Changes to the Privacy Policy

We may, at any time, without prior notice and at our sole discretion, modify this Privacy Policy by posting the new version at this same address with an updated revision date. We will announce updates via social media messages and our email mailing lists.

Definitions

Data Controller: The person within our companies who determines the purpose and means of the processing implemented.

Personal Data (PD): Any information relating to an identified or identifiable natural person (referred to in the GDPR as a "data subject"). This includes, for example, a name, identification number, location data, an online identifier, or specific elements of their physical, physiological, genetic, mental, economic, cultural, or social identity.

Identity of the Data Controller

Personal data collected via the use of Online Services is processed under the responsibility of:

For residents in Martinique: Arcos Dorados Martinique SAS, a French company represented by its General Manager.

For residents in Guadeloupe: Arcos Dorados Guadeloupe SAS, a French company represented by its General Manager.

For residents in French Guiana: Arcos Dorados French Guiana SAS, a French company represented by its General Manager.

Information collected

We may collect personal data about you when you use the Online Services and interact with us. Your personal data is collected in two ways:

Directly, when you freely communicate your personal data to us.

Automatically, via your navigation history.

Data collected directly may include: your name, postal address, email address, phone number, and date of birth; account data, such as username and password (which is encrypted and confidential); activity data, including information on products purchased, prices paid, and payment methods; profile data, such as preferred products or services or visiting habits.

We automatically collect certain data during your use of Online Services, including: public IP address, operating system, and browser type; mobile phone type, settings, and unique identifiers (UDID/MEID); advertising identifiers (e.g., IDFA or IFA); referring website or application; online activity on other sites, social media exchanges, and pages visited within our application.

Cookies and web beacons

Cookies are installed during site navigation to improve service.

Strictly Necessary Cookies: Required for electronic communication or providing requested online services (e.g., session cookies for authentication).

Non-Strictly Necessary Cookies: Record preferences to adapt the site to your interests.

Third-Party Cookies: Placed by partner companies to identify interests and personalize advertising outside of Online Services.

Consent for cookies does not exceed thirteen (13) months.

Use of collected data

We use the data to: inform you about products, services, contests, and promotions; communicate regarding orders, accounts, and requests; personalize your experience in restaurants and online; manage and improve our business (research, sales strategy effectiveness); prevent fraud and comply with regulations; produce statistics.

Data is kept for 3 years from your last activity.

Sharing of collected data

We may share your data:

Within the "McDonald's Family" (subsidiaries and franchisees).

With our subcontractors (order fulfillment, IT services, promotion management).

In the event of a sale or transfer of the business.

For legal reasons (compliance, legal action, fraud prevention).

Your choices and rights

Under the Regulations, you have the right to: access, modify, erase, or limit the processing of your data; object to processing and exercise data portability; define directives for your data after your death.

Unsubscribe from commercial messages via instructions in the emails or your profile settings.

To exercise these rights, contact the Data Protection Officer (DPO) at dpo-mcdo-[mq/gp/gf]@dpo-caraibes.fr (replace [mq/gp/gf] with mq, gp, or gf according to your territory) or by mail at Virginis Technologies, 26 avenue Felix Eboue, 97200 Fort-de-France.

Data security

We take appropriate measures to ensure security, including: systematic encryption of information transfers between your device and our servers; storing personal data in encrypted form within databases; regular security audits.

Data transfer

Your data may be transferred outside the EU for processing. This occurs only to countries with adequate protection, companies under the Privacy Shield, or via standard contractual clauses recognized by the Commission.

Specific provisions: "Selfie Promo"

Within the McDonald's App—Antilles Guyane, we process photographs to determine the most suitable promotion.

Photos are transferred securely to our subcontractor Gigigo for automated, anonymous analysis.

Photos are immediately destroyed after analysis.

Analyzed elements include the number of faces, facial expressions (joy/sadness), presence of a child, and weather.

No personal data profile is enriched with this analysis.