MENU
This notice is to inform you that we (McDonald's in Bulgaria) will collect personal data and process it in compliance with the provisions of the GDPR.
Protecting personal data and ensuring its lawful, fair and transparent processing is a priority for us.
Below we provide you with information about what personal data we collect and how we process it by the principles and requirements of the General Data Protection Regulation (GDPR).
The personal data controller is McDonald's in Bulgaria; i.e. Sunfoods Bulgaria LTD, EEC 831507493, with headquarters' address: Sofia City 1766, Mladost 4 district, Business park, Building 1A, Floor 4.
To ensure the security of your personal data and to protect it from loss, alteration, destruction and unauthorized access, we have provided a number of security measures. These include technologies for secure data transfer SSL, encrypted connections and others alike. The measures are continuously being updated, taking into account the dynamic development of technology and different types of threats.
1.1. We process your personal data for access to our website and mobile app on the basis of a legitimate interest expressed in ensuring and maintaining information and network security between your device and our server. These personal data include: technical data required for the proper functioning of the connection between the website and your device, such as: online identification, browser type/version, operating system, reference URL (the previously visited page), input data, device location, unique device identifier, IP address, time of request to the server, cookies (for more information see our Cookie Policy). For the same purpose and on the same legal basis, we send email notifications to users of the mobile app to perform two-factor authentication when registering or logging into their account.
1.2. While implementing sufficient technical and organizational security measures and as needed, we may provide your personal data for access to the website and mobile app to recipients – providers of technical services related to the functioning of the website and/ or the device – server connection.
1.3. Our server will store your personal data until they are necessary for the functioning of the website, the mobile app, and/or the device - server connection, however not more than 1 year after the last connection (i.e. the last time you loaded the website or the mobile app).
2.1. We store your application in our database, subject to the rules for personal data protection rules of the Bulgarian and European law.
2.2. Data connected with your application (provided by you in the course of the application process) shall remain in the system for a period of 6 (six) months. After that term, the application shall be deleted.
2.3. The personal data that we process include:
2.4. The purpose for which we process your personal data is recruitment - the processing will allow us to assess whether you meet the requirements for the relevant position and whether you are the most suitable applicant. We may also process your personal data in connection with possible legal claims, legal proceedings and to protect our business interests.
2.5. We process your data on a legal basis: the need to take steps on your application for employment before the possible conclusion of a contract with us, and our legitimate interest to select the most suitable applicant for the respective position. In addition, the processing may be necessary given the principles set out in Bulgarian law concerning the right to defend against legal claims and to protect legitimate rights and interests, and our relevant legitimate interest in exercising our rights concerning possible legal claims.
2.6. By implementing sufficient technical and organizational measures and as needed, we may provide your personal data to providers of courier services; providers of accounting services; as well as to state authorities.
2.7. We store your personal data only until they are necessary for the purpose of processing i.e.:
If we sign a contract, we will continue to use your personal data from the recruitment procedure and will provide you with further information about its processing in the context of the contractual relationship. In short, the processing will be for the purpose of managing our human resources with a view to your career development with us and will be on the basis of our legitimate interest in the effective management of our staff, and it will continue until 5 years after the termination of your legal relationship with us.
2.8. Providing your personal data is voluntary and is a prerequisite for us to be able to proceed with the recruitment process and consider your application.
You can send us questions and other messages by filling out the contact form in the “Contact Us” section of the website and mobile app. To be able to identify you, to process the message and, if necessary, to send you our reply, we process the identification data, contact details and other data you provided in the message.
3.2 Filling out the contact form and sending us a message is entirely voluntary, but if you do not wish to provide us with your personal data, you will not be able to send us the message via the website and mobile app. All the other functionalities of the website and the mobile app will remain accessible.
3.3. The legal basis for our processing of your personal data sent via the contact form is our legitimate interest to process the information/messages sent to us, and to respond to messages addressed to us as necessary.
