Information on the processing of personal data when sending letters with a sending code

In addition to this privacy statement, the Posten Bring Group’s general privacy statement applies. There you can read more about, among other things, your rights and how you can contact us to exercise your rights, if you have questions, or wish to complain regarding our processing of personal data.
The data controller for the processing of personal data in connection with this service is Posten Bring AS, organisation number 984 661 185, Biskop Gunnerus’ Gate 14 A, 0185 Oslo.

Introduction

Letters with a sending code is a new way of sending letters, where you purchase a unique code and write it by hand on the envelope. The code is valid for 30 days after purchase and can be used for both small and large domestic letters.

1. Which personal data we process and why

Letters with a sending code are purchased online or at self-service stations. During the ordering process, the following shipment information is provided:

• Sender’s name and postal address, telephone number, and email address
• Recipient’s name and postal address

The address information is read mechanically from the sending code and will take precedence over the address written on the envelope.

The email address is used to send you a purchase receipt once the order has been completed. Payment information is used to charge for the service.

Purpose of processing the data

1. To deliver the letter to the correct recipient and pickup location. The sender’s postal address may be used if the shipment needs to be returned.
   
   Legal basis for processing: Necessary for the performance of a contract.
    
2. To send a purchase confirmation with a receipt to the sender.
   Personal data processed: Email address.
   The sender’s telephone number is an optional shipment detail but may be used as contact information related to the shipment.
   
   Legal basis for processing: Necessary for the performance of a contract.

2. How we share your personal data

We only share your personal data with others to the extent that (i) this follows from this privacy statement, (ii) we are required to do so by law, regulation, or an order from a public authority, or (iii) such sharing is necessary to safeguard our interests, for example to enable us to defend ourselves against legal claims.

Any sharing beyond what is described in this section requires your consent. This does not prevent us from using data processors to process personal data on our behalf (pursuant to a data processing agreement).

All processing of personal data carried out by us takes place within the EU/EEA.

3. Retention period

We store your personal data for as long as it is necessary for the purpose for which the personal data was collected. The retention period for shipment information is 12 months.