Data Protection Mails Notice

An Post, who manages the postal delivery service, is neither a data controller nor a data processor for the clients that use its standard postal services (including the Universal Service) because: 

1. It is a mere conduit between the sender of the mail and its recipient; 
2. It does not exercise any control over the purpose for which the personal data in the items of mail entrusted to it is used; and 
3. It has no control over the content of the personal data entrusted to it. 

The An Post USO Terms and Conditions govern the transmission and delivery of all standard mail.

An Post may act as a data controller or a data processor where An Post has been provided with ‘pre-advice’ data or where An Post holds tracking data or has made delivery arrangements for the delivery of postal items.  Any such data is used in accordance with our Privacy Policy and is held for the minimum period required in order to effect the postal service.

In order to provide an efficient and quality mails service An Post uses automated mails processing equipment and systems to assist with the sortation of mail. As part of this process the address on mail pieces is imaged to assist the accuracy of mail sortation and is held for the minimum period required in order to effect the service.

International Mail  

An Post acts as a controller for all electronic data received by it where a customer posts or receives an international mail item.  

This electronic data is either taken from the sender at the Post Office, electronically when a customer inputs the data when using Click and Post or by bulk upload where a commercial customer has made such arrangements with An Post.  The electronic data consists of the name and address of the sender, the name and address, of the addressee and the contents of the item.  This is an international postal and customs requirement to enable posting any item, which contains goods, i.e., anything other than a letter, to another designated national operator.  
Sender or receiver phone number and email address may also be required and these are used to ensure your items are delivered to you or to assist in the return of an undeliverable item to the sender. 

An Post’s legal basis for acting as a controller is Article 6(1)(e) – “processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller” – the official authority vested in the controller is from the State’s obligations under various postal treaties and protocols to which the State is a signatory. An Post is Ireland’s designated national postal operator. 

An Post’s legal basis for acting as a controller is also  for  legitimate purposes of An Post, including statistical analysis.

An Post will use this electronic data for postal service, for customs and tax and security purposes for sending items overseas or receiving items from overseas.  An Post will send this electronic data to other designated postal operators, customs authorities and to the airline whose aircraft will be carrying the mail.  

An Post will also receive electronic data for international mail containing goods received from other designated national operators.  This data is supplied to Revenue (the Irish Customs Authority) which is a legal requirement for postal items containing goods and is also used for delivery purposes by An Post. 

Please see An Post’s Privacy Statement  for further information on how An Post treats personal data. 

Any concerns regarding our use of the Personal Data and / or the exercise of your individual rights should be addressed to the Data Privacy Office, An Post EXO Building, North Wall Quay, Dublin 1, D01W5Y2 or privacyoffice@anpost.ie.

Last Updated; December 2023