Personal data protection notice related to the recruitment process
carried out with the McHire tool
[Latest update: 14 April 2026]
This notice describes the rules governing the processing of personal data of individuals applying for a job or collaboration with McDonald’s
Who is the controller of your personal data
Depending on the type of position you are applying for, your personal data is processed in accordance with one of the following models:
if you are applying for a positionat a restaurant operated by a franchisee, the following entities are joint controllers of your personal data in relation to the recruitment process carried out with the use of McHire:
- McDonald’s Polska Sp. z o.o., with its registered office in Warsaw, ul. Marynarska 15, 02-674 Warsaw (KRS National Court Register No.: 0000097409), and
- the relevant franchisee operating the restaurant you are applying to, as indicated in the job advertisement, the application form or during the recruitment process.
McDonald’s Polska and the relevant franchisee jointly determine the purposes and means of processing personal data in relation to the central recruitment process carried out with the McHire tool.
- if you are applying for a position at a restaurant operated by McDonald’s Polska Sp. z o.o., McDonald’s Polska Sp. z o.o. is the sole controller of your personal data.
Contact point for personal data matters
For matters relating to the processing of your personal data during the recruitment process, you may contact McDonald’s Polska, which acts as the contact point for jointly controlled processes:
McDonald’s Polska Sp. z o.o. ul. Marynarska 15, 02-674 Warsaw
e-mail: ochrona.danych@pl.mcd.com
You may also contact directly the relevant franchisee operating the restaurant you are applying to.
What personal data do we process
We may process, in particular, the following categories of your personal data:
- identification data, in particular your name and surname,
- contact details, in particular your telephone number, email address, city or preferred place of work,
- the data contained in the application form, CV or other recruitment documents,
- information on professional experience, qualifications, availability and work preferences,
- information gathered during recruitment interviews, telephone conversations, message exchanges and recruitment notes,
- application status, contact history, information on the progress of individual stages of the recruitment process,
- technical data and identifiers related to the use of the recruitment tool,
- where necessary, information regarding work permits or documents required by law,
- if provided voluntarily, the data contained in additional information you have provided during the recruitment process.
As a general rule, we do not expect to be provided with any special categories of personal data, unless this is necessary due to legal obligations, e.g. to ensure the accessibility of the recruitment process or to take account of specific entitlements.
Where do we obtain your data from
In principle, we receive personal data directly from you. To a limited extent, data may also come from:
- entities handling the initial stages of the recruitment process or providing technological tools,
- recruitment agencies if your application was submitted via such an entity,
- from people who have recommended your application if such a mechanism is involved in the process,
- from publicly available professional sources provided this is permitted by law and necessary for the assessment of your application.
For what purposes and on what basis do we process your data
We process your personal data for the purpose of:
- conducting the recruitment process for the position you are applying for,
- contacting you with regard to your application,
- enabling you to use the McHire tool and manage the subsequent stages of the recruitment process,
- assessing your application, qualifications and availability,
- maintaining recruitment records and demonstrating the process’s compliance with the law,
- ensuring protection against abuse and the security of the recruitment process,
- improving and analysing the recruitment process and the performance of the tools used,
- potentially establishing, pursuing or defending claims.
The legal basis for the processing of your personal data is, as appropriate:
- Article 6(1)(b) of the GDPR, i.e. taking steps at your request prior to entering into an agreement,
- Article 6(1)(c) of the GDPR, i.e. where processing is necessary for compliance with a legal obligation,
- Article 6(1)(f) of the GDPR, i.e. the legitimate interests of the controller or joint controllers, consisting in the efficient conduct of the recruitment process, the organisation of the employment process, ensuring common recruitment standards at McDonald’s, ensuring protection against abuse and the defence of claims,
- Article 6(1)(a) of the GDPR, i.e. if you consent to participation in future recruitment processes or to the processing of data beyond the scope required by law.
