If you are a resident of the European Economic Area ('EEA'), the following additional EEA-specific provisions apply to our processing of your personal information. For EEA residents, the provisions of this EEA Addendum prevail over conflicting provisions in the Privacy Notice.
Relevant Data Controller
In addition to United Parcel Service, Inc., our subsidiaries and affiliates located in the EEA collect personal information.
The relevant data controller for your personal information is the UPS entity listed for the country you reside in according to the following list:
UPS Data Controllers
Information We Obtain
We process names, email addresses and telephone numbers of others to whom we are asked to send information on the assumption that the person who provided the information obtained it in accordance with applicable law. If this assumption is incorrect, please do not ask us to send information to third parties on your behalf.
We may need certain of your information in order to provide services, such as street addresses to deliver parcels, or to use our website or our apps, such as your IP address. In addition, we may be required by law to collect certain information, such as whether a parcel contains hazardous materials. Where such information is so required, we may be unable to provide you with our services unless you provide us with this information.
In accordance with applicable law, we may obtain your consent separately before collecting information by automated means using cookies or similar devices. To learn more about the cookies and similar devices we use, please see our Cookies Policy.
How We Use the Information We Obtain
The legal bases for which we collect, use, transfer or disclose your personal information include (i) the performance of the contract we have with you, (ii) marketing, improvement of our services and other legitimate business interests, (iii) compliance with a legal obligation and (iv) the protection of your and others’ vital interests. The corresponding purposes for which we process your personal information are systematically included in the 'How We Use the Information We Obtain' section in the Privacy Notice above.
We may process your personal information based on your consent, where required by law. If we request your consent, we will inform you of the intended purposes for which your information will be processed. Please note that if you choose to withdraw your consent, you may not be able to participate in or benefit from our programs, services and initiatives for which you provided consent. We also may use the information we obtain about you in other ways for which we provide specific notice at the time of collection.
Data Retention
Your personal information will not be stored for longer than necessary for the purposes for which they were collected or as required under applicable retention policies and/or in accordance with applicable law. Our retention policies reflect local statute of limitation periods and national statutory obligations of UPS.
International Data Transfers
If you are a resident of the European Economic Area ("EEA"), we may transfer your personal information to countries that have not been found by the European Commission to provide adequate protection, including the United States. For any such transfers, UPS takes necessary contractual measures to ensure that your personal information receives an adequate level of protection (including, for example, standard contractual clauses). Due to the global nature of UPS operations, we may also disclose your personal information to other entities of the UPS group to fulfil the purposes described in this Privacy Notice. We have established a UPS group-wide Privacy Code for Customers to protect the transfers of personal information of our customers, suppliers, and business partners outside the EEA as required under applicable data protection laws (the "Privacy Code"). This Privacy Code was submitted for approval to competent European supervisory authorities and complies with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data on the free movement of such data ("GDPR") on binding corporate rules used as appropriate transfer safeguards. This Privacy Code contains legally binding and enforceable internal policies that apply to all UPS group entities and explains how we protect the personal information of customers, suppliers, and business partners that we process and transfer in the context of our business activities. You can access a summary of our Privacy Code, the list of definitions of our Privacy Code, how to exercise your rights under the Privacy Code and how we process and transfer personal data outside the EEA here. Please note that the Privacy Code does not affect the rights established by the GDPR and only provides supplemental rights and remedies to our customers, suppliers, and business partners.
For further information about UPS's international data transfer practices, and to consult contractual measures or our Privacy Code, please contact us using the contact details in the "How to Contact Us" section above.
Your Personal Information Rights
In addition to the right to access and correction, as specified above (under 'Access and Correction' in the main body of this Notice), you have (i) the right to request the transmission of the personal information you have provided to us to you or another company, (ii) the right to object to any uses or disclosures of your personal information, (iii) the right to withdraw your consent in relation to our processing of your personal information based on your consent, (iv) the right to request deletion of your personal information and (iv) the right to request that we restrict processing of your personal information.
You may exercise these rights free of charge unless the request is unfounded, excessive or otherwise unreasonable, for instance, because it is repetitive. In some situations, we may refuse to act or may impose limitations on your rights, as permitted by law. Before UPS is able to provide you with any information or correct any inaccuracies, we may ask you to verify your identity and/or provide other details to help us respond to your request. For the exercise of your rights, please contact us using the contact information provided above in the 'How to Contact Us' section. In all cases, you have a right to file a complaint with a Data Protection Authority.