DSV Global Privacy Notice

Please refer to our different chapters below

1. We are the data controller and how to contact us
2. Additional information to be found in local privacy policy
3. Cookies and other tracking technologies on www.DSV.com
4. When you sign up for our newsletter or other marketing material
5. Visiting DSV’s social media profiles or pages
6. If you are contacting us, requesting an offer, or using our Track & Trace tool
7. If you are an individual with a customer (B2B), a business partner, or a supplier of ours
8. If you are a consumer
9. If you participate in a DSV event
10. If you are visiting our facilities
11. Use of video surveillance on our Danish premises
12. Use of AI
13. Transmission to other controllers and entrustment to data processors
14. Your rights
15. Questions and complaints
16. myDSV data policy

1. We are the data controller and how to contact us

The DSV entity acting as a data controller in relation to the processing of your personal data is specified in each chapter below. You may also find a list of DSV entities in the Appendix to DSV’s Binding Corporate Rules.

If you are uncertain which DSV entity is the data controller for processing your personal data, please contact DSV A/S as stated below for clarification.

For general privacy inquiries please contact:

DSV A/S
Att. Group Legal
Hovedgaden 630
P.O. Box 210
DK-2640 Hedehusene
Denmark
CVR-no: 58 23 35 28
Telephone number: +45 43 20 30 40
Email address: privacy@dsv.com
Please note that this policy does not cover our investor portal, our career site, myDSV . For information about how we process your personal data in relation to these activities, please refer to the respective privacy notices.

2. Additional information to be found in local privacy policy

We recommend you read the local policy applicable to the country/state where you are resident, as it provides you with additional information to what is stated in this policy, e.g. on local use of video surveillance, local websites and specific local activities.

3. Cookies and other tracking technologies on www.DSV.com

3.1 Data controller
The data controller for the processing of your personal data on www.DSV.com is DSV A/S.

3.2 Types of personal data
We use cookies on our websites and in this connection we process your personal data. DSV may collect the following personal data about you when you visit our website:
• IP address, user ID and cookie ID and other online identifiers
• Browsing History and technical information about your browser and device
• Information about your use of our website, including click-behavior and how you navigate on the website

We use cookies to collect the above-mentioned personal data. You can read more about the use of cookies in the cookie information banner which is available through the cookie icon in the lower left corner.

3.3 The purpose of the processing
Your personal data may be processed for the following purposes:
• To make the website and its functionalities available to you, including to enable the website to remember your settings, such as your cookie settings
• Ensure the security of the website
• To understand how you use the website with a view to give you a better user experience
• Promotion of our brand and services, if you have accepted the use of marketing cookies, including through targeting of advertisements
• Statistics and analysis with a view to optimizing the website, if you have accepted statistical cookies

3.5 Retention period
Cookies are deleted in accordance with our Cookie Policy. Personal data collected through cookies is deleted no later than 2 years after the collection. However, the information may be stored for a longer period in anonymized form.

3.6 Recipients
If you accept our use of cookies, we may share your personal data with providers of social media and other cookie providers to improve their services, provide DSV with statistics and enable advertising. Please be aware that those third parties may be established in or may transfer your personal data to recipients in countries outside the EU/EEA which do not provide the same level of protection as the EU/EEA. You can see a list of our cookie providers in the cookie banner which you can access through the cookie icon in the lower left corner.

We may also share your personal data with the following categories of data processors who process your personal data on our behalf:
• Data processors who provide IT systems for maintenance and functionality in relation to our cookies and cookie banner;
• Data processors who provide IT systems for marketing, statistics and analysis.
Please also refer to the supplementary description in the chapter ‘Transmission to other controllers and entrustment to data processors’ below.

4. When you sign up for our newsletter or other marketing material

4.1 Data controller
The data controller for the processing of your personal data in relation to DSV’s newsletter is DSV A/S.

