You will find the privacy policy for Hermes Germany GmbH’s postal services here .
We, Hermes Germany GmbH (“Hermes”), are serious about protecting your privacy and personal data. So it is important for us to ensure that your data are secure and that applicable data privacy regulations, especially the EU General Data Protection Regulation (GDPR), are complied with. We also take technical and organizational measures to ensure that your data are optimally protected against unauthorized access.
This privacy policy applies for the Hermes website “myhermes.de” and for all subdomains (the “Hermes Website”).
For the purposes of Art. 4(7) GDPR, the controller is
Hermes Germany GmbH
Essener Str. 89
D-22419 Hamburg
You can find more information in our imprint.
Tel.: +49 / 40 / 53755 – 0
zentrale@hermesworld.com
“Personal data”—also called “personally identifiable information (PII)” in the legal statutes—means personal information that can be traced to your identity. They include information such as your name, address, telephone number, and email address, as well as information on your surfing behavior (if that information can be directly or indirectly allocated to you). If personal data reveal something about an individual’s personal or factual circumstances, that individual is called the “data subject” for the purposes of the GDPR.
As a general principle, you can use the Hermes Website without disclosing personal data. If you create a parcel label, however, you will be asked to disclose information about the sender and receiver. You can also log in with your myhermes account if you wish to enjoy certain benefits when using the Hermes Website.
Personal data will not be transmitted to third parties except in consideration of statutory requirements. We pass users’ data on to third parties only if we must do so to fulfil contract obligations (for billing purposes, for example).
If we use a particular subcontractor for our online services, we have entered into suitable contracts with them and taken adequate technical and organizational measures.
Each time we use content or other resources from another company (that company, a “Third-Party Provider”) whose registered office is in a third country, data will assumably be transferred into that country. We transfer personal data into third countries only if an adequate level of data protection exists, we have the user’s consent, or we are otherwise legally permitted to do so.
We have taken suitable technical and organizational measures to protect your data from loss, modification, and unauthorized access. We continually improve those security measures in line with technological developments. Our website uses the industry standard SSL (Secure Sockets Layer) for encryption. This guarantees the confidentiality of your personal information on the internet.
All our employees are periodically trained in data protection and taught how to handle customer data safely and confidentially. All our employees are obligated to observe confidentiality and, accordingly, have signed an obligation to maintain confidentiality and comply with data protection requirements in their employment contracts.
We collect and process your personal data on the following legal bases of the General Data Protection Regulation (GDPR):
a.
Consent pursuant to Art. 6(1)(a) GDPR. “Consent” means any voluntary declaration of intent that is unambiguously given for a certain case in the form of a declaration or other clear confirming action with which the data subject states that they agree to the processing of the personal data concerning them.
b.
Necessity in order to perform a contract or preparatory measures pursuant to Art. 6(1)(b) GDPR. We need your data to prepare to enter into the contract with you or meet our contract obligations toward you.
c.
Processing to meet a legal obligation pursuant to Art. 6(1)(c) GDPR. The processing of your data is prescribed (by law or another regulations, for example).
d.
Processing to protect legitimate interests pursuant to Art. 6(1)(f) GDPR. This means the processing is needed to protect our or a third party’s legitimate interests, unless these are outweighed by your interests or basic rights and freedoms that require the protection of personal data.
As a general principle, you have the following rights toward Hermes where your personal data are concerned:
Withdrawing consent will not affect the lawfulness of the processing already performed based on that consent.
You may also lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by Hermes. The competent supervisory authority connected with postal services is:
Germany's Federal Commissioner for Data Protection and Freedom of Information
Graurheindorfer Str. 153, 53117 Bonn
https://www.bfdi.bund.de
The supervisory authority otherwise competent for us is:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22, 20459 Hamburg
https://datenschutz-hamburg.de
The processing purposes are data disclosure pursuant to Art. 15 GDPR and the assertion of your rights as a data subject.
The data are processed that are processed in connection with Hermes’s postal services and other services.
The data processing is legally based on Art. 6(1)(c) GDPR.
If you ask us for information, we will store that request for three years. Statutory retention periods do not allow us to delete it earlier.
You are not required to disclose your personal data, but no data information can be provided unless you do.
If you have questions about a shipment, please contact our customer service department using the contact form .
If you have questions about the processing of your personal data or exercising your rights as a data subject, please contact:
Please include your complete contact data in your request (first name, last name, and address), since we need them to clearly identify you and give you an answer.
The processing purpose is to ensure the functionality of our website and the security of our IT systems.
Each time the Hermes Website is accessed, our webservers will automatically collect certain data of the accessing end device. The following data will be collected:
In this context, the legal basis is Art. 6(1)(f) GDPR and § 25(2)(2) of the German Act to Regulate Data Protection and Privacy in Telecommunications and Telemedia (Telekommunikation-Telemedien-Datenschutz-Gesetz, TTDSG). Our legitimate interest in the data processing lies in making sure our website functions and in securing our systems. Your interest in confidentiality is outweighed. The website cannot be provided, and its operations and security are not technically possible, unless your personal data are processed. Securing our website also serves your interests.
The data will be erased after 32 days or when they are no longer required to achieve the purpose for which they were collected.
For the Hermes Website to operate, data must be collected and processed for the purposes specified in this item. Therefore, objection is not an option.
The website is hosted by:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
In general, we have arranged for your personal data to be processed within the European Union. That being said, your personal data might be processed in the United States of America (USA). We have therefore secured the level of data protection with suitable guarantees in accordance with Chapter 5 of the GDPR, in particular with Art. 45 and Art. 46 GDPR.
You are not required to disclose personal data, but you cannot access this website unless you do.
You have the option of logging into or registering for myhermes.de with your myhermes.de account (“myhermes account”).
With the myhermes account, you can get an overview of the parcels you send and receive, track the shipment of those parcels, and easily create a parcel label. Furthermore, you can choose whether you would like to receive a parcel notification. You can also register for our Hermes newsletter.
We process the personal data collected as part of the myhermes account to provide you with the aforementioned functionalities. We also use certain data categories (such as parcel classes used, number of parcels received, last login, and user ID) to customize the online presence (website and, if applicable, the newsletter) according to your interests. If the shipment size selected is insufficient or incorrect for your shipment, we will use your data to contact you so the shipment size can be adjusted and the differential amount subsequently paid (since another parcel class will be required).
For the registration, we ask that you provide us with the following information:
Optional information:
After registering, you will receive your own Hermes customer number:
The data processing connected with the myhermes account is legally based on Art. 6(1)(b) GDPR. Our contacting you about adjusting the parcel class is legally based on Art. 6(1)(b) GDPR.
You can correct your data in the myhermes account yourself.
If you do not desire an individual address, you may object to this at any time using the following contact data. In particular, you may object to the customization through a user ID by clicking on the objection link in the section "Mapp Intelligence" below. A tool will open up in which you can deactivate the "Mapp Intelligence" checkbox under “Statistics and Analysis."
If you would like to delete your myhermes account completely, you can do this easily in the myhermes account, with the Hermes app, or on www.myhermes.de by using the “Deactivate User” button.
