With the following information we would like to provide you with an overview on how we process your personal data on the websites of General Logistics Systems Germany GmbH & Co. OHG and inform you about your rights according to privacy laws. Depending on the services you use, the details of the data processing differ. In addition to general information, you will find a detailed description of data processing for the specific service you use.
GLS Germany GmbH & Co. OHG (GLS Germany) takes data protection and privacy seriously. For that reason, personal data will exclusively be processed in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
As GLS Germany provides postal services or takes part in it, we are subject to maintaining postal secrecy under the Postal Act (PostG).
By means of technical and organisational security measures, GLS Germany does its best to protect personal data from loss or misuse. We process personal data in IT systems which are protected by appropriate security measures. This includes using SSL/TLS encryption for transfer of data entered by you on this website. If required by technical progress, we reserve the right to modify these security and privacy protection measures.
Controller according to Art. 4 (7) GDPR resp. service provider according to § 13 TMG (German Telemedia Act) is:
General Logistics Systems Germany GmbH & Co. OHG
GLS Germany-Str. 1-7
36286 Neuenstein
Phone +49 (0) 6677 646 907 000
(Hereinafter: „GLS Germany“)
You can contact our company data protection officer at:
GLS Germany GmbH & Co. OHG
Data Protection Officer
GLS Germany-Str. 1-7
36286 Neuenstein
If you want to contact via e-mail, please note that the confidentiality of the transmitted information cannot be guaranteed. Unencrypted e-mails can possibly be read by unauthorised third parties.
'Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’). This includes for example information such as name, address, telephone number and date of birth.
Information that cannot be linked to a specific or determinable individual - such as the number of users of a website - is not considered to be personal data.
Your personal data will only be processed by us provided with a legal basis. The processing is lawful, if at least one of the following conditions applies:
Consent (Art. 6 (1) a GDPR):
The data subject has given consent to the processing of his or her personal data for one or more specific purposes. One purpose might the processing of your request. The consent can be withdrawn by any time. This also applies to consent given even before the EU GDPR. The withdrawal is only effective for the future and does not affect the legality of the data processed until the withdrawal.
Contractual obligations or pre-contractual measures (Art. 6 (1) b GDPR):
The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. Upon your request we process your data. Usually this results out of our products/services or can include consultation or analysis on demand.
Legitimate interest (Art.6 (1) f GDPR):
The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Besides the fulfillment of a contract we may have further interests. (e.g. ensuring IT security and operations, to analyze and improve the use of our website, etc.)
Compliance with legal obligation (Art. 6 (1) c GDPR):
The processing is necessary for compliance with a legal obligation to which the controller is subject. GLS Germany is subject to different legal obligations. Among others, these include retention periods prescribed by German Commercial Code (HGB) or Fiscal Code of Germany (AO).
Within GLS Germany, those entities, who need your data to fulfil their contractual or legal obligations, have access to your data. Also providers, commissioned by GLS Germany, may receive data for these purposes, provided they meet the legal requirements. Those parties include Group and carefully selected non-Group third parties contractually required to provide services for or on behalf of GLS Germany. GLS Germany has concluded corresponding contractual agreements with these parties.
In regard to a data transfer to further recipients, we will only pass on your personal data if required by law, with your consent or if we are authorized for disclosure. Under these conditions, public bodies and institutions (such as prosecuting authorities) can receive your personal data if it is required by law.
A transfer of personal data to a third countries will exclusively take place if explicitly mentioned in the context of the mentioned services.
GLS Germany stores your personal data only in accordance to legal retention periods and legal obligations, as long as it is necessary for the purpose. We set the duration of the storage according to the following requirements:
Operational requirements: The storage duration, that is needed to complete operational processes.
Legal requirements: Commercial and tax retention periods, which result e.g. from the German Commercial Code (HGB) or the Fiscal Code of Germany (AO). They usually prescribe retention periods of 6 to 10 years. This concerns e.g. the electronic customer invoices that may be accessible through YourGLS.
The periods of limitation according to §§ 195 ff. Of the German Civil Code (BGB) may be up to 30 years, whereby the regular period of limitation is three years. E.g. Complaints communicated via the contact form.
After expiry of the defined retention period, the data will be deleted or destroyed.
Parcel Delivery
For the purpose of Parcel Delivery we process consignor information like address, contact details, bank details and other required data for the services used by the consignor.
In addition to that we process data of the consignees. The consignor provides us with the name, address, zip code, city and country of the consignee. During the delivery process the name and signature of the consignee are registered. If the consignee is not at home, GLS is authorized to deliver the parcel to an alternative consignee, for example a neighbour. In this case the name and signature of the alternative consignee are registered. If this delivery is not possible, the parcel will be delivered to a GLS parcel shop. If the parcel is picked up in the parcel shop the name and signature of the consignee or his/her assignee are registered on a smartphone which GLS supplies to the parcel shop owner. All data will be saved on the central GLS IT system.
If you give us a one-time or permanent permission of deposit, we collect your name, address, zip code, city and place of deposit. If you give another person a parcel pickup authorisation, we will collect this person’s name, address and place of residence. The processing takes place in the context of the fulfilment of the contract with the consignor who has an interest in the proper delivery. The data of the permission of deposit will be stored as long as it is valid and for 3 years after revocation, in case of asserting claims for damages.
For specific delivery services it is required to collect further personal data in order to fulfill the contract:
| Service name: | Personal data | Data subject | Purpose |
| FlexDeliveryService | e-mail address In case of alternative delivery: name, address | Consignee Alternative consignee | information about the scheduled delivery via e-mail to the alternative consignee |
| CashService | bank account details | Consignor | payment of CashOnDelivery-Service amount to consignor |
| ShopDeliveryService | e-mail address or mobile phone no. | Consignee | information about parcel delivery in selected ParcelShop via E-Mail or SMS |
| Pick&ReturnService, Pick&ShipService | pickup address e-mail address | Consignor (who is no customer) Pickup contact | parcel pickup Pickup information |
| DeliveryAtWorkService | department, contact person, phone no. | Consignee | delivery in the selected department/on consignee’s workplace |
| IdentPINService | PIN code | Consignee | for secure identification of the consignee by the delivery driver |
| InfoService | e-mail address | Consignee | tracking information about parcel and planned delivery time via e-mail |
If parcels are sent to other countries, the needed consignor and consignee data will be transferred to the GLS partner company in the delivery country.
The collection of your personal data is necessary for the execution of our deliveries and for operations related to that (e.g. accounting or claimed damages) in order to fulfil our contractual duties with our customers (consignor).
As far as needed we process your personal data for the purpose of legitimate interest of GLS Germany or thirds. This applies e.g. to solvency checks, quality management, complaint management and controlling purposes.
In addition to that we as a company are subject to several legal obligations, e.g. fiscal checking and notification duties and sanction checks according to the Foreign Trade and Payments Act.
Compliance with applicable data protection regulations regarding consignor, consignment and consignee data is an original duty of GLS Germany. Transferring data to GLS Germany by the consignor/client for the purpose of fulfilling a contract does not constitute a processing of data on behalf.
