This Candidate Privacy Policy describes how Delivery Hero SE processes personal data in the context of our recruitment activities, including details on what personal data we process, why we process it, who receives your data and how you can exercise your legal rights.

In this Privacy Policy, “personal data” means any information which directly identifies you as a person (like the combination of your full name and address), or can be used to identify you as a person (like a user ID connected to your identity). Similarly, “processing” refers to any operation performed on your personal data, for example the collection, storage, use, disclosure, or destruction of your personal data.

We are Delivery Hero SE, located at Oranienburger Straße 70, 10117 Berlin (“Delivery Hero”, “we”, “us”, “our”).

When it comes to your privacy, Delivery Hero decides how and for what purposes your personal data is processed. In data protection language that makes us a so-called “data controller” (the party responsible for how your personal data is processed).

If you would like to reach our data protection officer, please contact [email protected].

In the context of our recruitment activities, we process personal data actively provided by you during your application and/or hiring process, collected from your device when you interact with Careers Page or obtained via external sources.

We may process the following categories of personal data, for the purposes described in the next section. 

Contact data	including your name, email address, phone number and location.
Application data	including your resume and associated documents, education and work history, skills, certificates, social media profiles and cover letter.
Assessment data	including results of any recruitment assessment, such as skill assessments, case studies, etc.
Device data	including your device type, geographical location, session information, cookies and other similar technologies.
Interview data	including interview details, notes and interviewers’ feedback
Job Preferences	including your desired salary, willingness to relocate and other preferences related to the terms of employment.
Reference data	including the contact data and job title from the person making the referral.
Other	We may process other relevant data provided by you during the application process, such as your gender identity, messages to the hiring team, etc.

A. When you are browsing our Careers Page

We use web tracking technologies (e.g., cookies, SDK’s and measuring pixels) when you browse our Careers Page. These technologies enable us to facilitate the functioning of the Careers Page, improve its performance and security, and/or understand how our users interact with the Careers Page. In addition, these technologies allow us to deliver customized content or targeted advertising to prospective candidates.

Cookies and other web tracking technologies may be used to collect certain device data related to your usage of our Careers Page, including your geographical location, device type, session information, preferences such as language settings, platform performance analytics, and crash reporting.

You can find more information on these technologies (including on retention periods and the applicable legal basis) in our Cookies and Similar Technologies Policy and in our consent management banner. The consent management banner appears the first time you access our Careers Page but you can always access it and adjust your settings via the “Cookies” section in our website.

B. When you apply for a job with us

Direct application

When you apply for a position at Delivery Hero, we need to process your application data, including your name, email address, city, country, phone number, and resume. The exact data fields can be found on the relevant application form on our Careers Page.

Some fields, such as your name, email address and resume are mandatory, while others are entirely up to you to provide us.

The information we request in the application form is necessary to manage our recruitment-related activities and to prepare and enter into an employment contract with you.

The legal basis for this processing is therefore ‘entering into or performance of a contract’ under Art. 6(1)(b) GDPR.

We may ask for gender identity information in our application form to analyze and improve our diversity and inclusion efforts. You are completely free to decide if you would like to provide this information or not. Your gender information is not used for decision-making, and neither the recruiter nor other individuals involved in the respective recruiting process have access to it.

The legal basis for the processing of gender identity is therefore ‘consent’ under Art. 6(1)(a) GDPR.

Sourcing via third parties

In addition to the data you provide directly to us, we may also gather data from publicly available third-party sources such as professional recruiting firms, student organizations, search engine results and professional social media platforms to complete your profile. 

The legal basis for this processing is ‘legitimate interest’ under Art. 6(1)(f) GDPR. 

C. When you are participating in our application process 

Interviews

If you advance in our application process and are invited to an interview, we will process your application data, including your work experience and educational history, as well as your interview data, including interview details, notes, and feedback from the interviewers.

The legal basis for this processing is ‘entering into or performance of a contract’ under Art. 6(1)(b) GDPR.

In certain circumstances, some of our interviewers may use generative artificial intelligence (AI) to facilitate the interview note-taking experience. In this case, we will ensure we obtain your prior consent before activating any AI note-taking.

The legal basis for this processing is therefore ‘consent’ under Art. 6(1)(a) GDPR.

Recruitment exercises

Depending on the position for which you are applying, we may ask you to complete a recruitment exercise to assess your suitability for employment with Delivery Hero. This exercise may be a live coding assessment where you are asked to solve a programming problem, or a case study where you need to provide relevant solutions.

