Privacy policy of General Logistics Systems France

General Logistics Systems France (hereinafter referred to as " GLS France ") is a subsidiary of General Logistics Systems B.V., Amsterdam. GLS France offers parcel delivery services as well as express delivery services and logistics solutions for value-added products.

GLS France is committed to respecting the privacy concerns of its recipients and customers. Consequently, personal data (hereinafter referred to as "Personal Data") is collected solely in accordance with applicable legal regulations.

This Privacy Policy describes the processing and type of Personal Data collected by GLS France, as well as how GLS France may use this data and to whom it communicates it. Thus, this policy aims to specify the principles and measures taken to protect the Personal Data entrusted to GLS France. It also explains how to request access to or correction of your personal data, withdraw consent previously granted, opt out of receiving certain communications, and obtain answers to your questions regarding our privacy practices.

GLS France may process your personal data in order to provide its services and always does so with the utmost care. This policy aims to describe how GLS France processes your Personal Data.

Definitions:

Personal Data

Personal data is considered to be "Any information that directly or indirectly identifies a natural person": a natural person is deemed to be any person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, identification number, location data, an online identifier, or to one or more specific elements relating to their physical, economic, cultural, social identity, etc.

Personal Data includes information relating to the personal situation or factual circumstances of an identified or identifiable person. It includes, for example, information such as name, surname, address, telephone number, and date of birth. Information such as place of work or profession may also be considered Personal Data, provided it is linked to a natural person. Information that cannot be linked to an identified or identifiable natural person – such as the most visited web pages or the number of users on a page – is not considered Personal Data.

Processing of Personal Data

Processing of Personal Data means any operation or set of operations performed, whether or not by automated means, and applied to data or sets of Personal Data, such as collection, recording, organisation, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, alignment or interconnection, restriction, erasure or destruction.

As part of our business, GLS France is required to process your Personal Data. GLS France undertakes to limit this processing to data strictly necessary for the implementation of our parcel delivery mission and the fulfilment of its legal obligations, such as name, surname, address, telephone number, email address.

GLS France collects your data in accordance with the General Terms and Conditions of Sale and this Privacy Policy, for the provision of its delivery services, as well as its ancillary services for tracking entrusted parcels.

GLS France collects your Personal Data:

- with your consent, for one or more specific purposes;

- when collection is necessary as part of the execution of a contract concluded with GLS France;

- to comply with GLS France's legal or regulatory obligations.

Any other specific collection of Personal Data will be subject to information and a complementary request, providing you with the purposes and means of the new processing envisaged by GLS France.

GLS France is bound by the duty of confidentiality of correspondence and is subject to the rules laid down by the French Data Protection Act (

As part of its data processing operations described in the article 'Processing of your Personal Data', GLS uses subcontractors, within the meaning of the GDPR, some of whom may transfer Personal Data outside the European Union. Information relating to these subcontractors and the measures taken for the execution of these data transfers are available on the GLS France website at the following address: https://www.gls-france.com/liste-stt/Liste-des-STT-RGPD.pdf

In both cases, an appropriate and uniform level of data protection is guaranteed by the standard data protection clauses of the European Commission. You can consult these EU standard contractual clauses on Implementing Decision - 2021/914 - EN - EUR-Lex

When you are the recipient of a shipment, your Personal Data is transmitted to GLS France by our shipper customers. They provide us with your information, as well as the Data relating to the parcel and, where applicable, notification instructions, mainly by electronic means (telephone number and/or email address), either via their own shipping systems or using our systems. This transmission takes place within the framework of the contractual relationship they have with you, in accordance with Article 6(1)(b) of the General Data Protection Regulation (GDPR), and in order to enable us to perform the delivery of the goods you have ordered from the shipper.

In addition, we may receive your Personal Data from other international subsidiaries of the GLS Group, in particular when the shipment originates from abroad.

When you wish to benefit from GLS France services, your Personal Data is transmitted to GLS France, with your consent, via the contact form available at the following address: https://gls-group.com/FR/fr/envoyer-colis/devenir-client/

To use the GLS France websites, it may be necessary for the GLS France servers to place cookies. These cookies are used for the technical administration of the website. Each visitor may configure their browser to refuse these cookies. In that case, no data will be saved on the visitor's computer. You may not be able to use all website features optimally when these cookies are disabled. In any event, you may revoke your consent at any time.

As a matter of principle, GLS France does not transmit Your data to third countries (countries that are neither members of the European Union nor of the European Economic Area).