In general, we have arranged for your personal data to be processed within the European Union. That being said, your personal data might be processed in the United States of America (USA). T We have therefore secured the level of data protection with suitable guarantees in accordance with Chapter 5 of the GDPR, in particular with Art. 45 or Art. 46 GDPR.
You are not required to disclose personal data, but you must open a customer account if you wish to use the aforementioned functionalities.
We have integrated the eBay import tool of the eBay Developers Program from eBay Inc. (“eBay”) into our website. You can use the eBay import tool to import eBay shipping addresses into your myhermes account and send eBay purchases through us with only a few clicks. This also requires the seller to have a myhermes account.
Only the recipient’s data that are needed for the shipment or provided by eBay will be imported.
The parcel distribution is legally based on Art. 6(1)(b) GDPR.
The status and order quantity are deleted immediately on receipt and are not stored. The auction number / transaction number is stored in the myhermes account and will be deleted automatically after 90 days. We will store the recipient's address in accordance with the statutory retention periods.
Importing the data will not cause the eBay servers to delete the aforementioned data. If you would like to erase data stored by eBay, please contact eBay.
You are not required to disclose personal data, but the eBay shipping addresses cannot be imported into your myhermes account unless you do.
Periodically emailing the Hermes Private Customer Newsletter in order to pass on news and information about new products and services.
We collect the following data in order to send our newsletter:
We use your first name here to address you personally.
The data processing is legally based on Art. 6(1)(a) GDPR.
The data are stored until the newsletter is revoked.
You can deregister at any time: in the Hermes app, at myhermes.de, or by selecting the following link provided in the newsletter, for example. After you deregister, your personal data that was transmitted in this context will be blocked immediately and deleted after the statutory retention periods expire.
Our newsletter uses tracking pixels, which allow us to evaluate the user reach. Tracking pixels are tiny images that are loaded automatically when a website or email is accessed, and they allow the user behavior to be evaluated.
This evaluation will be automatic and anonymized, so no personal reference will be drawn. If you have set up a myhermes account, the newsletter can contain individual content based on your myhermes account data (parcel classes used, number of parcels received, last login). The data processing is legally based on Art. 6(1)(f) GDPR. Our legitimate interest for the processing lies in measuring the effectiveness of our advertising activities and improving our online presence and services. Your interest in confidentiality is outweighed.
The Hermes newsletter is sent through:
Salesforce.com inc.
Salesforce Tower
415 Mission Street, 3rd Floor
San Francisco, CA 94105
Salesforce processes your personal data in the USA. Any transmission of personal data, however, complies with the conditions set forth in Art. 44–50 GDPR and the other provisions of the GDPR to ensure that the level of protection for individuals thus guaranteed is maintained.
You can find additional information under:
https://www.salesforce.com/company/privacy/
You are not required to disclose personal data, but we cannot send you the newsletter unless you do.
If you participate in a lottery or similar game of chance, we will process your personal data for that participation, to carry out and conclude the lottery on myhermes.de, in our newsletter, and on Instagram.
We process the following data in this regard:
The legal basis for processing personal data so we can hold and process our lottery is Art. 6(1)(b) GDPR.
For some lotteries, we can process additional information on a case-by-case basis, such as information about age or an Instagram username, to legitimize the participation in the lottery. This is legally based on Art. 6(1)(b) GDPR.
Data processing performed in order to advertise with our newsletter is legally based on your consent pursuant to Art. 6(1)(a) GDPR.
The data will be erased four weeks after the lottery is held (or, if statutory retention periods oppose such an erasure, after those periods expire).
You can deregister from the newsletter at any time: in the Hermes app, at myhermes.de, or by selecting the following link provided in the newsletter, for example. After you deregister, your personal data that were transmitted in this context will be blocked immediately and deleted after the statutory retention periods expire.
The Instagram lottery is sent by the following service provider on Hermes’s behalf:
Upljft GmbH
Vorsetzen 32
20459 Hamburg
Germany
Additional information can be found at: https://www.upljft.com/de/datenschutz/
You are not required to disclose personal data, but you cannot participate in a lottery unless you do.
To improve our services and perform troubleshooting, we occasionally hold voluntary surveys or user surveys on myhermes.de. To that end, we ask the website users to participate in a survey. The surveys are accessed via a link. The responses are entered into an online form and transmitted to Hermes. Hermes then stores and evaluates those responses. To do so, we use the external tool of the service provider SurveyMonkey.
You can participate in the surveys anonymously. But if we hold surveys about the shipment delivery, we collect the tracking number in some cases. This is automatically transmitted to Hermes along with the responses when the survey is sent. If we collect the tracking number, we will point this out before the survey begins.
If you would like to participate in a lottery in connection with the survey, however, we ask you to give us your email address.
This processing, to which you have consented by participating in the survey, is legally based on Art. 6(1)(a) GDPR.
If exclusively anonymous data are collected during the survey, they will be erased after the evaluation. If personal data (such as the tracking number) are collected, we will point this out before the survey begins. Participants consent to the processing by participating in the survey. Collected personal data will be erased after 30 days. Hermes will not include for evaluation purposes any personal data that participants disclose without being asked. They will be erased after six months at the latest. Before the surveys begin, participants will be asked not to disclose any personal data. This is done to protect their privacy.
To hold the surveys, we use the service provider SurveyMonkey:
Momentive Europe UC
2nd Floor, 2 Shelbourne Buildings
Shelbourne Road, Dublin, Ireland
SurveyMonkey stores the IP addresses of the respondents in backend logs. The processing is necessary to protect the legitimate interests of SurveyMonkey as a technical service provider of Hermes (Art. 6(1)(f) GDPR).
Individuals can be identified only indirectly (for example, if law enforcement agencies connect the IP addresses with the survey responses and determine the owner of the internet connection of the IP addresses used for the survey).
You can find additional information on the processed data at:
https://de.surveymonkey.com/mp/legal/privacy-policy
In general, we have arranged for your personal data to be processed within the European Union. That being said, your personal data might be processed in the United States of America (USA). We have therefore secured the level of data protection with suitable guarantees in accordance with Chapter 5 of the GDPR, in particular with Art. 45 or Art. 46 GDPR.
You are not required to disclose personal data, but you cannot participate in the survey unless you provide your consent.
We use the collected data only to answer your request and for other purposes stated when the data are collected. If necessary to answer your request, we will transmit the data to the Hermes company concerned (for example, data will be transmitted to the company Hermes Logistik GmbH & Co KG, domiciled in Austria, if you request information about Hermes services in Austria). If you contact us with a contact form, or by phone, online chat, or email, we will collect and store the personal data you disclose. If you contact us by phone, we might ask for your consent to record the conversation for training purposes and to improve the service and process quality.
