Skip to main content

Data Protection Mails Notice

An Post, who manages the postal delivery service, is neither a data controller nor a data processor for the clients that use its standard postal services (including the Universal Service) because: 
  1. it is a mere conduit between the sender of the mail and its recipient; 
  2. it does not exercise any control over the purpose for which the personal data in the items of mail entrusted to it is used; and 
  3. it has no control over the content of the personal data entrusted to it.
The An Post USO Terms and Conditions govern the transmission and delivery of all standard mail.

An Post may act as a data controller or a data processor where An Post has been provided with ‘pre-advice’ data or where An Post holds tracking data or has made delivery arrangements for the delivery of postal items.  Any such data is used in accordance with our Privacy Policy and is held for the minimum period required in order to effect the postal service.

International Mail  


An Post acts as a controller for all electronic data received by it where a customer posts or receives an international mail item.  

This electronic data is either taken from the sender at the Post Office, electronically when a customer inputs the data when using Click and Post or by bulk upload where a commercial customer has made such arrangements with An Post.  The electronic data consists of the name and address of the sender, the name and address, of the addressee and the contents of the item.  This is an international postal and customs requirement to enable posting any item, which contains goods, i.e., anything other than a letter, to another designated national operator.  
Sender or receiver phone number and email address may also be required and these are used to ensure your items are delivered to you or to assist in the return of an undeliverable item to the sender. 

An Post’s legal basis for acting as a controller is Article 6(1)(e) – “processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller” – the official authority vested in the controller is from the State’s obligations under various postal treaties and protocols to which the State is a signatory. An Post is Ireland’s designated national postal operator. 

An Post’s legal basis for acting as a controller may also be for a legitimate purpose of An Post. 

An Post will use this electronic data for postal service, for customs and tax and security purposes for sending items overseas or receiving items from overseas.  An Post will send this electronic data to other designated postal operators, customs authorities and to the airline whose aircraft will be carrying the mail.  

An Post will also receive electronic data for international mail containing goods received from other designated national operators.  This data is supplied to Revenue (the Irish Customs Authority) which is a legal requirement for postal items containing goods and is also used for delivery purposes by An Post. 

Please see An Post’s Privacy Statement  for further information on how An Post treats personal data. 

Any concerns regarding our use of the Personal Data and / or the exercise of your individual rights should be addressed to the Data Privacy Office, An Post, GPO, O’Connell Street Lower, Dublin 1, D01 F5P2 or privacyoffice@anpost.ie.

Last updated on 15 February 2021.
You've exceeded the maximum login attempts
Your account has been locked for 30 minutes to prevent fradulent activity
Your session has timed out
Would you like to log in again to continue?
Your An Post account is ready

But don't forget to verify your email address within the next 24 hours:

We would like to let you know about products, services and special offers from the An Post Group of Companies that we think may be of value to you. If you would like to receive these communications please tick the boxes below:

We have updated our terms of service