of General Logistics Systems Germany GmbH & Co. OHG
- GLS-ONE & GLS App
- Senders & Recipients
With the following information we would like to provide you with a general overview on how we process your personal data on gls-group.eu/DE/de/home and gls-newsroom.de/DE inform you about your rights according to privacy laws. Depending on the services you use, the details of the data processing differ.
I. General Information
1. Applicable data protection laws and data protection obligation
GLS Germany GmbH & Co. OHG (GLS Germany) takes data protection and privacy seriously. For that reason, personal data will exclusively be processed in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
As GLS Germany provides postal services or takes part in it, we are subject to maintaining postal secrecy under the Postal Act (PostG) and to the obligations of the postal services data protection regulation (PDSV).
2. Security of personal data
By means of technical and organisational security measures, GLS Germany does its best to protect personal data from loss or misuse. We process personal data in IT systems which are protected by appropriate security measures. This includes using SSL/TLS encryption for transfer of data entered by you on this website. If required by technical progress, we reserve the right to modify these security and privacy protection measures.
3. Contact details of the controller and the data protection officer
Controller according to Art. 4 (7) GDPR resp. service provider according to §13 TMG (German Telemedia Act) is:
General Logistics Systems Germany GmbH & Co. OHG
Phone: +49 (0) 6677 646 907 000
(Hereinafter: „GLS Germany“)
You can contact our company data protection officer at:
GLS Germany GmbH & Co. OHG
Data Protection Officer
GLS Germany-Str. 1-7
If you want to contact us via e-mail, please note that the confidentiality of the transmitted information cannot be guaranteed. Unencrypted e-mails can possibly be read by unauthorised third parties.
4. Personal Data
'Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’). This includes for example information such as name, address, telephone number and date of birth.
Information that cannot be linked to a specific or determinable individual - such as the number of users of a website - is not considered to be personal data.
II. Collection of data, Purpose of processing and legal basis
For a proper use of our services you must provide us with personal data, which is necessary for the fulfilment of the specific purpose or which we are legally required to collect. Otherwise we are usually not able to form a contract with you.
1. Data you submit to us
a) Track & Trace
The parcel number is required to provide you with status information about the parcel.
b) Contact form
The data you submit via the contact form (e.g. name, address, zipcode, town) is required to process and answer your request.
c) Shipping information under „Join as business customer“
The data entered in the above mentioned form, such as first name, last name, number of parcels, etc., is required to process your request.
The GLS Germany website is generally divided into an open and closed area: Functions in the open area can be used without prior registration. GLS business customers receive login data for “YourGLS” (closed area) from their responsible depot on request.
The closed area “YourGLS” offers you to save addresses of regular consignees in the YourGLS address book. These addresses can be used to produce parcel labels easily. You can delete these addresses any time. Upon request or when your customer relation ends, the YourGLS account will be locked by the responsible depot. The data is deleted after the legal retention period is expired.
e) Searching for ParcelShops/ Depots
For searching the closest ParcelShop or GLS Depot, you need to enter the ZIP Code. Please note that a ZIP Code on its own is no personal data.
f) Application form for PaketShop Partners
If you apply as a ParcelShop partner at GLS Germany, we collect the following personal data as part of the pre-contractual review:
- First name, last name, (company), address, zip code, city, country, telephone number, e-mail address, (website)
g) Application form for suppliers
If you apply as a supplier at GLS Germany, we collect the following personal data of the creditor resp. contact person(s) as part of the pre-contractual review:
- First name, last name, (company), address, zip code, city, country, language, telephone number, fax, e-mail address, (website), participation in COUPA, sales tax ID, tax ID, D-U-N-S, bank details, payment-and delivery information, information about your offered products and services as well as about your quality and environmental management.
2. Data, that is collected automatically
a) Logging of IP addresses
Each time a user accesses the GLS website, data is recorded in a log file. The following data is temporarily recorded:
- Date and time of request
- IP address or DNS name of the requesting computer
- requested page (URL)
- HTTP answer code
- Client operating system and version
- Browser and version
The log file data is anonymously analysed for statistical purposes. Statistical reports are used to evaluate the usage of this website. In particular, the order in which the pages are visited and the path taken between pages is shown. This is intended to give GLS Germany an indication how the usability of the website can be improved further.
c) Google Analytics
The website operator has a legitimate interest in analyzing user behavior in order to optimize its website. Due to that the legal basis for the data processing is Art. 6 (1) f GDPR. We are using Google Analytics to analyze and improve the use of our website. These statistics help us make our services more interesting and efficient. For the exceptional cases in which personal data is transferred to the USA, Google has the EU-US Privacy Shield certification,
The GLS website uses the Google Analytics extension „gat._anonymizeIp();“. This ensures anonymized registration of IP addresses ("IP masking"). If IP anonymization is activated on this website, your IP address is shortened before transmission in member states of the European Union or other contractual states of the agreement on the European Economic Area. Only in exceptional cases the full IP address is transmitted to a Google server in the USA and shortened there.
