Candidate Privacy Policy

This Candidate Privacy Policy (“Privacy Policy”) describes our practices with respect to Personal Data collected in the context of the recruiting activities and talent community of “Foody” group of companies as defined in Section 1 below. This Privacy Policy further provides information on your rights under applicable data protection laws. 

For the purposes of this Privacy Policy, 'Personal Data' is any data which relates to an individual who may be identified from that data, or from a combination of a set of data. 

Similarly, “Processing” refers to any operation performed on personal data, such as collection, storage, use, disclosure, destruction.

This Privacy Policy does not apply if you are only a visitor of our corporate website for Delivery Hero S.E. or if you seek to apply for a position with Delivery Hero S.E. For Delivery Hero’s website Privacy Policy, please visit https://www.deliveryhero.com/privacy-policy/

1. Who is the data controller?

Delivery Hero (Cyprus) Ltd (“Foody”), registered at Esperidon 5, Strovolos, Nicosia, 2001 [email protected] is the data controller responsible for the processing of your Personal Data when you apply for a position with Foody. Delivery Hero (Cyrus) Ltd. is part of the Delivery Hero S.E., global network of companies and has affiliated companies in Cyprus including Delivery Hero Dmarts Ltd (“Foody”,”We”/”Us”/”Our”). 

You can reach Foody’s privacy and data protection team for any privacy-related questions or feedback by mailing to [email protected].  

2. What type of personal data do we process and how do we use it?

2.1 Information you actively provide to us when you apply for a job (“Application Data”):

We primarily receive information when you use the contact form, subscribe to job alerts or apply for a job on the Website (our “Services”). When you use our Services we may require you to provide us with certain Personal Data such as name, email address, headline (optional) your physical address (optional), photo (optional), phone number or other contact data in order to contact you or to answer your queries. While applying for a job you may also be required to provide your resume/CV, educational certificates or a cover letter which may contain additional Personal Data. The exact data fields can be found on the application form on the Website. 

We need your Application Data for the solicitation, evaluation, and selection of candidates for employment with Foody. Thus, your Application Data will be processed for the purposes of managing our recruitment related activities, which include setting up and conducting interviews or, in certain cases, background checks, and as is otherwise needed in the recruitment and hiring processes. With your consent, we will also use your Application Data to maintain our talent pool and to contact you in the future with job offers. Our legal basis for processing your Application Data are the legal provisions in your jurisdiction permitting the data processing or the purpose of performance of a contract or in order to take steps at your request prior to entering such a contract (e.g. processing your application for employment with us).

We kindly ask you not to send us special categories of personal data without first granting your explicit consent for us to process such data (e.g. ethnic origin, political opinions, religious or philosophical beliefs). We do not need this information for the application process.

2.2 Information collected during cognitive assessments in the course of the application process (“Assessment Data"):

With regard to our recruitment of programmers and technical engineers, please be aware that we might conduct certain online coding skill tests to assess your suitability for employment with Foody by asking you to solve a programming problem; these might include live-coding assessments. The tests will be conducted through an online assessment platform operated by one of our third-party providers. To invite you to do these online assessments, we will send you a direct link once you have applied for a position with Foody. You will learn more about the identity of our service provider before you start the assessment. We will process Assessment Data for the sole purpose of assisting our recruiters in determining if you will be successful in the role for which you have applied and evaluating and assessing the results of your test. We will not use the assessment result for any automated decision-making. Our legal basis for processing your Assessment Data are the legal provisions in your jurisdiction permitting the data processing or the purpose of performance of a contract or in order to take steps at your request prior to entering such a contract (e.g. processing your application for employment with us).