4.2 Types of personal data
When you sign up for receiving our newsletter or other marketing materials, we may collect, process, and store the following types of personal data:
• Your name, email address
• Your consent, including time and date of your provision of consent
• Click-behavior related to the newsletter, e.g. when you have opened the newsletter and where you click in the newsletter

4.3 The purpose of the processing
Your personal data may be processed for the following purposes:
• Marketing of the DSV Group’s services
• Documentation for compliance with local marketing practices legislation
• Statistics and analytics with a view to improving our newsletters

4.4 Legal basis for processing
We processes your personal data on the following basis:

• Consent: We will only use your personal data for direct marketing, including for sending out newsletters and tracking your click-behavior, if you have given your prior and explicit consent to this (Article 6(1)(a) of the General Data Protection Regulation).
• Legitimate interests: The processing of your personal data in relation to storage of documentation for our compliance with local marketing practices legislation is based on our legitimate interests in being able to document our compliance, while our processing in relation to statistics and analytics is based on our legitimate interests in optimizing our marketing efforts (Article 6(1)(f) of the General Data Protection Regulation).

4.5 Retention period
Your personal data will be stored as long as your consent to receive newsletters and/or marketing materials is active.

You can always withdraw your consent by clicking on the unsubscribe link at the bottom of each email or by contacting us as described below. However, withdrawing your consent does not affect the legality of the processing that preceded the withdrawal.

Documentation of your marketing consent is kept for 2 years from the time you have withdrawn your consent to receive direct marketing material. In addition, the information can be stored for a longer period in anonymized form.

4.6 Recipients
We may share your personal data with the following categories of data processors who process your personal data on our behalf:
• Data processors who provide IT systems for supporting our direct marketing efforts;
• Data processors who provide IT systems for statistics and analytics.
Please also refer to the supplementary description in the chapter ‘Transmission to other controllers and entrustment to data processors’ below.

5. Visiting DSV’s social media profiles or pages

This section contains the policy for DSV’s processing of personal data collected through DSV’s profiles or social media pages. In addition to this policy we advise you to consult the DSV’s Social Media House Rules.

DSV has profiles or pages on the following social media platforms:
• LinkedIn Ireland Unlimited Company
(i) LinkedIn’s privacy policy is available here
(ii) You can customise your privacy settings on LinkedIn here
• Facebook (Meta Platforms Ireland Ltd.)
(iii) Facebook’s privacy policy is available here
(iv) You can customise your privacy settings on Facebook here
• X Internet Unlimited Company
(v) X’ privacy policy is available here
(vi) You can customise your privacy settings on X here
• Instagram (Meta Platforms Ireland Ltd.)
(vii) Instagram’s privacy policy is available here
(viii) You can customise your privacy settings on Instagram here
• YouTube (Google Ireland Ltd.)
(ix) Google’s privacy policy is available here
(x) You can customise your privacy settings on YouTube here

5.2 Data controller
DSV A/S acts as a data controller in relation to your interactions with our global and Danish social media profiles and pages, such as likes and comments.

DSV and the providers of LinkedIn, Facebook and Instagram, respectively, are jointly responsible for the processing of personal data processed in connection with social media advertisement tools.
DSV and the providers of LinkedIn, Facebook and Instagram have concluded agreements on the distribution of data protection tasks. According to these agreements, DSV and the providers of the social media are each responsible for the tasks connected with the processing they carry out. However, it has been agreed between DSV and the provider of Facebook and Instagram that the provider is responsible for enabling you to exercise your rights as described in the section ‘Your rights’ below, in relation to the use of Facebook and Instagram, and DSV is responsible for providing you the information stated below. In addition, it has been agreed between DSV and LinkedIn that LinkedIn is responsible for responding to requests from you concerning the rights described in the section ‘Your rights’ below.

