Picnic candidate privacy statement
In this privacy statement, you will find information on how Picnic (“Picnic” / “we” / “our” / “us”) collects and uses personal data when you apply for a job at Picnic.
We, Picnic, are responsible for the data you provide when applying and the data we collect during the recruitment process.
This data helps ensure the application process runs as smoothly as possible. At the same time, we understand that you do not want your personal data to be available to everyone. You can therefore rest assured that we handle your data with care and comply with all laws and regulations regarding the use of your information.
Because we believe it is important for you to understand which data we collect and how we use it, we have drawn up this Privacy Statement for applicants. Here, you will find which personal data we collect from you as a Picnic applicant, how we use that personal data, with whom this data is shared, and what your rights are regarding your personal data.
This Privacy Statement applies when you apply for a job, internship, or apprenticeship at Picnic. If you would like to read more about how Picnic handles the personal data of employees or contractors, please refer to our employee privacy statement, available on Picnic’s internal websites and wikis.
When we refer to data or personal data in this privacy statement, we mean all information that can be directly or indirectly linked to you as an individual. When you apply for a job, internship, or apprenticeship at Picnic, we collect and use various categories of data.
We collect personal data about you from the following sources:
• You, the applicant
• Recruitment agencies we work with
• Online networking profiles, such as LinkedIn
• References who have recommended you for the role
• Social plugins
i) Information you share with us via our application form:
Name and contact details:
• Name
• Gender
• Contact information (address, telephone number, email address)
• Other information you share
Application data:
• Your job preferences
• Cover letters
• Your desired salary and other terms regarding remuneration and employment conditions
• Your CV
• Information about your previous work experience, education, and other relevant experiences
• References and recommendations
ii) Information you share with us, or that we collect, during the interview
Application data:
• Information about your application process and its progress
• The interviewers with whom you have had discussions
Assessments and evaluations:
• The interviewers’ impressions and assessments of you
• A transcript (spoken text converted into written text) of the conversation between you and the recruiter
iii) Information we receive from third parties or other sources:
Picnic may receive data from recruitment agencies and other third parties to find suitable candidates for vacancies. Furthermore, we use online sources, such as LinkedIn, to find more information about candidates.
Name and contact details:
• Name
• Gender
• Contact information (address, telephone number, email address)
• Other information you share
Application data:
• Your job preferences
• Cover letters
• Your desired salary and other terms regarding remuneration and employment conditions
• Your CV
• Information about your previous work experience, education, and other relevant experiences
• References and recommendations
Other data:
• Your use of the app and our websites
• Data from social plugins
We ensure that your personal data is only accessible to individuals who genuinely need this information to perform their duties and obligations, or to third parties with whom we collaborate for the reasons mentioned above.
Your personal data may only be shared with other employees, other Picnic companies, contractors, consultants, and service providers who require the data to assist Picnic in establishing, managing, or terminating your relationship with Picnic. For example, we share your information with our recruitment agencies or service providers who conduct assessments on our behalf. In some cases, these parties may also provide certain IT and data processing services to us. When we share personal data with these parties, we generally require them to use the data only in accordance with this privacy statement. We also ensure that these parties respect the confidentiality of your personal data and have implemented appropriate measures to protect the data.
During the application process, we aim to process your data within Europe as much as possible. However, it is sometimes necessary to process your data outside Europe—for example, if we use a service provider based outside Europe. If we use your data outside Europe, we ensure that this is done in accordance with this privacy statement and applicable data protection legislation. We ensure that your personal data is always properly protected. We do this, for instance, by entering into agreements with service providers based on the applicable European Standard Contractual Clauses for the international transfer of personal data (you may ask us for a copy). Under these standard clauses, you can exercise your rights by contacting us or the third party processing your personal data.
We ensure that you maintain control over your own data. During your application process, you have the right to access, update, correct, and delete your data, as well as the right to restrict its use.
If your personal data changes during the application process, you can ask us to amend or delete certain information. You can also request an overview of the information we hold about you. Furthermore, you have the right to object to the use of your data. You may also ask us to transfer your data to other organisations.
If we have requested your consent to use your data for a specific purpose, you can withdraw this consent at any time. In some cases, we process your data based on our legitimate interest. In those instances, you can ask us for more information regarding these interests.
There are a few exceptions to your rights. For example, we cannot delete your data if the law requires us to retain it or if we need it in the context of a contract. Access to your information may also be denied if the law prohibits us from disclosing such information.
If you wish to exercise any of your rights, please contact us using the contact details below. If we are unable to reach a solution together, you also have the right to contact the competent supervisory authority in the country where you work.
Yes, this privacy statement may be amended from time to time. The latest version can always be found on this page.
Last update: February 2026
Depending on the country and the position for which you are applying at Picnic, the responsible entity is Picnic B.V., Picnic Services B.V., Picnic Hubs B.V., Picnic Fulfilment B.V., Picnic Technologies B.V., Picnic International B.V., Picnic GmbH, or Picnic SAS.
The Picnic company responsible for the data relating to your application may also share this data with other Picnic companies for the purposes described in this privacy statement.
To use your personal data, Picnic always requires a reason (a so-called legal basis).
We only use your data based on the following grounds:
Performance of a contract or a (pre-)contractual relationship: We need some data to fulfil our contractual obligations as an employer—for example, to manage the recruitment process or to be able to draft and conclude an employment contract with you.
