http___mcdonalds.hr_izjava-o-privatnosti__2.xml
1.1 2.1 2.2 2.3 3.1 4.1 4.2 4.3 4.4 4.5 4.6 5.1 5.2 5.3 5.4 5.5 6.1 6.2 6.3 7.1 8.1 9.1 9.2 9.3 10.1 11.1 11.2 12.1 13.1 14.1 14.2 15.1 16.1 16.2 17.1 18.1 18.2 19.1 20.1 21.1 22.1 23.1 23.2 24.1 25.1 25.2 26.1 26.2 27.1 28.1 29.1 30.1 30.2 30.3 31.1 32.1 32.2 32.3 32.4 33.1 34.1 34.2 34.3 35.1 35.2 35.3 35.4 35.5 36.1 36.2 36.3 36.4 37.1 37.2 37.3 37.4 37.5 38.1 38.2 38.3 39.1 40.1 40.2 40.3 41.1 41.2 41.3 41.4 41.5 41.6 42.1 42.2 42.3 42.4 43.1 43.2 44.1 45.1 45.2 45.3 46.1 47.1 48.1 48.2 49.1 50.1 50.2 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 59.2 59.3 60.1 61.1 61.2 61.3 61.4 62.1 62.2 62.3 63.1 63.2 63.3 64.1 65.1 66.1 66.2 66.3 67.1 67.2 67.3 67.4 68.1 69.1 69.2 69.3 70.1 71.1 72.1 73.1 74.1 75.1 76.1 76.2 76.3 76.4 76.5 77.1 78.1 78.2 78.3 79.1 80.1 80.2 81.1 82.1 82.2 83.1 84.1 84.2 85.1 86.1 86.2 86.3 87.1 88.1 88.2 89.1 90.1 90.2 90.3 90.4 91.1 92.1 92.2 93.1 93.2 93.3 94.1 95.1 95.2 95.3 96.1 97.1 98.1 98.2 98.3 99.1 99.2 100.1 101.1 102.1 103.1 103.2 103.3 103.4 104.1 105.1 105.2 105.3 106.1 107.1 108.1 109.1 109.2 110.1 110.2 111.1 112.1 113.1 114.1 115.1 116.1 117.1 118.1 119.1 120.1 121.1 122.1 123.1 124.1 124.2 124.3 125.1 126.1 127.1 127.2 127.3 128.1 128.2 129.1 130.1 131.1 131.2 132.1 132.2 132.3 133.1 133.2 133.3 134.1 135.1 136.1 137.1 137.2 138.1 139.1 140.1 141.1 142.1 143.1 144.1 145.1 146.1 147.1 147.2 147.3 148.1 148.2 148.3 148.4 149.1 149.2 149.3 149.4 150.1 150.2 150.3 150.4 151.1 152.1 153.1 153.2 153.3 153.4 154.1 155.1 156.1 157.1 157.2 158.1 159.1 159.2 160.1 161.1 162.1 163.1 164.1 165.1 165.2 166.1 166.2 167.1 167.2 167.3 167.4 168.1 168.2 169.1 169.2 169.3 170.1 170.2 170.3 171.1 171.2 172.1 172.2 172.3 172.4 173.1 174.1 174.2 174.3 175.1 175.2 176.1 177.1 178.1 179.1 180.1 181.1 182.1 182.2 183.1 184.1 185.1 186.1 187.1 187.2 188.1 189.1
Privacy & Cookies Policy This Privacy & Cookies Policy explains how we collect, process and look after your personal information, and how we use cookies. It contains 17 sections. You can view each section by selecting the relevant link below: Introduction 1.1 Welcome to our website (the “Site”), the digital heart of J.K. Rowling’s Wizarding World, dedicated to unlocking the power of imagination. The Site is described in more detail in our Terms & Conditions. The Site is owned by Pottermore Limited (referred to as “Pottermore”, “we”, “us” or “our” as appropriate), a company established in England and Wales. The main part of the Site is currently available at https://www.pottermore.com. The Site also includes the online digital content store of the Harry Potter books, artwork and other merchandise (the “Pottermore Shop”), which is currently available at https://uk.shop.pottermore.com, https://gbp.shop.pottermore.com, https://eur.shop.pottermore.com or https://usd.shop.pottermore.com (depending on your location). We may also make the Site, parts of it or other versions of it available through further digital channels or devices. 1.2 This Privacy & Cookies Policy describes our practices with regard to the information that we collect when you use the Site, what we do with such information and how we protect it. It also describes our practices on the use of cookies. For the purpose of relevant data-protection and privacy laws (such as, in the UK, the General Data Protection Regulation 2016/678/EU), the data controller is Pottermore Limited. Please see our Terms & Conditions and our About page for more information about Pottermore Limited and the basis on which we provide the Site. Some of the capitalised words used in this Privacy & Cookies Policy are defined in our Terms & Conditions and our Pottermore Shop Terms & Conditions. 1.3 We strive to protect the privacy of Site users. We encourage all users to act responsibly and with care when it comes to their personal information and that of others. Please read this Privacy & Cookies Policy to understand how the information you provide to us is used. 1.4 Please note that by visiting and using the Site, you acknowledge the use of your information and the use of cookies, as described in this Privacy & Cookies Policy. Changes to this Privacy Cookies Policy 2.1 Subject to applicable law, we may make changes to this Privacy & Cookies Policy at any time. See the end of this Privacy & Cookies Policy for details of the date when it was last updated. We may notify you of any such changes by sending you notice in writing, by posting a copy of the revised Privacy & Cookies Policy on the Site and/or, if you are a Registered User, by emailing you at the email address that you have provided for your Pottermore Account. 2.2 We ask that Registered Users keep their account information up to date, including your email address, so that any notice that we send you by email under this section reaches you. 2.3 If we make any material changes in the way we collect, use and/or share personal information, we will give you prominent notice of those changes. We will not, without your consent or another legal basis for doing so, apply those changes to any personal information that we previously collected from you. The information we collect and how and why we use it 3.1 Personal data We collect personal information about you on or via the Site, in limited circumstances described below, including when: (a) you choose to provide it to us when contacting us; or (b) the technical data that we collect (such as an IP address) are treated as personal data under applicable laws; or (c) you provide this information to us in order to set up a Pottermore Account during the registration process. In this Privacy & Cookies Policy the term “personal data”, or “personal information”, means any information about an individual from which that person can be identified, excluding data where the identity has been removed (i.e. anonymous data). Pottermore Account registration data If you wish to discover which house the Sorting Hat will place you in or which wand will choose you, or wish to discover other personalised content or wish to buy content from the Pottermore Shop (together, the “Registered Services”), you will need to create an account on the Site (“Pottermore Account”). Please note that the Registered Services are subject to various age restrictions and may be subject to additional terms and conditions from time to time. Legal bases for processing We shall only use your personal data when the law allows us to do so. Most commonly, we shall use your personal data in the following circumstances: - where we need to perform any contract that we are about to enter into or have entered into with you (such as a contract for the sale of products or digital content via the Site); - where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights and freedoms do not override our (or such third party’s) interests; and/or - where we need to comply with a legal or regulatory obligation. Please refer to the Glossary to find out more about the types of lawful basis that we shall rely on to process your personal data. We do not generally rely on consent as a legal basis for processing your personal data – other than in relation to the sending of third-party direct marketing communications to you via email, if you agree to receive such communications. You have the right to withdraw consent to such marketing at any time by contacting us. Purposes for using your personal data We have set out below, in a table format, a description of all the ways that we may use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Please note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you would like further details about the specific legal ground that we are relying on to process your personal data where more than one ground has been set out in the table below. 3.2 Types of non-personal information we collect and use In addition we may collect information that does not represent personal data for a variety of purposes as set out below: Anonymous analytics data Like many companies who operate websites, we collect basic information about your use of our Site, such as the number and duration of visits to the Site, your user type or category, any search queries entered on our Site, and details of which particular pages have been visited. We do not combine this information with any other information that could identify you personally. We use this information to analyse how the Site is functioning and how it is used by our users, to help us maintain and improve the Site on an ongoing basis. Performance data While using the Site, certain information is automatically logged about how you are using the Site to analyse performance and usage of the Site. This information may include the URL of the website that linked you to the Site, your IP address and the pages you visit while on the Site. The IP address indicates the location of your computer on the internet. We use this information to analyse how the Site is functioning and how it is used by our users, to help us maintain and improve the Site on an ongoing basis. Third-party analytics data Like many companies that operate websites, we allow carefully selected third parties to set cookies in order to capture analytics information, where permitted. When you use social-media functionality on the Site, analytics cookies may be set to measure usage. This information may be linked to your device, but otherwise is collected in a way that does not identify you personally. 