling, reporting, etc. |
|
AMCVS_ |
SESSION |
dhl.com |
Analytics Technologies |
This is a pattern type cookie name associated with Adobe Marketing Cloud. It stores a unique visitor identifier, and uses an organisation identifier. |
|
s_ccst |
PERSISTENT |
mysupplychain.dhl.com |
Analytics Technologies |
This cookie is set and read by the JavaScript code to determine if cookies are enabled (set to “True”) |
|
dpm |
PERSISTENT |
dpm.demdex.net |
Analytics Technologies |
Stores the fact that a call from Adobe or the ID service is passing in visitor data for synchronization or requesting an ID. |
|
s_xxxx |
SESSION |
dhl.com |
Performance Technologies |
This domain is owned by Adobe/Omniture. The main business activity is: Analytics |
|
s_sq |
SESSION |
mysupplychain.dhl.com |
Performance Technologies |
Adobe Site Catalyst cookie, stores information about the previous link clicked within the site |
|
test |
SESSION |
dhl.com |
Performance Technologies |
Adobe Analytics site tracking. |
|
ESTSSC |
SESSION |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
rcookie |
PERSISTENT |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
Is used to proper request routing. |
|
brcap |
PERSISTENT |
login.microsoftonline.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
esctx |
SESSION |
autologon.microsoftazuread-sso.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
cookieDisclaimer |
PERSISTENT |
dpdhl.com |
Strictly Necessary Technologies |
This cookie is set when site visitors have agreed to the general setting of cookies. To do this, site visitors must accept or confirm the general "Cookie Disclaimer". The cookie is set when clicking on "Accept", it is valid globally for the respective language variant of the site (i.e. EN/DE) |
|
cookieDisclaimer |
PERSISTENT |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie is set when site visitors have agreed to the general setting of cookies. To do this, site visitors must accept or confirm the general "Cookie Disclaimer". The cookie is set when clicking on "Accept", it is valid globally for the respective language variant of the site (i.e. EN/DE) |
|
x-ms-gateway-slice |
SESSION |
login.microsoftonline.com |
Strictly Necessary Technologies |
This cookie is used by Microsoft to securely authenticate login details |
|
esctx |
SESSION |
login.microsoftonline.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
is_azure_user |
PERSISTENT |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
Used by MSC to store azure user flag. Used for automatic login. This is a permanent cookie which expires after 7 days |
|
x-ms-RefreshTokenCredential |
SESSION |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
stsservicecookie |
SESSION |
autologon.microsoftazuread-sso.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
OptanonConsent |
PERSISTENT |
cdn.cookielaw.org |
Strictly Necessary Technologies |
This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. It contains no information that can identify the site visitor. |
|
stsservicecookie |
SESSION |
login.microsoftonline.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
OnetrustActiveGroups |
PERSISTENT |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
Saves information about the cookie consent that has been given by the user. |
|
x-ms-gateway-slice |
SESSION |
autologon.microsoftazuread-sso.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
CkTst |
SESSION |
login.microsoftonline.com |
Strictly Necessary Technologies |
This is a Microsoft MSN 1st party cookie that ensures the proper functioning of the website. |
|
CkTst |
PERSISTENT |
microsoftonline.com |
Strictly Necessary Technologies |
This is a Microsoft MSN 1st party cookie that ensures the proper functioning of the website. |
|
SignInStateCookie |
SESSION |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
OptanonAlertBoxClosed |
PERSISTENT |
cdn.cookielaw.org |
Strictly Necessary Technologies |
This cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust. It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information. |
|
AADSSOTILES |
SESSION |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
BIGipServerpl_cz2.cloudapps.dhl.com_443 |
PERSISTENT |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie name is associated with the BIG-IP product suite from company F5. Usually associated with managing sessions on load balanced servers, to ensure user requests are routed consistently to the correct server. The common root is BIGipServer most commonly followed by a domain name, usually the one that it is hosted on, but not always. |
|
OptanonAlertBoxClosed |
PERSISTENT |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust. It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information. |
|
ESTSAUTHLIGHT |
SESSION |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
OnetrustActiveGroups |
PERSISTENT |
cdn.cookielaw.org |
Strictly Necessary Technologies |
Stores the user consent for cookies. |
|
ESTSAUTHPERSISTENT |
SESSION |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
ESTSSSOTILES |
SESSION |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
ESTSAUTH |
SESSION |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
buid |
PERSISTENT |
login.microsoftonline.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
OptanonConsent |
PERSISTENT |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. It contains no information that can identify the site visitor. |
|
CCState |
SESSION |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
fpc |
PERSISTENT |
login.microsoftonline.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
ch |
SESSION |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
SSOCOOKIEPULLED |
SESSION |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
TS01xxxxxxxx |
SESSION |
mysupplychain.dhl.com |
Strictly Necessary Technologies |
TS |
|
fpc |
PERSISTENT |
autologon.microsoftazuread-sso.com |
Strictly Necessary Technologies |
This cookie belongs to Microsoft and is deployed by the Azure Active Directory. |
|
s_xxxx |
PERSISTENT |
mysupplychain.dhl.com |
Unknown |
|
|
rcookie |
SESSION |
mysupplychain.dhl.com |
Unknown |
|
|
SESSION |
SESSION |
mysupplychain.dhl.com |
Unknown |
|
You can always withdraw you consent by clicking on the Cookie Settings of our website.
