Candidate Privacy Policy
This Privacy Policy describes our practices with respect to Personal Data collected in the context of the recruiting activities of Foodora entities. This Privacy Policy further provides information on your rights under applicable data protection laws.
For the purposes of this Privacy Policy, 'Personal Data' is any data which relates to an individual who may be identified from that data, or from a combination of a set of data.
For the purposes of this Privacy Policy, “Personal Data” means any information which relates to an individual who may be identified from that information, or from a combination of a set of information. Similarly, “Processing” refers to any operation performed on personal data, such as collection, storage, use, disclosure, destruction.
Who is the data controller?
The Foodora entity to which you have applied is the data controller responsible for the processing of your Personal Data. On the Website you will find additional information about which Foodora entity exactly is recruiting you.
You can reach Foodora’s data protection officer for any privacy-related questions or feedback by mailing to [email protected].
What type of personal data do we process and how do we use it?
Information you actively provide to us when you apply for a job (“Application Data”):
We primarily receive information when you use the contact form, subscribe to job alerts or apply for a job on the Website (our “Services”) on the Website. When you use our Services we may require you to provide us with certain Personal Data such as name, email address, phone number or other contact data in order to contact you or to answer your queries. While applying for a job you may also be required to provide your resume/CV, educational certificates or a cover letter which may contain additional Personal Data. The exact data fields can be found on the application form on the Website.
We need your Application Data for the solicitation, evaluation, and selection of candidates for employment with Foodora. Thus, your Application Data will be processed for the purposes of managing our recruitment related activities, which include setting up and conducting interviews or, in certain cases, background checks, and as is otherwise needed in the recruitment and hiring processes. With your consent, we will also use your Application Data to maintain our talent pool and to contact you in the future with job offers. Our legal basis for processing your Application Data are the legal provisions in your jurisdiction permitting the data processing or the purpose of performance of a contract or in order to take steps at your request prior to entering such a contract (e.g. processing your application for employment with us under Art. 6(1)(b) GDPR.
We kindly ask you not to send us special categories of personal data without first granting your explicit consent for us to process such data (e.g. ethnic origin, political opinions, religious or philosophical beliefs). We do not need this information for the application process.
Information collected during cognitive assessments in the course of the application process (“Assessment Data"):
With regard to our recruitment of programmers and technical engineers, please be aware that we might conduct certain online coding skill tests to assess your suitability for employment with Foodora by asking you to solve a programming problem; these might include live-coding assessments. The tests will be conducted through an online assessment platform operated by one of our third-party providers. To invite you to do these online assessments, we will send you a direct link once you have applied for a position with Foodora. You will learn more about the identity of our service provider before you start the assessment. We will process Assessment Data for the sole purpose of assisting our recruiters in determining if you will be successful in the role for which you have applied and evaluating and assessing the results of your test. We will not use the assessment result for any automated decision-making. Our legal basis for processing your Assessment Data are the legal provisions in your jurisdiction permitting the data processing or the purpose of performance of a contract or in order to take steps at your request prior to entering such a contract (e.g. processing your application for employment with us) under Art. 6(1)(b) GDPR.
Information gathered from third parties (“Third-Party Candidate Data”):
To be able to offer you a position with our organization, we may process Personal Data collected not directly from yourself but from third parties. If this is the case, we will send you a notification without undue delay after adding your data to our systems, e.g. by email (unless you have already received such a notification from the third party who transmitted the data to us). Your Personal Data will either be obtained from publicly available sources (e.g. career networks such as LinkedIn, Glassdoor, Indeed or others; we do not collect data from social media) or provided to us by someone who referred you for potential employment, such as a Foodora employee, a recruitment agency or a headhunter. In some instances, if required to verify your information, we will initiate a limited verification process for the documentation and references you have provided by double checking your information with former employers or educational institutions. If we conduct such checks we will notify you separately in writing prior to launching the assessment.
Your Personal Data will be processed solely for the purpose of managing our recruitment-related activities, which include setting up and conducting interviews and tests for candidates, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) GDPR, as it is necessary for the purposes of the legitimate interests pursued by Foodora which are the solicitation, evaluation, and selection of candidates for employment.
Sweden Only
In recruitment for certain positions, a background check is carried out for final candidates. This may include asking the candidate to present an extract from the criminal record.
Legal basis: The processing is necessary to fulfill our and your legitimate interest of recruiting new employees who are suitable for the position.
Information to Contact You (“Contact Data”)
You may also choose to receive information about your application via SMS or WhatApp. In this case, we will collect your Personal Data (contact details, e.g. name and phone number) in order to contact you.
The legal basis for processing your contact details to send you job application reminders via Whatsapp and/or SMS is your consent under Art. 6(1)(a) GDPR. You are free to withdraw your consent at any time by unsubscribing from our communications.
Information to Book Travel (“Travel Booking Data”)
To provide you a beneficial experience with our recruitment process, we might schedule onsite interviews with you at our office. In these cases, we might require certain information from you in order to be able to book travel arrangements, such as your name, email address, date of birth, passport number and other travel documents.
Our legal basis for processing your Travel Booking Data are the legal provisions in your jurisdiction permitting the data processing or the purpose of performance of a contract or in order to take steps at your request prior to entering such a contract (e.g. arranging interviews necessary for the further processing of your application for employment with us).