You can avoid the installation of cookies by adjusting the according settings of your browser software; however we would like to point out that in this case you might not be able to use all functions of this web site to the full extent. Furthermore you can block the registration of the data created by the Cookie (incl. your IP address) and related to your use of this website and the processing of this data by Google by downloading and installing the browser plugin available under https://tools.google.com/dlpage/gaoptout?hl=de
By clicking on the following link, you can prevent the data collection by Google Analytics. An opt-out cookie will be set, that prevents the data collection on future visits to this website: block Google Analytics
Information about the third party supplier:
Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland,
Fax: +353 (1) 436 1001
d) Social Media Links
3. Legal basis of processing
Your personal data will only be processed by us provided with a legal basis. The processing is lawful, if at least one of the following conditions applies:
a) Consent (Art. 6 (1) a GDPR)
The data subject has given consent to the processing of his or her personal data for one or more specific purposes. One purpose might the processing of your request. The consent can be withdrawn by any time. This also applies to consent given even before the EU GDPR. The withdrawal is only effective for the future and does not affect the legality of the data processed until the withdrawal
b) Contractual obligations or pre-contractual measures (Art. 6 (1) b GDPR)
The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. Upon your request we process your data. Usually this results out of our products/services or can include consultation or analysis on demand.
c) Legitimate interest (Art. 6 (1) f GDPR)
The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Besides the fulfillment of a contract we may have further interests. (e.g. ensuring IT security and operations, to analyze and improve the use of our website, etc.)
d) Compliance with legal obligation (Art. 6 (1) c GDPR)
The processing is necessary for compliance with a legal obligation to which the controller is subject. GLS Germany is subject to different legal obligations. Among others, these include retention periods prescribed by German Commercial Code (HGB) or Fiscal Code of Germany (AO).
III. Data transfer and recipients
Within GLS Germany, those entities, who need your data to fulfil their contractual or legal obligations, have access to your data. Also providers, commissioned by GLS Germany, may receive data for these purposes, provided they meet the legal requirements. Those parties include Group and carefully selected non-Group third parties contractually required to provide services for or on behalf of GLS Germany. GLS Germany has concluded corresponding contractual agreements with these parties.
In regard to a data transfer to further recipients, we will only pass on your personal data if required by law, with your consent or if we are authorized for disclosure. Under these conditions, public bodies and institutions (such as prosecuting authorities) can receive your personal data if it is required by law.
A transfer of personal data to a third countries will exclusively take place if explicitly mentioned in the context of the former mentioned services.
IV. Duration of data storage and erasure
GLS Germany stores your personal data only in accordance to legal retention periods and legal obligations, as long as it is necessary for the purpose. We set the duration of the storage according to the following requirements:
- Operational requirements: The storage duration, that is needed to complete operational processes.
- Legal requirements:
- Commercial and tax retention periods, which result e.g. from the German Commercial Code (HGB) or the Fiscal Code of Germany (AO). They usually prescribe retention periods of 6 to 10 years.This concerns e.g. the electronic customer invoices that may be accessible through YourGLS.
- The periods of limitation according to §§ 195 ff. Of the German Civil Code (BGB) may be up to 30 years, whereby the regular period of limitation is three years. E.g. Complaints communicated via the contact form.
After expiry of the defined retention period, the data will be deleted or destroyed.
V. Rights of the data subject, withdrawal of consent, exercise of rights, right to complain
1. Rights of the data subject
As data subject you have the right to,
- obtain the controller confirmation as to whether or not and which personal data concerning him or her are being processed (Right of access by the data subject acc. to Art. 15 GDPR)
- obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her (Right to rectification acc. to Art. 16 GDPR)
- obtain from the controller the erasure of personal data concerning him or her without undue delay (Right to erasure acc. to Art. 17 GDPR)
- obtain from the controller restriction of processing (Right to restriction of processing acc. to Art. 18 GDPR)
- receive the personal data concerning him or her, which he or she has provided to a controller (Right to data portability acc. to Art. 20 GDPR)
- object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. (Right to object acc. to Art. 21 GDPR)
The right of access and the right to erasure are limited by §§34 and 35 BDSG.
2. Withdrawal of consent
At any time you have the right to withdraw your consent in data processing towards us. This also applies to consent given even before the EU GDPR. The withdrawal is only effective for the future and does not affect the lawfulness of the data processed until the withdrawal.
3. Exercise your rights
To exercise your rights or for withdrawal of your consent, please contact email@example.com and declare which right you wish to exercise so that GLS Germany may take further steps required to work on your request.
Please note, that we may ask you for a proof of identity in order to protect your personal information from unauthorized access or alteration.
4. Right to lodge a complaint with a supervisory authority
If you note any violation against our data protection regulations, do not hesitate to contact us. Furthermore, in such cases, you also have the right to lodge a complaint with a supervisory authority. (Art. 77 GDPR in conjunction with §19 BDSG)
Federal Commissioner for Data Protection and Freedom of Information
VI. Updating this privacy information
This information was last updated on January 04, 2019.