The following data might be collected. Whether they are collected depends on your request:
The data processing is legally based on Art. 6(1)(b) GDPR, due to your contract with Hermes. If we record the conversation with our customer service department for training purposes with your consent, the legal basis is Art. 6(1)(a) GDPR. If there is no contract relationship between you and Hermes, the legal basis is Art. 6(1)(f) GDPR. In this case, Hermes’s legitimate interest outweighs your legitimate interest, since we cannot handle your request without processing your personal data. Establishing contact and using the contact form are both done voluntarily.
The recorded conversations will be stored in the customer service department for 3 months.
We will erase the data collected (1) from the contact form or (2) by mail or (3) from our chatbox Bo after their storage is no longer needed for the contact purpose or, if relevant, in consideration of the statutory retention obligations.
If there is a legitimate interest, you may object to future processing at any time. If you object, the correspondence cannot be continued. All personal data that were collected in this context will be erased if there is a legitimate objection.
Since the recording of the telephone conversations for the aforementioned purposes is based on your consent, you may revoke your consent at any time to this being done in the future.
You are not required to disclose personal data, but we cannot process your request unless you fill in the fields identified in the input screen, which are required fields.
The chat function is used for establishing contact. You can use chat like a contact form to chat with our service bot or our employees almost in real time.
At the start of the chat, the following personal data will be collected:
Depending on the course of the conversation with our service bot or our employees, additional personal data that you disclose might be collected during the chat. The type of those data strongly depends on your request or the problem you describe for us. Please send us only the data that are necessary for your request. All those data are processed so that you can contact us quickly and efficiently, thereby improving our customer service.
The data processing is based on Art. 6(1)(a) GDPR. Your use of the chat is deemed consent.
The chat data are stored to guarantee the security of our IT systems.
We also store the course of the chat, the chat data, and the contact data you disclose for four weeks or six months. This is used to simplify further requests based on the chat history and for continual quality control of our chat service.
If you do not wish the storage, please let us know by using the contact data listed below. We will then promptly delete any stored chats.
By accessing our website, the chat widget will be loaded in the form of a JavaScript file from Amazon Cloud Front. The chat widget represents the source code that runs on your computer and makes the chat possible.
We use the chat software of the company:
Userlike UG (limited liability)
Probsteigasse 44–46
50670 Cologne, Germany
You can find other information about the processed data at:
https://www.userlike.com/de/terms#privacy-policy
In addition, the technology for the automated processing of your enquiry and the associated data processing for answering and quality assurance is provided or carried out by the following company:
Otto GmbH & Co KG
Werner-Otto-Straße 1-7
22179 Hamburg, Germany
In general, we have arranged for your personal data to be processed within the European Union. That being said, your personal data might be processed in the United States of America (USA). We have therefore secured the level of data protection with suitable guarantees in accordance with Chapter 5 of the GDPR, in particular with Art. 45 or Art. 46 GDPR.
You are not required to disclose personal data, but you cannot use the chat function unless you grant your consent.
You can use the voice bot to telephone our service bot almost in real time, and your voice will be converted to text. These issued texts will be transmitted to our service bot. It recognizes and answers them in the form of an output text that is translated back into speech.
Depending on the course of the conversation with our service bot, additional personal data that you disclose might be collected during the chat. The type of those data strongly depends on your request or the problem you describe for us. Please send us only the data that are necessary for your request. All those data are processed so that you can contact us quickly and efficiently, thereby improving our customer service.
And the transcribed data are stored to guarantee the security of our IT systems.
The data processing is legally based on Art. 6(1)(b) GDPR, due to your contract with Hermes. If there is no contract relationship between you and Hermes, the legal basis is Art. 6(1)(f) GDPR. In this case, Hermes’s legitimate interest outweighs your legitimate interest, since we cannot handle your request without processing your personal data. The use of the voice bot is also voluntary.
We store the course of the conversation in text form, the data, and the contact data you disclose for four weeks or six month. This helps us continually control the quality of our voice services.
If you do not wish the storage, please let us know by using the contact data listed below. We will then promptly delete any stored conversations.
Through your access, you will be connected directly with our service bot.
We use the transcription software of the company:
VIER GmbH
Hamburger Allee 23
30161 Hannover
You can find additional information on the processed data at:
https://www.vier.ai/datenschutz/
In addition, the technology for the automated processing of your enquiry and the associated data processing for answering and quality assurance is provided or carried out by the following company:
Otto GmbH & Co KG
Werner-Otto-Straße 1-7
22179 Hamburg
You are not required to disclose personal data, but you cannot use the voice bot unless you do.
We use the collected data for market research purposes. Our objective is to measure customers’ willingness to recommend and their satisfaction with Hermes so we can improve our services. If you are registered at myhermes with your email address and have created a parcel label, we will ask you about your willingness to recommend the Hermes brand by using a market research institute we have commissioned.
We will process the following data from you for market research:
The legal basis for processing your data is your declaration of consent by registering for the myhermes account, pursuant to Art. 6(1)(a) GDPR.
Your data will be stored with COGITARIS GmbH for 6 months and then erased. Hermes will not store the survey results.
You may unsubscribe from your participation in the market research at any time. To do so, please use the link for unsubscribing contained in the survey. As soon as you select the item “I don’t want to receive any more emails for surveys,” we will automatically unsubscribe you from our market research survey. Please be aware that the unsubscribing process will not be implemented immediately.
For the market research surveys, we use the market research institute Cogitaris GmbH
Cogitaris GmbH
Sömmeringstr. 14
55118 Mainz
You are not required to provide your personal data. If you do not wish to participate in the market research, please unsubscribe from our newsletter.
We process the data so we can record and possibly process damage and to completely record your claim so we can initiate a payout if necessary.
The following data will be processed:
All data except the proof of value is mandatory information.
The data processing is legally based on Art. 6(1)(b) GDPR, due to your contract with Hermes. If there is no contract relationship between you and Hermes, the legal basis is Art. 6(1)(f) GDPR. In this case, Hermes’s legitimate interest outweighs your legitimate interest, since we cannot handle your request without processing your personal data.
Your data will be stored for 18 months unless erasing them would violate a statutory retention obligation.
If there is a legitimate interest, you may object to future processing at any time unless we can demonstrate compulsory, legitimate grounds for the processing that outweigh the interests, rights, and freedoms of the data subject or the processing serves to establish, assert, or defend legal claims.
You are obligated to disclose your personal data. If you do not wish to disclose them, the damage cannot be processed.
Hermes Germany GmbH is present on various social networks. They include Instagram, YouTube, LinkedIn, and XING. Here we wish to seek active communication with prospective customers and offer them the possibility of informing them about our services and products. We also use the platform to carry out marketing campaigns. Hermes operates its services on these platforms under the data protection provisions of the respective platform operator and bears no direct responsibility for their data processing. Findings from these data are used exclusively for internal purposes. Please note that these platforms per se are public and contributions placed there can normally be read by other users or all users. Personal data and shipment-related data should not be made public there.
Through our website, you always have the possibility of contacting us via WhatsApp. This is done by selecting the button “Open WhatsApp.” The window for WhatsApp will then open in your browser. WhatsApp is a messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
To provide the contact with us through WhatsApp, we use the messenger communication platform 360dialog GmbH, Torstr. 61, 10119 Berlin.
