Privacy Policy — MCI HoReCa
1. Who we are
MCI d.o.o. za unutarnju i vanjsku trgovinu Široki Brijeg, Visoka Glavica 2C, 88220 Široki Brijeg, Bosnia and Herzegovina, JIB 4272131970000, MBS 64-01-0150-09, is the controller of personal data processed through the MCI HoReCa mobile application (the "App"). Contact: [email protected], +387 39 705 511.
2. Who the App is for
The App is a business tool for existing MCI customers, hospitality businesses that buy from us. Access requires an activation code that MCI issues to a specific business location. The App is not intended for consumers and not for persons under 18.
3. What the App processes
Business account data. Business name, address and city, contact details, delivery schedule and the assigned price list. This comes from MCI's ERP system, the App does not collect it from you, and it is displayed so the App can show the correct assortment, prices and delivery dates.
Device data. When a business location is activated on a device, the App sends a device identifier (Android ID on Android, identifier for vendor on iOS), the platform, the device model, the device type (phone or tablet) and the app version. This binds the device to the business account, authenticates later requests, and lets MCI staff see and revoke devices that a business no longer uses.
Notification token. If notifications are enabled, the App registers a push token against the device record so we can send order status updates and offers.
Order and document data. Products, quantities, the chosen delivery date and any note added at checkout are sent to MCI and processed as an order in the ERP system. Invoices, open items and their payment status are displayed from the same system. The App does not process payments and never asks for card data.
In-app interaction data. The App reports which promotional or recommended sets it displayed, meaning identifiers of the campaigns shown, not a record of what you browsed, so MCI can measure how its own offers perform. Recommended products may be derived from the business location's own order history.
Diagnostic data. When the App hits an error or stops working, it sends a technical report so we can fix the fault. The report contains the error and the code path that produced it, the app version, the device model and operating system, the screen the App was on, a trail of the recent actions taken in the App, and the IP address the report was sent from. A sample of timing measurements is sent with it so we can find slow screens. These reports are not linked to a named person and we use them only to keep the App working.
Camera. The camera is used only to scan an activation QR code. Scanning happens on the device. No image is stored and none is transmitted.
4. What the App does not do
The App contains no advertising and no behavioural analytics. The only third party SDK in it is the error reporting tool described in section 3, which records faults rather than what you browse. It does not track you across other companies' apps or websites, it does not read the advertising identifier (IDFA or AAID), and we do not sell personal data or share it for advertising.
5. Legal basis
Device, order and document data are processed to perform the business relationship with your location and to operate the ordering service. The notification token is processed on the basis of your consent, which you withdraw by turning notifications off. Campaign measurement rests on our legitimate interest in evaluating our own offers, and diagnostic data on our legitimate interest in keeping the App secure and working.
6. Who receives the data
- MCI's ERP system and the MCI staff who handle orders, invoices and support.
- Microsoft Azure, which hosts the service, in the North Europe region (Ireland).
- Apple Push Notification service and Google Firebase Cloud Messaging, which deliver notifications, and Expo (Expo Inc., United States), which operates the push relay the App uses. Only the push token and the notification content pass through them.
- Sentry (Functional Software, Inc., United States), which receives the diagnostic reports described in section 3 and stores them in the European Union.
- Public authorities, where disclosure is legally required.
Each recipient above acts as our service provider under its published terms, processes the data only to deliver the service described, and is bound to protect it to at least the standard set out in this policy. None of them receives the data for its own purposes.
7. Transfers abroad
The service is hosted in the European Union (Ireland) and diagnostic reports are stored in the European Union (Germany), while notification delivery and the diagnostic service itself involve providers established in the United States, so data is processed outside Bosnia and Herzegovina. These transfers rest on the data-protection terms of those providers' agreements, which include the EU standard contractual clauses, and on the technical measures described in section 10.
8. Retention
Device records are kept until the device is revoked or the location is deactivated. Orders, invoices and related documents are kept for as long as accounting and tax legislation requires MCI to keep them. Campaign measurement is kept in aggregate form. Diagnostic reports are kept for 90 days and then deleted.
9. Your rights
You may request access to your data, its correction or deletion, restriction of processing, and you may object to processing. Write to [email protected] and we will respond within 30 days. You may also complain to the Personal Data Protection Agency of Bosnia and Herzegovina, Sarajevo.
To have a business location's access removed, contact us and we will revoke its devices and activation codes.
The App is offered in Bosnia and Herzegovina. Where the EU General Data Protection Regulation applies, the same rights apply and the same contact address serves.
10. Security
All traffic runs over HTTPS. The access token that identifies a device is stored in the operating system keychain (iOS) or keystore (Android), never in plain app storage.
11. Changes
We publish changes on this page and update the date above. Material changes are announced in the App.
MCI HoReCa