Legal obligation: Sometimes we are legally obliged to collect and retain certain data. For instance, to comply with tax obligations or if we suspect fraud.
Consent: Picnic may ask for your permission to send you messages or emails about (other) relevant vacancies or for the use of tracking cookies for recruitment purposes. You can withdraw your consent at any time.
Legitimate interest: In certain situations, Picnic or another party has a legitimate interest in processing your personal data—for example, to improve our recruitment process or our marketing activities. Please feel free to let us know if you would like more information about a specific application of this legitimate interest.
Picnic uses your data for the following purposes:
1. To assess your suitability for a (side) job at Picnic
We use your personal data to assess whether you are suitable for a (side) job at Picnic. Based on the information you share with us, we evaluate your suitability for the position you applied for and, in some cases, for other roles within Picnic. We also manage your application and prepare for a potential appointment. If the application process shows that you are a match for Picnic, we will draw up an offer.
Use of AI during the application procedure
During your online application procedure, we may use AI in two ways: (1) for automated interaction during the conversation and (2) for recording, transcribing, and summarising your interview via an external AI tool. This helps our interviewers focus fully on the conversation and helps us improve our processes.
We will inform you in advance when AI is being used. You can opt out of the recording and processing of your conversation. AI only supports the process and is never used to make automated decisions about you.
For this purpose, we use the following types of personal data:
• Name and contact details
• Application data
• Data from the job interview
• Audio recordings of your interview
• Interview transcripts and AI-generated summaries
• Information provided by you during the interview
The legal basis for processing this data is:
• Legitimate interest
• Performance of a contract
2. To stay in contact with you
We like to stay in touch with you during and after the application process—for example, regarding the application process itself, but also regarding other opportunities within Picnic or relevant projects we are working on.
For this purpose, we use the following types of personal data:
• Name and contact details
• Application data
The legal basis for processing this data is:
• Legitimate interest
• Performance of a contract
3. To show advertisements to you and other candidates
We would like to show you and other potential candidates online advertisements. This helps us find more people who may want to work at Picnic. We use your personal data for this purpose, collecting it through methods such as placing cookies. For more information on our use of cookies, please see our cookie statement.
If you give us permission, or if we have a legitimate interest, we share the following information with advertising networks such as Google, TikTok, and Meta/Facebook:
• A hashed version of your email address and phone number
• Usage data
• Information about the app, browser, and device (such as device IDs) and information about when you open the app
• Advertising data
These advertising networks help us advertise more purposefully and efficiently. We share this information to show you and others relevant advertisements on other websites.
Furthermore, advertising networks can use this information to find other potential Picnic candidates and show them advertisements if they have given consent. We also use this information to measure the effectiveness of our advertising campaigns and to see which advertisements you may have previously seen from us. These third parties may further use your data to show you targeted advertisements based on the data they have collected. We have a legitimate interest in measuring and optimising the effectiveness of our campaigns at an aggregate level.
The legal basis for processing this data is:
• Consent, where legally required
• Legitimate interest
4. To maintain and improve our application processes, for internal planning and management reporting, and to comply with laws and regulations
We believe it is important to properly maintain and constantly improve our application processes. Therefore, we prepare management reports and analyse application data, such as the duration of the process. Furthermore, we use personal data to better plan the application process internally. We also create and share reports required to comply with applicable laws and regulations.
For this purpose, we use the following types of personal data:
• Name and contact details
• Application data
• Data from the job interview
The legal basis for processing this data is:
• Legitimate interest
• Legal obligations
We only retain your data for as long as it is necessary for the purposes for which it was collected. The exact retention period therefore varies and depends on the purpose of the data collection. As a general rule, we keep your data for two years. This allows us to easily identify returning applicants among the many applications we receive and use the data we already have. We therefore retain your data based on our legitimate interest in managing and optimising our recruitment process.
If your application is unsuccessful, we may retain your data in case we wish to send you relevant vacancies at a later date (but only if you have given us permission to do so). If we no longer have a legitimate interest in retaining your personal data, we will delete or anonymise it. If we anonymise your data, we ensure it can no longer be linked to you. This allows us to continue using anonymised information for our legitimate business interests as mentioned above.
If necessary to protect our legal rights, we will retain your data for longer than one year, at least until the relevant claim(s) have been settled.
If your application is successful (hopefully!) and you join us, we will transfer the data collected during your application process to your personnel file. This makes the administration of your employment easier. That information will then no longer fall under this privacy statement, but under the privacy statement for Picnic employees.
Picnic takes organisational and technical measures to secure and protect your personal data. For example, we use various security techniques (such as firewalls, encryption and virus scanners) to ensure that your personal data and the content of your communication is protected. We use physical (access) security measures for our offices and important equipment (such as servers). We also keep our systems and software as up-to-date as possible and ensure that your data is accessed only by those who need access for their role. Picnic has a dedicated Security Team that focuses on the protection and security of your personal data.
If you have any questions, the best way to get in touch is to send a message to the person you are in contact with regarding your application. You can also send an email to privacy@picnic.nl.
Do you have any questions, comments, requests, or complaints about this privacy statement or how we handle your personal data? You can reach our Data Protection Officer via dpo@picnic.nl.
In this privacy statement, you will find information on how Picnic (“Picnic” / “we” / “our” / “us”) collects and uses personal data when you apply for a job at Picnic.