Privacy Policy

Delivery Hero's Privacy Policy

DEUTSCH

  1. General

Delivery Hero SE (hereinafter referred to as “Delivery Hero”) is pleased about your visit to the website as well as your interest in the company and its offers. We take the protection of your personal data seriously and we want you to feel comfortable visiting our websites.

In the following, we will inform you about the data we store about you when you use our website and how this data is used. If our website contains links that lead to the website of another provider, our data protection policy does not apply to the website to which you are forwarded.

Please take enough time to read this note carefully.

  1. Data Controller

Data Controller is the entity that is responsible for the processing of your personal data and deciding on  the purposes and means of the processing of your personal data. In this case the data controller is:

Delivery Hero SE
Oranienburger Straße 70
10117 Berlin
Germany
E-Mail: moc.orehyrevilednull@ycavirp

You can contact our data protection officer at: moc.orehyrevilednull@OPD
If you want to object to the collection, processing or storage of your personal data by Delivery Hero or exercise your other rights in accordance with the relevant data protection laws, you can send your objection via e-mail to the address stated above.

  1. Your Rights

You have the right to receive explicit information from Delivery Hero about the personal data we have stored about you, free of charge.
In addition, you have the following rights:

  • Right to access
  • Right to rectification and erasure
  • Right to restriction of processing of your personal data
  • Right to portability
  • Right to object
  • Right to lodge a complaint to a supervisory authority about the processing of your personal data by us.

The responsible supervisory authority for Delivery Hero is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
Germany
E-Mail: ed.nilreb-ztuhcsnetadnull@xobliam

If you would like to exercise your rights as a data subject, please do not hesitate to contact us via the contact information provided above.

  1. Purposes and legal basis of our processing activities and our retention policy

In order to be able to provide our services to you, we also have to collect, process, store and share certain personal data with contract processors. Below you can see which of your data we need for which purposes and on which legal basis we process them, as well as under which circumstances we share your data with third parties.

Personal data is information from which we can directly or indirectly relate to your person, such as first and last name, address, phone number, date of birth, location data or e-mail address.

Contact form “Deliveryhero.com”

We will store the personal data (name, e-mail address) you provide to us for contacting you and we will contact you as requested.

This processing is based on our legitimate interest pursuant to Art. 6 para. 1 f) GDPR to be able to contact you immediately and process your request. We will store the personal data you have transmitted for one year and then delete it unless legal retention periods arise from the processing.

Contact form „ir.deliveryhero.com“

If you would like to contact us via the contact form under the “Investor Relations” tab, we will use the personal data you have provided to us for contacting you (mandatory fields: Name, first name; optional: telephone number, address, e-mail address, country) and contact you as requested. This contact form is technically administered by our data processor EQS Group AG and incorporated into our website.

This processing is based on our legitimate interest pursuant to Art. 6 para. 1 f) GDPR to be able to contact you immediately and process your request. We will store the personal data you have transmitted for one year and then delete it unless legal retention periods arise from the processing.

Career
We would be pleased if you searched our career page for interesting job offers. We use the services of our data processor Workday, Inc. based in the USA to show you our vacant positions. If you are interested in a vacant position and click on “apply”, you will be redirected to the website of our processor.

You will be asked to enter your master data in the input mask and upload relevant certificates. The mandatory fields are marked with a star (*). All other input fields are optional and do not have to be filled in by you.

Delivery Hero processes your personal data in this context for the purpose of recruitment and personnel selection. As a result, Delivery Hero may use your personal data to evaluate and select applicants, including for example setting up and performing interviews and tests, assessing and evaluating results, and as otherwise required in the recruitment process, including final hiring.

Delivery Hero will not share your personal information with unauthorized third parties. However, as a global company consisting of several affiliates in different countries, Delivery Hero has international locations. Delivery Hero may from time to time use third parties on its behalf. You agree that your personal information may be shared and/or passed on as necessary to a Delivery Hero group company and third parties acting on Delivery Hero’s behalf, including servers and databases outside the country where you provided your personal information to Delivery Hero. We will store the data you provide for a maximum period of six months and then delete them. If your application is successful, we will use the data submitted during the application process to prepare and perform the employment contract and then delete it from the application system.

The legal basis for processing your personal data as part of the application process is Art. 6 para. 1 lit. b GDPR (performance of contract or implementation of pre-contractual measures) and for selecting and using suitable technical services and forwarding your application documents to affiliated group companies is Art. 6 para. 1 lit. f GDPR. You can also give us your consent to inform you about further vacant positions in the future for a maximum period of 12 months. The given consent can be revoked at any time and has no impact on your application process.

In this case, please contact us at moc.orehyrevilednull@gnitiurcer and inform us of the revocation of your consent.

Analysis of the use of our website
We are always striving to customize our website according to the wishes of the website users. In order to achieve this, we evaluate the use of our website in anonymous form. We record the name of the website accessed, the date and time of access, the browser type used and your IP address. This data is only processed for statistical purposes to optimize our website presence and to operate the website.