As part of its data processing operations described in the section "Processing of your Personal Data", GLS uses processors within the meaning of the GDPR, some of whom may transfer Personal Data outside the European Union. Information relating to these processors and the measures taken for these data transfers is available on the GLS France website at the following address: https://www.gls-france.com/liste-stt/Liste-des-STT-RGPD.pdf

In both cases, an appropriate and uniform level of data protection is guaranteed by the European Commission's standard data protection clauses. You can consult these EU standard contractual clauses here: Implementing Decision - 2021/914 - EN - EUR-Lex

Your Personal Data may be communicated to internal GLS France departments or transferred to third parties, solely to ensure the proper performance of our services or to comply with our legal obligations.

More specifically, they may be transferred:

· to internal GLS France departments;

· to external companies with which GLS France cooperates as part of its delivery activities (e.g. subcontractors, service providers, etc.);

· to subsidiaries of the GLS Group and GLS France (as is the case with the subsidiary TousFacteurs);

· to competent authorities or bodies determined by law within the framework of legal and regulatory obligations.

Thus, GLS France, as controller of the data collected and in accordance with Article 4(7) of the GDPR, determines the purposes and means of the following processing operations:

SubjectPurposeGroup of individualsData processedRetention periodLegal basis
Delivery of parcels entrusted to GLS FranceParcel deliveryRecipients
  • Name
  • First name
  • Postal address
  • Mobile phone number
  • Email address
  • Signature
  • Data necessary for delivery
13 months from the delivery date (cf. art. L. 133-6 French Commercial Code) in active database / 10 years in archive database (accounting obligation)Execution of the contract (Art. L-132-8 French Commercial Code) / legal obligation
Delivery of parcels entrusted to GLS FranceDelivery tracking and proofRecipients
  • Name
  • First name
  • Postal address
  • Mobile phone number
  • Email address
  • Signature
  • Data necessary for delivery
13 months from the delivery date (cf. art. L. 133-6 French Commercial Code) in active database / 10 years in archive database (accounting obligation)Execution of the contract (Art. L-132-8 French Commercial Code) / legal obligation
Delivery of parcels entrusted to GLS FranceRedirection of parcels and modification of delivery instructionsRecipients
  • Name
  • First name
  • Postal address
  • Mobile phone number
  • Email address
  • Signature
  • Data necessary for delivery
13 months from the delivery date (cf. art. L. 133-6 French Commercial Code) in active database / 10 years in archive database (accounting obligation)Execution of the contract (Art. L-132-8 French Commercial Code) / legal obligation
Delivery of parcels entrusted to GLS FranceComplaint managementCustomer
  • Name
  • First name
  • Postal address
  • Mobile phone number
  • Email address
  • Signature
  • Data necessary for delivery
13 months from the delivery date (cf. art. L. 133-6 French Commercial Code) in active database / 10 years in archive database (accounting obligation)Execution of the contract (Art. L-132-8 French Commercial Code) / legal obligation
Satisfaction surveysService quality improvementRecipients
  • Tracking number
  • Name
  • First name
  • Postal address
  • Phone number
  • Email address
  • Feedback
  • Comments
13 months from the delivery date (cf. art. L. 133-6 French Commercial Code) in active databaseLegitimate interest
GLS France commercial activitiesProspect managementProspects
  • Name
  • first name
  • job title
  • address
  • phone details
  • email address
  • signature
  • data necessary for invoicing
3 years from the last contact with the prospectLegitimate interest (Art. 6(1)(f) GDPR)
Collaboration with commercial partners, organisation of processes within commercial relationships through the provision of contact persons, control and invoicing of contractual services.
GLS France commercial activitiesCustomer ManagementCustomers
  • Name
  • first name
  • job title
  • address
  • phone details
  • email address
  • signature
  • data necessary for invoicing
Duration of the commercial relationship + 5 yearsExecution of the contract / legal obligation
GLS France commercial activitiesLitigation managementCustomers
  • Name
  • first name
  • job title
  • address
  • phone details
  • email address
  • signature
  • data necessary for invoicing
5 years of archivingExecution of the contract / legal obligation
IT administration
  • User management (assignment of access rights, IT support, system access, authorisation management)
  • Verification of changes made to information in applications
  • Unambiguous identification of the user for secure operation of applications
  • Identification of errors and guarantee of system security, including detection and tracking of unauthorised access attempts and access to our web server
Customers
  • Name
  • first name
  • job title
  • address
  • phone details
  • email address
  • signature
  • data necessary for invoicing
Duration of the commercial relationship + 5 yearsCompliance with our legal obligations regarding data security (Article 6(1)(c) GDPR), performance of a contract (Article 6(1)(b) GDPR)
IT administration
  • User management (assignment of access rights, IT support, system access, authorisation management)
  • Verification of changes made to information in applications
  • Unambiguous identification of the user for secure operation of applications