For additional services like our “FlexDeliveryService” and the “ShopDeliveryService” the e-mail address or the phone number of the consignee is required in order to receive updates on the delivery. GLS Germany receives this data from the customer, who orders the service. The consignor is therefore responsible for a proper handling of this data. In particular the client is also responsible for obtaining the consent of the consignee to the transfer of his telephone number and/or e-mail address to GLS Germany.
In case of Pick&ReturnService or Pick&ShipService the customer can provide the e-mail address of the pickup contact (see above). GLS Germany receives this data from the customer, who orders the service. The consignor is therefore responsible for a proper handling of this data. In particular the client is also responsible for obtaining the consent of the pickup contact to the transfer of his e-mail address to GLS Germany.
In case of any question according to this process, please contact your contracting party (the consignor/requester of the pickup order). Furthermore it is also possible to withdraw your consent towards GLS Germany. To do so, please contact our data protection officer.
When choosing a new delivery option, personal data is collected and processed:
User Data
The following user data will be collected and processed when choosing a new delivery option:
The data is being used to fulfill the delivery agreement or to contact users during delivery to make sure the parcel can be delivered at the desired time and place. This represents a fulfillment of contractual obligations according to Art. 6 (1) b GDPR. A use for other purposes, especially disclosure to third parties, is excluded.
GLS employs various methods to measure the satisfaction of its customers in order to achieve continuous optimization of its services and products. This includes allowing shippers and/or recipients to voluntarily participate in surveys. The following measurement tools are used:
Controllers for the processing in terms of the application process according to Art. 4 (7) GDPR resp. service provider according to § 13 TMG (German Telemedia Act) are:
General Logistics Systems Germany GmbH & Co. OHG,
GLS IT Services GmbH,
GLS Verwaltungs- und Service GmbH
GLS Germany-Str. 1-7
36286 Neuenstein
DER KURIER GmbH & Co. KG
Dörrwiese 2
36286 Neuenstein
OverNight Service GmbH
Wendenstraße 349
20537 Hamburg
General Logistics Systems B.V.
Breguetlaan 28-30
1438 BC Oude Meer
The Netherlands
(Hereinafter: „The controllers“)
By applying to one of the above mentioned companies via gls-karriere.de, by e-mail or by post, you provide the respective company with your personal data for the purpose of examining your application. The data will help the controller to manage your application and to find a suitable job for you. Your data is stored and processed on the systems of our software partner Haufe-umantis AG.
In order to optimize our recruiting process continuously, we use the applicant management solution of our software partner Haufe-umantis. For details of their privacy policy, please use the following link: https://www.umantis.com/en/data-privacy/
To ensure the compliance with data protection regulations, we concluded a Data Processing Agreement according to Art. 28 GDPR with Haufe-umantis.
When applying via our GLS career page, the following information is mandatory: salutation, first name, surname, e-mail address (and password for registration), your salary requirements, a curriculum vitae and information on how you have become aware of us.
Additional personal data we receive from you by the voluntary indication of, among other things, a phone number, address details, a photo, a letter of motivation, or your relevant credentials.
If you apply by e-mail or post, we will store all data that you provide us in your application.
In the context of any other contact and use of the e-mail contact form, the data you enter, such as name, address, telephone number, e-mail address, etc., is required to process your request.
The storage and processing of your data for the purpose of applicant management takes place for the initiation of an employment contract with you. As far as necessary we process your personal data for the purpose of legitimate interest of the controllers or thirds. This includes processing for statistical purposes in an anonymous or aggregated way (e.g. reportings).
If you give us consent to the processing and storage of your personal data for processing purposes for application beyond the actual staffing and you also want to be contacted via job offers by phone or in electronic form, the lawful processing is based on your consent.
At any time you have the right to withdraw your consent in data processing towards us. This also applies to consent given before the EU-GDPR. The withdrawal is only effective for the future and does not affect the lawfulness of the data processed until the withdrawal.
If you have given your consent that we may contact you via WhatsApp, data will be transmitted to WhatsApp Inc. WhatsApp has implemented an end-to-end encryption so that the transmitted content is only accessible to the communication partners. WhatsApp can collect so-called metadata (who communicates with whom and how often).
WhatsApp Inc. receives personal data (including metadata), which are also processed on servers in countries outside the EU (e.g. USA). This data will also be passed on to other companies within and outside the Facebook group. For more information, see WhatsApp’s privacy policy. The controllers have neither exact knowledge nor influence on the data processing by WhatsApp Inc.
In the application process we may conduct video interviews. We use the service provider Cammio GmbH, Philipp-Franck-Weg 19, 14109 Berlin, for technical implementation. To ensure the compliance with data protection regulations, we concluded a Data Processing Agreement according to Art. 28 GDPR with Cammio. The video file of the interview is secured and stored at Cammio on behalf of the controllers and is used exclusively for the purpose of the recruitment and hiring process of the controllers. The video file is automatically deleted in a non-recoverable manner six months after the end of the job offer and its selection process. During this period, the video file may be used by the controllers with the consent of the applicant for the recruitment and selection process of other job offers of the above named controllers. Upon written request of the applicant the video file will be deleted earlier.
Legal basis for the processing of your data in the context of the video interview is Art. 6 (1) lit. a GDPR (consent).
The central processing of the applicant data is the responsibility of GLS Germany GmbH & Co. OHG. Your data will only be saved, evaluated, processed or forwarded internally (within the responsible companies) as part of your application. They are only accessible to employees of the human resources department and those persons responsible for the selection of applicants. They are committed to maintain confidentiality of personal data as part of their employment contract. In exceptional cases, additional parties may receive your data.
In the case of recruitment by external recruiting agents, e.g. through Head-hunter or the Employment Agency, they may receive your personal information.
In regard to a data transfer to third parties, we will only transmit your personal data if required by law, with your consent of if we are authorised for disclosure. Under these conditions, public bodies and institutions (such as law enforcement agencies) can receive your personal data.
A transfer of personal data to a non-EU-country will exclusively take place if explicitly stated in the context of the previously mentioned services.
We store your personal data only in accordance with legal retention periods and legal obligations, as long as it is necessary for the purpose. We set the duration of the storage according to the following requirements:
If you start a job with the person in charge, your personal data, or at least an excerpt thereof, will be added to your personal file.
If you have applied and have received a negative decision, your details will be saved for 6 months after completing the application process and will then be anonymized (profile and application). There is no notification about the deletion of the data.
If we cannot offer you a suitable position at the time of your application, we will assign your application with your consent to a talent pool of the responsible companies. You will receive a message about it in this case. If you do not agree or are no longer interested, you have the possibility to delete your data (profile and application) at any time. If your application is assigned to a talent pool, the data is stored for 12 months and will then be anonymised.
Anonymised data cannot be attributed to a person.
If you apply as a Parcel Shop partner of GLS Germany, we need the following personal data of you, respectively: surname, given name, company if applicable, street, house number, postcode, town, country, phone number, e-mail address and website (if applicable) for the purpose of reviewing your application (pre-contractual measures).
If the contract (Parcel Shop contract) is closed between you and GLS Germany, we process these data in order to fulfil the contract. Furthermore in terms of accounting we need your bank details, tax ID and sales tax ID. For the proof of business registration we need the corresponding trade register excerpt.
Legal basis for the data processing is Art. 6 (1) b GDPR. If no contract is concluded, your data will be deleted latest 2 years after the process has been completed.