If you would like to contact us through WhatsApp, we or our service bot use WhatsApp to answer your questions almost in real time.
At the start of the chat, the following personal data will be collected:
Depending on the course of the conversation with our service bot, additional personal data that you disclose might be collected during the WhatsApp chat. The type of those data strongly depends on your request or the problem you describe for us. Please send us only the data that are absolutely necessary for processing your request. All those data are processed so that you can contact us quickly and efficiently, thereby improving our customer service.
The data processing is based on Art. 6(1)(a) GDPR. Your use of the chat through your contact via WhatsApp is deemed consent.
We will store your chat data and your personal data as long as this is necessary for their use. They will be erased when the purpose of the data collection no longer applies or you revoke your consent. We will delete any stored chats after one month.
If you do not wish the storage, please let us know by using the contact data listed below. We will then promptly delete your chat.
Please be aware that when you use WhatsApp, WhatsApp will store the data you enter. Your data will be stored and handled according to WhatsApp's standards. If you wish to assert your rights as a data subject against WhatsApp, please contact WhatsApp directly.
WhatsApp Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2; Ireland
https://www.whatsapp.com/legal/privacy-policy-eea?eea=1%22
Please be aware that, by using WhatsApp, your personal data might be processed in countries outside the European Union and the European Economic Area, particularly in the USA. Under certain circumstances, this might make it more difficult for the individual user to assert their rights.
You are not required to disclose personal data, but you cannot contact us via WhatsApp unless you grant your consent.
We maintain a corporate presence (known as “fan sites” or “fan pages”) on the social media portal of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
To operate the company profile @hermes_logistik_de on Instagram, Hermes Germany GmbH relies on the technical platform and the services of Instagram LLC, Menlo Park, CA 94025, USA (“Instagram”). The Instagram service is one of the Facebook products provided by Meta Platforms Ireland Limited.
We display our company on Instagram because we wish to actively communicate with you and possibly inform you about our services, our products, and our Hermes world. We also use the platform to carry out marketing campaigns. To do so, we use the possibilities of target-group-specific address (“targeting”) and profile use analysis (“insights”) provided by Instagram.
You also have the option of contacting us through Instagram: in a one-on-one contact via direct messaging, or publicly in the comments. If you would like to use the contact options mentioned, we will process the data and information you provide to process your concern (meaning the reason you contacted us) and to answer your questions.
Meta Platforms Ireland Limited gives our company statistical data of ‘page insights’, which allow us to draw conclusions about user activities in our corporate presence. The functions of a Facebook company page provided for companies by Meta Platforms Ireland Limited concern a Facebook product of Meta Platforms Ireland Limited, which includes the rules of the Facebook Facebook Privacy Policy (cf. https://www.facebook.com/about/privacy/update ), the information on Facebook page insights (cf. https://de-de.facebook.com/legal/terms/information_about_page_insights_data ), and an agreement unilaterally provided by Facebook Ireland Limited for the purposes of Art. 26 GDPR (cf. https://www.facebook.com/legal/terms/page_controller_addendum ).
Hermes Germany GmbH and Meta Platforms Ireland Limited have agreed in the aforementioned agreement that Meta Platforms Ireland Limited is responsible for providing the information on the processing for page insights and the assertion of your rights as a data subject (right to information, rectification, portability, erasure of your data, and to object and restrict the processing of your data) pursuant to the GDPR. In your Instagram settings, you can learn more about these rights and have the option of contacting the data protection officer of Meta Platforms Ireland Limited.
Meta Platforms Ireland Limited and Hermes Germany GmbH have agreed that the Irish Data Protection Commission is the supervisory authority who monitors the processing regarding the page insights. You may lodge a complaint at any time, either with the Irish Data Protection Commission under www.dataprotection.ie or with other supervisory authorities.
If you contact us through Instagram, your personal data that you disclose will be collected and stored depending on the intended use. We use the collected data exclusively to answer your inquiries and for other purposes that are stated when the data are collected. If necessary to answer your inquiry, we will pass the data on to the Hermes company concerned.
The following data are processed as part of establishing contact:
When you visit our Facebook company page, Meta Platforms Ireland Limited processes data items of your visit, which you can read here, with Facebook Ireland Limited https://de-de.facebook.com/legal/terms/information_about_page_insights_data .
The data processing is legally based on Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR. If the processing is necessary to perform a contract with you or to perform precontractual measures, we will process your personal data on this basis as a consequence of your request. We process your personal data based on our legitimate interest in communicating with you and answering your contact request, in continually optimizing our corporate presence, and our legitimate interest in implementing more efficient promotional activities. In this case, our legitimate interest predominates, since improving our communication channels makes it much easier for you to establish contact.
We will erase the data collected in this context when the storage is no longer necessary for the contact purpose (after one year at the most) or, if there are statutory retention obligations, we will restrict their processing.
Please note that the data you transmit to Instagram will be stored on Instagram’s servers. You are responsible for the erasure of your data on those servers. And a modification or erasure of the data stored at Instagram will not cause any modification or erasure of the data stored with us.
If your personal data are processed in connection with your contact request based on our legitimate interest, you may object to the processing of your data at any time. If you object, the correspondence cannot be continued. All personal data that were collected in this context will be erased if there is a legitimate objection.
The social media platform Instagram is not operated by us, but by the respective service providers under their own responsibility. Depending on the platform, the product responsibility and product design of Instagram is a matter for the platform operator Meta Platforms Inc. We have no influence on the data collected by Instagram, or on the data processing, and we do not know the full extent of the data collection, the purpose of the processing, or the storage periods.
Please be aware that personal data might be processed in countries outside the European Union and the European Economic Area, particularly in the USA. Under certain circumstances, this might make it more difficult for the individual user to assert their rights.
You can find additional information on the processed data at:
Meta Platforms Ireland Limited
Dublin Ballsbridge Campus
Dublin 4
Ireland
https://de-de.facebook.com/help/instagram/519522125107875
To process the contact requests on our company profiles with Instagram, we use the social media moderation tool of the provider
Facelift brand building technologies GmbH (Facelift bbt) | Gerhofstr. 19 | 20354 Hamburg
In general, we have arranged for your personal data to be processed within the European Union. That being said, your personal data might be processed in the United States of America (USA). We have therefore secured the level of data protection with suitable guarantees in accordance with Chapter 5 of the GDPR, in particular with Art. 45 or Art. 46 GDPR.
By displaying our company on YouTube, we would like to give you the opportunity to learn about our company’s products and services through that channel. We also use YouTube to carry out marketing campaigns.
The video platform YouTube is not operated by us, but by the respective service providers under their own responsibility. Depending on the platform, the product responsibility and product design of YouTube is a matter for Google LLC. We have no influence on the data collected by YouTube, or on the data processing, and we do not know the full extent of the data collection, the purpose of the processing, or the storage periods.
