WOLT RECRUITMENT PRIVACY STATEMENT
1. INTRODUCTION
1.1. Welcome to Wolt Recruitment Privacy Statement
At Wolt, we take data protection of job applicants and candidates seriously.
By this Recruitment Privacy Statement we give a comprehensive overview on how, why and where we process personal data for recruitment, candidate sourcing and headhunting purposes.
When we use the definition “Statement”, it means this Recruitment Privacy Statement. “You” means job applicants and people we contact ourselves for recruitment purposes. “Wolt” and “we” means Wolt legal entity you have applied for or that has been in contact with you and also all other Wolt legal entities (together referred to as the “Wolt Group”) unless otherwise stated.
Please note that this Statement applies to the processing of personal data carried out by Wolt as a data controller in recruitment context.
In certain cases, we may also engage in candidate sourcing and headhunting in order to fill certain positions. This Statement will also be applied in this context.
This Statement will be updated from time to time.
1.2. Data controllers within Wolt
Wolt Group is part of DoorDash, Inc. whose official address is 303 2nd St, Suite 800, San Francisco, CA 94107, USA. However, this Statement applies only to data processing that is done by legal entities belonging to the Wolt Group in a recruitment context.
Local legal entities belonging to the Wolt Group will act as joint controllers together with Wolt Enterprises Oy (Business ID: 2646647-9) provided that such local entity has been named as the hiring legal entity. This means that they determine together the purposes and means for personal data processing. In other cases Wolt Enterprises Oy acts as a sole controller.
For practical reasons, Wolt Enterprises Oy has been appointed responsible for handling all questions and requests relating to the personal data processing at Wolt.
1.3. How can you contact us?
Wolt Enterprises Oy | Wolt Enterprises Oy Business ID: 2646674-9 Pohjoinen Rautatiekatu 21, 00100, Helsinki, Finland support@wolt.com |
Talent Acquisition | Reach out to the Talent Acquisition contact person mentioned in the job advertisement or who is taking care of your recruitment process. |
Privacy matters, issues and requests If you have any questions or concerns about your personal data processing, you may reach out to the Privacy Team. | privacy@wolt.com |
Data Protection Officer | privacy@wolt.com |
Contacts relating to Whistleblowing process | compliance@wolt.com |
2. PERSONAL DATA PROCESSING PRINCIPLES
2.1. What personal data do we collect?
In this Statement personal data means information that identifies job applicants and potential candidates for employment with us, either submitted as part of the application, through alternative channels or when candidates are contacted by Wolt.
In the context of this Statement, we only collect and store information for the purposes of hiring and evaluating the suitability of the candidate.
We may process the following information relating to job applicants if related for the fulfillment of employer and recruiter obligations and responsibilities or rights in accordance with applicable legislation.
Data we may collect and process during the recruitment is for example:
Identification and contact information | Such as: - Name; - Date of birth; - Gender; - Contact details such as email and phone number; - Social media profile (e.g. Linkedin); - Nationality, passport, work permits, right to work documents and associated documents; and, - Photograph. |
Application data | Such as: - Application; - Curriculum vitae, resume and associated documents; - Documents relating to work history; and, - Assignments, portfolios and associated documents. |
Skills and competencies data | Such as: - Educational and professional background; - Certificates; - Qualifications; - Skills (e.g. languages); and, - Test or evaluation results and associated data. |
Admission test data | If conducted during the recruitment process, such as: - Outcome and results of any test or evaluation results carried out in connection with recruitment and associated data, whether technical, written or oral. |
Demographic and background information | Such as: - Disability information, health information and other sensitive or special categories of personal data may be processed with your consent or based on other applicable legal grounds; - Background information, such as credit checks, criminal convictions and offenses when allowed by the applicable legislation and associated background information; and, - Based on your consent, other demographic information to improve our processes and practices in the diversity, equality and inclusion context. |
Sensory data | Such as: - Audio, electronic, visual or associated information (e.g. in connection with interviews, photographs, CCTV of premises). |
IT data | Such as: - IP address; - Device type; - Browser version; - Cookies and other similar technologies; and, - Other data that is automatically sent to us by your web browser when you use our website and recruiting tools to facilitate the recruiting process. Further information on use of cookies and third party analytics at Wolt, please see Wolt Privacy Statement available at: https://explore.wolt.com/en/fin/privacy. |
Internal job applicants | Such as: - Information related to work history, conduct, references, performance and associated information. |
Reference data | Such as: - Name and contact information of a referee by Your consent. |
Other | We may collect any other information required and allowed by an applicable legislation, provided by the applicant or generated by us during the recruitment process and communication with us. |