For a better traceability of your Parcel Shop its address will be published or shown as a search result on the following websites and applications. This might include Parcel Shop searching included in the GLS Germany websites ( gls-group.com, gls-one.de) and in the GLS App, Online directory services: (e.g. Google Maps, Yellow Pages) and Integration in webshops of Parcel Shop partners who offer our ShopDeliveryService.
If you apply as a vendor of GLS Germany, we need the following personal data of you or the contact person, respectively: Title, surname, given name, company if applicable, street, house number, postcode, town, country, language, phone number, fax number, e-mail address and website if applicable, if you participate in COUPA, VAT identification number, tax number, D-U-N-S, bank data, terms of payment and delivery, information on your offered products and services and on quality and environmental management for checking your application (in order to prepare a contract).
If the contract is closed between you and GLS Germany, we process these data to fulfil the contract. If no contract is concluded, your data will be stored for six years according to the legal retention period for business correspondence and be deleted afterwards.
GLS Germany is regularly buying commercial addresses and contact data (phone no., e-mail address) from reputable address brokers. This data is used to contact potential new business customers (parcel shippers) by phone, post, e-mail or other and request your demand for parcel services.
Should you be contacted within such a campaign and do not wish further contact, please tell us directly in the phone call or write to the named contact address. We will then put your address on an opt-out list, so you will not be contacted anymore by us for marketing purposes.
The processing of your data in this case is based on our legitimate interest according to Art. 6 (1) lit f) GDPR.
With video surveillance at the locations of GLS Germany, the company pursues the following legitimate interests in accordance with Art. 6 (1) f DSGVO:
- Property protection, burglary prevention and householder’s rights
- Parcel tracking incl. documentation of liability transfer
- Security and employee protection for Cash on Delivery transactions
Video recording will be stored for 30 calendar days.
For a proper use of our services you must provide us with personal data, which is necessary for the fulfilment of the specific purpose or which we are legally required to collect. Otherwise we are usually not able to form a contract with you. The scope of data processing depends on the use of the respective functions.
Track & Trace
The parcel number is required to provide you with status information about the parcel.
YourGLS
The GLS Germany website is generally divided into an open and closed area: Functions in the open area can be used without prior registration. GLS business customers receive login data for “YourGLS” (closed area) from their responsible depot on request.
The closed area "YourGLS" offers you to save addresses of regular consignees in the YourGLS address book. These addresses can be used to produce parcel labels easily. You can delete these addresses any time. Upon request or when your customer relation ends, the YourGLS account will be locked by the responsible depot. The data is deleted after the legal retention period is expired.
Searching for ParcelShops/ Depots
For searching the closest ParcelShop or GLS Depot, you need to enter the ZIP Code. Please note that a ZIP Code on its own is no personal data.
Application form for suppliers
If you apply as a supplier at GLS Germany, we collect the following personal data of the creditor resp. contact person(s) as part of the pre-contractual review:
First name, last name, (company), address, zip code, city, country, language, telephone number, fax, e-mail address and (website).
Participation in COUPA, sales tax ID, tax ID, D-U-N-S, bank details, payment- and delivery information, information about your offered products and services as well as about your quality and environmental management.
GLS KlimaProtect
As a GLS Germany customer (shipper) you can download materials such as the GLS KlimaProtect emblem in a download area. In order to access this area, you have to enter your company name and customer-ID. This to confirm that GLS Germany transports your parcels climate-neutral and that you will use the downloaded materials only in relation with your climate-neutral shipping with GLS Germany.
The company name and customer-ID are stored in a log file for five months. GLS Germany reserves the right to check the information during this period. After five months the data is automatically deleted.
Track & Trace
The parcel number is required to provide you with status information about the parcel.
Contact form
The data you submit via contact form (e.g. name, address, zip code, town) is required to process and answer your request.
Shipping information under "Join as business partner"
The data entered in the above mentioned form, such as first name, number of parcels, etc., is required to process your request. After receiving your request we will send you a confirmation e-mail.
YourGLS
The GLS Germany website is generally divided into an open and closed area: Functions in the open area can be used without prior registration. GLS business customers receive login data for “YourGLS” (closed area) from their responsible depot on request.
The closed area "YourGLS" offers you to save addresses of regular consignees in the YourGLS address book. These addresses can be used to produce parcel labels easily. You can delete these addresses any time. Upon request or when your customer relation ends, the YourGLS account will be locked by the responsible depot. The data is deleted after the legal retention period is expired.
Searching for ParcelShops/ Depots
For searching the closest ParcelShop or GLS depot, you need to enter the ZIP Code. Please note that a ZIP Code on its own is no personal data.
Application form for ParcelShop partners
If you apply as a ParcelShop partner at GLS Germany, we collect the following personal data as part of the pre-contractual review:
First name, last name, (company), address, zip code, city, country, telephone number, e-mail address, (website)
Permission of deposit
On our website you have the option to fill a permission of deposit. This allows a delivery, even if we cannot meet you in person a permission of deposit, we collect the following personal data:
First and last name of the recipient or company name, street/house number, zip code/place of residence, a description of the desired storage location (e.g. Garage) and optionally e-mail address.
The data of the permission of deposit will be stored for another 3 years after revocation, in case of asserting claims for damages.
ParcelShop
If you submit a proposal for a ParcelShop in your area, we will process the personal data that you have provided to us via the contact form. Therefore it is mandatory to provide a street, house number, postcode and town. In addition, you have the possibility to provide the name of the ParcelShop, a contact person and your own contact details for us to contact you. You will then only be notified by us if you have given us your consent.
Callback request
If you set up a callback request via our website, we will process your first name, last name, company and telephone number to process your request.
GLS Newsroom
For the provision of our newsroom we use the provider TheNewsMarket, part of DMA Media Group, Waldhornstrasse 4, D-80997 Munich.
If you use the search option in our Newsroom, we save the entered search terms to process your search query and to optimize our offer.
If you have placed media in the media basket of our newsroom and wish to send it, we will collect the e-mail address of the message recipient(s), the subject line optional message and your name and e-mail address to send the media basket by e-mail.
If you would like to download the media in the Media Basket, we will collect your name, e-mail address, country, function, company, and title to learn more about you and, if necessary, contact you.
You also have the option to subscribe to our News. When you register, your email address will be shared with us and a confirmation email will be sent to the address provided. This email contains a link that you must click to confirm your registration (double opt-in procedure). The legal basis for processing the data after the user has registered for the newsletter is Art. 6 (1) a GDPR.
The privacy policy of our partner TheNewsMarket can be found at https://www.thenewsmarket.com/Privacy.
Send parcel
The personal data entered by you in the „Send parcel“ form, such as consignor and consignee information (first name, last name, company, address, zip code, city and country) are processed and stored in order to fulfill the contract on the legal basis of Art. 1 (1) b GDPR. Some services require additional data:
Consignee data transmitted by the user will exclusively be used by GLS Germany to fulfill the ordered service (parcel delivery). A use for further purposes, in particular the transfer to third parties is excluded, unless legal regulations require another use.
As consignor, please note that transmitting the e-mail address or telephone number of the consignee requires permission.
