Privacy policy

Data protection information of
Hermes Fulfilment GmbH
Bannwarthstraße 5
22179 Hamburg


In the following data protection information, we inform you about the processing of personal data carried out by Hermes Fulfilment GmbH, Bannwarthstraße 5, Zentrale & Retourenbetrieb, 22179 Hamburg (“Hermes Fulfilment” and/or “we” and/or “Controller”) in accordance with the DSGVO and the German Federal Data Protection Act (BDSG 2018).

Please read our privacy policy carefully. If you have any questions or comments about our privacy policy, please contact us at Privacy-HF(at)

1. Contact details of the controller

This data protection information applies to data processing by
Hermes Fulfilment GmbH
Bannwarthstraße 5
Headquarters & Returns Operations
22179 Hamburg

Contact details (general):
Phone: +49 40 537 55 – 0
Fax: +49 40 537 54 – 870
E-Mail: Datenschutz-HF(at)

Represented by the managing directors:

Eva Witte
Kevin Kufs

Phone: +49 40 537 55 – 0
Fax: +49 40 537 54 – 870

für the website

2. Contact details of the data protection officer

You can reach the data protection officer of the responsible party at

Hermes Fulfilment GmbH
Bannwarthstrasse 5
22179 Hamburg

E-Mail: Datenschutz-HF(at)

3. Online presence and website optimization (by means of cookies) including consents.

On our website we raise data about the behavior of users on the aforementioned website (tracking data). This includes, among other things, which individual sub-pages (article detail pages) were called up. For this purpose, we may, among other things, set cookies in the browser used by the respective user. The collection of tracking data is only permitted if you have given your prior consent. You can give such consent by clicking the “Accept” button in the “Cookie Banner” displayed on this website. However, the granting of consent is not necessary for the processing of such tracking data, which is required for the offer of the website. This includes, for example, the setting of cookies for the purpose of displaying the shopping cart. The information about your usage behavior can be used by us, among other things, to show you offers on our website that are interesting for you or to advertise for you on other websites using personalized content (e.g. retargeting). Insofar as personal data about your usage behavior on can also be used by other providers, e.g. for the purpose of “enriching own information”, such use will also only take place in these cases if you have consented to it beforehand. In these cases, the further processing of the data collected on this website regularly takes place under the sole responsibility of the providers. The providers may transfer the data to the USA as part of this further processing. With regard to the USA, the European Court of Justice has determined that this is a country with an insufficient level of data protection. In this context, there is a particular risk that your data will be processed by American institutions/authorities for control and monitoring purposes without sufficient legal remedy. Tracking data that is collected and stored by us is only processed pseudonymously. This prevents an assignment of the data to your person. If you would like to delete individual cookies set in your browser or find out which service providers have set cookies in your browser, you can do this via a “preference manager”. Such a manager is available, for example, at In addition, you have the option of setting your browser so that it prevents cookies from being set or only allows certain types of cookies to be set. Details on the possibility of changing the settings of common browser types (including Google Chrome, Firefox) can be found in section 4.2. of this privacy policy.

3.1 Online presence and website optimization (by means of cookies) including consents.

On this website we use cookies. Cookies are small text files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar). In the cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that we gain immediate knowledge of your identity. Some of the cookies we use are deleted at the end of the browser session (so-called session cookies). Other cookies remain on your computer and allow us to recognize your computer on your next visit (so-called permanent or session cookies). These cookies in particular serve, among other things, to make our offer more attractive to you. Thanks to these files, it is possible, for example, that you will receive information on this website that is specifically tailored to your interests.

According to legal requirements, the storage of information on end devices (desktops, cell phones, tablets, etc.) – e.g. by setting cookies – and the retrieval of information from end devices (tracking) is generally only permitted if you have given your prior consent. However, consent does not have to be granted if such storage/retrieval is necessary for the website offering.

With regard to data processing that is necessary for the operation of the website, you do not have the right to object.

You can use the website without data being retrieved from or stored on your terminal device for purposes that are not necessary for the offer of this website. For this reason, only “basic tracking” is activated when you use this website – unless you give further consent.

3.2 Intervention options / browser settings

Of course, you can set up your browser so that it does not place our cookies on your terminal device. The help function in the menu bar of most web browsers explains how you can prevent your browser from accepting new cookies, how you can have your browser notify you when you receive a new cookie, or how you can delete all cookies you have already received and block all further cookies.

