Privacy Policy

PRIVACY POLICY RELATED TO THE USE OF MCDONALD’S WEBSITE

This notice is to inform you that we (McDonald's in Bulgaria) will collect personal data and process it in compliance with the provisions of the GDPR, and that this personal data is divided into three groups: data necessary for the technical functioning of the web page and all relevant subpages; data provided for the "Career" subpage, data provided for the "Contact" subpage and data provided for the "Birthday" subpage.

1. CONFIDENTIALITY OF DATA REQUIRED FOR TECHNICAL FUNCTIONING OF THE WEBSITE

1.1. Personal data protection and ensuring their lawful, transparent and fair processing are our priorities.

1.2. Below you will find information about the kinds of personal data that we collect and the method of their processing in compliance with the principles and the requirements of the General Data Protection Regulation (GDPR).

The administrator of personal data is McDonald's in Bulgaria; i.e. "Sunfoods Bulgaria" LTD, EEC 831507493, with headquarters' address: Sofia City 1766, Mladost 4 district, Buisiness park, Building 1A, Floor 4.

1.4. We process your personal data for access to our website on the basis of a legitimate interest expressed in ensuring and maintaining information and network security between your device and our server.

1.5. We process your personal data for the "Career", "Contacts" and "Birthday" subpages on the basis of your consent.

1.6. By implementing sufficient technical and organizational security measures and on a need basis we may provide your personal data for access to the website of recipients – providers of technical services related to the functioning of the website and/ or the connection of device D server.

1.7. Our server will store your personal data until they are necessary for the purpose of functioning of the website and/ or the connection device D server however not more than 1 year after the last connection (i.e. Your last loading of the website).

1.8. In order to ensure the security of your personal data and to protect it from loss, alteration, destruction and unauthorised access, we have provided a number of security measures. These include technologies for secure data transfer SSL, encrypted connections and other alike. The measures are continuously being updated, taking into account the dynamic development of technology and different types of threats.

2. CONFIDENTIALITY OF DATA PROVIDED ABOUT THE SECTION CAREER

2.1. By accepting these general terms and conditions, you agree that we may keep your application in our database for which the rules for personal data protection are applied according to the Bulgarian and European law.

2.2. Data connected with your application (email address, user’s name, CV) shall remain in the system for a period of 6 (six) months. After that term the application shall be deleted.

2.3. The personal data that we process include:

  • Data that you have provided with your application on the Platform: full name; date of birth; address; email and telephone.
  • Data that you have provided in your CV;
  • Technical data required for the correct functioning of the connection between the website and your device: Online identification of input data, device location, unique identifier of device, IP address, cookies (for more information see our Policy about cookies);

2.4. The purpose for which we process your personal data is to sign an employment contract with you to work in a McDonald's restaurant in Bulgaria.

2.5. We process your data on a legal basis: Your consent, which includes voluntary filling in of the application form and submission of your application through the platform.

2.6. By implementing sufficient technical and organizational measures and on a need basis we may provide your personal data to providers of software services; providers of accounting services; as well as to state authorities.

2.7. We store your personal data only until they are necessary for the purpose of processing i.e.:

  • Your personal data provided in the application form on the platform as well as data provided by you in your CV – for a period of 6 (six) months or until you withdraw them;
  • Your personal data processed in connection with the signing and execution of the employment contract - for a period of up to 5 years after the termination of the employment contract, and for a longer period in cases where the law obliges us to do so.

2.8. You have the following rights in connection with the processing of your personal data:

  • To ask that we correct any incorrect, incomplete or invalid personal data that refer to you;
  • To ask that we delete your personal data when it is no longer necessary for the purposes stated above; if we are found to be unlawfully processing your personal data; or if we are found to be in breach of these Special Terms and Conditions, the General Terms and Conditions of Use of the McDonald's Bulgaria web page, our Cookie Policy, Bulgarian laws and European legislation.
  • To withdraw your consent for processing your personal data at any time; the withdrawal of your consent shall not affect the lawfulness of processing until the time of withdrawal; afte ryou withdraw your consent, we will not processe any more your personal data and will delete them and in such case your application will not be reviewed and will not result in contract conclusion.
  • To restrict the processing of your data in the presence of any of the following hypotheses – contestation of the accuracy of the data, the processing is unlawful, the administrator no longer needs the data or you have objected to the processing.