As far as necessary, we process your personal data beyond the fulfilment of the contract in order to protect the legitimate interests of GLS Germany or third parties. This includes processing for the purpose of credit assessment, quality management, marketing, complaint and claims management as well as for controlling purposes.
Payment processing
We use the following payment service provider to process your data in terms of the payment for our delivery services:
Please note that in the context of your paying process via “PayPal”, “PayPal via PayPal PLUS”, “Direct Debit via PayPal PLUS”, “Credit Card via PayPal PLUS” or “PayPal PLUS Invoice”, PayPal is responsible for the data processing. Therefore all transactions are subject to PayPal’s privacy policy. When you select one of the following listed payment methods “Credit Car via PayPal PLUS”, “Direct Debit via PayPal PLUS” or “PayPal Invoice” PayPal conducts a credit check to calculate the likelihood of a payment default (so called “Scoring Value”).
For information on identity verification at PayPal and for data exchange with credit reporting agencies (credit rating), click here: https://www.paypal.com/de/webapps/mpp/ua/creditchk
Please note that in the context of your paying process via credit card EVO Payments will be responsible for the data processing. Therefore all transactions are subject to EVO Payments Privacy Policy.
GLS applies fraud prevention measures when you are making an online payment at GLS-ONE or in the GLS App. Therefore your payment can fail (e.g. when exceeding a maximum amount). If you would like to be exempted from these measure, for example, if you want to send higher amounts of parcels, please contact mail@gls-one.de. We ask you for understanding, that we check your payment history before activation.
Registration
When registering for GLS-ONE or GLS App, your e-mail address and your GLS-ONE password (user data) will be collected and stored. The e-mail address will be used as a user name for GLS-ONE or GLS App and to give you a new password for GLS-ONE if required.
Under „My parcels“ you have list of all parcel you sent with GLS-ONE including date, parcel number, consignee, price and status.
In addition to that, as a registered GLS-ONE user you have the opportunity to save your consignee address under „My address book”. You can delete the addresses at any time. We won’t use the addresses, unless you send us a transport request by using the function “Send parcel”.
By deleting your GLS-ONE account, those consignee addresses will be deleted automatically. The erasure of your data will take place after everything has been settled and after expiry of the legal retention periods.
Track & Trace ("Where is my parcel?")
Your entered parcel number is required to provide you with status information about your searched parcel.
Search for a ParcelShop
For searching the closest ParcelShop, you need to enter the zip code. Please note that a zip code on its own is no personal data.
Permission of deposit
As a registered GLS-ONE user you have the option to give us a permission of deposit. This allows delivery even if you are absent. For the permission of deposit, we collect the following personal data:
First and last name of the recipient or company name, street/house number, zip code/place of residence and a description of the desired deposit location (e.g. Garage).
The data of the permission of deposit will be stored for another 3 years after revocation, in case of asserting claims for damages.
Job application
Further information on data processing in the context of your application to GLS Germany or a company affiliated with GLS can be found in the section 3. Information for applicants.
YouTube
You will find Videos of our YouTube Business profile on this website. For more information on YouTube, see section 10.6. YouTube below
To provide our functions on gls-education.de we use the provider talentsconnect AG, Niehler Straße 104, 50733 Cologne.
“Merken” function
The “Merken” function can be used to forward vacancies from our website to the e-mail-account of the user. In this case name, first name and email address are processed and if necessary forwarded to our service provider talentsconnect AG for the purpose of information about potential job offers and the creation of an applicant account. The data will be processed on the basis of consent in accordance with Art. 6 (1) lit. a GDPR.
These websites are used for customs data collection. The following data will be transmitted by consignor:
| Data subject | Personal Data |
| Consignor/ Customer | user name, last name, first name, address, postcode, city, country, phone, e-mail address, Tax ID, EORI number, invoice number and date, incoterm parcel number, details about parcel content (Goods value, amount, weight, description, customs tariff code) |
| Consignee | last name, first name, address, postcode, city, country, phone, e-mail adress, Tax ID, EORI number parcel number, details about parcel content (Goods value, amount, weight, description, customs tariff code) |
The data processing is necessary to comply with the legal custom regulations for the export of goods out of the European Union (EU). In this case the lawfulness of the data processing can be justified under Art. 6 Abs. 1 lit. c) GDPR.
Your personal data is not being used for further purposes. A transfer of data is made exclusively to the parties involved in the process.
As soon as the corresponding parcel numbers have been advised by the consignor or the corresponding parcels have been handed over to GLS, the customs data will be transmitted to the GLS IT-system for parcel processing. The customs data will be stored together with the corresponding parcel data for 10 years. If no corresponding parcel is advised or handed over to GLS within six days, the entered data will be deleted.
AEB customs portal
To provide the customs portal we use the provider AEB SE, Sigmaringer Str. 109, 70567 Stuttgart. To ensure the compliance with data protection regulations, we concluded a Data Processing Agreement according to Art. 28 GDPR with AEB.
In order to use the AEB customs portal a user log-in is required. GLS stores and processes the data necessary for registration.
Contact form
The data you submit via contact form (e.g. name, address, zip code, town) is required to process and answer your request.
Newsletter
When you register for our newsletter, your e-mail address will be sent to us and a confirmation e-mail will be sent to the address provided. This e-mail contains a link that you must click to confirm your registration (double opt-in procedure).
The lawful processing is based on a balance of interests according to Art. 6 (1) f GDPR. GLS Germany operates this InSight site in order to provide customers and other interested people who visit the InSight site with current information from the company itself and to report on current industry trends. The processing of personal data is based on the legitimate interests of GLS Germany in an optimized company presentation. If you have registered for our newsletter with your e-mail address, the data will be processed on the basis of consent in accordance with Art. 6 (1) a GDPR.
The following data will be collected on our subcontractor website:
Application as Subcontractor
When applying as subcontractor for GLS Germany, we need the following data in order to check your application (Pre-contractual measures): first name, last name, company, address, zip code, city, telephone number, e-mail address and information about your offered services (business license and a permit to transport goods, number of employees subject to social insurance payments, possible operating areas, number of vehicles).
We receive additional personal data from you through voluntary information in the comment section.
The storage and processing of your data for the purpose of applicant management takes place for the preliminary classification for the initiation of a subcontractor contract with you. If no subcontractor contract is concluded, your data will be deleted six months after receipt of the application.
Application as Driver
If you have given us your consent to the processing of your personal data for certain purposes (e.g. application as driver), the lawful processing is based on your consent.
At any time you have the right to withdraw your consent in data processing towards us. The withdrawal is only effective for the future and does not affect the lawfulness of the data processed until the withdrawal.
Real Time Parcel Tracking (Live-Tracking)
When using the “FlexDeliveryService”, live tracking is available for consignees of selected parcels. By entering your Tracking ID and zipcode, you can find the estimated delivery timeframe for your parcel on the day of delivery. You can track the approximate position of the delivery vehicle live on a map from Google Maps. In addition, you can choose an alternative delivery-option (alternative consignee/neighbour/permission of deposit).
The following data is processed as part of the live tracking: Parcel number or Tracking ID, name of the consignor, name and address of the consignee, if necessary the name and address of the alternative consignee/neighbour, information on the place of deposit.