To do this, please proceed as follows:
Using Internet Explorer:

  1. select “Internet Options” from the “Tools” menu.
    Click on the “Privacy” tab.
  2. now you can make the security settings for the internet zone. Here you can set whether and which cookies should be accepted or rejected.
  3. confirm your settings with “OK”.

Using Firefox:

  1. In the “Tools” menu, select the “Settings” item.
  2. Click on “Privacy”.
  3. In the drop-down menu, select the entry “Create according to user-defined settings”.
  4. now you can set if cookies should be accepted, how long you want to keep these cookies and add exceptions, which websites you always or never want to allow to use cookies.
  5. confirm your settings with “OK”.

Using Google Chrome:

  1. Click on the Chrome menu in the browser toolbar.
  2. Now select “Settings”.
  3. Click on “Show advanced settings”.
  4. under “Privacy”, click on “Content settings”.
  5. under “Cookies” you can set the following settings for cookies: – Delete cookies – Block cookies by default – Delete cookies and website data by default after closing the browser – Allow exceptions for cookies from specific websites or domains.

If you want to delete individual cookies set in your browser or want to know which service providers / suppliers have set cookies in your browser, you can also do this / find out via a “preference manager”. Such a manager is available, for example, at

3.3 Consent management of the provider

Our website uses the Borlabs Cookie Consent technology to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is Borlabs GmbH, Hamburger Straße 11, 22083 Hamburg (hereinafter Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, which stores the consents you have given or the revocation of these consents. This data is not shared with the Borlabs cookie provider.

The collected data will be stored until you request us to delete it or delete the Borlabs cookie yourself, or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found at

The use of Borlabs cookie consent technology takes place in order to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO.

Here you can view your cookie settings for visiting this website and adjust them if necessary:

3.4 Consent to the use of individual online services / the collection of tracking data

As already explained in section 4.1. of this privacy policy, we collect and process tracking data partly on the basis of consent. You give this consent by clicking on the “Accept” button on the website in a banner that links to this consent text. By clicking on the “Accept” button, you give your consent for us to store data on your terminal device (e.g. by setting cookies) or to retrieve data from your terminal device. Furthermore, by clicking on the “Accept” button, you give your consent to the use of certain advertising functionalities from third-party providers, the use of which is in itself subject to consent. In addition, you have the option to click “Settings” in the banner and manage their consent preferences there. You can subsequently change your consents and preferences at any time in our consent management. You can access this on any page by clicking on the fingerprint in the lower left window. A distinction is made there between “marketing cookies”, “functional cookies” and “essential cookies”. The data processing that takes place in connection with these advertising functionalities is described below (section 4.4.1. of this privacy policy).
All data processing that is covered by your consent given by clicking on the “OK” button serves the same purpose, namely that of “advertising”.

Revocation of all consents
All consents that you have given by clicking on the button “Save settings” reproduced in the banner, you can revoke by clicking on the fingerprint in the lower left window.

3.4.1 Functional cookies Google Analytics as “basic version”

For the purpose of demand-oriented design and continuous optimization of this website, we use the basic version of Google Analytics on the legal basis in Article 6(1)(f) DSGVO (legitimate interest). The basic version of Google Analytics is a web analytics service provided by Google Inc (“Google”). Google Analytics uses so-called “cookies” (text files), which are stored on your computer and which enable an analysis of your use of the website. On our behalf, Google will use this information for the purpose of evaluating your use of the website and compiling reports on website activity. Google processes the data collected via the use of the “basic version” of Google Analytics exclusively on our instructions and for our purposes.

You can object to data processing by Google Analytics at any time by clicking on the fingerprint in the lower left window. The objection has the consequence that Google Analytics no longer collects data on the terminal device used by you on when you file the objection.

4. categories of recipients

4.1 Processor

We use processors in the course of processing your data. A processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the data controller. Processors do not use the data for their own purposes, but carry out the data processing exclusively for the controller.

4.2 Processor

In addition, we use other third-party partners who are necessary for the provision of services and the achievement of various purposes. We transfer personal data to these third party partners if this is necessary within the scope of the service provision.
The legal basis for this data transfer is Article 6(1)(b), (f) DSGVO.

5. Data processing for application purposes

If you are interested in Hermes as a potential employer, you can use our website to find out about vacancies and application opportunities with us. Here we also offer you the opportunity to apply to us directly online via our application form. All personal data provided to us as part of your application will be used exclusively to carry out the application process. The legal basis for this is Article 6(1)(a), (f) DSGVO in conjunction with Section 26 BDSG. Further information can be found in our special data protection notice for applicants here .