5.3 Types of personal data
When you visit or interact with our social media profiles, we and the social media provider may collect, process, and store the following types of personal data about you:
• Information available on your profile, including your name, gender, civil status, workplace, interests, image, and your city
• Whether you “like” or have applied other reactions to our profile
• Comments you leave on our posts
• That you have visited our profile
• The IP number of the device you use to visit the social media profile

5.4 The purpose of the processing
We processes your personal data for the following purposes:
• Statistics and analysis to improve our branding and social media pages as well as the social media provider’s advertisement features
• To be able to communicate with you if you comment on a post, make a review, or send us a message
• Promoting our brand and services, including by use of the social media providers’ advertisement tailoring tools

5.5 Legal basis for processing
We process your personal data on the following basis:
• Legitimate interests: We base the processing of your personal data on our legitimate interests in being able to communicate with and market us to you on our social media profiles, as well as our legitimate interest in branding our business (Article 6(1)(f) of the General Data Protection Regulation).

5.6 Retention period
We encourage you to delete your posts, comments and other reactions on our profiles if you no longer want these to be accessible on our social media. Your private messages to DSV will be kept for up to 2 year. However, the information can be stored for a longer period in anonymized form.

Please refer to the privacy policy of the provider for each of the social media platforms for in-formation on how long they store your personal data.

5.7 Recipients
DSV uses the providers of YouTube and X as processors in relation to DSV’s use of YouTube and X and does, in this regard, also share certain information regarding your interactions, interests etc. with the providers. This sharing is carried out on the basis of DSV’s and the providers’ legitimate interests in optimizing marketing and the social media platform (Article 6(1)(f) of the General Data Protection Regulation).

Furthermore, DSV also relies on the providers of LinkedIn, Facebook and Instagram as processors and does, in addition to this, share information regarding your interactions, interests etc. with the providers of LinkedIn, Facebook and Instagram. This sharing is carried out on the basis of DSV’s and the providers’ legitimate interests in optimizing marketing and the social media platform (Article 6(1)(f) of the General Data Protection Regulation).

The social media providers may transfer your personal data to recipients established outside the EU/EEA. Such transfers are based on an EU Commission adequacy decision (such as the EU-U.S. Data Privacy Framework) or the EU Commission’s standard contractual clauses which you may request access to. You can read more about the social media providers’ transfers of personal data and who they otherwise share personal data with in their privacy notices linked above.

6. If you are contacting us, requesting an offer, or using our Track & Trace tool

6.1 Data controller
The data controller for the processing of your personal data in relation to the contact forms on www.DSV.com, including the Track & Trace tool, is DSV A/S.

If you contact us by email, the DSV Group entity you reach out to is the data controller. Please visit the local privacy notice for further information about local processing of your personal data.

6.2 Types of personal data
When you submit information to us through a contact form on our website, or when you contact us by phone or email, we may collect, process, and store the following types of personal data:
• Your contact information such as name, email address, phone number, postal address and, if relevant, name of company/place of work and VAT no.
• What your inquiry concerns including the subsequent correspondence
• Date and time of your inquiryies

6.3 The purpose of the processing
Your personal data may be processed for the following purposes:
• To be able to respond to your inquiry and otherwise communicate with you
• To notify you as the consignee on the status of a delivery
• To provide customer service and support
• To carry out statistics and analysis with a view to improving and developing our services
• Documentation of the correspondence

6.4 Legal basis for processing
We processes your personal data on the following basis:

• Legitimate interests: The processing of your personal data in relation to the handling of your inquiry is based on our legitimate interests in being able to handle your inquiry and otherwise communicate with you, carry out statistics and analysis with a view to improve and develop our business as well as to document the correspondence, including our handling of your inquiry (Article 6(1)(f) of the General Data Protection Regulation).

6.5 Retention period
Your personal data will be kept for up to 2 years, depending on the nature of the inquiry (e.g. general inquiries deleted after 30 days). The information may, however, be kept for longer in anonymized form.

6.6 Recipients
If necessary to respond to your enquiry, we may share your personal data with relevant third parties.

We may also share your personal data with the following categories of data processors who process your personal data on our behalf:
• Data processors who provide IT systems for administration of our contact forms and task management;
• Data processors who provide IT systems for correspondence;
• Data processors who provide IT functionalities for our Track & Trace tool.
Please also refer to the supplementary description in the chapter ‘Transmission to other controllers and entrustment to data processors’ below.

