Privacy Statement for McDonald’s job applicants
Last updated: 1 September, 2025]
1. Introduction
This Privacy Statement for job applicants at McDonald’s (“Statement”) describes how McDonald's Polska Sp. z o.o., based in Warsaw (hereinafter “McDonald's”, “we”, “us”, “our”), collects, processes, protects, and shares the personal data of job applicants to McDonald’s Polska.
Please note that nothing in this Statement limits your rights under applicable local data protection laws.
2. Purposes and Legal Basis for Processing
We will process your personal data to conduct the current recruitment process. The legal basis for processing your personal data is:
Article 6(1)(a) of the GDPR – your consent to provide additional data.
Article 6(1)(c) of the GDPR – legal obligation as required by the Labour Code.
For applicants who have accepted a job offer (e.g., signed a letter of intent or accepted terms of employment) but have not yet entered into an employment contract, McDonald’s Polska Sp. z o.o. processes personal data necessary for referral to a preliminary medical examination, as described in Article 229 § 1 point 1 of the Labour Code.
The legal basis for processing such personal data is:
Article 6(1)(b) of the GDPR – processing necessary to take steps prior to entering into a contract.
Article 9(2)(h) of the GDPR – processing of health data for assessing work capacity, with appropriate legal and organizational safeguards.
3. Period of retention of personal data
We will store your personal data until the recruitment for the position you applied for is concluded or until you withdraw your consent for data processing, but no longer than 90 days from the date of application.
Data used to issue referrals for occupational health purposes will be processed for the time necessary to fulfill this objective or until it becomes clear that employment will not proceed.
4. Data recipients
Your data may be transferred to occupational health providers based on issued referrals. We will also transfer your personal data to our service providers entrusted with data processing services, such as IT service providers or recruitment system providers. Such entities shall process data on the basis of an agreement with us and only in accordance with our instructions.
5. Transmission of Data outside the European Economic Area
Like many global companies, we have both centralised and outsourced various aspects of our business to improve the way we manage and administer our human resources programme. Accordingly, and in order to provide the services set out in this Statement, it may be necessary to transfer your data outside the country in which it was originally collected or outside your country of residence. Transfers may be made to any McDonald's Group company worldwide (as appropriate) as well as to external service providers worldwide who assist McDonald's in the management and administration of its human resources programmes.
The protection of such data transfers is ensured through safeguards established in standard contractual clauses approved by the European Commission and other appropriate measures, available upon request. Detailed information is available at: https://mcdonalds.pl/regulacje/ramy-ochrony-danych/.
You have the right to obtain a copy of these safeguards – to do so, contact us or our Data Protection Officer.
6. Your rights relating to the processing of personal data
You have the following rights regarding your personal data:
the right to withdraw your consent at any time,
the right to access your personal data,
the right to request rectification of your personal data,
the right to request erasure of your personal data,
the right to request restriction of data processing,
the right to data portability – i.e.,
the right to receive your personal data from us in a structured, commonly used, machine-readable format.
You may transmit this data to another controller or request that we transmit it to another controller, where technically feasible. The right to data portability only applies to data we process based on your consent or a contract with you.
To exercise the above rights, contact us or our Data Protection Officer (contact details below).
Right to withdraw consent
Where your data is processed based on consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You may withdraw your consent by sending a request to: kontakt@mcdonalds.pl.
The right to lodge a complaint with the authority
You shall also have the right to lodge a complaint with the supervisory authority in charge of personal data protection, i.e. the President of the Personal Data Protection Office.
7. Obligation to provide data
The obligation to provide personal data is a legal requirement under the Labour Code. In other cases, providing data is voluntary and up to you.
8. Contacting us – data controller
The controller of your personal data shall be McDonald's Polska Sp. z o.o. with its registered office in Warsaw, entered in the Register of Entrepreneurs of the National Court Register by the District Court for the capital city of Warsaw, 13th Commercial Division under the number 0000097409, NIP [Tax Identification Number] 521-008-81-10 (hereinafter: we).
You can contact us as follows:
by letter to the following address: McDonald's Polska Sp. z o.o., 02-674 Warszawa, ul. Marynarska 15
by e-mail: kontakt@mcdonalds.pl
by telephone: +48 22,211 58 00
9. Data Protection Officer
We have appointed a Data Protection Officer. This is the person you can contact for all matters concerning the processing of your personal data and the exercise of your rights in relation to data processing. The officer can be contacted as follows:
by letter to the following address: Inspektor ochrony danych (Data Protection Officer) , McDonald’s Polska Sp. z o.o., 02-674 Warszawa, ul. Marynarska 15
by e-mail: ochrona.prywatnosci@mcdonalds.pl
10. Changes to the Statement
From time to time, we may need to make changes to this privacy statement. In such cases, we will publish the revised version here and change the “Last Updated” date at the top of the Statement, or contact you directly if we deem it appropriate under applicable law. We recommend reviewing this privacy statement periodically.