Some recruitment exercises may be conducted through an online assessment platform operated by one of our third-party providers. To invite you to do these online assessments, we will send you a direct link to access the relevant platform. You will learn more about the identity of our service provider before you start the assessment.

For these purposes, we will process your assessment data. Your personal data will be processed for the sole purpose of assisting us in determining if you will be successful in the role for which you have applied and evaluating and assessing the results of your test. We will not use the assessment result for any automated decision-making.

The legal basis for this processing is ‘entering into or performance of a contract’ under Art. 6(1)(b) GDPR.

Application updates

You may choose to receive regular updates about your application via text message (SMS) or WhatsApp. In this case, we will process your contact data, namely your name and phone number, in order to send you these updates.

The legal basis for this processing is ‘consent’ under Art. 6(1)(a) GDPR. You are free to withdraw your consent at any time by unsubscribing from our reminders.

Travel booking

As part of our application process, we may schedule on-site interviews with you at our office.  In these cases, we may need to process your personal data to book travel or provide other support travel services, mainly your contact data, e.g. your name and email address; and some additional data such as your nationality.

To complete the booking process, we will send you a direct link to create an account on our travel booking platform and provide the necessary personal data.

The legal basis for this processing is ‘entering into or performance of a contract’ under Art. 6(1)(b) GDPR.

Premises access

We use workplace management and security solutions to maintain the physical security of our office and prevent trespassing and theft. These systems ensure that only authorized personnel can access our office.

Accordingly, in the event of on-site interviews, we will process the information captured by our workplace and security solutions, including your access logs, CCTV video footage, and details available on temporary keycards.

The legal basis for this processing is ‘legitimate interest’ under Art. 6(1)(f) GDPR. 

D. When you sign up to a Talent Community

You may also choose to join one or more of our talent communities to receive updates about Delivery Hero and relevant job opportunities, without applying for a specific position immediately. In this case, we will collect and process your contact data, such as name, email address, phone number and resume. The exact data fields can be found on the relevant talent community sign-up form on our Careers Page.

The legal basis for the processing is ‘consent’ under Art. 6(1)(a) GDPR. You are free to withdraw your consent at any time by unsubscribing from our communications.

E. When you join our recruiting events

Event participation management

We regularly organize or participate in events for potential candidates to get to know Delivery Hero and its brands. In some events, a registration will be required for you to participate. For this purpose, we may process some of your contact data, such as your name and email address.

We use this data to manage event-related activities, such as identifying you as a registered participant, granting you access to the event, sending communications about the event and contacting you afterward to request your feedback.

This data may be processed to identify you as a registered event participant, grant you access, send you reminders, notify you of any event changes (e.g. a change of date and time) and contact you after the event to ask for your feedback.

The legal basis for this processing is ‘legitimate interest’ under Art. 6(1)(f) GDPR.

Photo and recordings

To promote our workplace culture, we may take photos or video footage at on-site events held at our offices. This content may be published on our Careers Page, social media sites such as LinkedIn, or on other channels.

At the beginning of our events, you will have the opportunity to object to and opt out of the taking of your photo or video.

The legal basis for this processing is ‘legitimate interest’ under Art. 6(1)(f) GDPR.  

F. When we improve our processes

Candidate experience surveys

We are always aiming to improve our candidate experience, and your feedback is an important part of that process. As such, we may send you surveys asking for your feedback on the application process.

For the purposes of candidate surveys, we process your contact data, such as your name and email address; and the content of your feedback.

Participation in the surveys is based on our ‘legitimate interest’  under Art. 6(1)(f) GDPR.

People analytics

In an effort to gain better visibility into our hiring process, recognize trends and improve overall candidate experience, we run analytics on several candidate-related metrics.

For this purpose, limited personal data is compiled and analyzed in the form of aggregated reports providing for an assessment of our candidate metrics without identifying candidates at an individual level, looking at developments in the hiring process as a whole.

The legal basis for this processing is ‘legitimate interest’ under Art. 6(1)(f) GDPR. You are free to object to receiving surveys at any time.

G. When we are required to comply with laws and regulations

Legal proceedings and authority requests

As with any organization, there are instances when we are required to share personal data with public authorities. Additionally, there might be instances where we have to process your personal data to initiate or defend legal claims and uphold our rights and interests. For this purpose, we may disclose and process certain data we hold about you, to the extent strictly necessary to conclude these legal proceedings and investigations.