You will be notified by email as soon as real-time tracking of your shipment is available. The consignor is responsible for registering and forwarding your e-mail address to GLS Germany. See section 2.2 for further information.
The integration of Google Maps with live tracking provides an improved user experience on this website. We use Google Maps from Google Inc. (responsible for user data in the EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for the map display. For this purpose, the following data is transmitted to Google:
After your parcel has been delivered, you have the option of giving the service a star rating and a corresponding comment. The live tracking process is carried out by our affiliated company GLS eCom Lab GmbH. We have concluded a data processing agreement with GLS eCom Lab GmbH in accordance with Art. 28 GDPR in order to ensure compliance with the data protection regulations.
Hereinafter you will find an overview of the data collected automatically or with your consent on our websites. You will find a description of the individual processes below.
| gls-group.com/DE | gls-newsroom.de | gls-pakete.de | GLS-ONE + App | customs.gls-group.eu | gls-insight. de | gls-transportpartner. de | gls-karriere. de | gls-education. de | gls-rtt.com | |
| Logging of IP address | X | X | X | X | X | X | X | X | X | X |
| Cookies | X | X | X | X | X | X | X | X | X | |
| Google Analytics | X | X | X | X | X | X | X | X | X | |
| Google Optimize | X | X | X | X | ||||||
| Google AdWords | X | X | ||||||||
| Google Remarketing | X | X | ||||||||
| Facebook Pixel | X | X | X | X | ||||||
| LinkedIn Insight Tag | X | |||||||||
| Microsoft Advertising | X | X | ||||||||
| Hotjar | X | |||||||||
| Trusted Shops Trusted badge | X | |||||||||
| Social Media Links | X | X | X | X | X | X | X | X | ||
| Share Buttons | X | X | X |
Each time a user accesses the GLS website, data is recorded in a log file. The following data is temporarily recorded:
What are cookies?
Small text files stored on your computer, enabling an analysis of your website use. The information stored by cookies can be read by the website when you visit it again at a later date. On the one hand cookies are necessary to ensure that all processes on the site work smoothly. On the other hand cookies can make the re-use of the site easier for the user: Information stored by cookies at the first visit, e. g. language settings or user names, do not need to be entered again. Hence, the website adjusts itself to a certain extent to your individual needs under the condition that the same device will be used.
That’s why GLS uses cookies:
To provide you an optimal service, adapted to your customer needs. For instance, some information you have already received at the first visit, will not be displayed once more. Activities such as the login and logout process can be facilitated, information you already searched for will be displayed faster. The performance of the website can be increased.
GLS uses the following cookies:
| Provider | Used by website | Name | Purpose |
| AddThis | gls-newsroom.de | __atuvc atuvs | Collects information about usage of the website and is used for creating reports. Storage period: 2 years |
| AddThis | gls-newsroom.de | loc, mus, uid, uvc, vc, di2, ssc, ssh, sshs, BKU, OUID, dtCookie, na_id, na_tc | These cookies are used to collect usage information including personal and non-personal information. See privacy policy under
http://www.addthis.com/privacy/privacy-policy#publisher-visitors. Collected non-personal information is used for creating website usage reports which help us improving the website. Storage period: Several, between 2 years and 6 months or even shorter |
| Cookiebot | GLS-ONE | CookieConsent | Saves the consent status of the user for cookies on the current domain. Storage period: 1 year |
| doubleklick.net | GLS-ONE | RUL | Used by DoubleClick to determine if website advertisements have been displayed correctly – this is done to make their marketing activities more efficient. Storage period: 1 year |
| gls-pakete.de | fr, tr | These cookies are stored by Facebook on your computer if you have reached our website via GLS ads on Facebook. This serves the purpose of recognizing how successful our advertising campaigns on Facebook are. We only learn the total number of users who clicked on a Facebook ad and were then redirected to gls-pakete.de/GLS-ONE. No personal information about the identity of the user is communicated. Storage period: 3 months | |
| GLS | gls-group.com/DE | BIGIP | For internal load balancing of web servers Storage period: Only for current browser session |
| GLS | gls-group.com/DE | feature_release | To provide new features to website users |
| GLS | gls-group.com/DE | glsCountryURL | Saves the selected country on gls-group.eu Storage period: 5 years |
| GLS | gls-group.com/DE | JSESSIONID | Session ID for current browser session Storage period: Only for current browser session |
| GLS | gls-group.com/DE | SEARCHGLSID | For identification of search queries Storage period: Only for current browser session |
| GLS | gls-group.com/DE, gls-newsroom.de, gls-karriere.de, gls-transportpartner.de | gls-cookie-policy, IsCookieConsentAccepted, cookieUsageConfirmed, cookieconsent_dismissed | Used to save acceptance of cookies by website user Storage period: 2 years |
| GLS | gls-newsroom.de | ASP.NET_SessionId, FYI, Language | Saves the country and language preference of the website user. Improves usability of the website. Storage period: Only for current browser session |
| GLS | gls-newsroom.de | inquiry-popup-data | Used for improving usability of the website Storage period: Only for current browser session |
| GLS | gls-newsroom.de | optFunc, optMark, optReq | Saves the cookie settings of the website user. Storage period: 1 year |
| GLS | gls-karriere.de, gls-transportpartner.de, gls-pakete.de, GLS-ONE | _fbp | Used to track the actions a user takes after having been forwarded to the website of the provider by clicking on a Facebook advertisement. Storage period: 90 days |
| GLS | gls-pakete.de | oil_data GLS_oil_data | These cookies are used to save the cookie settings in the consent layer and contain the cookie preferences by the website user. Storage period: 30 days |
| GLS | gls-education.de | cookie_consent_ | Used to save acceptance of cookies by website user Storage period: 1 month |
| GLS | gls-education.de | overlayNavButtonAnimationSeenExpiring_ | Save the information, if user has klicked on the overlay navigation Storage period: 1 hour |
| GLS | gls-education.de | PHPSESSID | Session ID for current browser session Storage period: Only for current browser session |
| GLS | gls-customs-portal.next.aeb.com/portal/ | aeb-next | Necessary cookie for authentication Storage period: Until user log-out |
| GLS | gls-customs-portal.next.aeb.com/portal/ | aeb-next-csrf-token | Necessary cookie for authentication Storage period: Until user log-out |
| GLS | GLS-ONE | _ga_8W7QM12CS1, _gb | Technically necessary, sets a certain parameter Storage period: 2 years |
| GLS | GLS-ONE | glsone.AUTHENTICATION_TOKEN | Technically necessary, is used to identify the visitor after logging in. Storage period: Persistent |
| GLS | GLS-ONE | glsone.LANGUAGE | Is used to transfer the visitor’s language settings. Storage period: Persistent |
| Google Ireland Ltd. (Analytics, Optimize, Adwords, Remarketing) | gls-group.com/DE, gls-newsroom.de, gls-pakete.de, GLS-ONE, customs.gls-group.com, gls-insight.de, gls-karriere.de, gls-transportpartner.de, gls-education.de | _ga, _ga_# _gid, _gat, collect, _dc_gtm_<property-id>, AMP_TOKEN, _gac_<property-id> __utma, __utmt, __utmb, __utmc, __utmz, __utmv, __utmx, __utmxx, _gaexp _opt_awcid, _opt_awmid, _opt_awgid, _opt_awkid, _opt_utmc | These cookies are used by Google to collect information on how users use the websites or apps, respectively. The information is used to create aggregated usage reports which help us to improve the websites and apps. Detailed information on the single cookies can be found under https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage Storage period: Between a day and two years |
