The Federal Commissioner for Data Protection and Freedom of Information

Navigation and service

Data Protection and postal service providers

Cover "Data protection and postal service providers" (refer to: Data Protection and postal service providers)

Data Protection and postal service providers

What do you as a postal service provider have to consider when it comes to data protection? These and other questions are answered in this flyer with a focus on small and medium-sized enterprises in the postal sector.

We also provide a lot of further information on the topic of the flyer on an overview page.

As of: September 2023

Data Protection and postal service providers

Postal secrecy and the right to informational self-determination of every person are enshrined as fundamental rights in the Basic Law. They are thus protected by the Basic Law and must be guaranteed by all postal service providers. Here you find detailed information on the topics in the flyer for small and medium-sized postal service providers.

 Am I a controller as a postal service provider?

Processes in which personal data are processed are relevant for data protection. Who is responsible for this data processing?
Mitarbeiter mit Tablet im Paketverteilzentrum

 As a postal service provider, what do I have to take into account with regard to data protection?

As a postal service provider, what legal requirements do I have to observe when it comes to data protection and postal secrecy? The commitment of your employees and a privacy statement are very important.
Briefkasten an einem Baum

 What data subjects’ rights must I observe as a postal service provider?

The rights of data subjects are an important part of data protection law. These rights give data subjects an opportunity to influence the processing of their personal data. These rights thus serve to safeguard the principles of data protection law.
ein großes stehendes Paragraphensymbol und mehrere kleinere liegende Paragraphensymbole sind abgebildet

Does my company need a data protection officer?

Data protection officers are important contact persons in matters of data protection for the management of the company, its employees, customers and the supervisory authority. You can find out in this article whether you need to appoint a data protection officer for your company or whether a contact person for data protection in the company is sufficient.
Fist bump vor Arbeitstisch mit Laptop

Do I have notification obligations that I have to fulfil as a postal service provider?

The General Data Protection Regulation (GDPR) imposes two notification obligations on the controller and where applicable also on the processor.
Person füllt Meldung am Laptop aus

What is a processor?

The General Data Protection Regulation (GDPR) imposes obligations not only on the controller, but also on the processor, and the latter has to fulfil these obligations. Special requirements must be observed when transferring data processing operations to another company.
Frau hinter schwebenden Briefsymbolen

When do I contact which supervisory authority?

A supervisory authority checks whether the legal provisions are implemented and complied with by your company.
Dienstgebäude BfDI in Bonn