3. Does TNT use cookies?

Yes, TNT uses cookies and similar technologies on its Websites. Through these cookies, TNT automatically obtains Personal Data as listed above when you visit our Websites. To learn more about the cookies and similar technologies, please consult our cookie notice.

5. Who has access to your Personal Data? 

As a rule, TNT shares your Personal Data with third parties in the following circumstances:

• With its affiliates, operating groups, subsidiaries and divisions, or with third parties if such is necessary for the purposes as listed above. If appropriate, TNT will require third parties to conduct activities in a manner consistent with TNT policies and guidelines in relation to data protection. 
• With data processors, i.e. parties processing Personal Data on our behalf. In such cases, these third parties only use your Personal Data for the purposes described above and only in accordance with our instructions. TNT will only use processors which provide sufficient guarantees to implement appropriate technical and organizational measures and ensure the protection of the rights of data subjects.
• With its employees if and to the extent necessary for the performance of their tasks. In such a case, access will be granted only if and to the extent necessary for the purposes described above and only if the employee is bound by confidentiality. 
• If and when required to do so by law, court order, or other legal process, for example, with law enforcement agencies or other governmental agencies, to establish or exercise our legal rights or in connection with a corporate transaction, such as a divesture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.

7. What measures does TNT take to protect your Personal Data?

TNT has taken appropriate technical and organizational measures to protect your Personal Data against accidental or unlawful processing, including by ensuring that:

• Your Personal Data is protected against unauthorized access;
• The confidentiality of your Personal Data is assured;
• The integrity and availability of your Personal Data will be maintained;
• Personnel is trained in information security requirements; and
• Actual or suspected data breaches are reported in accordance with applicable law.

9. What rights can you exercise in relation to your Personal Data? 

Based on the law applicable to the use of your Personal Data, you may have rights that you can exercise in relation to your Personal Data. Note that in some cases we are not required to – fully – comply with your request, as such rights may be conditional or because we have to balance your rights against our rights and obligations to process your Personal Data and to protect the rights and freedoms of others. A number of the rights you have in relation to your Personal Data, as applicable in the European Economic Area, are explained below:

Right of access
You are entitled to a copy of the Personal Data we hold about you and to learn details about how we use it. Your Personal Data will usually be provided to you digitally. We may require you to prove your identity before providing the requested information. 

Right to rectification
We take reasonable steps to ensure that the information we hold about you is accurate and complete. However, if you believe this is not the case, you have the right to request that any incomplete or inaccurate Personal Data that we process about you is amended. 

Right to erasure
You have the right to ask us to erase your Personal Data, for example where the Personal Data we collected is no longer necessary for the original purpose, where Personal Data has become obsolete or where you withdraw your consent. However, this will need to be balanced against other factors. For example, we may not be able comply with your request due to certain legal or regulatory obligations. 

Right to restriction of processing
You are entitled to ask us to (temporarily) stop using your Personal Data, for example where you think that the Personal Data we hold about you may be inaccurate or where you think that we no longer need to use your Personal Data. 

Right to data portability
You may have the right to ask that we transfer Personal Data that you have provided to us to a third party of your choice. This right can only be exercised when you have provided the Personal Data to us, and when we are processing that data by automated means on the basis of your consent or in order to perform our obligations under a contract with you. 

Right to object
You have the right to object to processing which is based on our legitimate interests. In case of the processing of Personal Data for marketing purposes, you have the right to object at any time. When you ask us to stop using your Personal Data for marketing purposes, TNT will immediately cease to use your Personal Data. For other purposes based on our legitimate interests, we will no longer process the Personal Data on that basis when you file an objection based on your grounds relating to your particular situation, unless we have a compelling legitimate ground for the processing. Note, however, that we may not be able to provide certain services or benefits if we are unable to process the necessary Personal Data for that purpose.

Rights relating to automated decision-making
You have the right not to be subjected to automated decision-making, including profiling, which produces legal effect for you or has a similar significant effect. If you have been subject to an automated decision and do not agree with the outcome, you can contact us using the details below and ask us to review the decision.

Right to withdraw consent
We may ask for your consent to process your Personal Data in specific cases. When we do this, you have the right to withdraw your consent at any time. TNT will stop the further processing as soon as possible after the withdrawal of your consent. However, this does not affect the lawfulness of the processing before consent was withdrawn. 