3.3 Children’s privacy. In various countries, local data protection laws treat individuals under a certain age (“Relevant Age”) as children whose personal data require additional protection under such laws. In the UK, for example, the Relevant Age is 13 for the purposes of obtaining valid consent from individuals by online means. For any given country in which Site users are based: (a) we do not knowingly collect personal information from children under the Relevant Age; and (b) if we become aware that we have inadvertently collected personal information from a Site user under the Relevant Age, we will delete such information from our records. If you believe your child has provided us with personal information and you would like to have the personal information deleted, please contact us using the contact information below. 3.4 Minors’ privacy in the context of the Pottermore Shop. In the context of purchasers from the Pottermore Shop, we do not knowingly use personal information from persons under the age of majority in the relevant country. If we become aware that a person under the age of majority in the relevant country is attempting to access the Pottermore Shop, we may use technical measures to prevent such person from entering into transactions on the Pottermore Shop. If you believe your child has provided us with personal information and you would like to have the personal information deleted in such context, please contact us using the contact information below. 3.5 Special data. We do not seek to collect any special categories of personal data about you: those would include details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. Nor do we seek to collect any information about criminal convictions and offences. If, however, when using any interactive feature of the Site (such as an online contact form or questionnaire), you in fact provide us with any such special data or information about criminal convictions and offences, then by submitting such data/information, we’ll assume that you are fine with our use of such data/information for (a) the purpose for which you have voluntarily provided such data/information and (b) any purpose that is reasonably compatible with such purpose. You may withdraw that permission at any time by contacting us. 3.6 If you fail to provide data. Where we need to collect personal data by law, or under the terms of a contract that we have with you and you fail to provide those data when requested, we may not be able to perform the contract that we have or are trying to enter into with you (for example, to provide you with products or digital content). If so, we shall notify you if this is the case at the time. How else may we use the information we collect? 4.1 Legal action. We may use the information we collect to comply with law, to investigate a complaint made by another user or a potential breach of the Site’s Terms & Conditions or to prevent and detect unlawful or criminal activity, fraud and misuse of, or damage to, the Site or the products, content and services made available through it, and to take appropriate legal action against those responsible. Such use will be necessary to comply with a legal obligation or necessary for our and/or others’ legitimate interests (in being protected from such potentially harmful/unlawful acts or omissions). 4.2 Linking data. We may on occasion link or combine the information that we collect about you with information that we receive from other sources. We may combine this information with information you give to us and information we collect about you. (For example, we may decide to combine two or more databases into a single database of user information.) We may use this information and the combined information for your and/or our benefit (for example, to allow us to provide a more seamless support whenever you contact us or to provide you with better, personalised services and content and/or, if you have opted to receive such communications, recommendations about trusted partners’ products, content or services that might interest you). Such use will be necessary for our legitimate interests (in improving our operation and your experience of the Site). 4.3 Change of purpose. We shall only use your personal data for the purposes for which we collected the data, unless we reasonably consider that we need to use such data for another reason and that reason is compatible with the original purpose. If you would like to get an explanation of how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your personal data for an unrelated purpose, we shall notify you and explain the legal basis on which we intend to rely. 4.4 Legal use. Please note that we may also process your personal data without your knowledge or consent, in compliance with the above rules, if and to the extent that this is required or permitted by law. Information sharing and disclosure We share your personal information in certain limited ways as described below. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We refer below to “Internal Third Parties” and “External Third Parties”, which are defined in section 16.2 below. 5.1 If you disclose personal information to us when contacting us with a query or placing an order, we may share that personal information with relevant Internal Third Parties and/or External Third Parties for the purpose of handling your query or order and (for merchandise) fulfilling your order, for fraud prevention and for the purposes of operating, managing and administering (including, without limitation, transaction processing on) the Site. 5.2 We may share your information with other External Third Parties for the performance of any contract we enter into with them in connection with the Site. 5.3 We may further share and disclose your personal information with other External Third Parties for the purpose of better integrating their services with the Pottermore Shop. Before we share or disclose any of your personal information with any Internal Third Parties and/or External Third Parties for marketing purposes, we will ask you for your permission to do so. 5.4 In addition, we may share information about visitors to the Site in an anonymous and aggregate form with relevant Internal Third Parties and/or External Third Parties to understand user trends and patterns and to manage and improve our business relationships. 5.5 We do not send any information that we collect on the Site to any social networking sites, nor do we share that information with such sites. We do not collect any personal information about you from those sites. 5.6 We may disclose information we collect, including personal information, as set out below: (a) to Internal Third Parties and/or External Third Parties for them to administer any accounts or services provided to you through the Site as described above (including, if you are a Registered User, in relation to the registration, creation and operation of your Pottermore Account); (b) if you consent to receiving marketing communications from Internal Third Parties and/or External Third Parties, to those third parties, for them to send you marketing communications regarding products, content and services they offer; (c) if there is a change (whether in whole or in part) in the ownership, operation or control of Pottermore Limited, our business or any of our assets, including a change as a result of insolvency or bankruptcy, we may disclose information to the new owner, operator or controller and, if we do so, we will require such person to use it only (i) in accordance with the terms of our Privacy & Cookies Policy (or terms that compatible with those) and/or (ii) as may be required or permitted by law; (d) apart from the use and sharing of your personal information in the circumstances already described, we may share information we collect (including personal information) as required or allowed by law (for example, as needed to protect our and our licensors’ rights and property or to comply with any applicable law or valid legal process); (e) to affiliated companies and/or joint venture partners in connection with the Site; and/or (f) with your permission. Your payment details We will never send you an email containing your full payment details, and we will never publicly disclose your payment details, whether on the Pottermore Shop or elsewhere. If you appear to have received an email from us, or seen a Pottermore Shop page, that displays your full payment details, this is not genuine – a third party may be attempting to steal your information. Please see section 10 for further information on how we protect the payment information held for you for the Pottermore Shop. Other types of information we collect and use 7.1 We aim to provide a number of features that help provide a more personalised and enhanced experience to our users. To achieve this, we may collect and use a limited amount of information from you that does not (in itself) identify you personally. In addition, we may ask you about which books and films in the Harry Potter series you have enjoyed. We will never publicly disclose any such information on the Site without obtaining your permission. 