SendLabel Legal
Privacy Policy
Information under the GDPR/DSGVO for the use of SendLabel.
1. Controller
Depha GmbH, Steinriedendamm 15, Halle 1, Eingang 1, 38108 Braunschweig, Germany, Local Court Braunschweig HRB 203187, VAT ID: DE275113400, EORI: DE1536699.
Bank Details
Sparkasse Celle-Gifhorn-Wolfsburg, IBAN: DE60 2695 1311 0161 6616 32, BIC: NOLADE21GFW.
2. Contact
Email: info@sendlabel.de
Phone: +49 151 4581 6823
2a. Data Protection Contact / DPO
Unless expressly stated otherwise, no separate statutory data protection officer is currently designated. Privacy-related requests can be sent to info@sendlabel.de and will be handled by our responsible internal team.
3. Purposes of Processing and Legal Bases
We process personal data to operate our platform for collecting shipping data, ordering/creating shipping labels, and providing tracking and document downloads such as labels, QR codes and invoices.
The legal bases include in particular Art. 6(1)(b) GDPR (contract performance / pre-contractual measures), Art. 6(1)(c) GDPR (legal obligations such as tax and commercial retention duties), and Art. 6(1)(f) GDPR (legitimate interests such as abuse/fraud prevention, IT security and error analysis).
4. What Data We Process
Depending on your use of the platform, we may process: account data (email address, password hash, login data); shipment data (sender/recipient name, address, optional email/phone, parcel details, and customs data for international shipments); order and payment data (order status, amounts, currency, payment references such as Stripe checkout/payment references); communication data; and usage/technical data such as IP address, timestamps, device/browser information and server logs.
If a visitor separately consents to the analytics category, we also process anonymous visit-analytics data such as page paths, visit timestamps, referrer data, UTM parameters, language, country code and browser-level anonymous visitor/session identifiers. This data is used for operations analysis, attribution and website optimization and is not activated before consent.
4a. HS Code / TARIC Assistance
When you use our international customs-assistance features, we may additionally process item descriptions, selected or suggested HS code / TARIC values, goods value, country-of-origin data and language preferences in order to provide matching, smart suggestions, automatic form filling and multilingual display.
To improve the experience for German-, English- and Chinese-speaking users, official nomenclature descriptions may be machine-translated and stored in our internal reference database. Such translations and suggestions are provided for search and data-entry assistance only and do not replace your own responsibility to verify the correct customs classification and declaration.
5. Recipients and Processors
To provide our services, we use service providers and transfer data where necessary, for example to shipping carriers (such as DHL Paket, Deutsche Post International, DPD), payment providers (such as Stripe / PayPal where enabled), hosting/IT providers, email delivery providers, and the relevant identity provider where you actively choose external sign-in (such as Google or Microsoft).
6. Third-Country Transfers
Some service providers may process data outside the EU/EEA. In such cases, we ensure appropriate safeguards pursuant to Art. 44 et seq. GDPR, for example standard contractual clauses where required.
7. Storage Period
We store personal data only for as long as necessary for the stated purposes. Order and invoice data are retained in accordance with statutory retention periods (usually 6 or 10 years). Log data is generally stored for a limited period and then deleted or anonymized. Session data is time-limited, and password reset tokens are valid only briefly and are removed after expiry.
8. Cookies and Similar Technologies
We primarily use technically necessary cookies or similar technologies to operate the platform, for example for login sessions, security, language preference, guest-cart flows and anti-forgery checks for external sign-in.
The public website now provides a consent-management flow. Analytics and marketing categories are disabled by default and are only activated after active visitor consent; visitors may later withdraw that consent at any time.
Once analytics consent is granted, we activate anonymous visit analytics to record page views, referrer data, UTM campaign parameters, language, country code and anonymous browser identifiers. If consent is not granted or is later withdrawn, those non-essential analytics do not start or are stopped immediately.
As of this version, the marketing category is not yet used for active advertising or remarketing cookies; if activated later, it would still require prior consent.
For a more specific overview of cookie names, purposes and retention periods, please see /cookies.
9. Your Rights
Under the GDPR, you have rights including access, rectification, erasure, restriction of processing, data portability, objection to processing based on Art. 6(1)(e)/(f) GDPR, and withdrawal of consent with effect for the future.
To exercise these rights, you can contact us at info@sendlabel.de. To avoid disclosure to unauthorized third parties, we may request reasonable information to verify identity.
10. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR).
11. Security
We implement appropriate technical and organizational measures to protect your data against loss, manipulation and unauthorized access.
Version: 2026-08-10