Automated Decision-Making
Your application will always be reviewed by a human being. We do not rely on solely automated decision-making to conduct our recruitment activities.
How is your personal data shared?
- Service providers. The Website is powered by our database providers, the online recruiting service, human resources management and applicant tracking systems is provided by SmartRecruiters. Your Personal Data will be processed on behalf of Foodora by our data processors, cloud services providers engaged by Foodora to help manage our recruitment and hiring process on our behalf. We will ensure an adequate level of protection for Personal Data processed in accordance with this Privacy Policy at any point in time. All transfers will be subject to appropriate safeguards such as binding corporate rules or approved standard contractual clauses. Where necessary, we have implemented supplementary security measures under the standard contractual clauses certified by the EU Commission to provide an adequate level of data protection for any transfers outside the EU. You can obtain a copy of the standard contractual clauses by contacting us.
- Group companies. Foodora is part of the Delivery Hero Group (“Delivery Hero”), an organization with a global footprint. Therefore, when you apply for a job with a Delivery Hero company such as Foodora, we may share information among our group of companies located in different countries. All Delivery Hero companies use Application Data, Assessment Data, Third-Party Candidate Data and Contact Data for the sole purpose of managing your application. In case we have an open position which matches your profile, a Delivery Hero company may reach out to you to offer a relevant position. Before contacting you with such an offer, we will first collect your consent.
All Delivery Hero companies must honor this Privacy Policy as well as strict intra-group data transfer agreements. We ensure an adequate level of protection for Personal Data within the scope of the GDPR even where Personal Data is shared with a Delivery Hero company located outside the European Economic Area (EEA). Our legal basis for the sharing of data within the Delivery Hero Group is Art. 6(1)(f) GDPR.
If you do not want your personal data to be shared across the Delivery Hero group, you may opt out by contacting us at [email protected]. By opting out, we ensure that only the Delivery Hero company with which you are seeking employment will receive your Personal Data. - Third parties. We do not share Personal Data about our candidates with any third parties unless we have our candidates’ specific permission to do so, or we share information with private or public authorities that will enable us to fight fraud and abuse on our network, to investigate suspected violations of law, or to fight any other suspected breach of applicable law. This also includes screening our candidates in relation to international sanctions in the context of international security threats, terrorism or money laundering. In any case, you will be notified before we share your Personal Data with any third parties.
- Business transfer. As a matter of policy, we do not rent or sell Personal Data about our candidates with non-affiliated third parties unless we have specific consent to do so. In the event that our business or a division of our business is reorganized or sold and we transfer all or substantially all of our assets to a new owner, your Personal Data may be transferred to the buyer, subject to appropriate privacy safeguards.
For how long do we retain your personal data?
If you do not grant us your consent for a longer retention period, depending on the entity to which you applied to, we will store your Application Data for a period between 6 months and 1 year after we have let you know that we currently cannot offer you a position with our organization.
We keep all other Personal Data no longer than necessary for the purpose for which we obtained them and for any other permitted compatible purposes, including compliance with legal obligations in the field of employment law. Group records management schedules document the applicable minimum retention periods required by local laws.
What legal rights do you have?
Data protection laws provide you with various legal rights and we are committed to respecting them. For this purpose, we strive to provide clear and transparent information about your rights and make it as convenient as possible for you to exercise them.
Under the GDPR, you are entitled to the following rights:
Right to access |
You have the right to access your personal data and obtain additional information on how we process it. You may also request a copy of the data we maintain relating to you. |
Right to rectification |
If you notice that your personal data is incorrect, you can always request that we correct it. |
Right to erasure |
You have the right to ask us to delete your personal data. Please note that even if you exercise this right, we may be required to retain some of your information if we process it as part of our legal obligations. |
Right to restriction of processing |
If you have requested the deletion of your personal data, but we are legally obliged to retain some of it, we will store your data in our archives and only reintegrate it into our operational systems with your consent. However, you will not be able to use our Services during this time, otherwise we will need to process your data again. |
Right to data portability |
You can ask us to transmit your personal data in a machine-readable format to you or to another data controller. However, please note that this right only applies to personal data that we process under a contract or with your consent. |
Right to object |
You have the right, for reasons arising from your particular situation, to object at any time to any processing of your personal data, which is processed on the basis of our legitimate interests. If you object, we will no longer process your personal data unless we can prove compelling grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise, or defend against legal claims. |
Right of complaint |
You can raise a complaint about our processing with the data protection authority in the EU Member State of your habitual residence, place of work, or the place where you think a violation of the GDPR has occurred. In the case of cross-border data processing, you can also lodge a complaint with our lead supervisory authority in Berlin, Germany. |
Right not to be subject to a decision based solely on automated processing |
You have the right to object to a fully automated decision (i.e. without any human intervention in the decision-making process) that has legal effects or significantly affects you. |
If you would like to exercise your legal rights, please contact us under [email protected].
Changes to this Policy
We may update this Privacy Policy from time to time to reflect our new processes, new technologies, and legal obligations. We are committed to keeping you informed of any changes to our privacy practices, so we encourage you to review this Privacy Policy to keep updated.
Last modified: December, 2023