The policy states that McDonald's uses customer personal information to train algorithms and AI models, and employs profiling technology, with a stated carve-out that such profiling will not include automated decisions with legal or similarly significant effects unless separately disclosed.
This analysis describes what McDonald's's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a broad authorization to use customer data for AI and algorithm training across McDonald's products and services, with the carve-out for automated individual decisions referencing GDPR Article 22 language but not specifying which data categories are used in training or whether third-party AI vendors are involved in this processing.
Interpretive note: The scope of data categories used in AI training and the conditions triggering the separate notification for automated decisions are not specified in the document, creating ambiguity about the operational boundaries of this provision.
Under this clause, personal information customers provide or generate through app use, restaurant visits, and online interactions may be used to train McDonald's AI models. The agreement states that profiling under this provision will not include automated decisions with legal or similarly significant effects for the individual unless separately communicated.
Cross-platform context
See how other platforms handle AI Model Training Using Customer Data and similar clauses.
Compare across platforms →"to train algorithms and AI models that we use in the context of providing you with products and services; to personalize and improve our products and services and your overall customer experience, in particular by improving our existing technologies and developing new products and services and employing profiling technology (unless we notify you separately thereof, this will not include automated individual decisions that have legal effects for you or similarly significantly affect you)Excerpt from McDonald's's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes a broad authorization to use customer data for AI and algorithm training across McDonald's products and services, with the carve-out for automated individual decisions referencing GDPR Article 22 language but not specifying which data categories are used in training or whether third-party AI vendors are involved in this processing.
Under this clause, personal information customers provide or generate through app use, restaurant visits, and online interactions may be used to train McDonald's AI models. The agreement states that profiling under this provision will not include automated decisions with legal or similarly significant effects for the individual unless separately communicated.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by McDonald's.