9.1. For the purpose of selection of candidates for vacancies
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
When you decide to contact us to participate in our or our partner personnel selection
|
Firsts name, surname, date of birth, telephone number, email address, residential address, education, current and former workplaces, CV; in the case of A courier selection, data on the service providers with whom the courier has concluded an employment contract, the size of the courier uniform, the driving licence category, years of driving experience, other data in your CV and/or other documents provided on a voluntary basis.
|
Processing in order to take action on the initiative of the candidate before the conclusion of a contract, in cases where you apply directly for a specific vacant position we oru our parnner have announced (Article 6[1][b] of the GDPR).
Your consent in cases where you apply for a non-specific position or where we ask for your consent to store your data after the end of a specific competition for a position (Article 6[1][a] of the GDPR).
|
From you
|
Yes, because without this information we or our partner will not be able to conclude a contract with you and execute it.
|
Until the end of the selection process for a position.
|
9.2. For the purposes of parcel collection and delivery services
We process your personal data in order to provide parcel collection and delivery services. Our services typically include the following actions: collection and marking of a parcel, placing the information about the parcel in the parcel tracking system, managing the ordering and delivery of the parcel, estimating the delivery time, managing the return of the parcel, and measuring the temperature of the parcel containing foodstuffs. The scope of data processed for the purposes referred to in this paragraph depends on your role in the parcel collection and delivery process.
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
When you send a parcel
|
First name, surname, address, telephone number, email address, other information you have provided in connection with the delivery of the parcel.
We also process personal data generated by us: the parcel reference number, collection point GPS data, proof of delivery.
|
Processing for the performance of a contract (Article 6[1][b] of the GDPR).
Processing is required to fulfil legal obligations applicable to the data controller (Article 10[2] of the Postal Law of the Republic of Lithuania).
|
From you, except for the data generated by us
|
Yes, without this information we will not be able to provide services to you.
|
Electronic files, records in IT systems and databases are stored for 4 years from the date of receipt of the data.
Hard copies of the documents (waybills, manifests, e-parcel consignment notes) are stored for 1 year and 1 month.
Electronic parcel delivery documents or their hard copies are stored for 3 years and 1 month.
|
|
When you receive a parcel
|
First name, surname, address, telephone number, email address, signature.
We also process personal data generated by us: the parcel reference number, delivery point GPS data, a photo of the front door or another secure location where the parcel is delivered, proof of delivery.
|
Processing is required to fulfil legal obligations applicable to the data controller (Article 10[2] of the Postal Law of the Republic of Lithuania).
Our legitimate interest and the legitimate interest of the sender to deliver the parcel and to identify the person who collects the parcel (Article 6[1][f] of the GDPR).
|
From the sender, except for the data generated by us
|
|
When you collect a parcel on behalf of another person
|
First name, surname, address, last 5 digits of the number of the ID document, signature
We also process personal data generated by us: delivery point GPS data, a photo of the front door or another secure location where the parcel is delivered, proof of delivery.
|
From you, except for the data generated by us
|
9.3 For the purpose of identifying the recipient of the parcel
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
When a parcel is sent to you, the condition for delivery is assurance of your identity.
|
First name, surname, address, the number of the ID document, a photocopy of the ID document.
|
Our legitimate interest and the legitimate interest of the sender to identify the recipient (Article 6[1][f] of the GDPR).
|
From you and/or the sender
|
Yes, because without this information we will not be able to provide services to you.
|
Up to 6 months from the moment such data are recorded.
|
9.4 To provide services of cash collection from recipients
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
When a parcel is sent to you for which cash payment is collected
|
First name, surname, address, telephone number, amount of cash, time of cash collection.
|
Conclusion and performance of a contract (Article 6[1][b] of the GDPR).
Legal obligation to properly maintain accounting in accordance with the Law on Accounting of the Republic of Lithuania (Article 6[1][c] of the GDPR).
Our legitimate interest and the legitimate interest of the sender to receive payment for the delivered parcel (Article 6[1][f] of the GDPR).
|
From you and/or the sender
|
Yes, without this information we will not be able to provide services to you.
|
Electronic files, records in IT systems and databases are stored for 10 years from the date of receipt of the data.
