Data protection notice
Data protection notice for Swiss Post services
Swiss Post and its subsidiaries provide a wide range of services and process a variety of personal data in connection with this. Below, you will find information about how we process data in connection with certain services for private customers.
We also offer other services that are primarily geared towards our business customers. You will receive separate information about data protection in connection with these services.
The following applies to all servives:
You have the right to information, rectification, erasure and restriction of data processing at any time.
You can assert your rights via post or e-mail to the following address:
Swiss Post Ltd
Data protection, GRCS
Wankdorfallee 4
3030 Bern, Switzerland
E-mail: betroffenenrechte@post.ch
If you submit a request for information to us, you must enclose a copy of an official form of identification such as a passport, identity card or driving licence. We require this in order to identify you. Your name, date of birth and place of residence must be visible on your official ID. We do not require any of the other information on your ID for the identification process, so you may block it out.
Various service providers support us in providing services to you. This may be external companies or subsidiaries of Swiss Post. We select our service providers carefully and make sure that they uphold data protection requirements. Depending on the work and services offered by the service provider, we make data accessible to them to the extent required for them to provide the service in question. If we involve third parties, we are authorized to make the data required for this purpose available to them, provided that they are subject to the same obligations regarding data protection as Swiss Post itself. Furthermore, we only disclose data to the service provider insofar as is required for the purpose explained in the data protection notice below.
The service providers that we may engage include, in particular:
- IT service providers
- Marketing and sales service providers
- Security service providers
- Consulting service providers
Your data is primarily processed in Switzerland. In certain cases, however, we may also transfer data to third parties abroad for processing, in particular in the EU and the European Economic Area (EEA). In such cases, we check that the transfer and processing abroad are permitted and take the necessary protective precautions.
We share data with our service providers and partner companies as well as requesting authorities primarily within Switzerland. The recipients of data, as well as their servers, may also be located in the EU and the EEA. These recipients are subject to data protection laws that guarantee appropriate protection of data.
Our service providers and requesting authorities (Article 16 (2) (a) of the Federal Act on Data Protection, FADP) may also be located outside the EU or the EEA. In certain cases, disclosure abroad may also be directly related to the provision of our service (Article 17 (1) (b) FADP).
If a service provider is located in a country without adequate legal data protection, we contractually oblige the recipient to comply with the applicable data protection provisions (here we use the revised standard contractual clauses of the European CommissionTarget not accessible), insofar as the recipient is not already subject to a legally recognized set of rules for ensuring data protection and we cannot rely on an exemption provision. An exception may apply in particular in the case of legal proceedings abroad, but also in cases of overriding public interests or if the performance of a contract requires such disclosure, if you have consented or if it concerns data that you have made generally accessible and you have not objected to its processing.
As a general principle, the Swiss Data Protection Act applies to the processing of data. If, in individual cases, the data processing is based on the EU GDPR, the processing of the underlying contract and our legitimate interest form the basis of the data processing.
If you are registered in the “My Post” customer portal, data from the use of our services, the customer portal and the online services are processed for customer management and advice. Unless you have objected, Swiss Post and its subsidiaries in Switzerland and the EEA may use your data for self-promotion within the scope of the applicable legal provisions. We may use your anonymized data for other purposes. See “My Post” GTC customer portal, section 4, questions 2 and 6.
We only use the data for personalized advertising for third-party products if you have expressly consented to this. Would you like to manage your consent to market research and advertising? You can do this in the settings area of the “My Post” customer portal.
Rich Content Section
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Compliance with the law
- Development of products and market research
- Cultivation of customer relationships
- Ensuring the proper flow of consignments and logistics
- Combating misuse and fraud
- Defending and enforcing legally justified claims
Data received from third parties
- Customer address data (e.g. sender)
- Consignment information from the sender
Place of processing
- Switzerland
- Liechtenstein
- Germany
Recipient
- External and internal service providers/suppliers
- Public authorities
- Customers
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Compliance with the law
- Development of products and market research
- Cultivation of customer relationships
- Ensuring the proper flow of consignments and logistics
- Combating misuse and fraud
- Guaranteeing security
- Defending and enforcing legally justified claims
Data received from third parties
- Customer address data (e.g. sender) or address service providers (e.g. address traders, list owners)
- Customs clearance, address and consignment data from foreign postal, parcel and transport service providers
Place of processing
- Switzerland
- Germany
- Worldwide in recipient country - contract (Article 17 (1) (a) and (b) FADP)
Recipient
- External and internal service providers/suppliers
- Foreign postal, parcel and transport service providers
- Authorities, in particular customs
- Customers
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Compliance with the law
- Development of products and market research
- Cultivation of customer relationships
- Ensuring the proper flow of consignments and logistics
- Combating misuse and fraud
- Guaranteeing security
- Defending and enforcing legally justified claims
Data received from third parties
Customer address data (e.g. sender or recipient)
Place of processing
- Switzerland
- Germany
Recipient
- External and internal service providers/suppliers
- Public authorities
- Customers
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Compliance with the law
- Development of products and market research
- Cultivation of customer relationships
- Ensuring the proper flow of consignments and logistics
- Combating misuse and fraud
- Guaranteeing security
- Defending and enforcing legally justified claims
Data received from third parties
Customer address data (e.g. sender or recipient)
Place of processing
- Switzerland
- Germany
Recipient
- External and internal service providers/suppliers
- Public authorities
- Customers
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Compliance with the law
- Development of products and market research
- Cultivation of customer relationships
