This data protection notice governs the access and the use of the https://www.dpd.com/lv/lv/mydpd/ website and the “myDPD” application (hereinafter jointly referred to as “myDPD”).
Under the name "myDPD", SIA “DPD Latvija” provides digital platforms on web servers or mobile terminals which enable consumers to monitor and manage their received, sent, and returned parcels.
Your personal data is jointly processed by Geopost SA, with registered office at 26 rue Guynemer - 92130 Issy-Les-Moulineaux (France), and its subsidiary SIA “DPD Latvija” (established and operating under the laws of the Republic of Latvia, company code 40003393255, address: Uriekstes iela 8A, Ziemeļu rajons, Rīga, LV-1005) as well as their own subsidiary (collectively referred to as the “Companies”). They are together Joint Data Controllers of the following Data Processing
-
“Parcel Delivery & Unauthenticated consignee interaction”: This processing concerns consignees that do not have an account on myDPD
-
“Authenticated consignee interaction”: This processing concerns consignees that created an account on myDPD (“myDPD account”).
What does “Joint Data Controllers” mean?
It means that under Article 26 of GDPR, Geopost SA and SIA “DPD Latvija” jointly determine the purposes and means of the processing.
What personal data do we collect?
By default, the myDPD services can be used without registration.
Personal data collected through your myDPD account are not mandatory for the execution of delivery services. However, this data enables us to provide you with the best possible service and to optimize the delivery of your parcel.
We collect the following data:
-
Parcel number
-
First name
-
Last name
-
E-mail address
-
Delivery address
-
Phone number
-
Proof of Delivery including in some cases the signature
-
Free text fields for additional delivery address information (e.g. code number)
-
Photo of front door or safe place
-
Notes (if you have assigned any)
We draw your attention to the importance of not communicating sensitive data (under Article 9 of the GDPR) in the free text fields.
In order to access all of the functionalities offered, you are invited to register either by means of an e-mail address and password or by using an existing Facebook, Apple or Google account. In this respect, Geopost and SIA “DPD Latvija” do not transmit any parcel information to Facebook, Apple or Google and only use these services for authentication purposes. After authentication, a unique myDPD account is created for all our services.
Why do we collect your personal data?
The personal data are processed in the context of delivery services agreements as well as any other existing service related to the creation of your myDPD account. The data will be used by Geopost SA and SIA “DPD Latvija”, and/or any third party involved in the performance of the services, particularly for the following purposes:
-
For delivery services
-
When you choose to provide us additional information to facilitate delivery of the parcel
-
Manage your myDPD account
-
Manage notifications to consignees via e-mail, SMS, push notification or social media
-
Help the user get in contact with our support team
-
Build consumers profiling according to uses of DPD services, frequency of delivery, delivery experiences, purchases and location
-
Communicate via personalized or non-personalized e-mails, push notifications and banners about SIA “DPD Latvija” and/or our partners
-
Ensure the security of your account
What legal basis do we use to process your personal data?
We collect your personal information based on:
-
Our contractual obligations in the context of our delivery activities; or
-
Our compliance to legal obligations; or
-
The legitimate interests of Geopost SA and SIA “DPD Latvija” (provided your interests and fundamental rights do not override those interests)
-
Your consent on the processing of your data for communications
Account creation
Connection with external account
Login with Apple ID: If you use your Apple ID when logging in to DPD, you can register or log in with your Apple account. You will then be forwarded to the Apple website. For the iOS app the process takes place entirely within the operating system. For the login you will need the email address which is stored with Apple. This is required for identification purposes in order to create a secure DPD account for you and is stored with us. Your Apple profile and your DPD account are permanently linked via the email address. You can remove this link at any time on the Apple website. DPD never learns your Apple access data. You can read how Apple handles privacy settings in the Apple data protection notices; these are also the valid regulations governing this possibility of logging in and registering with DPD.
Login with Facebook: Facebook Connect is an offer from Facebook Ireland Limited (Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland). Its use is voluntary and optional. When using Facebook Connect, Facebook profile data and public data from your Facebook profile are transferred to DPD. We use and process your first and last name, gender, email address, and Facebook ID for simplified registration to use the Parcel Navigator. If you are already a DPD customer, only the Facebook ID will be processed. Your Facebook account is linked to the DPD account via the Facebook ID. This makes it possible for you to register for the service using your Facebook access data via the "Login with Facebook" button. In addition, every time you log in, Facebook will know that you are using the DPD service. The link to Facebook can be revoked at any time on Facebook itself. Please also read Facebook's privacy policy on this subject.
Login with Google: The same applies to the use of the Google login. This Google service is provided by Google Inc. "('Google'; Amphitheatre Parkway, Mountain View, CA 94043, USA). Registration and use of Google's services are subject to Google's Privacy Policy and Terms of Use, which you can view at: Privacy Policy – Privacy & Terms – Google.
myDPD account creation
Geopost SA and SIA “DPD Latvija” allow you to create an account on myDPD using the essential information provided on one or other of the platforms. In this way, accounts recognized by an email address will be identified and your information shared so that you don't have to re-enter it.