2.2. Where do we get Your personal data from?
We may collect information in a variety of ways. Primarily we receive personal data directly from you.
However, some personal data may be collected from third parties if and to the extent necessary for processing purposes described in this Statement and allowed by the applicable laws.
In limited situations we may also collect background information such as information on credit checks and criminal convictions and offences. In such limited cases where we do process such data, we do this in accordance with applicable legislation as in force from time to time and inform you about such collection and ask for your consent when necessary.
2.3. The purpose and legitimate grounds for processing
Personal data processed under this Statement is processed in order to carry out candidate sourcing, recruitment processes, candidate evaluation and communication.
Your data is processed on the basis of a pre-contractual relationship at your request in order for us to assess the potential grounds for entering into an employment contract with you or based on your consent.
When engaging in candidate sourcing we process personal data based on our legitimate interests to hire qualified staff to service our business.
When contacting potential referees You have informed us about, the process is based on Your consent or on our legitimate interests to assess the potential grounds for entering into an employment with You.
Anyone is encouraged to speak up if they see or hear about something being wrong. For this purpose, Wolt has a whistleblowing channel SpeakUp to report in a secure way any misconduct at Wolt, such as unethical, illegal or suspicious activities, any wrongdoing or breaches of local laws and regulations. The processing of personal data within the whistleblowing process is based on the legal obligation and legitimate interests of Wolt.
If Wolt is involved in a merger or acquisition, we may transfer personal data of employees to the third party involved based on our legitimate interest where such transfer is necessary for the merger or acquisition or the closing thereof.
2.4.How long do we store the data?
Personal data processed under this Statement is primarily stored for the period of one (1) year and always in accordance with local legislation as in force from time to time. Deviating from what is mentioned above, the personal data will be stored:
In Japan for five (5) years;
In Germany for six (6) months; and,
In Israel for two (2) years.
We may also process and retain your personal data for a longer period to fulfill our interests in connection with candidate sourcing. In this scenario, your personal data may be retained for a maximum of two (2) years.
We may also store personal data under this Statement for a certain period based on our legitimate interest for the purpose of possible litigation, claims or regulatory investigations.
2.5. International data transfers
As Wolt operates as part of a global business, your personal data may be transferred to, or processed in, jurisdictions outside of the European Economic Area (“EEA”) and/or the country where you are based, including in the United States.
Additionally, as we and our service providers operate in multiple locations, your personal data may also be processed by our service providers in jurisdictions outside the EEA and/or your country of residence.
When we transfer personal data internationally, Wolt ensures that appropriate safeguards are in place to protect your data. Depending on the circumstances, we rely on:
Adequacy decisions: The European Commission recognizes certain countries as providing an adequate level of data protection under Article 45 GDPR (or equivalent decisions under other laws). We transfer your personal data to countries with adequacy decisions such as the United Kingdom, Israel, Japan, and the United States of America (to the extent the recipient participates in the EU-US Data Privacy Framework);
Standard Contractual Clauses: The European Commission has approved contractual clauses under Article 46 GDPR that allow companies in the EEA to transfer data outside the EEA. These (and their approved equivalent for the UK and Switzerland) are called standard contractual clauses (SCCs). We rely on SCCs to transfer personal data to countries without an adequacy decision and to our Group entities and vendors/partners (to the extent they do not participate in the EU-US Data Privacy Framework) in the United States of America; and,
Other data transfer mechanisms.