11.  Will there be updates to this Privacy Notice?

TNT may update this Privacy Notice from time to time. If an amendment will have a serious impact, TNT will endeavor to actively inform you about such amendments. TNT will publish an up-to-date Privacy Notice on the Websites at all times indicating the latest amendments. 

1.  General provisions

Federal Express Korea LLC (Federal Express Korea Limited) (the “Company”) actively protect the personal information of customers (“Customers”) and comply with all relevant laws, including the Personal Information Protection Act etc. The Company's Privacy Policy contains the following information.

3.  Personal information collection items and the purpose of processing them

The items of personal information collected by the Company and the purpose of use are as follows:

(1) Verification of TNT service availability and related activities 

• Items to be collected - [Mandatory]: Name, email address, phone number, company name, estimated monthly shipment volume, required TNT service type, and any additional information you provide.
• Purpose of collection and use: Verification of TNT service availability and related activities (issuance of User ID and customer number, registration, etc.).

(2) Provision of Service 

A. Customer registration

• Items to be collected - Individual Customers 
  • [Mandatory]: contact person name (Korean, English), email, phone number (home/company, mobile phone), address (city, province, country, zip code)(“address”)(Korean, English), credit card information (card company name, card type, card number, expiration date), FedEx.com, TNT.com User ID (“User ID”), Customer account number
  • [Optional]: Company fax number
     
• Items to be collected – Corporate Customers 
  • [Mandatory]: name of the person in charge (Korean, English), company email, company name (Korean, English), business registration number, phone number (company, mobile phone), CEO name, company address (Korean, English), postal code, credit card information (card company name, card type, card number, expiration date);(for those business customers who pay for the service with credit card), User ID, Customer account number 
  • [Optional]: Company fax number
     
• Purpose of collection and use: user identification, age verification, Customer account number and User ID creation, service provision, notice related to shipment delivery and transportation tracking information, proof of delivery, etc.

B. Express shipment delivery/reservation

• Items to be collected - Individual Customers 
  • [Mandatory]: Customer account number, Air Waybill number, name (sender, recipient), phone number (home/company, mobile phone) address, email, destination country  
• Items to be collected - Corporate Customers 
  • [Mandatory]: Customer number, Air Waybill number, name (sender, recipient), phone number (company, mobile phone) email, address, destination country
• Purpose of collection and use: user identification, cargo delivery, provision of additional services, payment and settlement of charges, billing, debt collection, notice related to shipment delivery /transportation tracking information, proof of delivery 

 

C. Shipping and transportation information

• Items to be collected - Individual Customers
  • [Mandatory]: Customer account number, Air Waybill number, name (consultation client), name (sender, recipient), bill number, phone number (home/company, mobile phone), email, address
• Items to be collected - Corporate Customers
  • [Mandatory]: Customer account number, company name, Air Waybill number, name (consultation client), name (sender, recipient), bill number, phone number (company, mobile phone), email, address
• Purpose of collection and use: user identification, express shipment (import/export) reservation and notice related to delivery, transportation and delivery of express shipment, quotes, costs (fare, customs duty, tax, customs clearance fee), delivery of settlement notices

D. Additional transportation (quick) service (when requested by the user)

• Items to be collected [Mandatory]: Air Waybill number, name (recipient), phone number (home/company, mobile phone), address 
• Purpose of collection and use: user identification, provision of shipment transportation service (by quick service), delivery of notices.

E. Customs clearance (import customs clearance)

• Items to be collected - Individual Customers
  • [Mandatory]: Personal customs clearance code or unique identification information (passport number or foreigner registration number) or date of birth (list clearance), name (recipient), address, mobile phone number, email, bank account information for a tax refund in case of cancellation (account holder, bank, account number) 
• Items to be collected - Corporate Customers
  • [Mandatory]: busine customs clearance code, business registration number, name (recipient), address, mobile phone number, email, bank account information for a tax refund in case of cancellation (account holder, bank, account number)
• Purpose of collection and use: user identification, import shipment customs clearance, shipment delivery, customs payment, tax refund processing in case of refund or cancellation, delivery of notices.