2.3 Information gathered from third parties (“Third-Party Candidate Data”):

To be able to offer you a position with our organization, we may process Personal Data collected not directly from yourself but from third parties. If this is the case, we will send you a notification without undue delay after adding your data to our systems, e.g. by email (unless you have already received such a notification from the third party who transmitted the data to us). Your Personal Data will either be obtained from publicly available sources (e.g. career networks such as LinkedIn, Glassdoor, Indeed or others; we do not collect data from social media) or provided to us by someone who referred you for potential employment, such as an Foody employee, a recruitment agency or a headhunter. In some instances, if required to verify your information, we will initiate a limited verification process for the documentation and references you have provided by double checking your information with former employers or educational institutions. If we conduct such checks we will notify you separately in writing prior to launching the assessment.

Your Personal Data will be processed solely for the purpose of managing our recruitment-related activities, which include setting up and conducting interviews and tests for candidates, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible as it is necessary for the purposes of the legitimate interests pursued by Foody which are the solicitation, evaluation, and selection of candidates for employment. 

2.4 Information Collected During Your Registration for Our Talent Community (“Talent Community Data”):

You might also choose to join one or more of our talent communities without immediately applying for a specific position with Foody. In this case, we will collect and process your Personal Data (contact details e.g. name, phone number, email address, home address, uploaded documents) in order to keep you informed of future job opportunities at Foody, to provide you with updates on our business activities, or to ask you for feedback to let us know about your experience with us. The open positions are advertised through newsletters, through direct emails from our recruitment team and the general follow up messages as part of our recruitment process. If you sign up for one of our talent events (either in one of our offices or online), we will process your Talent Community Data for the aforementioned purposes as well as for the organization of the event.

The legal basis for the processing of your Talent Community Data is your consent. You are free to withdraw your consent at any point in time by unsubscribing from our Talent Community

2.5 Information to Contact You (“Contact Data”)

You may also receive information about your application via SMS. In this case, we will collect your Personal Data (contact details, e.g. name and phone number) in order to contact you.

The legal basis for processing your contact details to send you job application reminders via Whatsapp and/or SMS is your consent. You are free to withdraw your consent at any time by unsubscribing from our communications.

2.6 Automated Decision-Making

Your application will always be reviewed by a human being. We do not rely on solely automated decision-making to conduct our recruitment activities.

3. How is your personal data shared?

3.1 Within Delivery Hero (Cyprus) Ltd. Internally, your Personal Data will only be shared with the personnel involved in the hiring process and the management of our talent communities (if applicable), such as members of the Talent Acquisition team and the respective hiring managers. If you reach the final stages of the recruitment process and/or receive an offer from Foody, your Personal Data may be subject to review by our works council.

3.2 Service providers. The Website is powered by our database providers, the online recruiting service, human resources management and applicant tracking systems is provided by SmartRecruiters. Your Personal Data will be processed on behalf of Foody by our data processors, cloud services providers engaged by Foody to help manage our recruitment and hiring process on our behalf. We will ensure an adequate level of protection for Personal Data processed in accordance with this Privacy Policy at any point in time. All transfers will be subject to appropriate safeguards such as binding corporate rules or approved standard contractual clauses. Where necessary, we have implemented supplementary security measures under the standard contractual clauses certified by the EU Commission to provide an adequate level of data protection for any transfers outside the EU. You can obtain a copy of the standard contractual clauses by contacting us.

3.3 Group companies. Foody is part of the Delivery Hero, a global organization with multiple brands around the world. You can find more information on our brands and their locations on our Website. Our global Talent Acquisition team is dedicated to connecting candidates with the best job opportunities across our group of companies. Therefore, when you apply for a job or join a talent community associated with a Delivery Hero company, we may share your Personal Data among our group of companies located in different countries. If there is a suitable opening or talent community aligning with your profile, a Delivery Hero company may contact you to encourage you to apply for a relevant position or to receive updates on future job opportunities within that specific entity. Before reaching out to you or adding you to a talent community, we will always ask for your consent.

All Delivery Hero companies must honor this Privacy Policy as well as strict intra-group data transfer agreements. We ensure an adequate level of protection for Personal Data within the scope of the GDPR even where Personal Data is shared with a Delivery Hero company located outside the European Economic Area (EEA). Our legal basis for the sharing of data within the Delivery Hero Group is Art. 6(1)(f) GDPR.