7.2 We also collect non-personal data, including aggregated, statistical data about visitors to the Site and traffic patterns (and share it with third parties such as our Partners). This information does not identify you in any personal capacity; it simply gives generalised information about the users of the Site. Please see below for more information on our use of cookies and similar technologies. 7.3 We also use watermarking technology to help us combat hacking, piracy and the unauthorised use of books sold through the Pottermore Shop. This involves the use of code numbers to help us to identify individual copies of a book. We may use such watermarking technology to identify items purchased through your Pottermore Account to help us investigate and protect against hacking, piracy, unauthorised use and any other behaviour that may be in breach of our Terms & Conditions or applicable laws. 7.4 We may disclose fully anonymised information, including aggregated or de-identified anonymous data, in our discretion. Cookies and similar technologies 8.1 While you are using the Site, certain information is logged about how you are using the Site to analyse performance and usage of the Site. This information may include, for example, the URL of the website which linked you to the Site, your IP address and the pages you visit while on the Site. The IP address indicates the location of your computer on the internet. 8.2 A “cookie” is a small data file that is sent to your browser from a web server and stored on your device’s hard drive. References below to cookies also include other means of automatically accessing or storing information on your device. Many browsers are set to accept cookies by default. You have the ability to accept or decline cookies as you prefer: please see section 8.4 below for further details. 8.3 We use various different types of cookie via the Site. - We use cookies that are necessary and/or useful for the functioning of the Site. For example, if you use the Pottermore Shop, we use “session cookies” (which will usually be deleted when you log out) to keep track of your internet session while on the Pottermore Shop, which, for instance, allow us to remember the items you add to your shopping basket and the site language and currency you have selected to use. Without those cookies the online services that you have asked for cannot be provided. - We also use “persistent cookies” (which are longer-term) (and other automatically tracked information) to help you move around and enjoy the features on the Pottermore Shop more easily and to remember settings to improve your visit (at your request), such as your site language preferences or whether you want to be signed in automatically next time you visit. - We also use cookies to help improve the performance of the Site and to provide you with a better, more personalised user experience. - We also use cookies to store your preferences and other information on your computer in order to save you time by eliminating the need to enter the same information repeatedly. So cookies allow you to take advantage of some of the Site's key features, which if you choose to decline cookies, mean you may not be able to sign in or to use other interactive features of the Site and its services that depend on cookies. In further detail, Pottermore cookies fall into the following categories, which we have documented to help you understand the types of cookies that are used to improve your browsing experience on the Site: Analytics (e.g. Google Analytics; Webengage) These cookies are used to compile various (anonymised) metrics for our users to get a better understanding of how the Site is used (pages visited and time spent on the Site, for example), so that we can deliver more of the content you want, and less of the content you don’t. This information also helps us to make better decisions for our future initiatives. We use partners like Webengage and Google Analytics. These analytics cookies may be set by those partners, and set in accordance with the relevant partner’s own privacy and cookies policies. Please see section 8.4 below for information on opting out of Google Analytics. E-commerce (Shopify) E-commerce cookies may be used via the Pottermore Shop to manage your shopping basket and user experience. We use Shopify. Certain e-commerce cookies may be set by Shopify in accordance with its own privacy and cookies policies. Customer Service (ZenDesk) Our customer services partner ZenDesk may set cookies if you visit the ZenDesk Help Center to improve your experience and understand your user preferences. Those website cookies would be set by ZenDesk in accordance with its own privacy and cookies policies. Performance data This type of cookie lets us track how long it takes users to load each page, what pages we can cache and whether we need you to log in again. We don’t use any third parties for this. Embedded video (YouTube) We know that many of you love the films, so we make use of clips on YouTube to highlight certain elements of the story. YouTube may set its own cookies, and the YouTube cookies policy can be found here. Social media (Twitter) J.K. Rowling isn’t just a master of novel writing – she’s also pretty handy within the confines of 140 characters! In order to host her tweets, we embed Twitter links. Twitter may set its own cookies, and Twitter’s cookies policy can be found here. Preferences We use this type of cookie to ensure that we don’t show you things you’ve already seen before, like the cookie policy acknowledgement and the intro page. This means you get to spend more time with the content you love, and less time with the content you don’t. Session state Websites often collect information about how users interact with a website. This may include the pages that users visit most often, and whether users get error messages from certain pages. We may use these so-called “session state cookies” to help us improve our services, in order to improve our users’ browsing experience. Blocking or deleting these cookies will not render the Site unusable. Krux The Krux cookie is a third-party cookie that may be set for Registered Users once logged in. It is set by member(s) of the Warner Bros. group of companies and may be used to track the Registered User’s behaviour across Warner Bros. online and mobile sites and to serve relevant advertising on those sites. The cookies outlined above expire after varying periods from around 30 minutes up to 2 years or more. The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. If you carry on using the Site, we’ll assume that you are fine with our use of cookies in these ways, but you can disable any of these cookies at any time if you wish (as set out below). 8.4 You may refuse to accept cookies by activating the setting on your web browser that allows you to refuse the setting of cookies, or you can modify your browser so that it notifies you when cookies are sent to it. The Help portion of your browser, most likely found on the toolbar, typically tells you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. You can check whether these settings are currently enabled on your computer – or find out how to change your current settings – here (but note that Pottermore does not control these third-party resources): Javascript: www.enable-javascript.com Cookies: www.whatarecookies.com Unless you do this, cookies will be issued when you use the Site, but you can disable them via your browser at any time. If you do not accept cookies or decide to disable them, you will still be able to access and use the Site, but you may lose some features and functionality. For example, you cannot remain signed in to your Pottermore Account if you disable cookies. If you wish to restrict or block web browser cookies which are set on your device, then you can do this by going to the help menu within your internet browser. Alternatively, you may wish to visit the “manage cookies” section on www.allaboutcookies.org, which contains information on how to prevent cookies from being stored on your device. To opt out of being tracked by Google Analytics across websites visit: http://tools.google.com/dlpage/gaoptout/ You can find out more about cookies at www.allaboutcookies.org and www.youronlinechoices.eu. Links The Site contains links posted by us to third-party websites (including social networking platforms) that we do not operate or control and that are not subject to this Privacy & Cookies Policy. Please note that we are not responsible for the content or privacy practices of external sites. Please read our Terms & Conditions for further information on these links. We strongly recommend that you read the privacy policy and cookies policy of any such website that you visit before disclosing any information via such website. How do we protect personal information? 