Privacy Notice for the PostNord App

On this page

1. When you use your PostNord accaount

You can use the app without logging in, or by creating an account and verifying your email address. When logged in, you can also verify your address using BankID.

If you are logged in with your PostNord account, we process the information needed to administer your account and give you access to the services and features linked to it.

We process:

• name
• email address
• address
• phone number
• login and account details
• information about services and shipments linked to your account.

When you log in to the app, information about the parcels and deliveries linked to your PostNord account is retrieved. This means you can see current shipments and past delivery history linked to the account.

Why do we process personal data?

We process your data to provide the PostNord account and the features you use.

Legal basis

Performance of a contract.

How long do we retain personal data?

We retain the data for as long as the account is active. If you close the account, or if you have not used it for a period of 2 years, we will delete it.

2. When you track and manage parcels and deliveries

When you track or manage a shipment in the app, we process the data needed to display and administer the delivery.

We process:

• name and contact details
• parcel ID or tracking number
• information about the sender and recipient
• delivery address
• selected delivery location
• delivery preferences
• status and history of the shipment.

We also process information about the choices you make in connection with the delivery, for example if you change the delivery time.

Why do we process personal data?

We process your data to carry out the delivery and administer your account, as well as to follow up and ensure a correct and secure delivery. Personal data may also be retained or disclosed to the extent we are required by law.

Legal basis

Performance of a contract and our legitimate interest in ensuring a correct and secure delivery. Where we are required by law to retain or disclose personal data, the processing is based on a legal obligation.

How long do we retain personal data?

The data is retained to administer deliveries and handle any claims. Parcel and delivery history is retained for 5 years.

When you make a delivery choice, for example changing the delivery time or choosing to collect the shipment from an agent, data about your choice is retained for 30 days.

3. When you collect a parcel from a parcel locker

When you use the app to collect a shipment from a parcel locker, we process the data needed to ensure that the correct shipment is released to the correct recipient and to enable the parcel locker to be opened.

We process:

• information about your user account
• information about the shipment
• information about the relevant parcel locker
• time of opening or collection
• technical information needed for communication between the app and the parcel locker.
• Bluetooth and location access are required to collect parcels from parcel lockers.
• BankID is only used for certain shipments.
• In other cases, access is granted if the shipment data matches your logged-in PostNord account.

Why do we process personal data?

We process your data to provide the collection service and ensure a secure release of the shipment.

Legal basis

Performance of a contract and our legitimate interest in ensuring that the correct shipment is released to the correct recipient and in preventing fraud or unauthorised access at collection.

How long do we retain personal data?

Events linked to a parcel ID are retained for 1 year. Personal data about shipments collected using BankID is retained for 13 months.

4. When you purchase products and services in the app

The service covers digital stamps, letter mail, registered mail, parcels, international parcels, trackable letters, home deliveries, and deliveries to an agent. To provide the service, we process the data required to carry out and administer the purchase.

We process:

• contact details
• information about the product or service
• payment and transaction information
• order and receipt details
• information about the sender and recipient, where necessary for the service  

Vid betalning behandlas betalningsuppgifter såsom kortuppgifter, telefonnummer, namn och kontouppgifter av våra betaltjänstleverantörer för att genomföra och administrera betalningen.

Why do we process personal data?

We process your data to carry out your purchase and provide the product or service you have ordered.

Legal basis

Performance of a contract.

How long do we retain personal data?

We need to retain certain data about purchases and payments to comply with legal obligations, for example under accounting legislation. Such data is retained for at least 7 years, calculated from the end of the calendar year in which the financial year ended. 

Other data is normally retained for 2 years, while customer data such as email address and phone number is retained for 7 months.

5. When you contact us

If you contact us via chat or any other contact function in the app, we process the personal data needed to help you with your matter.

We process:

• name and contact details
• information about a shipment
• details of your matter
• the information that you provide to us

Why do we process personal data?

We process your data to be able to answer questions, provide customer service and handle complaints or claims.

Legal basis

Performance of a contract or our legitimate interest in being able to provide customer service and handle your matter.

How long do we retain personal data?

Customer matters are normally closed after the contact has been completed, but may, if needed, be handled further internally or become complaint cases. Chat conversations are retained for 3–5 years depending on the type of matter.

6. Push notifications and messages

We may send push notifications to inform you about, for example:

• the status of a shipment
• delivery
• purchases or orders
• changes affecting a service
• other service messages
• Why do we process personal data?

We process the data needed to send the notification, for example information about your shipment and the technical information required for the push notification.

Legal basis

Performance of a contract, or our legitimate interest in communicating with you about the service.

If push notifications are used for marketing purposes, they will only be sent where we have your consent or another applicable legal basis.

7. Information on how the app is used

When you use the PostNord app, certain technical information may be processed to ensure the app functions safely and correctly.