If, in exceptional cases, special categories of personal data were to be processed, their processing would be based on Article 9(2) of the GDPR, in particular where processing is necessary for the purposes of exercising rights or obligations in the field of employment law, or is based on your explicit consent.
Joint control – key information
If you are applying to a restaurant operated by a franchisee, McDonald’s Poland and the relevant franchisee are joint controllers of your personal data in relation to the recruitment process carried out using the McHire tool.
Under these arrangements:
- McDonald’s Poland is responsible in particular for coordinating the recruitment tool, managing central aspects of the process and acting as the point of contact for candidates,
- the relevant franchisee is responsible in particular for assessing applications in relation to the needs of a specific restaurant and for making the hiring decision,
- both parties cooperate in fulfilling the obligations arising from the GDPR, which includes handling applicant rights and data protection incidents.
You can obtain the main content of the joint control arrangements by contacting McDonald’s Polska at the address indicated above.
Who may we disclose your data to
Your personal data may be disclosed to:
- relevant employees and associates of McDonald’s Polska and the relevant franchisee involved in the recruitment process,
- providers of the tools and technological solutions used for recruitment, including the providers of the McHire tool and related services,
- providers of hosting, system maintenance, IT support, communications and security services,
- entities providing advisory, legal, audit or organisational services, where necessary,
- authorised public authorities, where such an obligation arises from legal provisions.
Entities providing technical or organisational services to us process data on the basis of relevant legal agreements and solely to the extent necessary to achieve the specified purposes.
Do we transfer data outside the European Economic Area
Due to the use of centralised and global recruitment tools or technological infrastructure, your data may be transferred outside the European Economic Area.
If such a transfer takes place, it is carried out using the appropriate safeguards required by the GDPR, in particular standard contractual clauses or other permissible transfer mechanisms.
For more information on the safeguards in place, please contact us at: ochrona.danych@pl.mcd.com .
How long do we retain your data
If you are not hired or a working relationship is not established, we will generally retain your personal data for a period not exceeding 90 days from the end of the recruitment process, unless:
- you consent to participating in future recruitment processes, in which case this period will be extended accordingly,
- longer retention is necessary to defend against claims or to comply with legal obligations.
- If you are hired or enter into a working relationship, your data collected during the recruitment process may be included in the documentation relating to your employment or working relationship and will continue to be processed in accordance with the relevant information regarding employees or contractors.
AI and recruitment process automation
In the recruitment process, we may use AI-powered solutions, including features available in the McHire tool, for the following purposes:
- to streamline communication with candidates,
- to organise the recruitment process,
- to present information about job vacancies,
- to support the application process.
We do not use such solutions to make decisions regarding you that are based solely on automated processing, and which would produce legal effects concerning you or similarly significantly affect you. If recruitment support tools are used in the assessment of applications, the final decision on whether to proceed with a candidate’s application or to offer employment is made with human involvement.
Is it mandatory to provide data
Providing personal data to the extent required by law and necessary for participation in the recruitment process is voluntary, but necessary for the consideration of your application.
Failure to provide the data necessary for the recruitment process may prevent you from participating in the process or from your application being assessed.
The provision of additional data not required by law or by us is voluntary.
What rights do you have?
- access your personal data,
- receive a copy of your data,
- rectify your data,
- have your data deleted, where the conditions set
out in the GDPR apply, - restrict the processing,
- transfer your data, in cases provided for by law,
- object to processing pursuant to Article 6(1)(f) of the GDPR,
- withdraw your consent at any time, if processing is based on consent, without affecting the lawfulness of any processing carried out prior to withdrawal.
You have the right to:
You also have the right to lodge a complaint with the President of the Office for Personal Data Protection.
How can you exercise your rights
To exercise your rights, you may contact us at:
ochrona.danych@pl.mcd.comYou may also contact directly the relevant franchisee operating the restaurant you are applying to.
Changes to this Notice
This Notice may be updated from time to time, in particular in the event of changes to the recruitment process, tools, legal basis or joint control arrangements.