Privacy policy (GDPR)

Updated on 05-04-2024

General
This policy on the processing of personal data (“Privacy policy”) describes how Dansk Avis Omdeling A/S and dao Distribution Øst A/S (“dao”, “us”, “our”, “we”) collect and process your personal data.

The privacy policy applies to personal data that you submit to us or that we process when you have ordered a letter or a parcel delivery through us or one of our business partners. dao is the data controller for your personal data.

What personal data do we collect and for what purposes
We process different personal data for different purposes:

  • When you send and receive shipments

Purpose
We process personal data in order to be able to deliver, sort, redirect and return shipments, send notifications to the recipient, and so that the recipient can continuously track the shipments, and to be able to prove to the sender that the shipment has been delivered.

We also process personal data that is necessary for business customers or business partners, including to be able to communicate, manage accounts and provide access to the customer portal.

We also process personal data when required by law or authority decisions. We also process personal data in order to be able to communicate with you, bill, develop and test our IT systems, to be able to prepare anonymized statistics and to be able to offer additional services that are naturally connected to the delivery of the service.

dao usually has no knowledge of the content of shipments, and thus we have no data responsibility for the personal data included in the content. In the cases where we become aware of the content, we also do not have data responsibility for the content, as the processing of the personal data, including gaining knowledge of the content, is not our primary service, and we do not determine for what purposes and with what aids the processing is carried out.

If the sender of a parcel has chosen email notification, we may share the recipient’s name and email address with Trustpilot A/S. We use Trustpilot to conduct customer satisfaction surveys in order to improve our products and services. Trustpilot only uses the personal data for customer satisfaction measurements.

Personal information
We process personal data about you as a customer and recipient or sender of the shipments, fx name, address, mobile number and/or e-mail, and if the shipment is sent with a signature requirement, we will process the signature. For business customers, we typically process information about name, job title, work mobile phone number, workplace name and address. When clearing customs, we also process payment information for customs payment.

Basis of processing
Our processing takes place either on the basis of the nature of the data protection regulation. 6 pieces. 1, letter b or f, on fulfillment of an agreement, and our legitimate interest.

  • When you use our digital channels

Purpose
We have and use various digital channels, fx our websites, apps, platforms and the social media on which we are present. When you use our digital channels, we process personal data in order to:

When you use our digital channels, that we process personal data in order to deliver the service. When you fx searches on our website, buys products via our websites or apps or follows our news on social media, we process your personal data in this connection in order to deliver the service and to collect anonymized statistics so that we can create better user experiences.

Information
We process your personal data, fx name, address, telephone number and e-mail address. If you have purchased something online, we process payment information. We may collect personal data such as transaction history and technical data about the devices you use to access dao’s digital channels, fx IP address.

Basis of processing
Our processing takes place on the basis of the data protection regulation, article 6, subsection 1, letter f, about our legitimate interest.

  • Participation in competitions

Purpose
When you participate in competitions, customer surveys or marketing activities organized by dao, we process your personal data, fx contact details, contest entries, views, preferences and other personal information you have provided or which can be derived from your responses.

Basis of processing
Our processing takes place either on the basis of the nature of the data protection regulation (databeskyttelsesforordningens) article 6, subsection 1, letters a, b or f, about consent, fulfillment of an agreement and our legitimate interest, respectively.

Storage
The information is stored for up to 2 months after the end of the competition, after which it is deleted.

  • TV surveillance

Purpose
We process image material from TV surveillance at dao’s own facilities, fx storage areas. We process the video recordings in order to create safety and security for our employees, suppliers and customers, to investigate any lack of quality in connection with our processes, to protect employees’, customers’ and our values and to provide insurance-related documentation, including documentation in connection with accidents and injuries, to prevent and solve crime and other incidents that create insecurity, to prevent and solve unauthorized entry to our property, to provide and examine documentation in connection with work accidents, etc. for use prevention and minimization of physical risks.

Information
If you appear in images from TV surveillance in such a way that you can be identified, this is personal data.

Basis of processing
Our processing takes place primarily on the basis of the nature of the data protection regulation (databeskyttelsesforordningens) article 6, subsection 1, letter f, about our legitimate interest, which here is to pursue the purposes described above.