| Google Ireland Ltd. (Advertising) | gls-pakete.de | _gcl_au | Adwords uses this cookie in combination with the Google Tag Manager in order to analyse the conversion of advertising campaigns. |
| Google Ireland Ltd. (Advertising) | GLS-ONE | rc::a, rc::c | These cookies are used to differentiate between humans and bots. |
| Google Ireland Ltd. (Advertising) | GLS-ONE | ads/ga-audiences | Used to bring back visitors who could become customers due to their online behavior on different websites. Storage period: Only for current browser session |
| Google Ireland Ltd. (Advertising) | GLS-ONE | pagead/1p-user-list/# | Used by Google to track events like conversions or other meaningful user interactions. Storage period: Only for current browser session |
| Google Ireland Ltd. (Advertising) | GLS-ONE | test_cookie | Used to check if the user's browser supports cookies. Storage period: 1 day |
| Hotjar | GLS-ONE | hjAbsoluteSessionInProgress, _hjFirstSeen, _hjid, _hjIncludedInPageviewSample | These cookies are used by hotjar for statistical evaluations of visits to our website. Storage period: Between 1 day and 1 year |
| LinkedIn Ireland Unlimited Company | gls-pakete.de | li_mc, lang, lms_analytics, lms_ads, s_tslv, gpv_pn, _guid, liap, AMCV_14215E3D5995C57C0A495C55%40Adob... _gcl_au, li_gc, aam_uuid, lidc, lissc, lang, _ga, bcookie, AnalyticsSyncHistory | These cookies are stored by LinkedIn on your computer if you have reached our website via GLS ads on LinkedIn. This serves the purpose of recognizing how successful our advertising campaigns on LinkedIn are. We only learn the total number of users who clicked on a LinkedIn ad and were then redirected to gls-pakete.de. No personal information about the identity of the user is communicated. Storage period: Several – varies from 2 years to 6 months or even shorter |
| Microsoft Inc. (Advertising / Bing Ads) | GLS-ONE, GLS-App, gls-pakete.de | _uetsid, _uetsid_exp | Tracking cookie to identify a user which has visited the website before Storage period: 1 day |
| Microsoft Inc. (Advertising / Bing Ads) | GLS-ONE, GLS-App, gls-pakete.de | _uetvid, _uetvid_exp | Tracking cookie to identify a user which has visited the website before and to display campaigns. Storage period: 16 days |
| Microsoft Inc. (Advertising / Bing Ads) | GLS-ONE | MUID | Widely used by Microsoft as a unique user ID. The cookie enables user tracking by synchronizing the ID in many Microsoft domains. Storage period: 1 year |
| Ronald P. Steiner, Hauke Hain, Christian Seifert | gls-karriere.de, gls-insight.de, gls-transportpartner.de | spamshield | Used to protect the website from spam created by spam bots. Storage period: Only for current browser session |
| Sgalinski Internet Services | gls-insight.de | Cookie_optin | Saves the cookie settings of the website user. Storage period: 30 days |
| YouTube LLC | gls-karriere.de, gls-insight.de, gls-transportpartner.de | PREF | Used to save user settings like language for YouTube videos embedded in the websites. Storage period: 13 months |
| YouTube LLC | gls-karriere.de, gls-insight.de, gls-transportpartner.de | VISITOR_INFO1_LIVE | Used to track information on the embedded YouTube videos on a website. Storage period: 5 months |
| YouTube LLC | gls-karriere.de, gls-insight.de, gls-transportpartner.de | YSC, GPS | These cookies are used to track views of embedded YouTube videos. The cookies contain a unique ID to track users based on their geographical location Storage period: 30 minutes |
How to deactivate cookies:
You can adjust this in the settings of your browser. You can find more information in the help for your browser. Please note: If you deactivate cookies, you may no longer be able to use all the functions of the respective website.
The above listed websites are using Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA ("Google"). Google Analytics uses cookies. The information about your use of this web site, generated by the cookie (incl. your IP address), is transmitted to a Google server in the USA and saved there.
Some of these websites also uses Google Optimize. Google Optimize analyzes the use of different variants of our website and helps us to improve the usability accordingly to improve the behaviour of our users on the website. Google Optimize is a tool integrated into Google Analytics.
The website operator has a legitimate interest in analyzing user behavior in order to optimize its website. Due to that the legal basis for the data processing is Art. 6 (1) f GDPR. We are using Google Analytics to analyze and improve the use of our website. These statistics help us make our services more interesting and efficient.
The GLS website uses the Google Analytics extension „gat._anonymizeIp();“. This ensures anonymized registration of IP addresses ("IP masking"). If IP anonymization is activated on this website, your IP address is shortened before transmission in member states of the European Union or other contractual states of the agreement on the European Economic Area. Only in exceptional cases the full IP address is transmitted to a Google server in the USA and shortened there.
Google, on behalf of the website operator, will use this information in order to analyse your use of the website, to compile reports about the website activities and to perform further services that are connected with the website use and the internet use. Google will in no case connect your IP address with other data of Google. Further information about how Google Analytics handles user data can be found in the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en
You can avoid the installation of cookies by adjusting the according settings of your browser software; however we would like to point out that in this case you might not be able to use all functions of this web site to the full extent. Furthermore you can block the registration of the data created by the Cookie (incl. your IP address) and related to your use of this website and the processing of this data by Google by downloading and installing the browser plugin available under https://tools.google.com/dlpage/gaoptout?hl=de
By clicking on the following link, you can prevent the data collection by Google Analytics. An opt-out cookie will be set, that prevents the data collection on future visits to this website.
Information about the third party supplier:
Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland,
Fax: +353 (1) 436 1001
Terms and conditions:
https://www.google.com/analytics/terms/de.html
Privacy and Privacy Policy: https://www.google.de/intl/de/policies/privacy.
Our website uses Google conversion tracking. If you reached our website through an ad placed on Google, Google Adwords will place a cookie on your computer. The cookie for conversion tracking is set when a user clicks an ad placed on Google. These cookies expire after 30 days and cannot be used for personal identification. If the user visits certain pages on our website and the cookie has not expired yet, we and Google can detect that the user clicked on the ad and was redirected to this page. Every Google AdWords customer receives a different cookie. Thus cookies cannot be used to trace AdWords customers through the websites. The information obtained using the conversion cookie serves to generate conversion statistics for AdWords customers who have opted for conversion tracking. The customer receives the total number of users that clicked on their ad and were redirected to a site with a conversion tracking tag. However, they will not receive any information that could be used to personally identify users.
If you do not want to participate in tracking, you can decline the setting of cookies required for this – for example through the browser setting that generally disables the automatic setting of cookies or by adjusting your browser so that cookies from the domain “googleadservices.com” are blocked.
Please note that you may not delete opt-out cookies as long as you do not want any measurement data recorded. If you have deleted all the cookies in your browser, you will need to reset the respective opt-out cookie.