This processing is based on our legitimate interest under Art. 6 para. 1 f) GDPR to provide you with a functional and demand-driven website. We will keep your personal data for seven days and then anonymize this information by deleting any personally identifiable content of the information collected, such as your IP address.  

Protection against attacks and other unlawful access attempts
In order to protect you and ourselves from possible attacks by third parties and to ensure secure access to our website, we collect the name of the website accessed, the date and time of access, the type of browser used and your IP address in access logs.  

This processing is based on our legitimate interest according to Art. 6 para. 1 f) GDPR to provide you with a secure website and to protect us both preventively and in the event of an attack to immediately take appropriate measures. We will store the personal data transmitted by you for seven days and then anonymise this information by deleting any personally identifiable content of the information collected, such as your IP address.  

Share register
Delivery Hero shares are registered shares. In the case of registered shares, Section 67 of the German Stock Corporation Act stipulates that these must be entered in the company’s share register, stating the name, date of birth and address of the shareholder as well as the number of shares or the share number and, in the case of par value shares, the amount. The shareholder is generally obliged to provide the Company with this information. In addition, we process personal data that you provide to us when registering for the Annual General Meeting or voting by postal vote, as well as when ordering tickets and/or granting powers of attorney.

We use your personal data for the purposes specified in the German Stock Corporation Act. These purposes include, in particular, keeping the share register, communicating with you as a shareholder and conducting the Annual General Meeting. The legal basis for the processing of your personal data is the German Stock Corporation Act in conjunction with Article 6 paragraph 1 c) GDPR. In addition, we may process your personal data to fulfill other legal obligations, such as regulatory requirements, stock corporation, commercial and tax retention obligations. In order to comply with provisions of German Stock Corporation Act, we must, for example, when authorizing the proxies nominated by the Company for the Annual General Meeting, keep verifiable records of the data that serves as proof of authorization and store them for three years protected from unauthorized access (Section 134 (3) sentence 5 German Stock Corporation Act).

We will store the data collected and stored in this context in accordance with the statutory retention periods and then destroy them.

  1. Categories of recipients and recipients of your personal data

We make use of the professional services of data processors. These are natural or legal persons, authorities, institutions or other bodies that process personal data on behalf of the data controller. As the selection of our processors may change from time to time, we provide an overview of the categories of potential recipients below. If you wish to receive a complete list of our processors at the time of processing your personal data, please contact our data protection officer at moc.orehyrevilednull@opd


Categories of recipients:
External service providers: These are companies that support our business by evaluating and optimizing our marketing campaigns, but also by providing personalized advertising, IT solutions and infrastructure, or by ensuring the security of our business operations, for example by detecting and resolving malfunctions and identifying attempted attacks.

Regarding relevant information on investor relations, our processor EQS Group AG is commissioned to carry out the necessary processing on our behalf. Furthermore, Link Market Service GmbH is responsible for the technical and organizational structure of Delivery Hero’s share registers and processes information in the context of the Annual General Meeting.


Affiliated companies: If the content of your contact request refers to information from affiliated companies of Delivery Hero, we will forward the content of your contact request to the respective addresses. We also include services from our affiliates in our business activities by helping us to ensure the security of this website.

Law enforcement agencies and legal proceedings:
Unfortunately, it can happen that visitors to our website do not behave according to the rules and want to harm us. In these cases, we are not only legally obliged to disclose personal data, it is of course also in our interest to avert damage, enforce our claims and reject unjustified claims.

  1. Transfer of data to third countries

We process your data mainly within the European Union (EU) and the European Economic Area (EEA). However, some of our service providers mentioned above are based outside the EU and the EEA.

The GDPR has high requirements for the transfer of personal data to third countries. All our data receivers have to measure up to these requirements. Before we transfer your data to a service provider in third countries, every service provider is first assessed with regard to its data protection level.  They will only be shortlisted for service providers if they can demonstrate an adequate level of data protection.

Regardless of whether our service providers are located within the EU/EEA or in third countries, each service provider must sign a data processing agreement with us. Service providers outside the EU/EEA must meet additional requirements. According to Art. 44 ff. GDPR personal data may be transferred to service providers that meet at least one of the following requirements:

  1. The European Commission has decided that the third country ensures an adequate level of protection (e.g. Israel and Canada)
  2. Standard data protection clauses adopted,
  3. Approved certification mechanism.

These are statements of conformity ensuring an adequate level of data protection which cannot be modified by the contracting parties

Under international agreements, companies can be certified according to defined criteria. One of these certifications is the EU-US Privacy Shield Agreement.

On the following link you can see certified companies: https://www.privacyshield.gov/welcome

We will only transfer your data to service providers who meet at least one of these requirements. If we transfer data to third countries, these are mainly companies based in the USA or Israel.

  1. Subject to change

We reserve the right to change this privacy policy in accordance with legal requirements. Of course, we will inform you about any significant changes on this page.