F. Customs clearance (export customs clearance)

• Items to be collected [Mandatory]: name (sender, recipient), phone number (home/company, mobile phone), address, email, recipient passport number or tax number (if necessary for local customs import clearance procedures)
• Purpose of collection and use: customer identification, export shipment customs clearance, cargo delivery, cargo accident handling and compensation, delivery of notices

G. Transportation charge, additional service charge 

• Items to be collected [Mandatory]: name (sender), Customer account number, Air Waybill number, address, email, phone number(home/company, mobile phone), account information for payment/cancellation/refund (credit card information, bank account information)
• Purpose of collection and use: customer identification, information and notification for fare and fee payment/cancellation/refund, issuance of bills, cash receipts, and tax invoices, credit information inquiry (inquiry of Customer default information to credit inquiry companies or credit information collection agencies in relation to maintaining the establishment of commercial transactions according to service provision)

H. Cash receipts

• Items to be collected [Mandatory]: Customer account number, Air Waybill number, name or company name, email, mobile phone number, business registration number
• Items to be collected [Optional]: phone number(home/company)
• Purpose of collection and use: issuance of transaction evidence

I. Tax bill

• Items to be collected - Individual Customers
  • [Mandatory]: Customer account number, Air Waybill number or invoice number, email, national registration number (the national registration number is collected as mandated by Section 32(1) of Value-Added Tax Act)
  • [Optional] name, address, phone number (home/company, mobile phone)
• Items to be collected - Corporate Customers
  • [Mandatory]: Customer Account number, company name, business registration number, Air Waybill number or invoice number, email
  • [Optional]: company name, name of CEO, name of a person in charge, phone number (company, mobile phone), address, business category and item 
• Purpose of collection and use: Imposition, reduction and collection of various taxes (such as value-added tax) and issuance of transaction evidence.

J. Accident handling

• Items to be collected [Mandatory]: Customer account number, name (consultation client), Air Waybill number, name (sender, recipient), phone number (home/company, mobile phone), email, address, bank account information (account holder, bank name, bank account number)
• Purpose of collection and use: user identification, shipment claim handling, checking transaction and delivery information, contact for fact-checking, fee payment/cancellation/refund processing, information on processing details

K. Customer inquiry (general consultation)

• Items to be collected - Individual Customers
  • [Mandatory]: name (Customer), mobile phone number
  • [Optional]: Customer account number, phone number (home/company), address, email, country (shipment destination)
• Items to be collected - Corporate Customers
  • [Mandatory]: company name, name (sender, recipient), phone number (company, mobile phone), address, email, country (shipment destination) 
• Purpose of collection and use: user identification, shipment tracking information, guidance on processing quotes and consultations.

L. FedEx Customer Voice

• Items to be collected 
  • [Mandatory]: name, email, phone number (home/company, mobile phone), country, type and content of inquiry
  • [Optional]company name, postal code, Air Waybill number
• Purpose of collection and use: identification of the Customer Voice user, handling of complaints, information on processing details

(3) Other 

A. Participation in seminars and events

• Items to be collected
  • [Mandatory]: name, email, mobile phone number
  • [Optional]: Customer account number, address, business registration number, phone number (home/office), fax number
• Purpose of collection and use: invitations to seminars and events, My FedEx Rewards (MFR) promotion

B. Sending FedEx newsletters

• Items to be collected 
  • [Mandatory]: email
  • [Optional]: mobile phone number
• Purpose of collection and use: notice and announcement related to service information, reception of advertisements for commercial purposes, provision of company news

C. Sending and managing rewards

• Items to be collected [Mandatory]: Customer account number, name (customer), mobile phone number, email, address
• Purpose of collection and use: event reward delivery.

D. Records automatically created during service use

• Items to be collected 
  • [Mandatory]: service use time, service use record, fraudulent use record, login information (IP address)
  • [Optional]: cookies
• Purpose of collection and use: preservation of service use records, website analysis, statistical uses, usage information analysis, marketing, marketing research.

F. Items to be collected: Items stated in paragraph 2, paragraphs (3)(A), (2)(B), and 2(C) above

• Purpose of collection and use: Various events using phone, SMS, email, and mail, provision of product information, provision of service-related information and company news, invitations or ticket issuance related to events organized or sponsored by the company, provision of information on other useful services, conducting marketing-related events, market research, and consulting.

5.  Destruction of personal information

(1) The Company shall destroy the personal information without delay when the personal information becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the purpose of processing.

(2) When destroying personal information, the company shall take measures to prevent it from being restored or reproduced, through economically reasonable and technically feasible methods, as follows:

• Electronic files in which personal information is recorded must be permanently deleted using irreversible technical methods.
• In addition, in the case of records, printed materials, written materials, and other recording media, they should be shredded or incinerated.