  • Identification of errors and guarantee of system security, including detection and tracking of unauthorised access attempts and access to our web server
Recipients
  • Name
  • first name
  • job title
  • address
  • phone details
  • email address
  • signature
  • data necessary for invoicing
13 months from the delivery date (cf. art. L. 133-6 French Commercial Code) in active database / 10 years in archive database (accounting obligation)Compliance with our legal obligations regarding data security (Article 6(1)(c) GDPR), performance of a contract (Article 6(1)(b) GDPR), balancing of interests (Article 6(1)(f) GDPR)
Cookies and other trackers
  • Improvement of the quality of GLS France websites
  • Statistical analysis
  • Recipients
  • Prospects
  • Customers
  • Date and time of the request
  • IP address or Domain Name System (DNS) server name of the requesting computer
  • Requested page (URL)
  • HTTP response code
  • Client operating system and its version
  • Browser and its version
25 monthsConsent
Protection of GLS France Web applications against attacks – Web Application FirewallEnsure the security and integrity of information systems; prevent cyber threats; detect and block fraudulent access to online services.Users of GLS France Web applications (visitors, customers, prospects); any person accessing hosted web services.Connection data: source/destination IP addresses, User-Agent, request timestamps, HTTP headers, filtered payloads (without sensitive personal content), security event logs (e.g. blocking attempts).Logs: maximum 30 days (or until resolution of a security incident); security events: maximum 1 year (depending on risks and legal obligations such as NIS2); automatic deletion thereafter, except freeze for judicial investigation.Legitimate interest (Art. 6.1.f GDPR: protection of essential assets and services, without disproportionate prejudice to individuals)
Professional alerts (Integrity Line)Provision, management and processing of professional alerts
  • Employees
  • Customers
Name, first name, postal address, telephone details, email address, data relating to the alert, date and subject of the request or alertInadmissible alerts are anonymised within thirty (30) days of receipt. Admissible alerts that do not give rise to any corrective measure or action are anonymised within two (2) months of their closure. Failing anonymisation within the aforementioned time limits, the data are retained until completion of any actions, measures or proceedings that may have been initiated.Legal obligation
GLS ChatbotTo allow recipients, customers, prospects, candidates and employees to engage in a discussion with an artificial assistant about parcels entrusted to GLS France or about the entire GLS France website
  • Recipients
  • Customers
  • Prospects
  • Employees
  • Candidates
  • The entire discussion voluntarily entered into the chatbot;
  • Any data useful for the request (TrackID, order number, postcode, etc.);
  • User ID;
  • Discussion ID;
  • Device information;
  • Browser information;
  • IP address;
  • Geographical location
30 daysThe legal basis for this processing is our legitimate interest in providing a modern and efficient customer service 24 hours a day, in accordance with Article 6(1)(f) GDPR.
GLS ChatbotSatisfaction surveys regarding the quality of service provided by the artificial assistant
  • Recipients
  • Customers
  • Prospects
  • Employees
  • Candidates
  • Rating
  • Discussion ID
30 daysThe legal basis for this processing is our legitimate interest in providing a modern and efficient customer service 24 hours a day, in accordance with Article 6(1)(f) GDPR.
GLS ChatbotTransfer to a human assistant in case of incomplete or erroneous response from the virtual assistant
  • Recipients
  • Customers
  • Prospects
  • Employees
  • Candidates
  • Name;
  • Email address;
  • The entire discussion voluntarily entered into the chatbot;
30 daysThe legal basis for this processing is our legitimate interest in providing a modern and efficient customer service 24 hours a day, in accordance with Article 6(1)(f) GDPR.

Under the General Data Protection Regulation, you have certain rights concerning your Personal Data and its processing. To exercise these rights, you can contact us. Below is a brief overview of your rights.

The rights of the person whose Personal Data is processed are as follows:

  • Right of access and copy of data: retrieval of stored data;
  • Right to rectification of data: having the data corrected;
  • Right to erasure (right to be forgotten): permanent deletion of data, unless a legitimate interest justifies retention;
  • Right to restriction of processing: processing may be restricted for certain reasons;
  • Right to data portability: having the data transferred to a third party.

In order to process your requests concerning your Personal Data, the request must include your surname, first name, email address or any other element allowing you to be identified.

To answer your questions or to request the exercise of your rights, you can contact our Data Protection Officer:

  • by email at: data.protection@gls-france.com (mailto:data.protection@gls-france.com?subject=)
  • by post to the following address:

GLS HEAD OFFICE

Data Protection Officer

CS 93730

31037 Toulouse Cedex 1

You will find more information on the GLS website dedicated to the protection of Personal Data. You can access it here .

You will also find all the information needed to contact the French Personal Data Protection Authority at any time on the CNIL website .

Last updated on: 01/10/2026