7. Warning against forged e-mails (spoofing), spam and phishing

Unfortunately, we are also being misused as the supposed sender in this scam. Specifically, this means that consumers receive fake e-mails in our name. These e-mails are even often based on the Hermes Fulfilment brand layout and may be difficult to distinguish from genuine e-mails from us.

The scammers want to exploit the position of trust between us and our customers and thus steal sensitive data (e.g. login, customer data, payment information) or install malicious software (such as viruses or Trojans) on your computer or smartphone.
The creation and sending of these emails is not done by us, even if our name is used as sender. Therefore, we can unfortunately not influence the sending of these illegal emails.

Here are some of the ways you can recognize emails from us:

  • We do not ask you for personal information via email, nor do we ask you to confirm personal information via a link in an email.
  • You will receive order confirmations and invoices from us only for orders that you have actually placed.
  • We only send e-mails with file attachments if you have explicitly requested them from us (e.g. operating instructions).
  • Mails from us should not contain spelling and grammar mistakes, because they are always proofread before sending.

How to deal with spam, phishing and spoofing emails:

  • We recommend that you delete suspicious emails immediately.
  • Never open links or attachments in suspicious e-mails and do not disclose any personal data.
    Our tip and service for you: If you are ever unsure, simply use our free callback service or send us an e-mail to:

8. Contact

You have the possibility to contact us in several ways. By e-mail, by phone, by chat, by application form or by mail. When you contact us, we use the personal data that you voluntarily provide in this context solely for the purpose of contacting you and processing your request.

The legal basis for this data processing is Article 6(1)(a), Article 6(1)(b), Article 6(1)(c) DSGVO and Article 6(1)(f) DSGVO.

9. Recipients outside the EU

With the exception of processing operations for which we inform you about the possibility of transferring data to recipients located outside the EU in this privacy policy, we do not transfer your data to recipients located outside the European Union or the European Economic Area. The data transfers take place on the basis of so-called standard contractual clauses of the EU Commission.

10. duration of the data storage

The duration of storage of the data collected about you depends on the purpose for which we process the data. The storage takes place as long as this is necessary for the achievement of the purpose pursued. Insofar as we are required to store certain categories of data for a certain period of time due to legal obligations (e.g. tax obligations), the continued storage of the data after its storage is no longer necessary for the achievement of the respective purpose will be exclusively for the purpose of fulfilling the legal obligation. In this case, the data will be blocked for access.

  • Data in the Group’s internal credit agency: Basically 3 years. Information on outstanding remuneration claims is deleted when these have been fulfilled. Insofar as these are not fulfilled, the continuation of storage is reviewed after 4 years.
  • Use of data for marketing purposes (without tracking): 3 years.
  • Consents: Permanent storage, as long as the consents are used continuously (e.g. permanent sending of email newsletters).
  • Information about the use of data for third-party advertising purposes for the purpose of providing information: 2 years.
  • Tracking data: 2 years.
  • Data for the purpose of implementing (advertising) objections: Indefinite storage.

11. Your rights

In connection with the processing of personal data by us, you are entitled to data subject rights. For example, you have the right to request information about the data we have stored about you. You may also revoke any consent given to us and object to individual data processing. You also have the right to have inaccurate data corrected and to request that we transmit your specific data in a standard electronic format. You also have the right to request that we delete the data we have stored about you. Please note in this regard that we may be obliged for legal reasons to continue to store the data despite the assertion of your right to deletion. In addition, in individual constellations, we have an interest in continuing to store your data that outweighs your interest in its deletion (e.g., if we still have outstanding claims against you).

11.1 Your rights in detail

In addition to the right to revoke your consent given to us, you are entitled to the following further rights if the respective legal requirements are met:

  • the right to information about your personal data stored by us (Article 15 DSGVO); in particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data if it has not been collected directly from you;
  • the right to have inaccurate data corrected or to have correct data completed (Article 16 DSGVO);
  • the right to have your data stored by us deleted (Article 17 DSGVO), insofar as no legal or contractual retention periods or other legal obligations or rights to further storage are to be observed by us (e.g. if we still have outstanding claims against you);
  • the right to restrict the processing of your data (Article 18 DSGVO), insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its deletion; the controller no longer requires the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Article 21 DSGVO;
  • the right to data portability (Article 20 DSGVO), i.e. the right to have selected data stored by us about you transferred in a common, machine-readable format, or to request the transfer to another controller;
  • the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

You can assert the aforementioned rights to which you are entitled against us at

Click here for the data protection information for applicants

Status: 2023/01

Scroll to Top