(3) The Company selects the personal information that requires destruction and destroys the personal information with the approval of the company’s personal information protection manager. If the processing/retention period of personal information has expired, but personal information is kept for reasons such as those in Paragraph 4, Subparagraph 1 above, the personal information and personal information files should be stored and managed separately from other personal information to the extent technically possible.

7.  Delegation status of personal information processing (domestic)

In order to provide smooth and efficient service, personal information processing tasks are delegated as follows: The current delegation status of the processing of personal information for persons located abroad is as in Paragraph 8.

(1) Delegation of processing of general personal information

(2) Delegation for marketing purposes

(3) Management and supervision of trustee

In accordance with Article 26 of the Personal Information Protection Act, when concluding a delegation contract, the Company specifies the prohibition of the processing of personal information for purposes other than for delegated services, technical and administrative protection measures, restrictions on re-delegation, management and supervision of the trustee, and matters related to liability such as compensation for damages, etc. in a document such as a contract, and supervises whether the trustee handles personal information safely. When concluding the delegation contract with the trustee, the Company will make reasonable efforts to ensure that the trustee complies with laws and regulations related to personal information protection in the contract.

8.  Overseas transfer of collected personal information (delegation of personal information processing to a foreign third party)

The Company may provide personal information to overseas third parties as described in Paragraph (1) below only when necessary, such as overseas delivery and customer management. 

In addition, the Company may delegate the processing of the Customer's personal information to an external professional company as described in Paragraph (2) below only when necessary, such as providing company services, and promotion and marketing. The trustee entrusted with the processing of personal information shall manage the information according to the purpose of delegation. If the contents of the delegated works or the trustee are changed, the change will be notified in a timely manner through this Privacy Policy or individually notified by email, written notice, telephone, SMS, etc.

(1) Provision of personal information to third parties (overseas)

Recipient (contact information): Federal Express Corporation headquarters and affiliates in each country (https://www.fedex.com/en-us/trust-center.html) (dataprivacy@fedex.com).

Country where the recipient is located: US ( 942 South Shady Grove Road, Memphis, Tennessee 38120,US)  For affiliates in other countries and contact point, please check ((https://www.fedex.com/global/choose-location.html?location=home for a list of recipients, countries, and contact information).

Purpose of using the personal information of recipients: overseas delivery and customer management.

Items of personal information to be transferred: name (Korean, English), company name, phone number (home/company, mobile phone), fax number, address, Customer account number, business registration number, invoice/Air Waybill number (including related information), email, credit card information (card company name, card type, card number, expiry date, installment information), bank account number, User ID, name of CEO, (Korean, English).

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network.

Retention and use period of personal information of recipients: Up to 3 years from the last use of the service (when delivery is completed in the case of delivery information).

(2) Delegation of the processing of personal information (overseas)

The Company re-entrusts the following personal information processing tasks to external third-party companies through the Federal Express Corporation headquarters and affiliates in each country. If there are changes to the subcontracted trustee or the details of the re-entrusted work, we will notify you through this processing policy.

All or part of the personal information collected by the Company may be transferred to overseas affiliates or overseas trustee listed below for delegation management in order to provide services and enhance customer convenience. In accordance with Article 26 of the Personal Information Protection Act, when concluding the delegation contract, the Company specifies the prohibition of the processing of personal information for purposes other than for delegated works, technical and administrative protection measures, restrictions on re-delegation, management, and supervision of the trustees, and matters related to liability, such as compensation for damages, etc. in a document such as a contract, and supervises whether the trustee manages the personal information safely. When concluding the delegation contract with the trustees, the Company will make reasonable efforts to ensure that the trustees complies with laws and regulations related to personal information protection in the contract.

Trustee (contact information): Federal Express Corporation headquarters and affiliates in each country (https://www.fedex.com/en-us/trust-center.html) (dataprivacy@fedex.com).

Country where the trustee is located: US (942 South Shady Grove Road, Memphis, Tennessee 38120,US).  For affiliates in other countries and contact point, please check ((https://www.fedex.com/global/choose-location.html?location=home for a list of recipients, countries, and contact information).

Purpose of using the personal information: Complaint handling, inquiry handling, fee payment (including invoices and bills), and processing of customer numbers (for accounting and billing purposes), management of marketing and related events, and market research.

Items of personal information to be transferred: name (Korean, English), company name, phone number (home/company, mobile phone), fax number, address, Customer account number, business registration number, invoice/Air Waybill number (including related information), email, credit card information (card company name, card type, card number, expiry date, installment information), bank account number, User ID, name of CEO, (Korean, English).