10.1 As required by applicable data-protection and privacy laws, we follow appropriate security procedures in relation to the storage and disclosure of information that you have given to us in order to protect against unauthorised access. In particular, we take steps to protect the security of your information, including your payment information and passwords, with appropriate physical, technological and administrative measures. Please note the inherent risks of providing information and dealing online, and we will not accept responsibility for any breach of security that is due to circumstances beyond our reasonable control. 10.2 We have put in place procedures to deal with any suspected personal data breach, and we shall notify you and any applicable regulator of a breach where we are legally required to do so. 10.3 If you have any concerns about data security, please see the end of this Privacy & Cookies Policy for details of how to contact us. Editing your Pottermore Account settings and unsubscribing from Pottermore emails 11.1 If you register with the site, you will be asked about your communication preferences. If you want to edit your preferences at any time, log in to the Site and go to https://my.pottermore.com/my-details, where you can check what preferences you have set and adjust them if you want to do so. If you registered for an account on a previous version of the Site (prior to 13 April 2016), you may have consented to receiving marketing communications from us. Your marketing settings will remain as they were at the time before that version of the Site was replaced, and you can still withdraw your consent to receiving marketing communications at any time by: (i) clicking the “unsubscribe” link in any of the marketing communications we send you; (ii) emailing unsubscribe@team.pottermore.com; or (iii) changing your Account Preferences in your Pottermore Account. 11.3 You can also edit your settings as described above in section 11.1 or 11.2 above to correct or update your personal details held by us, i.e. to change your: - name; - email address; - country of residence; - billing address (if you have one) - delivery address; and/or - password. Accessing and updating your personal information 12.1 You can access all the personal information we hold on you (excluding any Pottermore Shop transactional data) and edit certain personal information in your My Details page in your Pottermore Account. 12.2 Please also see section 15 below for details of your legal rights of access and other legal rights in relation to your personal data. Ending your account and retention of data 13.1 Ending your account. We reserve the right to suspend or terminate access to your Pottermore Account for any reason, and we reserve the right to delete your Pottermore Account and any personal information associated with your Pottermore Account. You can delete your Pottermore Account by sending us a written request. To find out how to do so, please refer to our FAQ pages in the first instance. We will endeavour to comply with any such request promptly and in any event within thirty (30) days of receiving your request. 13.2 Retention of data We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected such data, including for the purposes of satisfying any legal, accounting or reporting requirements. When we terminate or delete your Pottermore Account, we will delete all the personal information, including your activity history, associated with that Pottermore Account (except for any basic information about our customers that we are required by law to retain for six years after ceasing to be customers for tax purposes). Once your account has been deleted, you will not be able to log in to your Pottermore Account unless you create a new Pottermore Account. If we terminate your Pottermore Account, we reserve the right to refuse re-registration. In other respects, elements of your personal information and activity history on the Site may be retained as long as necessary as required by law. After such time, those data may be retained in fully anonymised form, and then used in order to improve our services. Nothing in this section 13 affects your legal rights in relation to your personal data: please see section 15 below for details of those. Transfer of information outside the EEA 14.1 We may sometimes share the information we collect with Internal Third Parties and/or External Third Parties in the limited circumstances described in section 5 above. Some of those third parties may be based in locations outside the European Economic Area (“EEA”). 14.2 Also, while many of our services are hosted and managed within the EEA, we may transfer, store, or process information at locations outside the EEA. It may be processed by staff operating outside the EEA who work for us or for one of the Internal Third Parties and/or External Third Parties. Such staff may be engaged in, among other things, the provision of support services. 14.3 In connection with such transfer, storing and processing, we will take all steps necessary to ensure that your data are processed securely, lawfully and in accordance with this Privacy & Cookies Policy. These steps may include our use of model clauses issued by the European Commission or such other schemes or arrangements as may be appropriate from time to time to cover transfers of personal data outside of the EEA (i.e. which, in effect, give personal data the same protection that the data have within Europe), including, in the case of the USA, by using third parties that have signed up to the EU-US Privacy Shield framework. For further details of such safeguards, please see the European Commission’s website. 14.4 Please note that the governments, courts or law-enforcement or regulatory authorities of countries outside the EEA, in addition to those within the EEA, may be able to obtain access to or disclosure of any personal information processed in those locations through the laws of their respective countries. 14.5 If you would like further information on the specific mechanism used by us when transferring your personal data out of the EEA, please contact us. Your legal rights 15.1 Rights. Under certain circumstances, you have the following rights under data protection laws in relation to your personal data: - right of access to your personal data; - right to rectification of your personal data; - right to erasure of your personal data; - right to restriction of processing of your personal data; - right to portability of your personal data; - right to object to processing of your personal data; - right not to be subject to automated decision-making (including profiling); and - right to withdraw consent to processing of your personal data. To find out more about these rights, please see section 16 below and the ICO’s website (www.ico.org.uk). 15.2 Exercising your rights. If you wish to exercise any of those rights, please contact us. You can also access the personal information we hold on you (excluding Pottermore Shop transactional data) in your My Details page in your Pottermore Account. 15.3 No fee usually required. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). We may, however, charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in those circumstances. 15.4 What we may need from you. We may need to request specific information from you to help us confirm your identity and to ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data are not disclosed to any person that has no right to receive such data. We may also contact you to ask you for further information in relation to your request to speed up our response. 15.5 Time limit to respond. