Data Protection Mails Notice
An Post, who manages the postal delivery service, is neither a data controller nor a data processor for the clients that use its standard postal services (including the Universal Service) because:
- It is a mere conduit between the sender of the mail and its recipient;
- It does not exercise any control over the purpose for which the personal data in the items of mail entrusted to it is used; and
- It has no control over the content of the personal data entrusted to it.
The An Post USO Terms and Conditions
govern the transmission and delivery of all standard mail.
In order to provide an efficient and quality mails service An Post uses automated mails processing equipment and systems to assist with the sortation of mail. As part of this process the address on mail pieces is imaged to assist the accuracy of mail sortation and is held for the minimum period required in order to effect the service.
An Post acts as a controller for all electronic data received by it where a customer posts or receives an international mail item.
This electronic data is either taken from the sender at the Post Office, electronically when a customer inputs the data when using Click and Post or by bulk upload where a commercial customer has made such arrangements with An Post. The electronic data consists of the name and address of the sender, the name and address, of the addressee and the contents of the item. This is an international postal and customs requirement to enable posting any item, which contains goods, i.e., anything other than a letter, to another designated national operator.
Sender or receiver phone number and email address may also be required and these are used to ensure your items are delivered to you or to assist in the return of an undeliverable item to the sender.
An Post’s legal basis for acting as a controller is Article 6(1)(e) – “processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller” – the official authority vested in the controller is from the State’s obligations under various postal treaties and protocols to which the State is a signatory. An Post is Ireland’s designated national postal operator.
An Post’s legal basis for acting as a controller may also be for a legitimate purpose of An Post.
An Post will use this electronic data for postal service, for customs and tax and security purposes for sending items overseas or receiving items from overseas. An Post will send this electronic data to other designated postal operators, customs authorities and to the airline whose aircraft will be carrying the mail.
An Post will also receive electronic data for international mail containing goods received from other designated national operators. This data is supplied to Revenue (the Irish Customs Authority) which is a legal requirement for postal items containing goods and is also used for delivery purposes by An Post.
Please see An Post’s Privacy Statement
for further information on how An Post treats personal data.
Any concerns regarding our use of the Personal Data and / or the exercise of your individual rights should be addressed to the Data Privacy Office, An Post, GPO, O’Connell Street Lower, Dublin 1, D01 F5P2 or firstname.lastname@example.org.
Last updated October 2022.