7. If you are an individual with a customer (B2B), a business partner, or a supplier of ours

7.1 Data controller

7.2 The data controller for the processing of your personal data in relation to your professional cooperation with DSV is the DSV group entity you cooperate with.

7.3 Types of personal data
When you, as part of your job and on behalf of your company/employer, are having communication with us including professional communications in relation to the cooperation between your company/employer and us, we may collect, process, and store the following types of personal data about you:

• Your contact information such as name, email address, phone number, postal address and, if relevant, name of company/place of work and VAT no.
• Your national identification numbers (if you are an external driver), nationality and gender, if applicable
• Your driver license number and, if needed, criminal records, and other information for background checks on drivers with external haulers
• Information about the bookings you make, including online bookings

7.4 The purpose of the processing
Your personal data may be processed for the following purposes:

• To plan, fulfil, deliver and administer our cooperation with our customers, business partners and suppliers including management of external haulers
• To be able to carry out marketing and sales activities (where consent is not required) as well as to send out service messages
• To deliver the digital DSV e-services that you may utilize
• To provide customer service and support
• To improve and develop our services and business in general
• For our financial administration including accounting, creditor process and debt collection
• To comply with applicable laws and regulations including in relation to the use of external haulers
• To document our cooperation, including with a view to be able to establish, exercise or defend a legal claim

7.5 Legal basis for processing
We processes your personal data on the following basis:

• Legitimate interests: The processing of your personal data is based on our legitimate interests in providing and developing our services and maintaining a fair and sound business as well as our legitimate interests in promoting our business, provide customer support and be able to handle any claims and disputes (Article 6(1)(f) of the General Data Protection Regulation).
• Legal obligation: The processing of your personal data will in some cases be necessary for compliance with legal obligations, such as obligation to store personal data on drivers with external haulers and keep bookkeeping material in accordance with local accounting and bookkeeping legislation (Article 6(1)(c) of the General Data Protection Regulation).
• Criminal records will only be collected and processed where permitted under local data protection legislation, cf. Article 10 of the General Data Protection Regulation. This may e.g. be based on DSV’s legitimate interest in ensuring that external drivers are fit for the job or based on a legal obligation in this regard.

7.6 Retention period
Your personal data relation to a contract or cooperation will in general be stored for up to 3 years after our contract or cooperation has ended.

Personal data included in bookkeeping material is kept in accordance with local accounting and bookkeeping legislation.

However, the information can be stored for a longer period in anonymized form.

7.7 Recipients
If necessary in relation to our cooperation, e.g. to deliver goods as agreed, we may share your personal data with relevant third parties.

We may also share your personal data with the following categories of data processors who process your personal data on our behalf:
• Data processors who provide IT systems for administration of our cooperation, e.g. correspondence tools, task management tools, CRM platforms;
• Data processors who provide IT systems for understanding and improving our business and services, e.g. business intelligence tools;
• Data processors who provide IT systems for ensuring compliance with mandatory requirements, such as accounting and bookkeeping systems;
• Data processors who provide IT systems used to send out marketing and service messages;
• Data processors who provide file storing systems.
Please also refer to the supplementary description in the chapter ‘Transmission to other controllers and entrustment to data processors’ below.

8. If you are a consumer

8.1 Data controller

8.2 The data controller for the processing of your personal data in relation to your professional cooperation with DSV is the DSV group entity you purchase the DSV services from.