2.9. In order to exercise your rights under Article 2.8 above, you may send such a request in free text to the e-mail address: Business.Center@bg.mcd.com . The data will be erased within thirty days after the message has been sent, after verification of the circumstances.

2.10. The provision of your personal data is voluntary and is required for conclusion of employment contract. If data are not provided, we could not conclude employment contract with you.

2.11. In order to ensure the security of your personal data and to protect it from loss, alteration, destruction and unauthorised access, we have provided a number of security measures. These include technologies for secure transfer of SSL data, encrypted connections and the other alike. The measures are continuously being updated, taking into account the dynamic development of technology and different types of threats.

3. CONFIDENTIALITY OF DATA PROVIDED ABOUT THE SECTION BIRTHDAY

3.1. We process the following information about you: yout name, your child’s name, telephone and email for feedback as well as data required for the technical functioning of our website and/ or your device: Online identification of input data, device location, unique identifier of device, IP address, cookies;

3.2. Your personal data will be used for the following purpose:

  • Our proper execution of the book a restaurant to hold a children's party service;
  • Contacting you for the purpose of confirming and clarifying details for service provision;
  • Accounting purpose.

3.3. We process your data on the following legal basis: your consent to receive the service – booking a restaurant for a children's party.

3.4. By implementing sufficient technical and organizational security measures and on a need basis we may provide your personal data to the following categories of recipients:

  • Animation services providers;
  • Accounting services providers.

3.5. We store personal data only as long as it is necessary for the purposes of the processing, i.e. until the end of the party.

3.6. You have the following rights in connection with the processing of your personal data:

  • The right to receive confirmation whether we process your personal data and to get access to your data;
  • The right to ask that we correct any incorrect, incomplete or invalid personal data that refer to you;
  • The right to ask that we delete your personal data when they are not necessary any more for the above purpose or when unlawful processing of personal data is established;
  • The right to withdraw your consent to processing at any time. Withdrawal of the consent does not affect the lawfulness of the processing based on consent before it has been withdrawn. Once the consent is withdrawn, we will no longer process your personal data and will delete it, but you will lose the ability to receive the children's party service. The provision of your personal data is voluntary and is necessary to sign a service contract. If the data is not provided, we would not be able to deliver the service you have ordered or process payment in accordance with the requirements of the Accountancy Act;
  • To restrict the processing of your data in the presence of any of the following hypotheses: the accuracy of the data is contested, the processing is unlawful, the administrator no longer needs the data or you have objected to the processing.

3.7. To exercise your rights under Article 3.6, you may send such a request in free text to the e-mail address: Business.Center@bg.mcd.com. The data will be deleted within thirty days after the message has been sent, after verification of the circumstances.

3.8. In order to ensure the security of your personal data and to protect it from loss, alteration, destruction and unauthorised access, we have provided a number of security measures. These include technologies for secure transfer of SSL data, encrypted connections, and the other alike. The measures are continuously being updated, taking into account the dynamic development of technology and different types of threats.

3.9. We uses cookies. Cookies are small text files, which our web server sends to the cookies folder on your computer. The main function of a cookie is to enable our web server to identify partially the settings of your operational system and web browser for the purpose of improvement and optimization of our website functioning. . Other important purpose of a cookie is to provide feedback about the performance of our website and to collect statistical data through which we can select and improve the services that we offer.

3.10. Some cookies are important for the website operation and are enabled automatically upon any visit by users.

3.11. You may see more details about cookies that we use in our Policy about cookies.

Issue date and effective date 20.02.23