The legal basis for processing your data for complying with public authority requests is ‘legal obligation’ under Art. 6(1)(c) GDPR; and for initiating and defending legal claims is ‘legitimate interest’ under Art. 6(1)(f) GDPR.

Responding to data subject requests

Data protection laws grant you various legal rights. We are committed to respecting them at all times. When you exercise these rights, we must process your data to effectively address your request. For instance, if you choose to exercise your right to access, we need to gather all of the information we hold about you to meet our obligation to provide a response. To achieve this, we may process any type of data we hold about you, only to the extent necessary to comply with our obligations.

The legal basis for processing your data for complying with data subject requests is ‘legal obligation’ under Art. 6(1)(c) GDPR.

H. When we offer you a position

Background checks

If you are successful in your application process and accept an offer for a position at Delivery Hero, we may process your data to conduct background checks. This background check will be limited to a sanctions list verification. You will receive further information regarding this processing and the relevant provider upon the start of the background check process.

For certain strategic senior positions, we may conduct additional checks such as reference verification.

The legal basis for this processing is ‘legitimate interest’ under Art. 6(1)(f) GDPR.

You can trust that, within our company, only those staff members will receive access to your personal data who need them in order to fulfill their professional duties, such as providing you with a great candidate experience, or looking into your support requests. In certain scenarios, we also need to share your personal data with recipients outside of our company. Please be assured that your data is shared with these recipients only to the extent necessary for the specified purposes and only as we are legally permitted to do so.

We will only share your data as follows:

A. Delivery Hero group companies

We are part of an international group of companies with legal entities in many parts of the world. You can find more information on our brands and their locations on our Careers Page. When you apply for a job or join a talent community associated with a Delivery Hero company, we may share your personal data among our group of companies located in different countries.

If there is a suitable opening or talent community aligning with your profile, a Delivery Hero company may contact you to encourage you to apply for a relevant position or to receive updates on future job opportunities within that specific entity. Before reaching out to you or adding you to a talent community, we will always ask for your consent.

All Delivery Hero group companies are bound by strict intra-group data transfer agreements ensuring compliance with data protection requirements whenever sharing personal data with group companies. We ensure an adequate level of protection for personal data within the scope of the GDPR even where personal data is shared with a Delivery Hero company located outside the European Economic Area (EEA).

If you do not want your personal data to be shared across the Delivery Hero group, you may opt out by contacting us at [email protected]. By opting out, we ensure that only the Delivery Hero company with which you are seeking employment will receive your personal data.

B. Data processors

We use various third-party service providers to perform our operations. Many of these providers process your personal data as so-called “data processors”. This means they are only allowed to process your personal data under our instructions and have no claims whatsoever to process your personal data for their own, independent purposes. Our processors are strictly monitored and we only engage processors who meet our high data protection standards.

Below you can find an overview of our key data processors for candidate data:

Processor	Purpose
SmartRecruiters GmbHWinsstraße 62/63, 10405 Berlin, Germany	Provision of the application and candidate relationship management platforms.
Google Ireland Limited Gordon House Barrow Street Dublin 4 Ireland	Provision of the interview scheduling, video conferencing, interview note taking, cloud storage and website visitor tracking platforms.
CoderPad, Inc. 995 Market St, San Francisco, CA 94103 USA	Provision of the coding assessments platform.
CodeSignal, Inc. 548 Market St. PMB 49785, San Francisco, CA 94104 USA	Provision of the coding assessments platform.
Starred Group A/S Kongensgade 72C, 1264 Copenhagen, Denmark	Provision of the candidate experience surveys.
GoodTime, Etch Mobile Inc dba GoodTime.io 440 N Barranca Ave #4198 Covina, CA 91723	Provision of the interview scheduling platform.
Braze, Inc. 63 Madison Building 28 East 28th Street, Floor 12 New York, New York 10016 USA	Provision of platform to facilitate the sending of certain email communications to  prospective candidates.
HireRight Limited 15 Westferry Circus, Canary Wharf, London, E14 4HD	Provision of the candidate screening platform (only applicable once the candidate receives an offer).

If you would like to request the full list of recipients of your personal data, you are free to do so at any point in time.

C. Other third parties

In addition to data processors, we also work with third parties, to whom we share your personal data, but who are not bound by our instructions and instead will process your data independently. These parties may be recruitment agencies, branding agencies, events providers, consultants, lawyers or accountants who receive your data from us under a contract and process your personal data for the purposes of providing relevant services. Under no circumstances will we sell or rent your personal information to third parties without your explicit, informed consent.