We process:

• IP address
• information about the device and operating system
• app version and crash reports
• Why do we process personal data?

We process such information when it is necessary to provide and protect the app, prevent misuse and address technical errors.

We also use technical tools to understand how the app is used and to improve, test and develop the app and our services.

Legal basis

We process personal data necessary to operate and protect the app based on performance of a contract and legitimate interest. Analytics is based on your consent, which you can withdraw at any time.

How long do we retain personal data?

Information about the cookies and similar technologies used can be found in our cookie policy. To detect and address technical errors, we use Crashlytics, where the data is stored for 90 days. For statistics and analysis, we use Google Analytics, where the data is stored for 14 months.

8. Digital marketing and measurement

With your consent, we process personal data about how you interact with the PostNord app for digital marketing and to measure and evaluate our campaigns. For digital marketing, we use Branch and its SDK, which enables us to run campaigns on social platforms such as Meta, TikTok and Google.

Branch helps us, for example, to understand whether an advertisement, campaign or link has led to:

• the PostNord app being installed
• the app being opened
• a user arriving at the app from a particular campaign
• a particular activity being carried out in the app

Events sent to Branch and subsequently forwarded to social platforms:

• opening of the app, clicks and views
• installation and reinstallation of the app
• information about, for example, service points, parcel lockers and mailboxes
• products added to the cart and completed purchases
• choice of printing option

Storage in and access to your device

To use the Branch SDK for marketing measurement, information such as technical identifiers may be stored on or accessed from your device. This only takes place with your consent where required under the Swedish Electronic Communications Act (LEK).

Where the information constitutes personal data, we process it in accordance with the GDPR and for the purposes described below.

The subsequent processing of personal data

In addition to the consent required under LEK, we subsequently process the collected data as personal data under the General Data Protection Regulation.

In connection with this, we may process:

• IP address
• information about your device
• operating system
• app version
• unique identifiers (device ID, user ID, Google Ads ID,)
• information about which advertisement, campaign or link you have interacted with
• information about installation and opening of the app
• information about certain activities in the app that PostNord has chosen to measure.

Why do we process personal data?

We process your data to market our products and services and to measure, analyse and improve the effectiveness of our digital marketing.

Legal basis

Branch is used for this processing only if you have given your consent. You can change or withdraw your consent at any time in the app's privacy settings. .

How long do we retain personal data?

Branch: Identifiable personal data is retained for up to 7 days and pseudonymised data for up to 12 months. Aggregated statistics may be retained for up to 24 months.

Other analytics and marketing services: Retention periods vary depending on the service and purpose, normally between 2 and 14 months. Certain marketing or remarketing data may be retained for up to 540 days.

9. Permissions on your phone

Certain features in the PostNord app may need access to functions on your phone.

To be able to offer certain features in the app, we may request access to your location information, Bluetooth and camera. 
Location information and Bluetooth are used to collect shipments from parcel lockers and to find the nearest PostNord agent or service point. The camera is used to scan barcodes. 

If you consent to marketing tracking, iOS devices may also request permission for cross-app and cross-website tracking for marketing purposes.

You decide for yourself whether the app may access such functions through the settings on your phone. When you grant the app access to a function, we only process the information needed for the function you are using.

10. Who do we share your personal data with?

To be able to provide the PostNord app, we may share your personal data with other companies within the PostNord Group and with suppliers that help us provide the service, such as suppliers of:

• IT and operational services
• payment solutions
• customer service
• analytics and troubleshooting services
• security services
• digital marketing and marketing measurements

The suppliers that process personal data on our behalf may only process the personal data in accordance with our instructions and the requirements under our agreements.

Transfer to third countries

Personal data may be processed or transferred to countries outside the EU/EEA. 
If such a transfer takes place, we ensure that a valid transfer mechanism under the GDPR is in place, for example the EU–US Data Privacy Framework, the European Commission's standard contractual clauses (SCCs), or an adequacy decision. 
Supplementary safeguards are applied where necessary.

More information about recipients and any processing of personal data outside the EU/EEA is available in PostNord Sverige AB's general privacy notice. 

11. How long do we retain the personal data?

We do not retain personal data for longer than necessary for the purposes for which it was collected or as required by law. Specific retention periods are provided in the relevant sections above.

12. Your rights

You have the right to obtain information about how we process your personal data and may, depending on the situation, among other things have the right to:

• access your personal data
• have inaccurate personal data corrected
• request that personal data be deleted
• request that the processing be restricted
• object to processing based on legitimate interest
• obtain certain personal data in a transferable format
• withdraw a consent that you have given

You can exercise your rights through PostNord's privacy form (page in Swedish)

If you believe that we are processing your personal data in violation of data protection legislation, you also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

13. More information

This privacy notice supplements PostNord Sverige AB's general privacy notice. There you can find additional information about how we protect personal data, recipients, international transfers, your rights and how to contact us or our Data Protection Officer.