The data are processed by the following company:
Google Ireland Limited
Google Building Gordon House
4 Barrow St, Dublin, D04 E5W5, Ireland
You can find additional information at:
https://policies.google.com/privacy?hl=de&gl=de#infocollect
Please be aware that personal data might be processed in countries outside the European Union and the European Economic Area, particularly in the USA. Under certain circumstances, this might make it more difficult for the individual user to assert their rights.
The Hermes Website uses cookies. By clicking the button “accept” on the cookie banner, or by individually selecting the settings, you are granting your consent for Hermes to store cookies and tracking mechanisms on your end device or to retrieve cookies and tracking mechanisms from your end device. Cookies are small text files that can be stored in or by the internet browser of the user’s end device. Cookies normally contain a characteristic string that makes it possible to unequivocally identify your browser or end device when you visit the website again.
Different types of cookies are used on this website. They are:
The first-party cookies used by this Hermes Website include temporary session cookies and permanent cookies. In the permanent cookies, the website stores information to store any personal user settings and improve the user experience on your next visit (such as the selected language settings). In the temporary session cookies, the website stores technical information that is needed for the website to function. The storage period for these cookies is based on the deadlines specified in this item.
This website also uses services offered by third parties to evaluate user behavior to render internet services. The service providers can use cookies (third-party cookies), tracking pixels, or comparable analytical technologies. The following sections contain more specific information on the internet technologies and analytical technologies we use.
In general, the web browser of the end device can be instructed to prevent the storage of cookies or the execution of analytical technologies. However, this would render some of this website’s functions unavailable under certain circumstances. As a further option, the browser can be set to issue a message when a cookie or similar analytical technology is placed. Furthermore, all cookies can be deleted manually at any time.
Withdrawing all consents
You can completely withdraw all your consents that you have granted for the data processing activities described in the following by using the following tool . If you do so, the analysis service will no longer be executed and an opt-out cookie will be stored in the web browser of the end device used, along with the instructions that no more data should be processed by this end device for the aforementioned purposes.
Usercentrics is a consent management platform that uses technically necessary cookies. This occurs through an entry in the local storage in your respective browser.
This is a consent management service. Consents are stored to comply with statutory obligations.
This list contains the following (personal) data that are collected by or through the use of this service.
The data storage is legally based on Art. 6(1)(c) in conjunction with Art. 7(1) GDPR.
The consent data (consent and withdrawal of consent) will be stored for three years. The data collected will be deleted immediately after the retention period expires.
Since the data must be collected by law, you may not object.
The processing company is:
Usercentrics GmbH
Sendlinger Str. 7
80331 Munich
Germany
You can find additional information on the processed data at:
https://usercentrics.com/de/datenschutzerklaerung/
In general, we have arranged for your personal data to be processed within the European Union. That being said, your personal data might be processed in the United States of America (USA). We have therefore secured the level of data protection with suitable guarantees in accordance with Chapter 5 of the GDPR, in particular with Art. 45 or Art. 46 GDPR.
Your personal data must be provided to meet a statutory obligation.
Mapp Intelligence Tag Manager is a technically necessary tool for efficiently incorporating plug-ins into the website. These plug-ins make it possible for us to incorporate services such as the online chat or statistic tools into myhermes.de and set up the consent service for data-processing applications such as PaketShopFinder (‘parcel shop finder’).
Mapp Intelligence Tag Manager forms the technically necessary interface to Usercentrics. This is used to remove or block tracking texts, cookies, and tracking mechanisms in a rule-based manner. The data are processed to comply with statutory obligations through the storage of consents.
For technical reasons, webservers located in Germany generally process IP addresses but do not store them. Additional data are not processed by Mapp Intelligence Tag Manager, nor can they be evaluated.
The following data are collected when the website opens:
The following data will be processed but not stored:
The data storage is legally based on Art. 6(1)(c) in conjunction with Art. 7(1) GDPR.
No data will be stored.
Since the data must be collected by law, you may not object.
The processing company is:
Mapp Digital
c/o Webtrekk GmbH
Robert-Koch-Platz 4
10115 Berlin
Germany
You can find other information about the processed data at:
https://www.webtrekk.com/privacy-notice.html
Your personal data must be provided to meet a statutory obligation.
The A/B test is a testing method for evaluating two variants of a system in which the original version is tested against a slightly altered version. The multivariant test is an A/B test with multiple variables.
The processing purpose is to continually improve the online services.
When the Hermes Website is used, AB Tasty collects the following statistical information:
If you have consented to the use of cookies on the Hermes Website, the data processing in this context is legally based on Art. 6(1)(a) GDPR.
The cookies placed by AB Tasty have a duration of no more than 13 months, after which they will be deleted from the end device used. Deleting the cookies anonymizes the collected analytical data, since those data can no longer be allocated to a cookie ID.
At any time, you may withdraw your consent to AB Tasty performing usage analysis on the Hermes Website in the future by deactivating the checkbox “AB Tasty” under the category “Statistics and Analysis” in the following tool and then saving.
If this is done, the analysis service will no longer be performed and the cookie named “AB Tasty Opt-Out” will be stored on the appropriate end device by the domain myhermes.de. No more data will be collected or processed from your end device by the analysis service AB Tasty. This withdrawal will apply until the above checkbox “AB Tasty” is reactivated.
The data are collected by a tracking pixel that is incorporated into the Hermes Website (and the subpages) and by cookies placed by AB Tasty. The analysis service makes it possible for us to use the collected data to analyze our visitors’ surfing behavior and design the Hermes Website to be more customer-friendly. To that end, usage is analyzed in a manner that does not allow us or the analysis service to identify individual users.
The myhermes website uses the service of the company AB Tasty:
AB TASTY SAS (“AB Tasty”)
3 impasse de la Planchette
F-75003 Paris
You can find additional information on the processed data at:
https://www.abtasty.com/de/nutzungsbedingungen/
In general, we have arranged for your personal data to be processed within the European Union. That being said, your personal data might be processed in the United States of America (USA). We have therefore secured the level of data protection with suitable guarantees in accordance with Chapter 5 of the GDPR, in particular with Art. 45 or Art. 46 GDPR. Your personal data can also be processed in Great Britain. There is no European Commission adequacy decision for Great Britain.
You are not required to provide your personal data. Unless you have used the aforementioned function to deactivate the tracking by AB Tasty, your personal data will be processed when you visit this website.
The analysis service makes it possible for us to use the collected data to analyze our visitors’ surfing behavior. Evaluating them does not enable us to compile information about the use of the individual components of our website. This helps us ensure the integrity of our website and constantly improve its usability and user-friendliness. Usage is analyzed in a manner that does not allow us or the analysis service to identify individual users.
The following data will be processed:
If you have consented to the use of cookies on the Hermes Website, the data processing in this context is legally based on Art. 6(1)(a) GDPR.
The data are deleted as soon as they are no longer needed for our analysis purposes. The session cookie with the session ID will become invalid and deleted when the website visit ends. The permanent cookie with the long-term ID will become invalid and deleted after 6 months. All data collected through the analysis service will be anonymized after 14 months at the latest.