Cash receipts are stored for 10 years.
|
9.5 For the purposes of leasing and other contracts
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
When you receive a contract for signing which is sent through our couriers
|
First name, surname, address, telephone number, email address, date of birth, the number of the ID document, signature, the contract signed by you.
|
Conclusion and performance of the contract (Article 6[1][b] of the GDPR).
Our legitimate interest and the legitimate interest of the sender to properly identify the recipient (Article 6[1][f] of the GDPR).
|
From you and/or the sender
|
Yes, because without this information we will not be able to conclude a contract with you and execute it.
|
Electronic files, records in IT systems and databases are stored for 4 years from the date of receipt of the data.
Hard copies of the documents are stored within the time limits set out in the “Document Nomenclature (Directory)”:
leasing and other contracts not delivered to the recipient are stored for 3 months.
|
9.6 For the purposes of the conclusion and performance of contracts
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
If you are a sole proprietor
|
First name, surname, personal ID number, address, telephone number, email address, the number and date of issue of the ID document, details of the bank account, signature, the contract concluded by you.
|
Conclusion and performance of the contract (Article 6[1][f] of the GDPR).
Legal obligation to properly maintain accounting in accordance with the Law on Accounting of the Republic of Lithuania (Article 6[1][c] of the GDPR).
|
From you
|
Yes, because without this information we will not be able to conclude a contract with you and execute it.
|
Electronic files, records in IT systems and databases are stored for 10 years after the expiry of the contract.
Parcel delivery contracts and invoices for services are stored for 10 years.
|
9.7 For the purposes of debt management
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
If you, as our contractual client, delay payment for our services
|
First name, surname, telephone number, email address, credit history
|
Our legitimate interest to receive payment for the services we have provided (Article 6[1][f] of the GDPR).
|
From you and UAB Creditinfo Lietuva database
|
No
|
1 year after the date of debt payment or recovery
|
|
If you are the manager or shareholder of our client (legal person) who avoids paying for our services
|
First name, surname, address, other data provided by UAB Creditinfo Lietuva.
|
From UAB Creditinfo Lietuva database
|
9.8 For the purpose of handling claims and complaints
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
If you have any claims or complaints regarding the services provided to you
|
First name, surname, address, information contained in the claim or complaint and documents related to it, other information provided by you.
|
Our legitimate interest in clarifying the circumstances and properly examining claims and complaints (Article 6[1][f] of the GDPR).
|
From you
|
No
|
Electronic files, records in IT systems and databases are stored for 3 years from the date of receipt of the data.
User claims are stored for 3 years.
|
|
If you are a claimant
|
First name, surname, address, bank details, information on the contents of the parcel, and details specified in the purchase documents of the items sent and parcel transfer documents.
|
From you
|
9.9 For the purpose of reporting damaged packaging
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
If at delivery of the parcel, it is established that the packaging is damaged and our couriers prepare a packaging damage report
|
First name, surname, address, a packaging damage report
|
Performance of the contract concluded with the sender (Article 6[1][b] of the GDPR).
Our legitimate interest in clarifying the circumstances and properly examining claims and complaints (Article 6[1][f] of the GDPR).
|
From you
|
Yes, because without this information we will not be able to execute the contract with you.
|
Electronic files, records in IT systems and databases are stored for 3 years from the date of receipt of the data.
Packaging damage reports are stored for 3 years.
|
9.10 For the purposes of issuing invoices for services
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
When you use our services
|
First name, surname, address
|
Performance of the contract with you as the sender (Article 6[1][b] of the GDPR).
Legal obligation to properly maintain accounting in accordance with the Law on Accounting of the Republic of Lithuania (Article 6[1][c] of the GDPR).
|
From you
|
Yes, without providing this information we will not be able to execute the contract with you and issue an invoice for the services we have provided.
|
Electronic files, records in IT systems and databases are stored for 10 years after the expiry of the contract.