- Ensuring the proper flow of consignments and logistics
- Combating misuse and fraud
Data received from third parties
Customer address data (e.g. sender or recipient)
Place of processing
Switzerland
Recipient
- External and internal service providers/suppliers
- Public authorities
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Compliance with the law
- Cultivation of customer relationships
- Defending and enforcing legally justified claims
Data received from third parties
- Customer address data (e.g. sender or recipient)
Place of processing
- Switzerland
- Liechtenstein
Recipient
- External and internal service providers/suppliers
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Compliance with the law
- Development of products and market research
- Cultivation of customer relationships
- Ensuring the proper flow of consignments and logistics
- Combating misuse and fraud
- Defending and enforcing legally justified claims
Data received from third parties
Customer address data (e.g. sender or recipient)
Place of processing
- Switzerland
- Germany
Recipient
External and internal service providers/suppliers
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Compliance with the law
- Development of products and market research
- Cultivation of customer relationships
- Ensuring the proper flow of consignments and logistics
- Combating misuse and fraud
- Defending and enforcing legally justified claims
Data received from third parties
Customer address data (e.g. sender or recipient)Place of processing
- Switzerland
- Germany
Recipient
- External and internal service providers/suppliers
- Public authorities
- Persons designated by the customer (authorized recipients)
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Development of products and market research
- Marketing
- Cultivation of customer relationships
- Ensuring the proper flow of consignments and logistics
- Defending and enforcing legally justified claims
Place of processing
- Switzerland
- Germany
Recipient
External and internal service providers/suppliers
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Development of products and market research
- Cultivation of customer relationships
- Ensuring the proper flow of consignments and logistics
- Combating misuse and fraud
- Guaranteeing security
- Defending and enforcing legally justified claims
Data received from third parties
- Address data from customers or address service providers
- Public notifications of death from CRIF Ltd and KünzlerBachmann Directmarketing AG
- Address data from Liechtenstein Post (movers’ data)
- Official changes of address of authorities
Place of processing
Switzerland
Recipient
- External and internal service providers/suppliers
- Customers such as companies, banks, insurance providers and address service providers (for example KünzlerBachmann Directmarketing AG and AZ Direct AG).
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Compliance with the law
- Development of products and market research
- Cultivation of customer relationships
- Ensuring the proper flow of consignments and logistics
- Combating misuse and fraud
- Guaranteeing security
- Defending and enforcing legally justified claims
Place of processing
- Switzerland
- Germany
Recipient
- External and internal service providers/suppliers
- Other providers of postal services
- Customers in possession of the old address
- Companies and institutions selected by the customer concerned
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Development of products and market research
- Marketing
- Cultivation of customer relationships
- Combating misuse and fraud
- Defending and enforcing legally justified claims
Place of processing
- Switzerland
- Germany
Recipient
- External service providers
- Public authorities
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Development of products and market research
- Marketing
- Cultivation of customer relationships
- Combating misuse and fraud
- Defending and enforcing legally justified claims
Data received from third parties
- Address data from customers or address service providers (e.g. address traders, list owners)
- E-mail addresses
- Behaviour and tracking data (e.g. browsing behaviour or similar)
Place of processing
- Switzerland
- Germany
Recipient
External and internal service providers/suppliers
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Service provision
- Product development and market research
- Marketing
- Customer care
- Combating misuse and fraud
- Defending and enforcing legally justified claims
Data received from third parties
- Address data from customers or address service providers (e.g. address traders, list owners)
- Behaviour and tracking data (e.g. browsing behaviour or similar)
Place of processing
- Switzerland
- Germany
Recipient
External and internal service providers/suppliers
Additional note App
The following tools are also used in the Post Card Creator app:
Controller
Post CH Communication Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland
Purpose of processing
- Provision of services
- Development of products and market research
- Cultivation of customer relationships
- Combating misuse and fraud
- Defending and enforcing legally justified claims
Data received from third parties
- Customer address data
- E-mail addresses
Place of processing
Switzerland
Recipient
- External and internal service providers/suppliers
- Customers
Controller
Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
Place of processing
- Switzerland
Controller
The controller is the operator of the location:
- Post CH Network Ltd, Wankdorfallee 4, 3030 Bern, Switzerland
- Post CH Ltd, Wankdorfallee 4, 3030 Bern, Switzerland
- Swiss Post Ltd, Wankdorfallee 4, 3030 Bern, Switzerland
Purpose of processing
- Provision of services
- Combating misuse and fraud
- Guaranteeing security
- Defending and enforcing legally justified claims
Place of processing
Switzerland
Recipient
- External and internal service providers/suppliers
- Public authorities
- Insurance providers
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Compliance with the law
- Cultivation of customer relationships
- Combating misuse and fraud
- Defending and enforcing legally justified claims
Place of processing
- Switzerland
- Germany
Recipient
- External and internal service providers/suppliers
- Public authorities
In branches with partners, you can hand in and collect consignments and make use of other services, just as you would in self-operated post offices. The postal services used in branches with partners and the associated processing of your data are carried out exclusively on behalf of and on instruction of Swiss Post.
Staff of branches with partners are obliged to uphold postal secrecy in connection with the postal services and receive regular training on this.
Controller
Post CH Ltd, Post CH Network Ltd and Swiss Post Ltd (Wankdorfallee 4, 3030 Bern, Switzerland)
Purpose of processing
- Provision of services
- Compliance with the law
- Development of products and market research
- Marketing
- Cultivation of customer relationships
- Defending and enforcing legally justified claims
Data received from third parties
- Customer address data (e.g. sender)
- Order and transaction data
Place of processing
- Switzerland
- Germany
Recipient
- External and internal service providers/suppliers
- Public authorities
- If you have any questions or concerns relating to a service provided by a subsidiary, your enquiry will be forwarded.
Rich Content Section
V.1.0 / 09.2023