If the image material from the TV surveillance shows criminal offenses and/or contains sensitive personal data, the basis for the processing is section 8, subsection 3-5 of the Data Protection Act., cf. GDPR, article 9, subsection 2, letter f, on the pursuit of legal claims. This is also the basis for handling disputes about compensation.

If we pass on video recordings to the police, this can be done in accordance with section 8, subsection 3-5 of the Data Protection Act. cf. GDPR, article 6, subsection 1, letter e and f, as well as article 9, subsection 2, letter f. Section 4c of the TV Surveillance Act (TV-overvågningslovens) also applies. (TV Surveillance Act, LBK no. 182 of 24/02/2023, https://www.retsinformation.dk/eli/lta/2023/182)

Retention period
We retain images from our surveillance cameras for a maximum of 30 days, except in the case of ongoing investigations that may lead to the establishment, enforcement, or defense of legal claims.
***

Disclosure
We use suppliers and business partners who carry out tasks for us. This means that your personal data is processed by suppliers and business partners (data processors) when it is necessary for the data processor to perform the task in question for dao.

We protect your personal data when transferring personal data to data processors in third countries, i.e. outside the EU/EEA, which can happen e.g. by hosting or support services from one of our data processors. We provide a transfer basis and a sufficient level of protection.

Retention periods
We only process your personal data for as long as it is necessary to fulfill the purposes of the processing, to comply with an agreement with you, when we have a legitimate interest, to fulfill our legal obligations, or when processing is necessary, to meet legal requirements can be established, asserted, or defended. We will then delete your personal data. It is therefore mainly the purpose of the processing and the necessity of storage that determine how long we store personal data.

Storage of IP address
When you visit our website, we may process information about your IP address in connection with using the “Track your parcel” feature in order to avoid overloading the system. We store information collected in this connection for 3 hours.

Your rights
In order to create transparency around the processing of your information, we, as the data controller, must inform you of your rights.

The right to access
You are entitled at any time to request information from us about, among other things, what information we have registered about you, what purpose the registration serves, which categories of personal data and recipients of information may be, as well as information about where the information originates.

You have the right to receive a copy of the personal data that we process about you. If you want a copy of your personal data, you must send a written request to kundeservice@dao.as. You will then receive a declaration that you must fill out. You must also document that you are who you claim to be. You will then receive an answer back within 4 weeks normally.

The right to rectification
You have the right to have incorrect personal data about yourself corrected by us. If you become aware that there are errors in the information we have registered about you, you are encouraged to contact us in writing so that the information can be corrected.

The right to erasure
In certain cases, you have the right to have all or some of your personal data deleted by us, fx if you withdraw your consent and we have no other legal basis for continuing the processing. To the extent that continued processing of your information is necessary, fx for us to comply with our legal obligations, or for legal claims to be established, asserted or defended, we are not obliged to delete your personal data.

The right to restrict processing to storage
In certain cases, you have the right to have the processing of your personal data limited to storage only, for example if you believe that the information, we process about you is incorrect.

The right to data portability
In certain cases, you have the right to have personal data that you yourself have given us delivered in a structured, commonly used and machine-readable format and you have the right to transfer this data to another data controller.

Deletion of personal data
Information collected in connection with the processing of your shipment will generally be deleted 1 year after the date on which your shipment is received. However, information can be stored for a longer period of time if we have a legitimate need for longer storage, fx if it is necessary for legal claims to be established, asserted or defended, or if storage is necessary for us to fulfill legal requirements. Accounting material is stored for 5 years until the end of a financial year in order to meet the requirements of the Danish bookkeeping Act.

Security
We have implemented appropriate technical and organizational security measures against personal data being accidentally or unlawfully destroyed, lost, changed, or degraded, as well as against unauthorized access or misuse. Only employees who have a real need to access your personal data to perform their work have access to it.

Complaints
You have the right to register a complaint at any time with the Danish Data Protection Authority (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, about our processing of your personal data. Complaints can be registered, among other things, by email dt@datatilsynet.dk or phone +45 33 19 32 00.

Contact Information
Dansk Avis Omdeling A/S is the data controller for the personal data we process in connection with sending your shipment.

If you have questions or comments about this Privacy policy, or if you want to make use of one or more of your rights, please fill out this form. It must be scanned and sent to daolog@dao.as. Remember to attach a photo or scan of identification papers.

It can take up to 4 weeks before you get a response.