Invoices for the services we have provided are stored for 10 years.
|
9.11 For customer service purposes
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
When you contact us by telephone
|
Telephone number, your data provided during a telephone call, recording of a telephone call
|
Our legitimate interest to ensure and improve the quality of customer service, to train employees, to properly analyse customer complaints regarding the quality of services provided by telephone and to make decisions in case of a dispute with a caller regarding the interpretation of the conversation (Article 6[1][f] of the GDPR).
|
From you
|
No
|
Not more than 3 months
|
We record incoming telephone calls on the following lines:
- Ordering line – tel. 8 700 55700;
- Customer service consultancy line – tel. 8 5 2106 777;
- Sales consultancy line – tel. 8 5 2106 766.
If you wish to contact us, but do not wish your phone call to be recorded, we kindly request that you call us by dialling our administration phone number 85 2106 750, or contact us by email (email addresses are provided in the contact section of the DPD website) or visit our registered office in person.
9.12 Provision of Benefits for Expedited Parcel Retrieval
We process data for this purpose during festive and other peak periods when parcel deliveries surge. Our goal is to ensure optimal loading of parcel terminals, facilitating timely and efficient parcel retrieval for both senders and recipients. During these specific periods, we offer customers the opportunity to avail benefits for prompt parcel retrieval, such as winning prizes. Information regarding these incentives is included in messages sent to customers.
|
When does this apply to me?
|
What data of mine are you processing?
|
On what legal basis are you processing my data?
|
Where do you obtain my data from?
|
Am I obligated to provide my data to you?
|
How long will you retain my data?
|
|
When parcels are received during times of significantly increased delivery volumes.
|
Information such as surname, first name, phone number, email address, postal address, parcel number, details about received benefits, and won prizes
|
Ensuring the legitimate interest of the company, parcel senders, and recipients in maintaining optimal loading of parcel terminals during the specified periods (GDPR Article 6(1)(f))
Consent (GDPR Article 6(1)(a)) (when announcing winners on websites)
|
From You
|
No
|
From You No During the periods specified in the benefit provision guidelines. 1 year (data of prize winners)
|
9.13 For the purpose of direct marketing and surveys
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
If you are our customer and we provide you information about our services and their changes via email and telephone
|
Name, surname, email address, phone number. When you participate in a game or promotion, we additionally process the data necessary for organizing the game or promotion (for example, shipment number, information about the prizes won).
|
Consent (GDPR Article 6(1)(a))
Customer relationship (Article 81(2) of the Law on Electronic Communications of the Republic of Lithuania).
Our legitimate interest to inform and ask you about our services and their changes (Article 6[1][f] of the GDPR)
|
From you
|
No
|
In the case of contractual clients, as long as the person is a DPD client.
For persons who have given their consent to newsletter subscription, for 5 years after the consent is given.
For the purpose of carrying out surveys, 6 months after receipt of the data.
For the purpose of organizing games and promotions – for the period specified in the game or promotion rules. 1 year (for the data of prize winners)
|
|
If you receive our surveys to evaluate our service quality
|
|
If you are a participant of our loyalty program
If you participate in contest and loteries we organise
|
9.14 For the purpose of improving the services provided by DPD Lithuania
For this purpose, we evaluate your data in connection with the sales and operations over a certain period of time in order to evaluate the quality of the services provided by the Company.
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
When you use our services
|
First name, surname, email address, address, telephone number, the parcel reference number.
|
Our legitimate interest to ensure and improve the quality of our services provided to you (Article 6[1][f] of the GDPR).
|
From you
|
No
|
6 months (subsequently, the data is anonymised)
|
9.15 For the purpose of administering social network accounts
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
When you carry out activities in our social network accounts (e.g. comment posts, send us a message, etc.)
|
First name, surname, account name, gender, country, photo, comments on the post, sharing posts, reacting to posts, and other data you provide to us.
|
Your consent (Article 6[1][a] of the GDPR)
|
From you
|
No
|
5 years (unless you withdraw your consent earlier)
|
9.16 For the purpose of administering accounting
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
When you order our services
|
First name, surname, payment time, payment status, bank account number (IBAN), type of credit card, expiration date, payment amount, payment date.
|
Legal obligation as stipulated in the Law on Accounting of the Republic of Lithuania (Article 6[1][c] of the GDPR)
|
From you
|
Yes, without this information we will not be able to provide you services under the contract.
|
Bookkeeping records are stored for 10 years
|
9.17 For the purposes of customs administration
Customs administration generally includes: checking of data against the lists of prohibited countries announced by organizations, generation of search results, and a decision to block/not to block a parcel.