6. Will my data be passed on to third parties?
However, in the context of the data processing as described in this Privacy Notice and the respective legal basis given, DHL Supply Chain will transfer your data to the following categories of recipients:
· DPDHL Group companies: transfer is required within the DPDHL Group, its legal entities and shared service centers to provide and improve our products and services. Transfers can also occur to manage our relationship with you, to identify you, to answer your requests and to comply with your privacy rights.
· Third party business partners: The transfer to third party business partners is limited to what is required by applicable law and / or in order to fulfill our contractual obligations.
· Third party processors: which process data are contractually obliged to maintain strict confidentiality as per Art. 28 GDPR. DHL retains responsibility for safeguarding your personal data in such circumstances. The business partners follow the instructions of DHL, and this is guaranteed by technical and organizational measures, as well as by means of checks and controls.
· Public authorities: transfer is required by applicable law (e.g. to fulfil a legal obligation during shipment processing).
Your data is only transferred outside the European Economic Area (EEA) to other Deutsche Post DHL Group companies, third party business partners or public authorities when permitted by applicable data protection law. In such cases, we will make sure that appropriate safeguards are in place to ensure the transfer of your data (e.g. our binding corporate rules, standard contractual clauses).
7. What is the DP DHL Data Privacy Policy?
The DPDHL Data Privacy Policy regulates the Group-wide standards for data processing with a special focus on so-called third country transfers, meaning transfers of personal data to countries outside the EU, which do not have an adequate level of data protection. If you are interested in learning more about the DPDHL Data Privacy Policy, please use the following link:
DPDHL Privacy Policy (Summary) (Type: Acrobat Reader file, Size: 274 KB)
8. What are my data subject’s rights?
8.1. Overview
Apart from the right to obtain you have the following rights:
· You can request information as to what personal data is stored
· You can request that we correct, delete or block your personal data provided these actions are permitted by law and in compliance with existing contractual conditions.
· You can request to receive personal data you have provided in a structured, commonly used and machine-readable format.
· You may lodge a complaint with the supervisory authority. The competent data protection authority is:
Die Landesbeauftragte für den Datenschutz Nordrhein-Westfalen
Kavalleriestraße 2-4
40213 Düsseldorf
8.2. Right to object
The right to object applies for all processing of personal data which is based on Art. 6 (1) f) GDPR.
To exercise your right, simply get in touch with us by using the contact details mentioned above under sec. 3.
9. How about data security
DHL understands that privacy is important to you. We will take all reasonable precautions to ensure that the Customer Information that we hold about you remains confidential. Information security techniques and controls, such as firewalls, anti-virus software and access control procedures are deployed to protect against:
· Unauthorised access
· Improper use or disclosure
· Unauthorised modification, and
· Unlawful destruction or accidental loss
Due to the fact that the Internet is not regarded as a completely secure system even if you implement the highest security measures, DHL cannot be responsible or liable for the security of your Data whilst in transit through the Internet.
Customer Information is handled on a ?Need to know? basis and access is only provided to those employees who have a legitimate need for that information for the purposes of our business.
10. Changes to Privacy Notice
We keep our Privacy Notice under regular review.
DHL Supply Chain reserves the right to change its Privacy Notice at any time with or without prior notice. Please check back frequently to be informed of any changes. By using this website you agree to this Privacy Notice.
This statement was last updated on 19 May 2022