This website uses the remarketing function of Google Inc. This function serves to present website visitors within the Google advertising network with ads based on their interests. A “cookie” will be stored in the website user’s browser that makes it possible to recognise the visitor when they access websites that belong to Google’s advertising network.
Visitors on this page can be shown ads related to content that the visitor previously accessed on websites that use Google’s remarketing function.
According to their own information, Google does not collect any personal data in this process. However, if you do not want Google’s remarketing function, you can always disable it by making the appropriate settings at http://www.google.com/settings/ads.
Alternatively, you can disable the use of cookies for interest-based advertising via the Network Advertising Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.
This website utilizes Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).
Hotjar is a tool used to analyse your user patterns on our website. Hotjar allows us to for instance record your mouse and scroll movements as well as your click. During this process, Hotjar also has the capability to determine how long your cursor remained in a certain position. Based on this information, Hotjar compiles so-called Heatmaps, that make possible to determine which parts of the website the website visitor reviews with preference.
We are also able to determine how long you have stayed on a page of our website and when you left. We can also determine at which point you suspended making entries into a contact form (so-called conversion funnels).
Furthermore, Hotjar can be deployed to obtain direct feedback from website visitors. This function aims at the improvement of the website offerings of the website operator.
Hotjar uses cookies. Cookies are small text files that are placed on your computer and stored by your browser. Their purpose is to make our website presentation more user friendly, more effective and more secure. These cookies allow us to in particular determine if our website was used with a certain device or if the functions of Hotjar have been deactivated for the respective browser. Hotjar cookies will remain on your device until you delete them.
You can set up your browser in such a manner that you will be notified anytime cookies are placed and you can permit cookies only in certain cases or exclude the acceptance of cookies in certain instances or in general and you can also activate the automatic deletion of cookies upon closing of the browser. If you deactivate cookies, the functions of this website may be limited.
The use of Hotjar and the storage of the Hotjar cookies are based on Art. 6 (1) f GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator's web offerings and advertising.
Deactivation of Hotjar: If you would like to deactivate the recording of data by Hotjar, please click on the link below and follow the instructions provided under the link: https://www.hotjar.com/opt-out.
Please keep in mind that you will have to separately deactivate Hotjar for every browser and every device.
For more detailed information about Hotjar and the data to be recorded, please consult the Data Privacy Declaration of Hotjar under the following link: https://www.hotjar.com/privacy.
If you have consented to our use of the Facebook Pixel, our website will feature the Facebook Pixel provided by Facebook Inc. 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). This enables us to track the actions a user takes after having been forwarded to the website of the provider by clicking on a Facebook advertisement. This enables us to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and can help us to optimize future promotional measures.
The data collected are anonymized for us, and as such we are unable to draw any conclusions as to the identity of a user. However, Facebook stores and processes the data, making it possible to associate them with the profile of a user and for Facebook to use the data for its own advertising purposes in line with its data policy ( https://www.facebook.com/about/privacy/). The data enable Facebook and its partners to place advertisements on and outside of Facebook. Furthermore, a cookie can be installed on your computer for these purposes.
Only users over the age of 13 can consent to the Facebook Pixel. If you are younger, please ask your parent or legal guardian for permission.
On our websites, we use the LinkedIn Insight tag from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. LinkedIn Ireland Unlimited Company stores a cookie on your computer if you have accessed our website via LinkedIn Ireland Unlimited Company. In this way, LinkedIn Ireland Unlimited Company and we can recognise that someone has clicked on an advertisement, been redirected to our website and reached a previously determined target page (conversion page). We only learn the total number of users who clicked on a LinkedIn Ad and were then redirected to the conversion page. No personal information about the identity of the user is disclosed. You can find LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy.
You can set up your browser in such a manner that you will be notified anytime cookies are placed and you can permit cookies only in certain cases or exclude the acceptance of cookies in certain instances or in general and you can also activate the automatic deletion of cookies upon closing of the browser. Please keep in mind that you will have to separately deactivate LinkedIn for every browser and every device.
On our pages we use the Conversion Tracking of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Advertising will place a cookie on your computer if you access our website via a Microsoft Advertising. This allows Microsoft Advertising and netfiles to identify if someone has clicked on an ad, has been redirected to our website and has reached a previously defined target page (conversion page). We only see the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the user is disclosed.
If you do not want information as described above to be used by Microsoft, you can prevent the setting of a cookie required for this purpose – for example, by using a browser setting that generally deactivates the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by clicking on the following link: https://account.microsoft.com/privacy/ad-settings/signedout?lang=en-GB to declare your objection. Further information on data protection and the cookies used at Microsoft and Microsoft Advertising can be found on the Microsoft website at https://privacy.microsoft.com/en-us/privacystatement.
The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops Trustmark and the collected reviews as well as to offer Trusted Shops products to buyers after an order.
This is necessary to safeguard our legitimate prevailing interests in an optimal marketing by ensuring the safety of your purchase according to Article 6 (1) f GDPR. The Trustbadge and the services advertised with it are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, _Germany. The Trustbadge is made available by a CDN provider (Content-Delivery-Network) as part of order processing. The Trusted Shops GmbH uses also service provider from the USA. An adequate level of data protection is guaranteed. Further information to the data security of the Trusted Shops GmbH can be found here: https://www.trustedshops.co.uk/imprint/
When the Trustbadge is called up, the web server automatically saves a server log file which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. Individual access data are stored in a security database for the analysis of security problems. The log files are automatically deleted 90 days after creation at the latest.
Further personal data will be transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or have already registered for use. The contractual agreement made between you and Trusted Shops applies. For this purpose personal data is automatically collected from the order data. Whether or not you are already registered as a Trusted Shops customer is automatically checked by means of a neutral parameter, the e-mail address hashed by cryptologic one-way function. The e-mail address is converted to this hash value, which cannot be decrypted by Trusted Shops before it is transmitted. After checking for a match, the parameter is deleted automatically.
This is necessary for the fulfillment of our and Trusted Shops' legitimate prevailing interests in the provision of the buyer protection linked to the specific order and the transactional review services in accordance with Art. 6 (1) f GDPR. Further details, including your right to object, can be found in the Trusted Shops Privacy Policy linked above and within the Trustbadge.
The GLS websites contain links to the social media accounts of GLS Germany (e.g. Xing, Twitter, LinkedIn, Instagram, YouTube und Facebook). When using these links, please note that data processing on these profile pages is carried out in part by the respective provider.
GLS maintains business profiles on Facebook, Instagram, YouTube, XING, LinkedIn and Twitter. As the operator of these business profiles, together with the respective operator of these social networks we are responsible within the meaning of Art. 4 Nr. 7 GDPR. When visiting one of our fan pages, personal data will be processed by the controllers. Find more information on privacy when visiting on of our business profiles here.
On our Website you can find some, so called Share Buttons (e.g. Facebook, Twitter and WhatsApp). Those Buttons can be seen as a kind of bookmark that allows users to share our job advertisements with the respective service. On our website the share buttons are integrated by the privacy-friendly „Shariff-solution“ of heise.de and serve as a link to the corresponding services. After clicking on the integrated graphic, you will be redirected to the respective provider’s website. Only then user information will be transmitted to the provider. Please refer to the provider’s policy for further information on how they deal with your personal data.