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
When you order parcels from the countries from which the goods are subject to customs and duty fees
|
First name, surname, email address, address, telephone number, notifications, the parcel reference number, IP address, content of the parcel and the estimated value of the goods.
|
Legal obligation as stipulated in the Law on Customs of the Republic of Lithuania (Article 6[1][c] of the GDPR).
|
From you / the sender
|
Yes, without this information we will not be able to provide you services under the contract.
|
6 months in an active database and 5 years in the archives
|
9.18 For the purpose of administration of compliance with the requirements for import and export prohibitions
The management of compliance with import and export prohibitions generally involves: checking of data against the lists of prohibited countries announced by organizations, generation of information on the basis of the results of the verification, and a decision to block/not to block a parcel.
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
When you send or receive parcels to/from the countries which are subject to prohibitions on import or export of goods
|
First name, surname, email address, address, telephone number, the parcel reference number, parcel comparison/inspection result
|
Legal obligation as stipulated in the Law of the Republic of Lithuania on the Implementation of Economic and Other International Sanctions (Article 6[1][c] of the GDPR).
|
From you / the sender
|
Yes, without this information we will not be able to provide you services under the contract.
|
30 days in the active database
From 30 days to 2 years in the limited database
From 2 to 10 years in the archives (due to legal requirements)
|
9.19 For the purpose of video surveillance in the parcel distribution terminals
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
When you enter the field of view of video surveillance cameras in the parcel distribution terminal
|
Image data, time and date of video data.
|
Our legitimate interest to ensure the security of the material assets (customer’s parcels) in the parcel distribution terminals and to clarify the causes and circumstances of the damage or loss of parcels (Article 6[1][f] of the GDPR).
|
From you
|
No
|
Not more than 30 calendar days
|
9.20 For the purpose of maintaining relations with legal persons
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
If you are a representative of a legal person with whom we have a relationship and we communicate with you in relation to business issues and sign contracts with the legal person you represent
|
First name, surname, email address, phone number, place of employment, position, signature, other information you provide.
|
Conclusion and performance of the contract (Article 6[1][b] of the GDPR).
Our legitimate interest to maintain relations with other legal entities (Article 6[1][f] of the GDPR).
|
From you / legal person you represent
|
Yes, without providing this information we will not be able to conclude and execute a contract or maintain business relationship with you.
|
Electronic files, records in IT systems and databases are stored for 10 years after the expiry of the contract.
Contracts and invoices for the services are stored for 10 years.
|
9.21 For the purpose of control of access to the site
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
If you are entering or leaving the site of our Kaunas division
|
Registration number of your vehicle.
|
Legitimate interest to ensure access control to our site (Article 6[1][f] of the GDPR).
|
From you
|
No
|
Not more than 3 months
|
9.22 For the purpose of the protection of legal interests and enforcement of legal requirements
|
When is this relevant to me?
|
What data do you process?
|
On what legal basis do you process my data?
|
Where do you get my data from?
|
Must I provide my data to you?
|
How long will you process my data?
|
|
If we become a party or an interested person in court or other legal proceedings to which you are related, and also when we have to provide information about you in order to comply with the requirements of the law.
|
Those of the above data, which are related to the specific legal proceedings or a legal requirement, documents of the legal proceedings, other information that you provide to us.
|
Legitimate interest to represent the Company in legal proceedings (Article 6[1][f] of the GDPR).
or
The legal obligation to provide information under the law (Article 6[1][c] of the GDPR).
|
From you / the sender
|
No
|
10 years after the expiry of contractual relationship with us or 3 years (in the case of legal proceedings) from the date of entry into force of the decision of the court or authority or the date of full execution of the legally binding decision whichever is longer.
|