At any time, you may withdraw your consent to data being collected and processed on the basis of cookies in the future by deactivating the checkbox "Mapp Intelligence" in the following tool and then saving. No more data will be collected or processed from your end device by the analysis service Mapp Intelligence.This objection will apply until the checkbox “Mapp Intelligence” is reactivated.
The data are collected by a tracking pixel that is incorporated into the Hermes Website (and the subpages) and by cookies placed by Mapp Intelligence (Webtrekk).
The data are processed by the following company:
Webtrekk GmbH
Robert-Koch-Platz 4
10115 Berlin
You can find other information about the processed data at:
https://mapp.com/privacy/
In general, we have arranged for your personal data to be processed within the European Union. That being said, your personal data might be processed in the United States of America (USA). We have therefore secured the level of data protection with suitable guarantees in accordance with Chapter 5 of the GDPR, in particular with Art. 45 or Art. 46 GDPR.
You are not required to provide your personal data. If the tracking by Webtrekk is activated through the aforementioned function, your personal data will be processed when you visit this website.
The analysis and targeting service “Mapp Marketing Automation” allows us to use the collected data mentioned above to show our users personalized content on the Hermes Website based on segments.
When the Hermes Website is used, our analysis service processes the following data:
If you have consented to the use of cookies on the Hermes Website, the data processing in this context is legally based on Art. 6(1)(a) GDPR.
The data are deleted as soon as they are no longer needed for our analysis purposes. The session cookie with the session ID will be deleted when the website visit ends. The permanent cookie with the long-term ID will become invalid and deleted after 6 months. All data collected through the analysis service will be anonymized after 14 months at the latest.
At any time, you may withdraw your consent to Mapp Marketing Automation analyzing usage and collecting personalized information on the Hermes Website in the future by deactivating the checkbox “Mapp Marketing Automation” in the following tool and then saving.
The data are collected by a tracking pixel that is incorporated into the Hermes Website (and the subpages) and by cookies placed by Mapp Intelligence.
The data are processed by the following company:
Mapp Digital Germany GmbH
Dachauer, Str. 63, 80335 Munich
You can find other information about the processed data at:
https://mapp.com/privacy/
In general, we have arranged for your personal data to be processed within the European Union. That being said, your personal data might be processed in the United States of America (USA). We have therefore secured the level of data protection with suitable guarantees in accordance with Chapter 5 of the GDPR, in particular with Art. 45 or Art. 46 GDPR.
You are not required to provide your personal data. If the tracking by Mapp Marketing Automation is activated through the aforementioned function, your personal data will be processed when you visit this website.
This website uses the conversion tracking of Google Inc. to measure the success of online ads.
If a user clicks on a Hermes ad that was placed with Google Ads and that ad leads to this Hermes Website, a cookie will be placed on the user’s end device.
This cookie allows Google to recognize that this website user has clicked on the ad and was forwarded to our website and that the user has taken certain actions on our website.
Google uses this information to provide us with anonymized usage statistics about our website. We cannot allocate this information to any certain user. No personal information about the user’s identity is transmitted to us.
If you have consented to the use of cookies on the Hermes Website, the data processing in this context is legally based on Art. 6(1)(a) GDPR.
The cookie set for conversion tracking purposes will become invalid after 30 days and deleted from the appropriate end device. In the tool itself, the data will be stored 9–18 months ( https://policies.google.com/technologies/ads ).
At any time, you may withdraw your consent to Google analyzing the use of personalized information on the Hermes Website in the future by deactivating the checkbox “Google Ads Conversion” in the following tool and then saving. You can also object to the collection of your data at any time.
The data are processed by the following company:
Google Ireland Limited
Google Building Gordon House
4 Barrow St, Dublin, D04 E5W5, Ireland
You can find additional information on the processed data at:
https://policies.google.com/privacy?hl=de
https://policies.google.com/technologies/ads
In general, we have arranged for your personal data to be processed within the European Union. That being said, your personal data might be processed in the United States of America (USA). We have therefore secured the level of data protection with suitable guarantees in accordance with Chapter 5 of the GDPR, in particular with Art. 45 or Art. 46 GDPR.
You are not required to provide your personal data. If the tracking by Google Ads Conversion is activated through the aforementioned function, your personal data will be processed when you visit this website.
This Hermes Website uses the conversion tracking of the Microsoft Corporation to measure the success of online ads.
If a user clicks on a Hermes ad that was placed with Microsoft Bing Ads and that ad leads to this Hermes Website, a cookie will be placed on the user’s end device.
This cookie allows Microsoft Bing to recognize that this website user has clicked on the ad and was forwarded to our website and whether the user has taken certain actions on our website.
Microsoft Bing uses this information to provide us with anonymized usage statistics about our website. We cannot allocate this information to any certain user. No personal information about the user’s identity is transmitted to us.
The data processing in this context is legally based on Art. 6(1)(a) GDPR.
The cookie set for conversion tracking purposes will become invalid after 30 days and deleted from the appropriate end device. In the tool itself, the data will be stored 6–18 months ( https://privacy.microsoft.com/de-de/privacystatement ).
At any time, you may withdraw your consent to Google analyzing the use of personalized information on the Hermes Website in the future by deactivating the checkbox “Bing Conversion” in the following tool and then saving. You can also object to the collection of your data at any time.
The data are processed by the following company:
Microsoft Corporation
One Microsoft Way Redmond, WA 98052-6399, United States of America
You can find other information about the processed data at:
https://privacy.microsoft.com/de-de/privacystatement
In general, we have arranged for your personal data to be processed within the European Union. That being said, your personal data might be processed in the United States of America (USA). We have therefore secured the level of data protection with suitable guarantees in accordance with Chapter 5 of the GDPR, in particular with Art. 45 or Art. 46 GDPR.
You are not required to provide your personal data. Unless you have used the aforementioned function to deactivate the tracking by Bing Ads Conversion, visiting this website without your personal data being processed is impossible.
These technologies make it possible to measure the success of online ads and purposefully show ads on other websites to internet users who have already visited this Hermes Website, who have already seen our advertising banners on other websites, or who might be interested in our services according to statistical criteria.
These cookies are used to anonymously collect the following data, which cannot be traced to the respective user or the specific end device used:
Data that the end device can identify (such as a MAC address or an IMEI number) are not collected.
If you have consented to the use of cookies on the Hermes Website, the data processing in this context is legally based on Art. 6(1)(a) GDPR.
The cookies placed in this context will become invalid after 180 days and deleted from the end device.
At any time, you may withdraw your consent to usage analysis being performed and personalized information being collected on the Hermes Website in the future by deactivating the checkbox “Adition” in the following tool and then saving.
The data are processed by the following company:
Adition Technologies GmbH
Oststr. 55
40211 Düsseldorf
You can find other information about the processed data at:
https://www.adition.com/datenschutz
You are not required to provide your personal data. Unless you have used the aforementioned function to deactivate the tracking by Adition, visiting this website without your personal data being processed is impossible.
These technologies make it possible to measure the success of online ads and purposefully show ads on other websites to internet users who have already visited this Hermes Website, who have already seen advertising banners on other websites, or who might be interested in our services according to statistical criteria.