In the below listed social networks GLS Germany maintains so called business profiles. Together with the respective operator of the social network, GLS Germany is jointly responsible for the data processing on the respective business profile within the meaning of the GDPR (Art. 4 (7) GDPR). In the following sections we will inform you about data processing in connection with our business profiles.
Information on data processing by GLS Germany
When using the functions of the respective social network (bspw. „Like“-Button, „Follow“-Button), the controllers and possibly other users of the social network can see, that you are a follower of the business profile.
If you communicate and interact with us (comment, post, message), we will store your user name and the content of the message or comment for the purpose of processing your enquiry. Depending on the matter, you may provide or we may request additional personal data via private messages (e.g. parcel number, e-mail address or telephone number if you wish to be called). Please note that you should not provide any personal or confidential data in publicly visible comments and posts.
If you participate in one of our competitions, we store and use your user name to determine the winners and to communicate with you.
For continuous improvement of our social media presence on Facebook, Instagram, Twitter and LinkedIn we use the analysis tool ‘Fanpage Karma’ provided by uphill GmbH, Oranienstr. 188, 10999 Berlin. This only involves statistical analyses in aggregated form (with no reference to individual persons).
GLS Germany runs these business profile to present the company to social media users or other prospects and to get in contact with them. The processing of personal data is justified by the legitimate interest of GLS Germany (Art. 6 (1) f GDPR) to optimize the representation of the company. In case of a competition, the lawful processing is ensured by your consent.
Personal data arising from your enquiries is automatically deleted six months after your enquiry. You have the right to request the manual deletion of this data at any time. If statutory retention periods preclude the deletion (for example in the event of complaints), the data will only be deleted or destroyed on expiry of the prescribed retention period.
Information on platform-dependent data processing by the respective provider and ways to contact the provider can be found in the following sections.
For the maintainance of the GLS business profile on Facebook GLS uses the technical platform and services of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Facebook“).
For the maintainance of the GLS business profile on Instagram GLS uses the technical platform and services of Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA 94025, USA („Instagram“).
The Instagram service is one of the Facebook products provided by Facebook Ireland Limited. Consequently, the following information on Facebook also applies to our business profile on Instagram.
We point out that you use our Facebook fan page and its functions on your own responsibility. This is especially true for the use of the interactive features (e.g. commenting, sharing, rating). The terms of use of Facebook apply.
Collection and processing of access data by Facebook (Insights)
Please carefully check which personal data you share with us via Facebook. As long as you are logged into your Facebook account and visit our Facebook profile, Facebook can assign this to your Facebook profile. We expressly point out that Facebook stores the data of its users (for example, personal information, IP address, etc.) and may also use it for business purposes. If you want to prevent Facebook from processing personal data transmitted to us, please contact us by other means. Detailed information about the data processing of Facebook can be found in the data policy of Facebook under https://www.facebook.com/privacy/explanation (Instagram: https://help.instagram.com/519522125107875).
Name and contact details of the joint controllers
As far as the data submitted by you is also or exclusively processed by Facebook (Insights data), Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland and we are the joint data controllers as defined in GDPR. The data processing takes place in this respect on the basis of an agreement between the joint controllers according to Art. 26 GDPR, which you can find here:
www.facebook.com/legal/terms/page_controller_addendum.
You can contact the Data Protection Officer of Facebook via the contact form provided under https://www.facebook.com/help/contact/540977946302970.
Data processing for statistical purposes using site insights
Facebook provides us with so-called site insights for our Facebook page: www.facebook.com/business/a/page/page-insights.( Instagram: https://help.instagram.com/788388387972460?helpref=related&ref=related). This is aggregated data that helps us to understand how people interact with our site. Site insights may be based on personal information collected in connection with a visit or interaction of people on or with our site and its content.
You may opt-out of the processing of your data for any of the above purposes at any time by changing your ad settings in your Facebook user account at www.facebook.com/settings?tab=ads.
Competent supervisory authority for Facebook and Instagram
Data Protection Commission
Canal House
Station Road
Portarlington
Co. Laois
R32 AP23, Ireland
https://www.dataprotection.ie
For the maintainance of the GLS business profile on Twitter GLS uses the technical platform and services of Twitter Inc.,One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland („Twitter“) zurück.
Collection and processing of access data by Twitter
Information on which data is processed by Twitter and for what purposes can be found in Twitter’s privacy policy..
The data collected about you in this context is processed by Twitter Inc. and may be transferred to countries outside the European Union.
Competent supervisory authority for Twitter
Irish Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
https://www.dataprotection.ie
For the maintainance of the GLS business profile on XING GLS uses the technical platform and services of New Work SE, Dammtorstraße 30, 20354 Hamburg („XING“).
Privacy policy of XING: https://privacy.xing.com/de/datenschutzerklaerung.
Contact the data protection officer of XING here: Datenschutzbeauftragter@xing.com.
XING BrandManager
The XING BrandManager provides us with general evaluation of the performance of our company profile. The key figures provided there (e.g. total number of page visits, total number of followers etc.) are merely aggregated data that do not allow any conclusions to be drawn about individuals.
Competent supervisory authority for XING
Freie und Hansestadt Hamburg
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 7. OG
20459 Hamburg
Tel.: 040 / 428 54 – 4040
More information:
https://datenschutz-hamburg.de
For the maintainance of the GLS business profile on Facebook GLS uses the technical platform and services of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland („LinkedIn“).
Privacy policy of LinkedIn: https://www.linkedin.com/legal/privacy-policy.
LinkedIn Page Analytics
LinkedIn’s page analytics provides insight into the performance of our LinkedIn business profile to assess trends based on dates and time periods. The analysis data (e.g. follower and visitor numbers) are only aggregated data that do not allow any conclusions to be drawn about individuals.
Competent supervisory authority for LinkedIn
Irish Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
https://www.dataprotection.ie
For the maintenance of the GLS business profile on YouTube GLS uses the technical platform and services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“). YouTube is a Google service.
The privacy policy of Google and the associated services can be found at https://policies.google.com/privacy.
Competent supervisory authority for Google
Irish Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
https://www.dataprotection.ie
As data subject you have the right to,
The right of access and the right to erasure are limited by §§ 34 and 35 BDSG.
At any time you have the right to withdraw your consent in data processing towards us. This also applies to consent given even before the EU GDPR. The withdrawal is only effective for the future and does not affect the lawfulness of the data processed until the withdrawal.
To exercise your rights or for withdrawal of your consent, please contact datenschutz@gls-germany.com and declare which right you wish to exercise so that GLS Germany may take further steps required to work on your request.
Please note, that we may ask you for a proof of identity in order to protect your personal information from unauthorized access or alteration.
If you note any violation against our data protection regulations, do not hesitate to contact us. Furthermore, in such cases, you also have the right to lodge a complaint with a supervisory authority. (Art. 77 GDPR in conjunction with §19 BDSG)
Supervisory authority:
Federal Commissioner for Data Protection and Freedom of Information
Graurheindorfer Str. 153
53117 Bonn
https://www.bfdi.bund.de
GLS Germany is entitled to update this information by publishing the amended information on this website. Developing and optimizing our services is a continuous process. So we might add new services or functions from time to time. If this affects the way your personal data is processed, we will inform you in our privacy policy.
This information was last updated on 23 September, 2021.