3.4. The personal data collected and processed in connection with a message addressed to us are kept for 12 months as of the processing of the respective message, or as of the termination of any relations that may have occurred in connection with the message.
4.1 When you use the mobile app we will process your personal data in connection with your use of the available non-personalized offers. This is necessary as some offers may be available on a one-time or limited basis, and for our interest in analyzing the use of the mobile app. As far as these cases do not require using an account, personal data processing will be limited mainly to technical data related to the use of the app (see above in section 1) as well as data regarding your use of non-personalized offers.
4.2. Our legal basis is our legitimate interest in providing the respective offer in the manner set out in the app (e.g. a one-time offer for which we need to be able to store information that you have already used it) and our legitimate interest in analyzing the use of the respective offers and the app in general.
4.3. Your use of the app and the respective offers is entirely voluntary but the processing of your personal data in this regard is required for us to provide you with the app and the offers there in the manner described above.
4.4. The personal data collected and processed in connection with your use of the app, as mentioned above, will be processed for the duration of the validity of the corresponding non-personalized offers. The technical data concerning your use of the application will be processed within the period referred to in point 1.3 above.
5.1 In order to use the app for the purposes of the loyalty program, you need to register a user profile where your collected and used loyalty points are recorded. The information you provide at registration and when using the app allows us to provide you with personalized offers.
5.2. Via the app you may choose whether to receive e-mail, text messages to the mobile number you have provided, or to receive push-notifications from McDonald's. McDonald’s may use the information you provide to contact you for marketing purposes (please see Section 6 below), to send you communications necessary to fulfill McDonald's obligations under the Loyalty Program Terms and Conditions, or to comply with a legal obligation.
You can choose how we communicate with you. You can manage your communication preferences from the profile section of the app where you can find instructions on how to opt out. Usually you can change the communication preferences using the settings of your device. In addition, our communications themselves may include the ability for you to opt out. You understand and accept that you may need to manage separately your communication preferences for each method of communication. For example, if you opt out of receiving marketing emails, you may continue to receive marketing text messages if you have selected to receive them (please see Section 6 below). Please note that for some of the communications related to your profile or services, the only way to stop receiving them is to delete your account in the app.
5.3 Our legal basis is our legitimate interest in operating the loyalty program in accordance with its general terms and conditions. In some cases, we may have a legal obligation to send you a certain message.
5.4. Your use of the app and the respective personalized offers is entirely voluntary but the processing of your personal data in this regard is required for us to provide you with the loyalty program in accordance with its general terms and conditions.
5.5. The personal data collected and processed in connection with your participation in the loyalty program, as mentioned above, will be processed for the duration of your participation. You can delete your user profile from the user panel of the app at any time.
6.1 If you have given consent to receive news, updates and promotions from us, your personal data provided when registering and using the app may be used to contact you by email or text message (SMS) for direct marketing purposes.
6.2 The legal basis for the processing of your personal data is your consent, which can be withdrawn using the options available in your profile on the app, via an “unsubscribe” link available in a message received, by deleting your profile in the app, and by contacting us as set out below.
6.3 The personal data collected in connection with the consent you have provided will be processed for up to 2 years from its withdrawal or the deletion of your profile in the app.
7.1 You have the following rights in relation to the processing of your personal data:
7.2 To exercise your rights above, you may send such a request in free form to the following e-mail address: Business.Center@bg.mcd.com .
8.1. We use cookies. A “cookie” is a small text file that our web server sends to the cookie folder on your computer. The main function of a cookie is to allow our web server to partially recognize your operating system and web browser settings in order to improve and optimize the performance of our website. Another important purpose of the cookie is to provide feedback about the effectiveness of our site and to collect statistical data which help us select and improve the services we offer.
8.2. Some cookies are important for the functioning of our website and are activated automatically when users visit.
8.3. You can learn more about the cookies we use in our Cookie Policy.
Prepared and effective from: 20.02.23г.
