Express courier. Direct.
Also overnight.
x25pronto Switzerland takes goods direct to the destination. Small loads go by car. Larger loads go by van or Van XL. Direct, express and overnight trips run Monday to Sunday when a slot is free. Free times are shown in the booking calendar. This keeps the plan clear.
Privacy for shipping photos: personal data and order info
A practical guide for Swiss businesses: How to handle shipping photos in line with privacy rules — anonymisation, retention and role-based access control.
Quick answer
Shipping photos often contain personal data and order details. Swiss companies protect these images by anonymising sensitive parts, defining deletion periods and enforcing role-based access. This guide gives concrete steps for implementation, responsibilities and documentation.
Why shipping photos matter for privacy
Photos of parcels, delivery notes or drop locations can show names, addresses, signatures or reference numbers. Those are personal data under Swiss data protection rules (DSG). Companies must assess which image data is personally identifiable and what is necessary for the service.
Concrete anonymisation steps
Before storing or sharing, remove direct identifiers. Use automated tools or manual editing to blur or redact faces, names, addresses, barcodes and signatures. Strip metadata such as GPS coordinates and timestamps if not needed. Record which tools and settings you use.
Retention and deletion rules
Set clear retention periods for shipping photos based on contract obligations, complaint windows and legal needs. For many routine photos a short retention (for example 30–90 days) is sufficient unless a dispute is open. Implement automatic deletion or regular reviews and keep deletion logs.
Role-based access and logging
Limit access to staff who need it: dispatch, customer service, quality control. Use role-based permissions in your systems. Log views, downloads and forwards. Regular audits help detect unauthorised access early.
Legal and organisational measures
Carry out a data protection impact assessment (DPIA) if processing is large-scale or risky. Combine technical measures (encryption, secure transfer) with organisational rules (training, driver checklists). Appoint contacts for incidents and document reporting steps.
Example workflow for Swiss shipping
Typical flow: the courier takes a delivery photo using a configured app that strips metadata and blurs identifiers. Images save to an encrypted cloud folder. A scheduled job deletes unneeded photos after 45 days. All access is logged and reviewed periodically.
Frequently asked questions
Which photos count as personal data?
Images that directly or indirectly identify a person — for example names, addresses, faces, signatures or unique reference numbers — are personal data.
How long can my company keep shipping photos?
Retention depends on purpose: dispute handling, contractual duties or legal requirements. Many companies keep routine photos for 30–90 days. Document the purpose and deletion policy and delete automatically afterward.
Do I need a data protection impact assessment (DPIA)?
A DPIA is advisable when photo processing is systematic, large-scale or poses elevated risk to individuals. For simple, anonymised photos it is often not required.
What technical measures make sense?
Use TLS for transfers, encryption at rest, automatic metadata removal, access controls and detailed logging. Combine these with staff training and clear operational rules.