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we shall notify you and keep you updated. Glossary 16.1 Lawful basis. “Legitimate interest” means the interest of our business in conducting and managing our business to enable us to give you the best services/products/content and the best and most secure experience. We make sure that we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to do so by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us. “Performance of a contract” means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract. “Comply with a legal or regulatory obligation” means processing your personal data where it is necessary for compliance with a legal or regulatory obligation to which we are subject. 16.2 Third parties. “Internal Third Parties” means other entities that are direct or indirect subsidiaries of Pottermore and/or owned and/or controlled (directly or indirectly) by J.K. Rowling from time to time (acting as co-controllers or as processors), which are based in the EU or USA and provide certain operational and/or administrative services to us and/or otherwise in relation to the Wizarding World, and includes the officers, employees and agents of such entities who are involved in such services. Such agents include The Blair Partnership and J.K. Rowling’s private family office, each based in the UK. “External Third Parties” means: - Service providers and other commercial partners (acting as processors) based in the UK, EU or USA that support us in fulfilling our contractual obligations and in operating our business, including those providing us with certain account-registration, marketing, public-relations and data-processing services, order fulfilment services, payment processors, delivery services, customer services and IT and communication services (such as server-hosting, CRM-platform, email and telephony providers), and includes the officers, employees and agents of such entities who are involved in such support role. Such public-relations service providers include JKR PR (a partnership between Stonehillsalt PR Ltd and Mark Hutchinson Management Limited), based in the UK. - Members of the Warner Bros. group of companies from time to time (acting as co-controllers or as processors) principally based in the USA or the UK that have produced and/or are producing audio-visual content, merchandise and/or other products or digital content based on the Wizarding World, and includes the officers, employees and agents of such entities who are connected with any such activity. - Professional advisers (acting as co-controllers or as processors), including lawyers, bankers, accountants and insurers, who are based in the UK, EU or USA and provide their respective professional services to us. - HM Revenue & Customs, regulators and other authorities (acting as co-controllers or as processors), which are based in the UK and may require reporting of processing activities in certain circumstances, and includes their relevant personnel. 16.3 Your legal rights. In certain circumstances, you have the following legal rights in relation to your personal data: Right of access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data that we hold about you and to check that we are lawfully processing such data. Right of rectification of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, although we may need to verify the accuracy of the new data that you provide to us. Right to erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for our continuing to process such data. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Please note, however, that we may not always be able to comply with your request of erasure for specific legal reasons, which will be notified to you, if applicable, at the time of your request. Right to restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you would like us to establish the accuracy of such data; (b) where our use of the data is unlawful, but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it. Right to portability of your personal data to you or to a third party. If you so request, we shall provide you, or a third party that you have chosen, with a copy of your personal data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information that you initially provided consent for us to use or where we used the information to perform a contract with you. Right to object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation that makes you want to object to processing on this ground as you believe that it affects your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information that override your rights and freedoms. Right not to be subject to automated decision-making (including profiling) where that would have a significant effect on you. We do not in fact engage in such activities, so this right will not, in practice, be relevant in the context of your use of the Site. Right to withdraw consent at any time where we are relying on consent to process your personal data. This will not, however, affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products, content or services to you. We shall inform you if that is the case at the time when you withdraw your consent. About us and how to contact us 17.1 We have appointed a Data Protection Officer (“DPO”) who is responsible for overseeing questions in relation to this Privacy & Cookies Policy. Our current DPO is Ms Louise Hughes. If you have any queries or concerns about this Privacy & Cookies Policy or wish to exercise any legal rights in relation to your personal data, please contact the DPO using the details set out below. 17.2 You have the right to make a complaint at any time to the Information Commissioner's Office (“ICO”), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance. 17.3 The Site is owned by Pottermore Limited, a company incorporated in England and Wales, whose company details are as follows: Company Name: Pottermore Limited Registered Office: Devonshire House, 1 Devonshire Street, London W1W 5DR, UK Company Registration Number: 06979090 VAT Registration Number: 980826881 ICO Registration Number: Z2535777 17.4 If you would like to contact us about the information that we hold about you or to exercise any of your legal rights in relation to such information, please write to our Data Protection Officer at Pottermore Limited, PO Box 7828, London W1A 4GE, UK or email our Data Protection Officer at dpo@team.pottermore.com, marking it clearly as a “Data subject request”. You can also access all the information that we hold about you (excluding Pottermore Shop transactional data) in your My Details page in your Pottermore Account. If you have any other queries about privacy or cookies on the Site, please feel free to contact us: By online form:Contact us By post: Pottermore Limited, PO Box 7828, London W1A 4GE, UK By email:dpo@team.pottermore.com 17.5 In Delaware and California, online booksellers may be legally required to prepare an annual report providing information about disclosures of personal information made to comply with legal process. Pottermore is currently exempt from this requirement, so no report has been prepared. Last updated: 24 May 2018 You can view an archive of previous Pottermore Privacy & Cookie Policies.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 9.2 9.3 10.1 11.1 12.1 13.1 14.1 15.1 15.2 16.1 16.2 17.1 18.1 19.1 20.1 20.2 20.3 21.1 22.1 23.1 24.1 25.1 26.1 27.1 27.2 28.1 29.1 30.1 30.2 30.3 30.4 30.5 31.1 32.1 32.2 32.3 33.1 34.1 34.2 34.3 35.1 35.2 36.1 36.2 37.1 38.1 38.2 39.1 40.1 40.2 40.3 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 68.2 68.3 69.1 69.2 70.1 70.2 70.3 71.1 72.1 73.1 73.2 74.1 74.2 75.1 75.2 76.1 77.1 77.2 77.3 77.4 78.1 79.1 79.2 79.3 80.1 80.2 81.1 81.2 82.1 83.1 83.2 84.1 85.1 86.1 87.1 88.1 89.1 90.1 91.1 92.1 93.1 94.1 94.2 95.1 95.2 96.1 97.1 97.2 98.1 99.1 100.1 100.2 101.1 102.1 103.1 104.1 105.1 106.1 107.1 108.1 109.1 110.1 111.1 112.1 113.1 114.1 115.1 115.2 116.1 116.2 116.3 117.1 118.1 118.2 119.1 119.2 119.3 120.1 121.1 121.2 121.3 121.4 122.1 122.2 123.1 124.1 124.2 124.3 125.1 126.1 127.1 127.2 127.3 127.4 128.1 128.2 128.3 129.1 129.2 130.1 130.2 131.1 132.1 132.2 133.1 134.1 135.1 136.1 136.2 136.3 136.4 137.1 138.1 139.1 140.1 141.1 142.1
