For EU, EEA, UK, and Switzerland-based processing, McDonald's states it transfers personal information only to countries with an adequate level of protection or under Standard Contractual Clauses based on Commission Implementing Decision (EU) 2021/914, with those mechanisms available upon request.
This analysis describes what McDonald's's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the legal mechanism McDonald's relies upon for international data transfers from the EU, EEA, UK, and Switzerland, referencing SCCs and adequacy decisions as the primary transfer tools and noting that transfer documentation is available upon request.
Under this clause, personal information of EU, EEA, UK, and Swiss customers may be transferred internationally within the McDonald's Family and to vendors, subject to Standard Contractual Clauses or adequacy protections as described. Customers in these regions may request access to transfer documentation by contacting McDonald's.
Cross-platform context
See how other platforms handle International Data Transfers and Standard Contractual Clauses and similar clauses.
Compare across platforms →"If we are established in EU/EEA, the UK, or Switzerland, or are otherwise subject to the GDPR or similar laws, we only transfer your personal information to countries that are considered by those laws to provide an adequate level of protection or otherwise where we have established or confirmed that all data recipients will provide an adequate level of data protection, in particular by way of entering into appropriate data transfer agreements based on Standard Contractual Clauses (e.g., Commission Implementing Decision (EU) 2021/914) and other suitable measures, which are accessible from us upon request.Excerpt from McDonald's's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the legal mechanism McDonald's relies upon for international data transfers from the EU, EEA, UK, and Switzerland, referencing SCCs and adequacy decisions as the primary transfer tools and noting that transfer documentation is available upon request.
Under this clause, personal information of EU, EEA, UK, and Swiss customers may be transferred internationally within the McDonald's Family and to vendors, subject to Standard Contractual Clauses or adequacy protections as described. Customers in these regions may request access to transfer documentation by contacting McDonald's.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by McDonald's.