8.3 Types of personal data
When you purchase a DSV service or receive a parcel delivered by DSV as a consumer, we may collect, process, and store the following types of personal data about you:

• Your contact information such as name, email address, phone number, postal address
• Information about your order such as where you ship from and to, the type, size and weight of your package as well as pickup date and who you are sending the package to
• Status of delivery
• Contents of your package in case of returns handled by DSV
• Correspondence regarding your package and DSV’s services

8.4 The purpose of the processing
Your personal data may be processed for the following purposes:
• To plan, fulfil and administer our agreement with you
• To deliver a package to you in accordance with our agreement with the sender
• To be able to send out service messages
• To provide customer service and support
• To improve and develop our services and business in general
• For our financial administration including accounting, creditor process and debt collection
• To comply with applicable laws and regulations
• To document delivery of your package and our services, including with a view to be able to establish, exercise or defend a legal claim

8.5 Legal basis for processing
We processes your personal data on the following basis:

• Contract: If you purchase a DSV service, we process your personal data to fulfill our contract with you regarding shipping of one or more packages (Article 6(1)(b) of the General Data Protection Regulation).
• Legitimate interests: The processing of your personal data is based on our legitimate interests in providing and developing our services and maintaining a fair and sound business as well as our legitimate interests in provide customer support and be able to handle any claims and disputes. If you receive a package delivered by DSV, we process your personal data based on our legitimate interests in delivering the package In accordance with our agreement with the sender (Article 6(1)(f) of the General Data Protection Regulation).
• Legal obligation: The processing of your personal data is necessary to comply with our legal obligation to keep bookkeeping material in accordance with local accounting and bookkeeping legislation (Article 6(1)(c) of the General Data Protection Regulation).

8.6 Retention period
Your personal data relation to a contract or cooperation will in general be stored for up to 3 years after our contract has ended or the package has been delivered.

Personal data included in bookkeeping material is kept in accordance with local accounting and bookkeeping legislation.

However, the information can be stored for a longer period in anonymized form.

8.7 Recipients
If necessary in relation to our cooperation, e.g. to deliver goods as agreed, we may share your personal data with relevant third parties.

We may also share your personal data with the following categories of data processors who process your personal data on our behalf:
• Data processors who provide IT systems for administration of our consumer relations, e.g. correspondence tools, task management tools, CRM platforms;
• Data processors who provide IT systems for understanding and improving our business and services, e.g. business intelligence tools;
• Data processors who provide IT systems for ensuring compliance with mandatory requirements, such as accounting and bookkeeping systems;
• Data processors who provide IT systems used to send out service messages;
• Data processors who provide file storing systems.
Please also refer to the supplementary description in the chapter ‘Transmission to other controllers and entrustment to data processors’ below.

9. If you participate in a DSV event

When you participate in a DSV event such as a webinar, seminar, etc., DSV may collect and process your personal data.

9.1 Data controller
The data controller for the processing of your personal data in relation to DSV’s events is the DSV entity hosting the event.

9.2 Types of personal data
When you sign up or participate in a DSV event, DSV may collect the following personal data about you in that context:
• Contact information such as name, email address and phone number
• Organisational information such as your title and where you work
• Information about your participation, including whether you are absent
• Pictures and video footage obtained during the event
• Food and beverage preferences if you provide us with such information
• Sign-up date and date and time of participation
• Which event you have signed up for

9.3 The purpose of the processing
Your personal data may be processed for the following purposes:

• To be able to administrate your sign-up for our event, including to be able to ensure a fortunate event.
• To provide you with communication about the event.
• Pictures and videos are processed with a view to promote DSV and DSV’s events, seminars and webinars. Due to this, photos and video may be shared on DSV’s’s social media and website.
• To understand who will be participating in the event and get the possibility of tailoring the event accordingly.
• To improve our events.
• To accommodate any preferences and requirements you may have in relation to food and beverages.

9.4 Legal basis for processing
We process your personal data on the following legal basis:

• Legitimate interests: The processing of your personal data in relation to the administration and arrangement of the event, including any potential sharing of information on your participation with partners, is based on our legitimate interests in enabling the administration and arrangement as well as optimal arrangement of the event, webinar or seminar. The processing of picture and video material is based on our legitimate interests in promoting our business and our events, webinars and seminars (Article 6(1)(f) of the General Data Protection Regulation).