GLOBALNA HRANA d.o.o., Zagreb, Rudeška cesta 87/a, matični broj (MBS): 080064649 upisano u sudski registar Trgovačkog suda u Zagrebu, OIB 97492131626 kao voditelj obrade podataka pripremio je za Vas ovu Obavijest u namjeri da vas upoznamo s postupkom obrade i zaštite Vaših osobnih podataka. GLOBALNA HRANA d.o.o. je nositelj franšize za prodaju proizvoda branda McDonald’s na području Republike Hrvatske, zbog čega se u nastavku ove Izjave za GLOBALNU HRANU d.o.o. kao voditelja obrade koristi pojam McDonald’s. Ova obavijest postavili smo na našu internet stranicu kako bi Vam u svakom trenutku učinili dostupnim informacije o obradi Vaših osobnih podataka. Ova obavijest na snazi je od 25.05.2018. - Podaci koje prikupljamo Podatke koje prikupljamo spadaju u tri kategorije: (a) informacije koje nam Vi dajete; (b) informacije koje prikupljamo na automatizirane načine; i (c) informacije koje prikupljamo iz drugih zakonitih izvora. Za pojedine svrhe obrade pripremili smo i posebne obavijesti o obradi osobnih podataka, kojima možete pristupiti na slijedećem LINKU. Posebnim obavijestima možete pristupiti i na slijedeći način: U pravilu, podatke prikupljamo od Vas neposredno i Vi nam ih dajete dobrovoljno. Mi ćemo vas obavijestiti kada je davanje Vaših osobnih podataka neophodno za pružanje usluge ili obvezno po zakonu. Molimo Vas imajte na umu kako Vam, u slučaju da je podatak nužan za pružanje usluge ili obvezan po zakonu, ukoliko nam ne date potrebne podatke nećemo moći pružiti našu uslugu. Prikupljanje podataka od Vas neposredno Možete nam dati sljedeće podatke: - osobne podatke, poput Vašeg imena, poštanske i e-mail adrese, broja telefona, datuma rođenja i druge kontakt podatke prilikom Vaše registracije na naše online ili SMS usluge, kada sudjelujete u nekoj od naših nagradnih igara ili nam se obratite telefonom ili putem online usluga kako biste nam postavili upit, dali pohvalu ili izjavili prigovor na naše proizvode i/ili usluge; - podatke o transakcijama, uključivo s podacima o proizvodima koje kupujete, cijenama, načinu plaćanja i detaljima plaćanja; - podatke o Vašem korisničkom računu, poput Vašeg korisničkog imena i lozinke koje koristite da bi pristupili našim online uslugama ili kupili, odnosno koristili naše proizvode i usluge. Gore navedene podatke prikupljamo radi sklapanja i ispunjenja ugovora sa Vama, ispunjenja naših zakonskih obveza odnosno na temelju našeg legitimnog interesa sukladno čl. 1. tč. b, c i f Opće uredbe o zaštiti podataka (dalje u tekstu pod pojmom GDPR). Pored navedenog, od Vas temeljem Vaše privole sukladno čl. 1. tč. a GDPR-a možemo prikupljati i slijedeće podatke: - informacije o Vašem profilu, uključivo s proizvodima i uslugama koje volite, vremenu u kojem nas najčešće posjećujete; i - ostale osobne podatke koje nam dobrovoljno otkrijete prilikom komunikacije s nama. Prikupljanje podataka na automatizirane načine Automatiziranu tehnologiju možemo koristiti za prikupljanje podataka s Vašeg računala ili mobilnog uređaja kada posjećujete naše restorane, koristite naše online usluge ili koristite tehnologije u našim restoranima. Automatizirane metode prikupljanja podataka mogu uključivati „kolačiće“, local shared objects i web tražilice. U nastavku se nalazi više informacija o „kolačićima“ (cookies) i drugim tehnologijama. Na taj način možemo prikupljati podatke o: - internet protokol (IP) adresu; - operativnom sustavu Vašeg računala ili mobilnog uređaja te korištenom Internet pregledniku; - vrsti mobilnog uređaja i njegovim postavkama; - jedinstvenom identifikatoru uređaja (UDID) ili identifikatoru mobilne opreme (MEID) za Vaš mobilni uređaj; - o uređaju i serijskim brojevima komponenti; - reklamne identifikatore (npr. IDFA i IFA) ili slične identifikatore; - Vašu komunikaciju s nama ili u vezi nas na društvenim mrežama; i - Vašim aktivnostima, u odnosu na način na koji koristite naše online usluge, poput sadržaja koje posjećujete na našim mobilnim aplikacijama. Nastojat ćemo, kada god to bude tehnički moguće i razumno očekivati od nas, od Vas zatražiti i ishoditi Vašu privolu za prikupljanje i obradu ovih podataka od strane McDonald’sa. Možete nam uskratiti takvu privolu za prikupljanje podataka odbijanjem izdavanja zatražene privole, kao i koristeći postavke svog uređaja ili internet preglednika i prateći upute Vašeg pružatelja mobilnih usluga, proizvođača uređaja ili pružatelja Internet preglednika, kome se u tu svrhu možete obratiti. Neke od online usluga i tehnologija u restoranima možda neće ispravno raditi ukoliko nemaju informaciju o Vašoj lokaciji, o čemu ćemo Vas nastojati izvijestiti. Ukoliko želite da izbrišemo informacije koje smo prikupili, a koje mogu otkriti vašu lokaciju, molimo Vas da nam se obratite na adresu navedene u nastavku. Moguće je da smo neke od takvih podataka dužni zadržati po zakonu. Prikupljanje podataka iz drugih izvora Podatke o vama možemo prikupiti od drugih legitimnih izvora, uz jamstvo da su podaci legalno prikupljeni. Možemo prikupljati i podatke koji su javno dostupni. Na primjer, možemo prikupljati podatke koje ste objavili na Vašem javnom profilu dok komunicirate s nama putem tog profila. OBAVIJEST PREDSTAVNICIMA POSLOVNIH PARTNERA GLOBALNA HRANA se obvezuje prikupljenim osobnim podacima vlasnika, zastupnika ili drugih predstavnika PARTNERA postupati sukladno odredbama Opće uredbe o zaštiti podataka i pripadajućih primjenjivih propisa o zaštiti osobnih podataka. U tu svrhu GLOBALNA HRANA sukladno odredbama čl. 12 i 13. Opće uredbe daje slijedeće obavijesti: Osobne podatke prikupljene u postupku sklapanja i ispunjenja ugovora u svojstvu voditelja obrade prikuplja GLOBALNA HRANA d.o.o., Hrvatska, Zagreb, Rudeška cesta 87/a, OIB 97492131626. Kontakt Službenika za zaštitu osobnih podataka GLOBALNE HRANE je povjerljivost@hr.mcd.com. GLOBALNA HRANA prikupljene osobne podatke može koristiti u svrhu sastavljanja i ispunjenja ugovora o suradnji. Sukladno navedenom, podaci se prikupljaju na temelju legitimnog interesa GLOBALNE HRANE, a u svrhu sklapanja i ispunjenja ugovornih odnosa. Podaci koji se prikupljaju su podaci kontakt osoba partnera – direktora, vlasnika i/ili djelatnika zaduženog za kontakt sa GLOBALNOM HRANOM (ime i prezime, radno mjesto, službeni mobitel i službeni fiksni telefon). Prikupljeni podaci mogu se dostavljati nadležnim tijelima sukladno odredbama primjenjivih propisa (primjerice, policiji, sudovima, poreznoj upravi i slično). Prikupljeni podaci se ne izvoze izvan EU. Prikupljeni podaci zadržavaju se u rokovima propisanim pozitivnim propisima (porezni i računovodstveni propisi), a podredno na rok od 2 mjeseca računajući od isteka zastarnog roka za prava i obveze GLOBALNE HRANE. GLOBALNA HRANA poštuje prava ispitanika na pristup, ispravak, brisanje i ograničavanje obrade osobnih podataka, kao i prava na ulaganje prigovora na obradu i prava na prenosivost podataka. Navedena prava ispitanici ostvaruju podnošenjem pisanog zahtjeva GLOBALNOJ HRANI i/ili Službeniku za zaštitu osobnih podataka. Pravo na podnošenje prigovora ostvaruje se prigovorom Agenciji za zaštitu osobnih podataka RH. - Kako koristimo podatke koje prikupimo Podatke koje prikupimo možemo koristiti na sljedeće načine: Da bi Vam pružili naše usluge i izvršili ugovorne obveze: - ispunili Vaše zahtjeve, izvršili narudžbu, obradili plaćanje za naše proizvode i usluge; - komunicirali s Vama u vezi Vaših narudžbi, kupovine ili Vaših računa kod nas, kao i u vezi Vaših zahtjeva, pitanja ili komentara; - omogućili Vam korištenje naših online usluga (uključivo s mobilnim aplikacijama); i - pružili uslugu podrške kupcima, uključivo s obradom pritužbi na naše usluge. Da bi vam ponudili, odnosno popravili naše usluge te iz drugih opravdanih poslovnih razloga: - kako bi Vas obavijestili o našim proizvodima i uslugama, nagradnim igrama, ponudama, promocijama ili posebnim događajima za koje smatramo da bi Vas mogle zanimati (ukoliko nam date dopuštenje da to činimo); - kako bi personalizirali Vaše iskustvo u našim restoranima i na online uslugama odnosno kako bi koristili tehnologije analize i izrade profila u cilju personalizacije Vašeg iskustva, dostavljali Vam sadržaje razvijene po mjeri Vaših procijenjenih interesa i prilagođene načinu na koji koristite naše online usluge ili tehnologije u restoranima, kojoj uporabi uvijek imate pravo prigovoriti; - za upravljanje našim poslovanjem, uključivo s razvojem novih proizvoda i usluga, provedbom istraživanja kupaca i poslovanja, za ocjenjivanje učinkovitosti naše prodaje, marketinga i reklama; - za upravljanje našim poslovanjem, za dijagnosticiranje tehničkih problema ili problema s uslugom, za upravljanje našim online uslugama i tehnologijama u restoranima, u cilju sprječavanja prijevara, za prikupljanje demografskih podataka o našim klijentima, te za utvrđivanje obrazaca ponašanja u korištenju naših usluga; - za održavanje, upravljanje i poboljšavanje naših proizvoda, ponuda, promocija te online usluga i drugih tehnologija; - za izbor naših djelatnika na natječajima za slobodna radna mjesta U svrhu djelovanja sukladno zakonskim propisima: - u svrhu zaštite od, otkrivanja i sprječavanja prijevara i drugih kaznenih djela, kao i zaštite od ili podnošenja naših tužbi i zahtjeva po osnovi odgovornosti; - u svrhu djelovanja u skladu s zakonskim obvezama i našim politikama; - za postavljanje, izvršavanje ili obranu od pravnih zahtjeva prema nama; i - praćenje i izvješćivanje o pitanjima sukladnosti. Uz Vašu suglasnost podatke koje prikupljamo možemo koristiti za sljedeće svrhe: - za pružanje usluga koje se baziraju na lokaciji; - za pružanje online-usluga maloljetnicima mlađim od 16 godina (uz privolu roditelja); - za korištenje kolačića i sličnih tehnologija; - za pružanje online usluga (uključivo s mobilnim aplikacijama) Vama. Podatke koje prikupljamo o Vama možemo koristiti i na druge načine, o kojima ćemo vas obavijestiti u trenutku