More information regarding the transfers of personal data may be obtained by contacting through contact details as indicated on section 1.3.
2.6. With whom we may share your information?
We do not share personal data with third parties outside of Wolt Group unless one of the following circumstances apply:
For legal reasons
We may share personal data with third parties outside our organization if access to the personal data is reasonably necessary to: (i) meet taxation, any applicable law, regulation, and/or court order; (ii) detect, prevent or otherwise address crime and/or security issues; or (iii) protect Wolt’s interests in case of potential claims and civil litigation relating in the recruitment context.
To authorized service providers
We may share personal data to authorized service providers who perform services for us. Such service providers are for example our recruitment and candidate sourcings partners or partners that provide tools and softwares for recruitment purposes. Our agreements with our service providers include commitments that the service providers agree to limit their use of personal data and to comply with privacy and security standards at least as stringent as the terms of this Statement.
For other legitimate reasons
If Wolt is involved in a merger or acquisition, we may transfer personal data of employees to the third party involved. However, we will continue to ensure the confidentiality of all personal data.
With your explicit consent
We may share personal data with third parties outside of our organization for other reasons than the ones mentioned before, when we have your explicit consent to do so. You have a right to withdraw such consent at any time.
2.7. How do we ensure information security?
We do our best to keep your data safe and secure. To ensure that, we use administrative, organizational, technical, and physical safeguards to protect the personal data We collect and process. Our security controls are designed to maintain an appropriate level of data confidentiality and integrity.
The personal data processed under this Statement shall only be processed on a need-to-know basis. The use of personal data is protected by, for example, appropriate user rights, passwords and rights of use. Paper documents shall be stored in a locked storage.
3. YOUR RIGHTS
3.1. Your rights
Right to access
You have a right to access the personal data processed by us. This means that you may contact us and we will inform you what personal data we have collected and processed regarding you and the purposes such data are used for.
Please note however that Wolt may limit your access to certain information received via the whistleblowing platform (called internally the SpeakUp channel) during a critical stage of internal investigation or to the extent such request may jeopardize the anonymity of the whistleblower or other individuals involved.
Right to withdraw consent
In case the processing is based on your consent, you may withdraw the consent at any time.
Right to correct
You have the right to have incorrect, imprecise, incomplete, outdated, or unnecessary personal data we have stored, corrected or completed. You have the right to update for example your contact information or your other personal data.
Right to deletion
You may also ask us to delete your personal data from our systems. We will comply with such a request unless we have a legitimate ground to not delete the data. Please note that during the term of employment data is processed primarily due to legal obligations and therefore we may not be able to delete it.
Right to restriction of processing
You may request us to restrict processing of personal data for example when your data erasure, rectification or objection requests are pending and/or when we do not have legitimate grounds to process your data.
Right to object
You may have the right to object on grounds relating to your particular situation to the processing of your personal data based on our legitimate interest. We will comply with such objections unless we have a legitimate ground not to.
Right to data portability
You have the right to receive the personal data you have provided us with in a structured and commonly used format.
Lodging a complaint
If you consider our personal data processing being inconsistent with the applicable data protection laws and you have not received help by contacting us through privacy@wolt.com, you have a right to lodge a complaint with the local supervisory authority for data protection.
Information on relevant local supervising authority may be requested from privacy@wolt.com or for the EU countries checked from the European Data Protection Board’s website.
3.2. How to use your rights?
If you want to use your rights, please contact privacy@wolt.com. We may reject requests that are unreasonably repetitive, excessive or manifestly unfounded.
4. GROUP LEGAL ENTITIES
You may request for up-to-date information about Wolt Group legal entities processing your personal data by contacting privacy@wolt.com.