If you do not want your personal data to be shared across the Delivery Hero group, you may opt out by contacting us at [email protected]. By opting out, we ensure that only the Delivery Hero company with which you are seeking employment will receive your Personal Data.

3.4 Third parties. We do not share Personal Data about our candidates with any third parties unless we have our candidates’ specific permission to do so, or we share information with private or public authorities that will enable us to fight fraud and abuse on our network, to investigate suspected violations of law, or to fight any other suspected breach of applicable law. This also includes screening our candidates in relation to international sanctions in the context of international security threats, terrorism or money laundering. In any case, you will be notified before we share your Personal Data with any third parties.

3.5 Business transfer. As a matter of policy, we do not rent or sell Personal Data about our candidates with non-affiliated third parties unless we have specific consent to do so. In the event that our business or a division of our business is reorganized or sold and we transfer all or substantially all of our assets to a new owner, your Personal Data may be transferred to the buyer, subject to appropriate privacy safeguards.

4. For how long do we retain your personal data?

After your application, unless you are starting your employment with us, with your consent, we will store your Application Data for future consideration in our talent pool for a duration of 6 months after you have completed the application process.

We keep all other Personal Data no longer than necessary for the purpose for which we obtained them and for any other permitted compatible purposes, including compliance with legal obligations in the field of employment law. Group records management schedules document the applicable minimum retention periods required by local laws.

5. What legal rights do you have?

Data protection laws provide you with various legal rights and we are committed to respecting them. For this purpose, we strive to provide clear and transparent information about your rights and make it as convenient as possible for you to exercise them.

Under the GDPR and applicable national laws and regulations, you are entitled to the following rights:

Right to access

You have the right to access your personal data and obtain additional information on how we process it. You may also request a copy of the data we maintain relating to you.

Right to rectification

If you notice that your personal data is incorrect, you can always request that we correct it.

Right to erasure

You have the right to ask us to delete your personal data. Please note that even if you exercise this right, we may be required to retain some of your information if we process it as part of our legal obligations.

Right to restriction of processing

If you have requested the deletion of your personal data, but we are legally obliged to retain some of it, we will store your data in our archives and only reintegrate it into our operational systems with your consent. However, you will not be able to use our Services during this time, otherwise we will need to process your data again. 

Right to data portability

You can ask us to transmit your personal data in a machine-readable format to you or to another data controller. However, please note that this right only applies to personal data that we process under a contract or with your consent.

Right to object 

You have the right, for reasons arising from your particular situation, to object at any time to any processing of your personal data, which is processed on the basis of our legitimate interests. If you object, we will no longer process your personal data unless we can prove compelling grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise, or defend against legal claims. 

Right of complaint

You can raise a complaint about our processing with the Cyprus Data Protection Authority. The supervisory authority responsible for us is the: Office of the Commissioner for Personal Data Protection

Address: Iasonos 1, Nicosia, Cyprus

Postcode City: 1082

Email Address: [email protected]

Right not to be subject to a decision based solely on automated processing

You have the right to object to a fully automated decision (i.e. without any human intervention in the decision-making process) that has legal effects or significantly affects you.

Right to withdraw consent

Where we rely on consent to process your personal data, you have the right to withdraw your consent at any time. If there is no other legitimate ground upon which we are allowed to process your personal data, we will immediately stop processing it. Withdrawal of consent does not affect the legality of the processing carried out before the withdrawal.

If you would like to exercise your legal rights, please contact us under [email protected] .

6. Changes to this Policy

We may update this Privacy Policy from time to time to reflect our new processes, new technologies, and legal obligations. We are committed to keeping you informed of any changes to our privacy practices, so we encourage you to review this Privacy Policy to keep updated.

Last modified: June, 2024



Browse Jobs