9.5 Retention period
We store your personal data collected in relation to the administration and arrangement of the event for up to 1 year after the event has been held.

9.6 Recipients
In cases where we arrange an event in cooperation with a third party, we may share information on your participation, including your name, title and where you work, with a view to give our partner insights on who will be participating and the possibility of tailoring the event accordingly. If an event is held in cooperation with a third party, this information will appear from the description of the event.
We may also share your personal data with the following categories of data processors who process your personal data on our behalf:
• Data processors who provide IT systems for administration of our events;
• Data processors who provide IT systems for effecting webinars, e.g. webinar platforms;
• Data processors who provide IT systems for communicating with you about the event.
Please also refer to the supplementary description in the chapter ‘Transmission to other controllers and entrustment to data processors’ below.

10. If you are visiting our facilities

10.1 Data controller
The data controller for the processing of your personal data in relation to your visits at our facilities is the DSV group entity you visit. This applies both when you visit our facilities as a guest and when you pick up goods at our storage facilities.

10.2 Types of personal data
When you visit our facilities, DSV collects, processes and stores your personal data. DSV may collect the following personal data about you in that context:
• Name, email address and phone number
• Your title and the name of the company you work with
• License plate number of the vehicle if you are an external hauler visiting the logistic center

10.3 The purpose of the processing
Your personal data may be processed for the following purposes:
• To give you access to our office facilities and other buildings, including to ensure the security of our premises as well as your security in case of an emergency such as fire
• To manage your visit with us
• To be able to investigate in case of suspicious events

10.4 Legal basis for processing
We processes your personal data on the following legal bases:

• Legitimate interests: The processing of your personal data in relation to the administration and arrangement of your visit is based on our legitimate interests in enabling the administration and arrangement of your visit, ensuring a sufficient level of security and being able to investigate suspicious events (Article 6(1)(f) of the General Data Protection Regulation).

10.5 Retention period
We store your personal data collected in relation to the administration and arrangement of the visit for up to 1 year after the visit.

10.6 Recipients
We may share your personal data with the following categories of data processors who process your personal data on our behalf:
• Data processors who provide IT systems for administration of our guest registrations;
• Data processors who provide IT systems for administration of license plate registrations.
Please also refer to the supplementary description in the chapter ‘Transmission to other controllers and entrustment to data processors’ below.

10.7 Video surveillance
In some facilities we use video surveillance for security reasons, to protect our property, investigate suspicious events and be able to take legal action where necessary. Please refer to our local privacy notices for information about local use of video surveillance.

11. Use of video surveillance on our Danish premises

11.1 Data controller
The data controller for the processing of your personal data in relation to your visits to our Danish facilities is DSV A/S.

11.2 Types of personal data
We have video surveillance on several of our offices and warehouses etc., and footage of you may therefore be recorded when you are present at these locations. Cameras are placed in our buildings at the main entrances and outdoor at the main gates, terminal gates and security gates. Where extra security is required, additional cameras may be installed. DSV may collect, process, and store the following types of personal data in relation to our video surveillance:
• Footage in which you are identifiable
• Any behavior which may constitute a criminal offence, provided that this is visible on the footage.

11.3 The purpose of the processing
Your personal data may be processed for the following purposes:
• To ensure and manage security for our employees, customers and others with a legitimate reason for being at our locations
• To protect our property from being damaged, stolen, or compromised in any way
• To protect DSV’s customers’ goods from being damaged, stolen, or compromised in any way
• To be able to take legal action in the event of malicious actions brought against our employees, customers, property etc.
• To be able to investigate accidents and suspicious events.

11.4 Legal basis for processing
We processes your personal data on the following basis:
• Legitimate interests: The processing of your personal data in relation to video surveillance is based on our legitimate interests to prevent, detect and investigate crimes and accidents, and, if needed, using such footage to establish, exercise or defend legal claims (Article 6(1)(f) of the General Data Protection Regulation).