These cookies are used to anonymously collect the following data, which cannot be traced to the respective user or the specific end device used:
Data that the end device can identify (such as a MAC address or an IMEI number) are not collected.
The data processing in this context is legally based on Art. 6(1)(a) GDPR.
The cookies placed in this context will become invalid after 90 days and deleted from the end device.
At any time, you may withdraw your consent to usage analysis being performed and personalized information being collected on the Hermes Website in the future by deactivating the checkbox “The Adex” in the following tool and then saving.
The data are processed by the following company:
The ADEX GmbH
Torstr. 19
10119 Berlin
You can find other information about the processed data at:
https://theadex.com/datenschutz-opt-out/
You are not required to provide your personal data. Unless you have used the aforementioned function to deactivate the tracking by The Adex, visiting this website without your personal data being processed is impossible.
We use Google Maps to make it easier for you to search for parcel shops in your area and view, for example, the business hours and additional parcel shop services. Google Maps is a web service for showing interactive maps in order to visually display geographic information.
The interactive maps of Google Maps can be used only after expressly activating the button “Activate Map.” And you will be forwarded directly to Google Maps when you select the icon “Route” so you can see the directions to the parcel shop.
To display the map and search for locations, we transmit the following data to Google:
If you expressly confirm the “Activate Map” button or select the “Route” icon, the data processing will be based on your consent (Art. 6(1)(a) GDPR).
During the location search, only the search address you enter will be forwarded. No connection or storage between the search input and other data about your identity by us will take place.
The storage duration depends on your settings with Google. You can find additional information at:
https://support.google.com/maps/answer/6258979?hl=de&co=GENIE.Platform%3DDesktop
You can withdraw your consent at any time by using the tool under the “Cookies” tab in the footer.
The data are processed by the following company:
Google Ireland Limited
Gordon House
4 Barrow St, Dublin, D04 E5W5, Ireland
You can find additional information on the processed data at:
https://policies.google.com/terms?hl=de&gl=de
https://www.google.com/intl/de_US/help/terms_maps/
When you use Google Maps, personal data might be processed outside the European Union, particularly in the United States of America. Google Ireland Limited is the sole controller for that processing.
You are not required to provide your personal data. If you have used the aforementioned function to deactivate tracking by Google Maps, visiting this website without your personal data being processed is impossible.
We display advertising materials based on user behavior and interest in Hermes YouTube advertising media and the Hermes YouTube channel.
Users who have performed one or more of the following actions on YouTube
will be marked with a cookie on their end device. That cookie indicates whether a user has already interacted with a Hermes ad or the YouTube channel.
Google uses this information to display ads based on user behavior.
The legal basis for processing your data is your declaration of consent to the cookies on YouTube’s website pursuant to Art. 6(1)(a) GDPR.
The cookie set for remarketing purposes will become invalid after 30 days and deleted from the appropriate end device. In the tool itself, the data will be stored 9–18 months
( https://policies.google.com/technologies/ads )
To withdraw your consent, please contact Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043 UA or visit the following website: https://support.google.com/google-ads/answer/2453998?hl=de
Your data will be processed by the following company:
Google Ireland Limited
Google Building Gordon House
4 Barrow St, Dublin, D04 E5W5, Ireland
You can find additional information at:
https://policies.google.com/privacy?hl=de&gl=de#infocollect
Please be aware that personal data might be processed in countries outside the European Union and the European Economic Area, particularly in the USA. Under certain circumstances, this might make it more difficult for the individual user to assert their rights.
You are not required to provide your personal data.
The purpose of processing your data in this context is the purchase of a Hermes SparSet [“saving set”] in our online shop.
We process the following data in connection with the purchase of the Hermes SparSet:
To pay, you can choose between the payment services paypal or credit cards. The data required for the payment (credit card data or IBAN, PIN, and TAN) are directly collected by the respective payment service provider on our behalf.
The legal basis for processing the aforementioned data is the initiation or performance of the purchase contract pursuant to Art. 6(1)(b) GDPR.
We will store your data as long as this is necessary to enter into and perform the purchase contract.
Because of the purchase contract, you are obligated to disclose your personal data. If you do not wish to provide us with your personal data, buying the Hermes SparSet is impossible.
If you have selected the “PayPal” payment type while creating a parcel label, your data that are required for the payment process will be transmitted to PayPal.
The following data are normally transmitted to PayPal:
To that end, please see PayPal’s data protection provisions at: https://www.paypal.com/myaccount/privacy/privacyhub
To that end, please contact PayPal. You can find additional information at:
https://www.paypal.com/myaccount/privacy/privacyhub
PayPal’s European operating company is:
PayPal (Europe) S.á.r.l. & Cie. S.C.A.
22–24 Boulevard Royal,
2449 Luxembourg
For the payment methods of credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” via PayPal, PayPal reserves the right to arrange for a credit check to be performed. PayPal uses the result of the credit check regarding the statistical probability of non-payment in order to decide about providing the respective payment method. The credit report can contain probability values (“score values”). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical and statistical procedure. The score values are calculated using address data, among other things.
PayPal’s applicable privacy policy can be accessed at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
If you use PayPal, your personal data might be processed in the United States of America. For that processing, PayPal (Europe) S.á.r.l. & Cie. S.C.A is the sole controller.
If you have selected the “Credit Card” payment type while creating a parcel label and you pay with a credit card, your data that are required for the payment process will be transmitted to our payment service provider Braintree. This is necessary to enable your credit card payment.
The following data will be used or processed if you pay by credit card:
Moreover, Hermes uses 3D Secure to secure the payment by credit card. You must be registered with 3D Secure to be able to use this service.
3D Secure offers cardholders and Hermes advantages by involving an additional authentication level. If the cardholder is registered with 3D Secure, the issuing bank decides during the checkout process whether the cardholder’s identity can be examined using the transmitted data of the cardholder and their device or if an additional authentication process is necessary. If an additional authentication is necessary, our payment service provider Braintree automatically starts a process that is provided by the issuing bank to check the cardholder’s identity by using a one-off SMS passcode, the issuing bank’s mobile app, biometric methods, or other means.
The following data are transmitted in the 3D Secure process:
To that end, please see our payment service provider Braintree’s privacy policy under: https://www.braintreepayments.com/de/legal/braintree-privacy-policy
To that end, please contact our payment service provider Braintree. You can find additional information at: https://www.braintreepayments.com/de/legal/braintree-privacy-policy
Braintree’s European operating company is:
PayPal (Europe) S.á.r.l. & Cie. S.C.A.
22–24 Boulevard Royal,
2449 Luxembourg
For the payment methods of credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” via PayPal, PayPal reserves the right to arrange for a credit check to be performed. PayPal uses the result of the credit check regarding the statistical probability of non-payment in order to decide about providing the respective payment method. The credit report can contain probability values (“score values”). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical and statistical procedure. The score values are calculated using address data, among other things.
PayPal’s applicable privacy policy can be accessed at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
If you use our payment service provider Braintree, your personal data will be processed in the United States of America. For that processing, PayPal (Europe) S.á.r.l. & Cie. S.C.A is the sole controller.