prikupljanja podataka ili za koje ćemo tražiti Vašu privolu. - Kako dijelimo podatke koje prikupimo Vaše osobne podatke ne prodajemo, a s drugima ih dijelimo samo na način opisan u ovoj Izjavi o privatnosti. Vaše osobne podatke možemo dijeliti s dobavljačima koji za nas obavljaju određene usluge, poput izvršavanja narudžbi, obrade podataka ili drugih usluga informacijske tehnologije, vođenje promocija, provedbe natjecanja, izvlačenja nagrada, provedbe istraživanja i analiza te personalizacije iskustva korisnika s McDonald’som. U takvim slučajevima poduzimamo mjere (poput korištenja standardnih odredbi o zaštiti podataka) potrebne za osiguranje odgovarajuće razine zaštite Vaših osobnih podataka.. Ovim dobavljačima ne dopuštamo korištenje tih podataka, niti njihovo dijeljenje, u bilo koju svrhu osim za obavljanje usluga za nas. Moguće je da zbog strateških ili drugih poslovnih razloga odlučimo prodati ili prenijeti sav ili dio našeg poslovanja. U sklopu takve prodaje ili prijenosa možemo prenijeti i podatke koje smo prikupili i čuvali, uključivo s osobnim podacima, na bilo koga uključenog u takvu prodaju ili prijenos. Ponekad je moguće da dijelimo podatke koji Vas ne identificiraju izravno. Primjerice, možemo dijeliti anonimne, zbirne statističke podatke o Vašem korištenju naših online usluga. Ili možemo kombinirati podatke o Vama s podacima o drugim korisnicima i dijeliti ih s nekim drugim na način koji ne može dovesti do identifikacije pojedinog ispitanika. Osim toga, ovlašteni smo koristiti i dijeliti podatke kada je to neophodno potrebno za ispunjavanje zakonskih ili regulatornih zahtjeva, za zaštitu naših online usluga i tehnologije u restoranima, za podizanje ili obranu od tužbi i drugih pravnih zahtjeva, za zaštitu prava, interesa i sigurnosti našeg društva ili sustava McDonald’s kojem pripadamo, naših zaposlenika ili trećih osoba, ili u sklopu istrage prijevare ili drugih kaznenih djela, ili kršenja naših politika. - Zaštita djece U McDonald’su smo svjesni značaja zaštite Vaše privatnosti kada koristite naše online usluge. Posebno smo predani zaštiti privatnosti djece koja posjećuju ili koriste naše online usluge. Osobe mlađe od 16 godina mogu koristiti naše online usluge isključivo uz suglasnost roditelja ili skrbnika, ovisno o tome što je primjenjivo. Nećemo svjesno prikupljati i zadržavati osobne podatke osoba mlađih od 16 godina (u pogledu on-line usluga) odnosno maloljetnika u pogledu svih drugih naših usluga, bez da za to tražimo suglasnost roditelja ili skrbnika. Pozivamo roditelje da redovito provjeravaju i nadziru online aktivnosti svoje djece. Ukoliko imate bilo kakvih pitanja o našem pristupu zaštiti privatnosti djece, molimo vas obratite nam se na kontakte navedene u nastavku. - Vaše mogućnosti i izbor Ukoliko ste nam dali privolu za primitak marketinških informacija, kasnije možete od toga odustati prateći upute za odustajanje koje se nalaze u marketinškim porukama koje smo Vam poslali. Isto tako, u općim uputama koje se nalaze u dijelu vašeg korisničkog profila na online uslugama koje koristite možete pronaći izbor komunikacijskih preferencija, uključivo s uputama o odustajanju. Također, na Vašem uređaju može postojati mogućnost podešavanja Vaših komunikacijskih postavki. A možete odustati i tako da nas kontaktirate na adresi, telefonskom broju ili e-mail adresi u nastavku. Ukoliko odustanete od primanja naših marketinških poruka, mi vam i dalje možemo slati poruke u vezi Vaših transakcija, Vaših korisničkih računa, kao i o bilo kakvim natjecanjima, nagradnim igrama ili izvlačenjima na koje ste se prijavili. Odustajanje od jednog oblika komunikacije ne znači da ste odustali od ostalih oblika. Na primjer, ukoliko ste odustali od primitka marketinških e-mail poruka i dalje možete primati tekstualne (SMS) poruke s marketinškim sadržajem, ukoliko ste tako izabrali. Molimo obratite pozornost da ukoliko primate poruke od drugih članica McDonald’s, tada postupak odustajanja trebate provesti izravno s njima. McDonald’s ne ustupa niti čini dostupnim osobne podatke trećim stranama za njihove izravne marketinške aktivnosti, osim ukoliko nam vi to ne dopustite. Nakon naše obavijesti i vašeg pristanka, vaše osobne podatke dijelit ćemo s trećima u skladu s vašim uputama. Vaše podatke čuvamo onoliko vremena koliko je potrebno za ispunjavanje svrha navedenih u ovoj Izjavi, što podrazumijeva da Vaše podatke nećemo čuvati dulje od razdoblja na koje ste nam dali Vašu privolu, odnosno do povlačenja privole (za podatke koji su prikupljeni i obrađuju se temeljem Vaše privole), odnosno u pravilu ne dulje od razdoblja od 6 godina računajući od kraja kalendarske godine u kojoj su podaci prikupljeni (osim kada je zakonom određeno dulje vrijeme, trajno čuvanje, ili kada ustanovimo da postoji naš legitimni interes za dulje čuvanje, primjerice u situaciji kada se očekuje ili je u tijeku postupak pred nadležnim tijelom). Za rokove čuvanja podataka prikupljenih u posebne svrhe, molimo pregledajte obavijesti navedene u uvodnom dijelu ove izjave. Vaša prava u odnosu na osobne podatke Za podatke koje prikupljamo i obrađujemo temeljem Vaše privole, imate pravo u svakom trenutku odustati od dane privole, dostavom odgovarajućeg zahtjeva na donje kontak adrese (navedeno ne utječe na zakonitost obrade prije povlačenja privole). GLOBALNA HRANA d.o.o. poštuje i prava ispitanika na pristup, ispravak i ograničavanje obrade osobnih podataka, kao i prava na ulaganje prigovora na obradu i pravo na prenosivost podataka. Predmetna prava podrazumjevaju primjerice slijedeće: - Kad se obrada Vaših osobnih podataka temelji na Vašoj privoli, privolu u svakom trenutku možete povući; povlačenje privole neće utjecati na zakonitost obrade provedene prije povlačenja privole; - Zatražiti pristup Vašim osobnim podacima i dobiti kopiju takvih podataka; - Dobiti Vaše osobne podatke u strukturiranom, uobičajeno korištenom i računalno čitljivom formatu te od nas zatražiti da ih proslijedimo izravno drugom društvu, u slučaju kad ste nam Vi dostavili svoje osobne podatke te kad se oni obrađuju temeljem vaše prethodne privole ili su neophodni za ispunjenje ugovorne obveze; - Ispravak Vaših osobnih podataka u slučaju kad su netočni ili nepotpuni; - Izjavljivanje prigovora zbog razloga povezanih s Vašom specifičnom situacijom protiv naše obrade Vaših osobnih podataka na temelju našeg legitimnog poslovnog interesa, uključivo s izradom profila i slanjem marketinških obavijesti; - Brisanje Vaših osobnih podataka, uključivo sa svim poveznicama na iste te svih kopija i preslika istih, u dopuštenoj mjeri; na primjer, ako su Vaši podaci zastarjeli, nepotrebni ili nezakoniti ili ako povučete Vašu privolu za obradu temeljenu na toj privoli te kad uspijete s prigovorom protiv obrade; - Ishođenje ograničavanje obrade za vrijeme dok mi obrađujemo Vaš zahtjev ili prigovor u odnosu na točnost Vaših osobnih podataka ili zakonitosti obrade vVaših osobnih podataka te legitimitet našeg interesa za obradom tih podataka, ili ukoliko su Vam osobni podaci potrebni za potrebe vođenja sudskog postupka; - Povrh toga, u svakom trenutku imate pravo povući privolu koju ste prethodno dali za obradu Vaših osobnih podataka. Navedena prava možete koristiti bez naplate naše naknade za njihovu realizaciju, osim u slučaju kad je zahtjev neosnovan ili pretjeran, npr. iz razloga što se ponavlja. Možemo odbiti postupiti po Vašem zahtjevu ili Vam postaviti neka ograničenja, u mjeri u kojoj je to dopušteno primjenjivim propisima. Prije no što vam McDonald’s može dostaviti ikakvu informaciju ili ispraviti netočnosti možemo od Vas zatražiti da potvrdite Vaš identitet i/ili dostavite dodatne pojedinosti kako bi nam pomogli odgovoriti na Vaš zahtjev. Navedena prava ispitanici ostvaruju podnošenjem pisanog zahtjeva GLOBALNOJ HRANI i/ili Službeniku za zaštitu osobnih podataka, na dolje navedene kontakte. Pravo na podnošenje prigovora ostvaruje se prigovorom Agenciji za zaštitu osobnih podataka RH. - Korištenje naših online usluga i drugih tehnologija McDonald’s može koristiti “kolačiće“, web-pratilice i druge slične tehnologije na našim online uslugama, kao i u drugim područjima našeg poslovanja, poput online oglašavanja, kako bi prikupili podatke i isporučili Vam usluge ili proizvode koje ste zatražili. Kao što smo naveli naprijed u ovoj izjavi, nastojat ćemo od Vas u svakom takvom slučaju ishoditi privolu za korištenje takvih funkcionalnosti. “Kolačići“ (cookies) i drugi alati „Kolačići“ su male tekstualne datoteke koje se postavljaju na korisnikov internet preglednik ili na uređaj u cilju bilježenja i/ili prikupljanja podataka o korisniku. Web-pratilica (web-beacon) je mali objekt ili slika koja je ugrađena u internet stranicu, aplikaciju ili e-mail i koristi se za praćenje aktivnosti. Ponekad se nazivaju i „pixel“ ili „tag“. Molimo Vas da imate na umu sljedeće: - Prilikom korištenja naših online usluga može vam se proslijediti “kolačić”. - „Kolačiće“ i druge alate možemo koristiti privremeno („session cookies“ – traju samo za vrijeme vaše posjete stranici) i trajno („persistent cookies“ – traju određeno vrijeme). - Naše online usluge, kao i druga područja povezana s našim poslovanjem mogu imati web-pratilice (web-beacons). “Kolačiće“, web-pratilice i druge slične alate koristimo za prikupljanje podataka u svrhe opisane u ovoj Izjavi. Spomenute tehnologije možemo koristiti u sljedeće svrhe: - kako bi Vam omogućili pristup i korištenje naših online usluga koje, bez ovih tehnologija, možda ne bi ispravno funkcionirale; - za unaprjeđenje naših proizvoda i usluga; - za praćenje učinkovitosti naših online usluga (npr. posjećenost, greške, vrijeme odziva stranica, popularnost pojedinih sadržaja, itd.); - kako bi nam omogućili prilagodbu naših usluga Vašim željama i interesima; - za marketinške aktivnosti putem ciljanog oglašavanja; i - u druge svrhe opisane u dijelu ove Izjave naslovljenom „Kako koristimo prikupljene podatke“. Na primjer, možemo koristiti određene alate kako bi utvrdili jeste li otvorili e-mail poruku ili kliknuli na poveznicu sadržanu u e-mail poruci; ili kako koristite naše stranice i sadržaj naših mobilnih aplikacija; ili jeste li otvorili online reklamu za McDonald’s. McDonald’s i treće strane (npr. mreže putem kojih se oglašavamo i na čija pravila o zaštiti privatnosti ne utječemo) mogu koristiti ove tehnologije za prikupljanje podataka o Vašim online aktivnostima, kroz određeno vrijeme i preko internet stranica i uređaja trećih strana, kao i tijekom korištenja naših online sadržaja, u cilju prilagodbe naših sadržaja Vašim interesima. Savjetujemo Vam da podesite odgovarajuće postavke na Vašem web pregledniku ukoliko ne želite primati “kolačiće“ ili ako želite da Vas Vaš preglednik obavijesti kad primite “kolačić”. Koristeći sadržaj „Pomoć“ na vašem pregledniku upoznajte se s načinima promjene Vaših postavki u odnosu na “kolačiće“. Neki od novijih Internet preglednika mogu imati „Do Not Track“ („Ne prati me“) opciju koja odašilja poruku „Do Not Track“ svim web stranicama koje posjećujete, čime im dajete do znanja da ne želite da se Vaše aktivnosti prate. McDonald’s u ovom trenutku ne poduzima aktivnosti u odgovoru na „Do Not Track“ signal iz razloga što za ovo još nije razvijen jedinstveni tehnološki standard. No pratimo razvoj ovih tehnologija i moguće je da ćemo prihvatiti takav standard kada bude razvijen. Ciljano oglašavanje Prilikom korištenja naših online usluga McDonald’s može prikupljati informacije o Vašim aktivnostima kako bi Vam mogli ponuditi oglasne sadržaje sukladne Vašim interesima. Kao što je već navedeno naprijed u ovoj izjavi, ponuda oglasnih sadržaja uvjetovana je Vašom privolom, od koje uvijek možete odustati na način opisan naprijed u ovoj izjavi. Napominjemo da se naše oglasne poruke mogu nalaziti i na internet stranicama trećih osoba od kojih smo mi ili naši partneri (marketinške agencije, društva McDonald’s sustava) zakupili oglasni prostor radi postavljanja oglasnih sadržaja. U tom slučaju se na prikupljanje i praćenje podataka o pristupima takvim oglasnim sadržajima, primjenjuju pravila oglasnih stranica na kojima se sadržaji objavljuju. McDonald’s ne utječe na pravila privatnosti takvih oglasnih stranica, no poduzet će razumne napore da se njegovi oglasi ne objavljuju na oglasnim stranicama koje nisu implementirale GDPR i druge primjenjive propise o zaštiti osobnih podataka. - Poveznice na druge web stranice i društvene mreže Na našim online uslugama mogu se pojaviti poveznice na web stranice kojima ne upravljamo mi, već treće strane. Ukoliko posjećujete ove povezane web stranice savjetujemo vam da pročitate njihova pravila zaštite privatnosti, uvjete korištenja i druge politike. McDonald’s ne odgovara za politike i načine rada trećih strana. Svaki podatak koji dajete tim organizacijama tretirat će se u skladu s njihovim pravilima zaštite privatnosti, uvjetima korištenja i drugim politikama. Na našim online uslugama također možemo imati aplikacije, alate, spravice („gadget“) i programčiće („widget“) drugih dobavljača, primjerice Facebook-ov „Like“, a koji isto tako mogu koristiti automatsko prikupljanje informacija o načinu na koji koristite ove značajke. Ove organizacije mogu koristiti vaše podatke u skladu s njihovim politikama, na koje mi ne utječemo. - Informacijska sigurnost McDonald’s je predan poduzimanju svih odgovarajućih i razumnih mjera u cilju zaštite sigurnosti Vaših osobnih podataka. Naši postupci tehničke, administrativne i fizičke zaštite razvijeni su s ciljem zaštite Vaših osobnih podataka od slučajnog, nezakonitog i neovlaštenog gubitka, pristupa, otkrivanja, korištenja, izmjene ili uništenja. Iako u McDonald’su poduzimamo sve napore na zaštiti naših informacijskih sustava, niti jedna web stranica, mobilna aplikacija, računalni sustav ili prijenos podataka putem interneta ili druge javne mreže nisu zajamčeno 100% sigurni. - Prijenos podataka u inozemstvo Prijenos osobnih podataka u inozemstvo, u svrhe navedene u ovoj Izjavi ili, primjerice, radi pohrane Vaših osobnih podataka, izvršit ćemo u skladu s ovom Izjavom o privatnosti i primjenjivim propisima o zaštiti osobnih podataka. Vaši osobni podaci mogu se prenijeti ili pohraniti u Europskom gospodarskom prostoru (EEA). Podaci se mogu prenijeti i pohraniti i izvan Europskog gospodarskog prostora. U tom slučaju, podatke mogu obrađivati i naši dobavljači kao treća strana. Podaci se izvan Europskog gospodarskog prostora mogu prenijeti samo pod uvjetom da postoji adekvatna zaštita poput (1) odluke Europske komisije o adekvatnosti u vezi s državom u koju se podaci izvoze; (2) potvrde o postojanju „sigurnosnog štita“, u slučaju da se podaci izvoze u SAD; ili (3) odgovarajućeg i obvezujućeg poslovnika sukladnog propisima o zaštiti osobnih podataka. Matična organizacija McDonald’ sustava, McDonald’s Corporation djeluje u Okviru EU-SAD Štita privatnosti („Štit privatnosti“) kojim upravlja Ministarstvo trgovine SAD (U.S. Department of Commerce), a uređuje prikupljanje, korištenje i pohranu osobnih podataka iz država članica Europske Unije. Navedeno podrazumijeva da je izvoz osobnih podataka u to društvo dozvoljen. Kao sudionik u Štitu privatnosti, McDonald’s Corporation je certificiran za djelovanje sukladno načelima Štita privatnosti u odnosu na sve osobne podatke zaprimljene iz Europske Unije na temelju povjerenja u Štit privatnosti. Pri tome molimo Vas da vodite računa o sljedećem: - McDonald’s Corporation može dijeliti osobne podatke na koje se primjenjuju načela Štita privatnosti s dobavljačima koji mu pružaju usluge, na način opisan u Točki 3. Po načelima Štita privatnosti McDonald’s Corporation može snositi odgovornost u slučaju da takvi dobavljači obrađuju podatke na način koji nije u skladu s okvirom Štita privatnosti te McDonald’s Corporation odgovara za događaje koji bi za posljedicu imali nastanak štete. - McDonald’s Corporation može otkriti osobne podatke koji su mu proslijeđeni pouzdajući se u Štit privatnosti odgovarajući na zakonski utemeljene zahtjeve tijela javnih vlasti, uključivo s zahtjevima tijela državne sigurnosti i pravosudnih tijela. - Vaše je pravo zatražiti pristup osobnim podacima proslijeđenima McDonald’s Corporationu pouzdajući se u Štit privatnosti te iskoristiti mogućnost vašeg izbora u ograničavanju McDonald’s Corporation u korištenju i otkrivanju takvih podataka. Ukoliko ste zainteresirani iskoristiti svoje pravo i pravo izbora molimo Vas da nas kontaktirate na dolje navedene kontakte, a mi ćemo Vam dostaviti kontakt podatke McDonald’s Corporation. Za više informacija o programu Štita privatnosti, te za pregled McDonald’sova certifikata molimo posjetite stranicu Štita privatnosti na: www.privacyshield.gov/welcome. Ukoliko imate pitanja u vezi zaštitnih mehanizama koje koristimo pri međunarodnom prijenosu vaših osobnih podataka ili ako želite primjerak standardnih ugovornih odredbi koje koristimo za zaštitu osobnih podataka koje prenosimo, molimo vas obratite nam se na dolje navedene kontakt podatke. - Izmjene Izjave o privatnosti Ova Izjava o privatnosti primjenjuje se od dana naznačenog na početku Izjave. Izjava se s vremena na vrijeme može mijenjati. Ukoliko dođe do takvih izmjena, novu verziju objavit ćemo na ovom mjestu s izmijenjenim „Datumom zadnje promjene“ (tj. datumu od kojeg se primjenjuje) na početku Izjave. Savjetujemo da ovdje redovito provjeravate najnovije verzije Izjave. - Kako nam se možete obratiti Ukoliko nam se želite obratiti u vezi s pitanjem, zahtjevom (uključujući odustankom od privole ili zahtjevom za korištenjem prava na pristup, ispravak i ograničavanje obrade osobnih podataka, kao i prava na ulaganje prigovora na obradu i prava na prenosivost podataka) ili upitom u odnosu na Vaše osobne podatke, to možete učiniti na: Globalna hrana d.o.o. Rudeška cesta 87a, Zagreb Kontakt službenika za zaštitu podataka : privatnost@hr.mcd.com