The personal data listed in point 1 as well as the following personal data are collected:
Personal data may also concern a third party or a neighbour who can retrieve the parcel on behalf of the consignee.
How long do we keep your data?
If you are an unauthenticated user, your personal data are kept for a maximum period of six (6) months in the active database and are then archived.
If you are an authenticated user of myDPD, your personal data are kept for a maximum period of two (2) years after your last connection to your myDPD account, with the exception of your physical address which is kept for three (3) years, separate from any other personal data concerning you, to help us improve our delivery performance and thus guarantee you an optimal customer experience.
In case of account deletion, the account linked to ‘myDPD” will be deleted with all data linked to the account with the exception of your physical address which is kept for three (3) years, separate from any other personal data concerning you, to help us improve our delivery performance and thus guarantee you an optimal customer experience.
Who might we share your information with?
We share the information that you provide to us with our staff so that we can provide our services to you:
-
Business partners (shippers);
-
Sub-contractors, especially drivers, for the performance of the delivery contract;
-
Geopost;
-
SIA “DPD Latvija” subsidiaries
-
Internally to our customer service, marketing, sales and IT departments
-
Billing platform (including parcel number)
- Data processors for data management, emailing and storage
Improving delivery experience
Because DPD wants to improve your delivery experience, we display a message when you connect to your myDPD account once you have a given number of failed deliveries in a determined period to suggest you to set up your delivery preferences. How does it work? We use a commercial partner (Imagino), as a data processor, who can compute the total number of your unsuccessful deliveries to generate messages, thanks to delivery events provided to him. A message will be displayed through ABTasty when you connect to your myDPD account to promote delivery preferences.
The use of a tag by Imagino and the deposite of the ABTasty cookie are based on your consent. You can remove your consent at any time by managing your cookie settings here: https://www.dpd.com/lv/lv/mydpd/ (see link to cookies settings in the footer). If you decide to remove your consent, we will immediately stop using the number of your unsuccessful deliveries in this process.
The display of the message to promote delivery preferences is based on our legitimate interest to:
-
improve our business strategy and our delivery performance
-
ensure the best possible customer experience by going beyond his expectations
-
reducing operational costs and customer care costs
-
promoting green redirections
Personalized communication by e-mail
With your consent, we want to send you personalized communications on Geopost and its partners we think might interest you.
Subject to your consent when creating your myDPD account, we wish to display in your myDPD space, personalized advertisements on our partners according to your interests.
Keep in mind that we do not share your information with our partners so that they can contact you, only SIA “DPD Latvija” can send you personalized communications.
You can change or revoke your consent at any time in the preferences section of your myDPD account.
Chatbot
A chatbot is available to help you track, redirect and get more detailed information about your parcel. Please note that the chatbot includes a free comment area where you can be led to give personal data to help us find information about your parcel. This data will be used to examine your request and is necessary to enable us to provide a more appropriate response. The information you provide is intended for the customer services and our technical service providers, within the framework of the tasks entrusted to them.
The data collected in the context of a conversation about a parcel delivery is stored during six (6) months, which is a parcel’s lifetime, after which it is automatically deleted. The data can also be deleted beforehand on request. Insofar as the information collected in this way is personally identifiable, it will be processed in accordance with Art. 6 of the GDPR based on our legitimate interest in providing an effective customer service.
In accordance with the applicable regulations on the protection of personal data, you have the right to access, rectify, oppose, limit the processing, request the transfer of your data where possible and delete your data.
We also draw your attention on the importance of not communicating sensitive data (under Article 9 if the GDPR) in this free comment area.
Do we transfer your personal data outside of EU?
We may transfer your personal information outside the European Economic Area ("EEA") or outside the European Union and will only do so if adequate protection measures are in place in compliance with data protection regulations. We use the following protection measures:
How do we protect your personal data?
We apply the cybersecurity best practices and follow recognized standards to ensure the protection of data and users.
What are your rights on your data?
Under Articles 15 to 22 of the GDPR, you have the right to:
-
Access your personal data and to obtain from the Joint Data Controllers confirmation as to whether your personal data are being processed;
-
Rectification of your personal data and to obtain from the Joint Data Controllers without undue delay the rectification of inaccurate personal data concerning you;
-
Erasure from the Joint Data Controllers of your personal data without undue delay;
-
Restriction of processing;
-
Data portability by transmission of your data where technically feasible.
These rights may be exercised by sending an e-mail to dpo[at]dpd.lv.
For any problem linked to the management of your personal data, you have the right to lodge a complaint with the following data protection authority: Data State Inspectorate, 17 Elijas Street, LV-1050 Riga.