From time to time, we may be requested to disclose personal data to public authorities. In some circumstances, we may disclose personal data to public bodies in order to bring or defend legal claims, to protect our rights and interests, or to address security concerns. The public authorities involved in these scenarios may include law enforcement agencies, courts, tax authorities, or other government bodies.

We and the parties that we share your personal data with may transfer personal data to countries outside of Europe. Where such transfers take place, we take appropriate measures to ensure that your data is always afforded an adequate level of protection in the countries to which it is transferred.

For example, if we transfer your personal data from a country within the European Economic Area (EEA) to a country outside of the EEA, we take appropriate safeguards to ensure that these transfers provide a level of protection that complies with the basics of data protection requirements under the GDPR. Specifically, as far as transfers from the EEA to countries outside the EEA are concerned, we rely on a number of appropriate safeguards:

- Adequacy decisions by the EU Commission (also including the United States, to the extent recipients have certified under EU-US Privacy Framework, or other applicable mutual agreement between the EU and the US);

- Standard contractual clauses mutually agreed in our contract with the data recipient (including any supplementary measures, if required).

- Further appropriate safeguards in accordance with Art. 46 GDPR (for example binding corporate rules).

Under the data protection laws, you are entitled to the following rights:

Right to access	You have the right to access your personal data and obtain additional information on how we process it. You may also request a copy of your personal data.
Right to rectification	If you notice that your personal data is incorrect, you can always request that we correct it.
Right to erasure	You have the right to ask us to delete your personal data. Please note that even if you exercise this right, we may be required to retain some of your information if we process it as part of our legal obligations, or in pursuit of our own (or a third party’s legitimate interests) such as the assertion of, or defense against, legal claims, preventing fraud or protecting ourselves or others against abusive behavior.
Right to restriction of processing	If you have requested the deletion of your personal data, but we are legally prevented from immediately deleting it, we will store your data in our archives and retain them for the sole purpose of meeting our legal obligations.
Right to data portability	You can ask us to provide you or another data controller with your personal data in a machine-readable format. However, please note that this right only applies to data that we process based on your consent.
Right to object	You have the right, for reasons arising from your particular situation, to object at any time to any processing of your personal data, which is processed on the basis of our legitimate interests. If you object, we will no longer process your personal data unless we can prove compelling grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise, or defend against legal claims. You also have the right to object at any time, without giving any explanations, to the processing of your personal data for direct marketing.
Right of complaint	You can raise a complaint about our processing of your data with the data protection authority in the country of your habitual residence, place of work, or the place where you think a violation of data protection laws has occurred.
Right not to be subject to a decision based solely on automated processing	You have the right to object to a fully automated decision (i.e. without any human intervention in the decision-making process) that has legal effects or significantly affects you. However, please be aware that we do not rely on automated decision-making in the context of our people management processes.
Right to withdraw consent	Where we rely on consent to process your personal data, you have the right to withdraw your consent at any time. If there is no other legitimate ground upon which Delivery Hero is allowed to process your personal data, we will immediately stop processing it. Withdrawal of consent does not affect the legality of the processing carried out before the withdrawal

To exercise your rights, please contact us under [email protected].

Period	Legal Basis
as a rule, for (6) six months if you have been unsuccessful in the recruitment process.	We will rely on our legitimate interest under Article 6(1)(f) GDPR to defend Delivery Hero from potential legal claims.
for up to three years, if you have consented to be included in our Talent Community.	We will rely on your consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time, in which case your data will be deleted unless we need to retain it for a shorter period to comply with our standard retention practices or legal obligations.
if you are successful in the recruitment process and become a Delivery Hero employee, for the duration of your employment contract and subsequent applicable retention periods specified in our Employee Privacy Statement, which is made available once you are hired.	We may rely on performance of a contract under Art. 6(1)(b) GDPR, our legitimate interest under Article 6(1)(f) GDPR to defend Delivery Hero from potential legal claims, or the need to comply with applicable legal obligations under Article 6(1)(c) GDPR. The exact use cases and correspondent legal basis  for the storage of your data as a Delivery Hero employee will be specified in our Employee Privacy Statement.

In the event of potential legal proceedings, regulatory investigations or similar claims, we may also retain relevant personal data for a certain period based on our legitimate interest or applicable legal obligations.

Delivery Hero does not take any legally binding (or similarly impacting) decision regarding our recruitment activities without having such decision reviewed by a human being. 

Last modified: December, 2025