We display our company in social media portals because we wish to actively communicate with you and possibly inform you about our company’s products and services. We also use social media portals to carry out marketing campaigns.
You have the possibility of transmitting your data to Hermes directly through LinkedIn and/or Xing with the goal of making contact with Hermes to initiate a customer relationship.
The purpose of the processing is to contact Hermes as the precursor to a business relationship. The data will be used for advertising purposes – especially for making contact by phone and sending the Hermes newsletter – only if you have expressly consented to it.
Moreover, we use the possibilities of target-group-specific address (“targeting”) and analyzing the profile use (“insights”) provided by the social media portals as part of our marketing campaigns.
When the incorporated form is sent, the following data will be transmitted to us: Form of address, first name, last name, company name, mail address, or telephone number.
Transmitting the data will not erase the data from the LinkedIn and/or the Xing servers. And a modification or erasure of the data stored at LinkedIn and/or Xing will not cause any modification or erasure of the data stored with us.
The data processing in connection with LinkedIn Message Ad + Lead Ad as well as Xing Lead Ad is legally based on Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR. We process your personal data based on our legitimate interest in communicating with you, in continually optimizing our corporate presence, and in implementing more efficient promotional activities. If the processing is necessary to perform a contract with you or to perform precontractual measures, we will process your personal data on this basis.
If no business relationship is formed after contact is established, the data will be erased within 30 days from the initial contact through Hermes Germany GmbH. If a business relationship is established, the framework conditions subsequently agreed will apply.
You may request, modify, or erase your data at any time by contacting us personally (myhermes-business@hermesworld.com).
The social media portals are not operated by us, but by the respective service providers under their own responsibility. Depending on the platform, the product responsibility and product design of the social media portal is a matter for the respective social media portal operator. We have no influence on the data collected by the service provider, or on the data processing, and we do not know the full extent of the data collection, the purpose of the processing, or the storage periods.
You can find additional information on the processed data at:
LinkedIn Ireland Unlimited Company
Wilton Place,
Dublin 2, Ireland
https://www.linkedin.com/legal/privacy-policy
New Work SE (XING)
Am Strandkai 1
20457 Hamburg
https://privacy.xing.com/de/datenschutzerklaerung
Please be aware that personal data might be processed in countries outside the European Union and the European Economic Area, particularly in the USA. Under certain circumstances, this might make it more difficult for the individual user to assert their rights.
You are not required to provide your personal data via LinkedIn and XING, but you cannot communicate through LinkedIn and XING as contact channels unless you do.
To maintain a view of public conversation with Hermes Germany GmbH in the German-language web and react to it if applicable, we use the services of TALKWALKER.
We constantly work to improve our services and products. And observing and analyzing the opinions that users publicly express about our companies and individual services and products helps us do so.
If you write about Hermes in the social web (via your public profile at Twitter, for example), we can view that tweet and your publicly available profile information (such as the username, Twitter handle, bio, profile picture, and number of followers). They will be stored in the company for internal evaluation.
If your real name is used in social media, the data processing is legally based on Art. 6(1)(f) GDPR. Our legitimate interest in improving our services and products outweighs your legitimate interest, since your information is publicly available.
The data collected in this context will remain available in Talkwalker for two years. Please note that the data you transmit in the social web will be stored on the server of the respective provider (Facebook, Instagram, forums, comment function in online media, etc.). You are responsible for the erasure of your data on those servers.
If your personal data are processed in connection with your contact request based on our legitimate interest, you may object to the processing of your data at any time. If you object, the correspondence cannot be continued. All personal data that were collected in this context will be erased if there is a legitimate objection.
We use the services of:
TALKWALKER
Sàrl 33 Avenue John F Kennedy
L-1855 Kirchberg – Luxembourg
(German office in Taunusanlage 8, 60 329 Frankfurt am Main).
Please note that anyone who uses the functions offered by the social web does so under their own responsibility. This depends on the usage conditions of the respective provider. This one collects access data. The social media portals are not operated by us, but by the respective service providers under their own responsibility. Depending on the platform, the product responsibility and product design of the social media portals is a matter for the respective social media portal operator. We have no influence on the data collected by the service provider, or on the data processing, and we do not know the full extent of the data collection, the purpose of the processing, or the storage periods.
Please be aware that personal data might be processed in countries outside the European Union and the European Economic Area, particularly in the USA. Under certain circumstances, this might make it more difficult for the individual user to assert their rights.
Sanction lists are indexes of people, organizations, or institutions that are subject to economic and legal restrictions imposed by governments or authorities. According to the supply ban, these people, companies, groups, or organizations must not be provided with any direct or indirect financial assets or economic resources.
Hermes maintains international trade relations and offers their services worldwide. Therefore, Hermes is subject to various national and international sanctions regimes. These sanction regimes result in various obligations, such as not maintaining business relationships to various countries or people. To comply with these duties, Hermes carries out comparisons with sanction lists kept and published by the UN, the EU, or individual states, for example, to ensure that no money or other economic resources are provided for terroristic purposes.
The purpose of the processing is to comply with the aforementioned obligations and determine which people are named on sanction lists to decide whether to begin or continue business relationships.
We use the following data to check sanction lists:
The legal basis for processing your data to compare sanction lists is our legitimate interest in the comparison pursuant to Art. 6(1)(f) GDPR. Our legitimate interests lie in the fact that the obligation is required, in identifying people named on sanction lists, in not maintaining any business relationships with those people, in observing the applicable sanction regime, and in avoiding sanctions against Hermes due to breaches against sanction regimes. Our interest also lies in avoiding significant legal and financial consequences for Hermes. Your interests in confidentiality are outweighed, since the check is made using a spot check only.
Your data will be erased as soon as they are no longer needed for the purpose of the processing, unless this would breach statutory retention obligations. We delete any hits on a sanction list comparison 10 years after the comparison is performed. The data sets used to carry out the sanction list comparison will be stored for 10 years, then erased.
The general right to object applies to all data processing carried out for the purposes in this privacy policy pursuant to Art. 6(1)(f) GDPR. Unlike your special right to object to data processing for advertising purposes, we are obligated pursuant to the GDPR to implement a general objection if you specify overriding reasons (such as a possible danger for your life or health).
We use the following provider to check or compare the sanction lists:
AEB SE
Sigmaringer Str. 109
70567 Stuttgart
You are not required to provide your personal data. The processing is based on the legitimate interest.
Our website and our privacy policy might contain links to external websites of third parties whose content we cannot influence. Therefore, we are not liable for that third-party content.
The respective provider or operator of a linked website is always responsible for its content. The linked pages were checked for possible legal infringements when they were linked. No unlawful content could be identified at that time. Without specific indications of a legal infringement, permanent monitoring of the linked pages is not possible or feasible. If we learn of a legal infringement, we will remove such links without undue delay.
We may modify or update parts of the privacy policy without notifying you in advance. Please review the privacy policy before you use our services to remain informed of any modifications or updates.
Current status of the privacy policy: January 2024