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network.

Retention and use period of personal information of recipients: until termination of delegation contract

Subcontracted trustee (Contact): CapGemini (dpocapgemini.global@capgemini.com)

Countries where the subcontracted trustee is located: 

• China (28F, SML Center, No. 610, Xujiahui Road, Shanghai 200025, China)
• India (No. 14, Rajiv Gandhi Infotech Park, Hinjawadi Phase-III, MIDC-SEZ, Village Man, Taluka Mulshi, Pune-411 057, Maharashtra, India)

Delegated works: complaint handling, inquiry handling, fee payment (including invoices and bills).

Purpose of use by the person to whom personal information is transferred: performance of delegated works.

Items of personal information to be transferred: name (Korean, English), company name, phone number (home/company, mobile phone), fax number, address, postal code, Customer account number, business registration number, invoice/Air Waybill number (including related information), email address, card information (payment amount, credit card company, credit card type, credit card number, expiry date, installment information).

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network.

Retention and use period of personal information of transferee: until termination of redelegation contract.

 

 

Subcontracted trustee (contact): Accenture (dataprivacyofficer@accenture.com).

Countries where the subcontracted trustee is located: 

• China (21F West Tower, World Financial Center, No.1 East 3rd Ring Middle Road, Chaoyang District, Beijing, 100020, China)
• India (Prestige Technopolis, 1/8, Dr.MH Maregowda Road, Audugodi, Bengaluru, Karnataka, 560029, India)

Delegated works: processing of Customer numbers (for accounting and billing purposes).

Purpose of use by the person to whom personal information is transferred: performance of delegated works.

Items of personal information to be transferred: name (Korean, English), company name, phone number (home/company, mobile phone), fax number (company, home), address, bank account number, User ID, Customer account number, business registration number, name of CEO, name of a person in charge (Korean, English), fax number, email address.

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network.

Retention and use period of personal information of transferee: until termination of redelegation contract.

Subcontracted trustee (contact): Epsilon Data Management, LLC (https://www.epsilon.com/us/consumer-information).

Countries where the subcontracted trustee is located: US (4401 Regent Boulevard, Irving, Texas 75063-2404, US).

Delegated work: management of marketing-related events.

Purpose of use by the person to whom personal information is transferred: performance of delegated works.

Items of personal information to be transferred: Name(Korean, English), company name, phone number(home/company, mobile phone), address, email address, Customer account number.

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network.

Retention and use period of personal information of transferee: until termination of redelegation contract.

Subcontracted trustee (contact): Salesforce.com Inc. (dszola@salesforce.com)

Countries where the subcontracted trustee is located: US (Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, US).

Delegated work: management of marketing-related events.

Purpose of use by the person to whom personal information is transferred: performance of delegated works.

Items of personal information to be transferred: Name(Korean, English), company name, phone number(home/company, mobile phone), address, email address, Customer account number.

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network.

Retention and use period of personal information of transferee: until termination of redelegation contract.

Subcontracted trustee (contact): Carlton One Engagement Corporation (privacy@carltonone.com).

Countries where the subcontracted trustee is located: Canada (60 Columbia Way, 9th Floor, Markham, ON L3R 0C9, Canada)).

Delegated work: management of marketing-related events.

Purpose of use by the person to whom personal information is transferred: performance of delegated works.

Items of personal information to be transferred: Name(Korean, English), company name, phone number(home/company, mobile phone), address, email address, Customer account number.

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network.

Retention and use period of personal information of transferee: until termination of redelegation contract.

Subcontracted trustee (contact): Publicis Worldwide (Hong Kong) Limited trading as Epsilon Hong Kong (DPOfficer@epsilon.com).

Countries where the subcontracted trustee is located: Hong Kong (Suites 3301-4, 33rd Floor, AIA Kowloon Tower, 100 How Ming Street, Kwun Tong, Kowloon, Hong Kong SAR China).

Delegated work: management of marketing-related events.

Purpose of use by the person to whom personal information is transferred: performance of delegated works.

Items of personal information to be transferred: Name(Korean, English), company name, phone number(home/company, mobile phone), address, email address, Customer account number.

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network.

Retention and use period of personal information of transferee: until termination of redelegation contract.

You may refuse the provision of general personal information as stated above to oversee third party. In case you refuse to agree, you may contact our customer service center (02-3496-7777). However, in case you refuge to agree, we may not be able to conclude or maintain a contract and receive the benefits provided by the Company.