11.5 Retention period
Your personal data will be stored for a period of 30 days from the time of recording.

In the event that the footage shows behavior which may constitute a criminal offence, the footage will be store for a longer period with the purpose of investigating the matter and take possible legal action.

11.6 Recipients
In case of criminal activities, we may share footage from our video surveillance with the police and other law enforcement authorities.

We may also share your personal data with the following categories of data processors who process your personal data on our behalf:
• Data processors who provide hosting of footage from video surveillance;
• Data processors who support our video surveillance solutions;
• External guards who have access to view footage from video surveillance.
Please also refer to the supplementary description in the chapter ‘Transmission to other controllers and entrustment to data processors’ below.

12. Use of AI

The DSV Group may use AI as a part of our work in relation to the activities described in this privacy notice. The categories of personal data processed in that regard, the purposes and legal bases are identical with the descriptions above for each processing activity.

In connection with our use of AI, we may share your personal data with external providers of the AI systems in questions, as well as external consultants who help us with the implementation. Such providers process your personal data solely on our instructions. Please also refer to the supplementary description in the chapter ‘Transmission to other controllers and entrustment to data processors’ below.

13. Transmission to other controllers and entrustment to data processors

13.1 DSV Group entities
DSV is a global group of companies within the field of global transportation and logistics. In order to conduct our daily business, the DSV Group entities on a regular basis exchange data, including personal data. All such transfers take place in accordance with applicable local legislation and EU’s General Data Protection Regulation. In addition, DSV has implemented Binding Corporate Rules (“BCR”), which have been approved by applicable public authorities.

The BCR relates to the processing and transfer within the DSV Group of personal data originating from the EU/EEA. This means that all DSV Group entities will comply with the same internal set of rules for all such transfers.

DSV’s Binding Corporate Rules can be found here.

13.2 Other controllers
In the context of DSV’s corporate development, the corporate structure may change, e.g., by the total or partial sale of the company. In the case of a partial transfer of assets containing personal data, the processing basis for the related transfer of personal data is, as a rule, Article 6(1)(f) of the General Data Protection Regulation, since DSV has an interest in transferring parts of its assets and making commercial/structural changes.

In addition, in certain circumstances and under the law, it may be necessary to disclose your personal data to e.g. the police, lawyers, accountants, courts, public authorities, and potential buyers, as well as our business partners and suppliers including haulers which we use in providing our Services.

13.3 Third country transfers
Your personal data may be transferred to data processors or data controllers established in countries outside the EU/EEA. As described above, transfers to other DSV group entities are subject to DSV’s Binding Corporate Rules. Transfers to third countries which are not covered by DSV’s Binding Corporate Rules will be based on an EU Commission adequacy decision or the EU Commission's standard contractual clauses which you have a right to receive a copy of by contacting us. You may find our contact information above.

14. Your rights

When DSV processes your personal data, you have the following rights:
• You have the right to access the personal data we process about you
• You have the right to object to our collection and further processing of your personal data
• You have the right to rectification and deletion of your personal data, however there are certain statutory exceptions.
• You have the right to ask us to restrict the processing of your personal data
• In certain circumstances, you may also request to receive a copy of your personal data and to transmit the personal data you have provided to us to another data controller (data portability)
• You can withdraw any consents you may have given at any time. We will then delete your personal data unless we may continue the processing on another basis. You can cancel our newsletter by clicking on the link at the bottom of the newsletter

15. Questions and complaints

If you have any questions regarding the content of this policy or your rights as an individual, you can choose to make use of our DSAR webform to exercise your rights or with any concerns in this regard and we will get back to you in a timely manner.

You may also lodge a complain to the data protection supervisory authority in your country of residence or place of work, or in the country where the DSV entity which is the data controller for the processing you want to complain about is based.

A list of European data protection supervisory authorities is available here.

If you have noticed a breach of personal data where DSV is involved, please report it using our Data Breach webform. We will then make sure to act on it accordingly as quickly as possible.