http___mcdonalds.hr_izjava-o-privatnosti__2.xml
1.1 2.1 3.1 3.2 4.1 4.2 5.1 5.2 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 22.2 22.3 22.4 22.5 23.1 23.2 23.3 24.1 25.1 25.2 26.1 26.2 26.3 26.4 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 36.2 36.3 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 48.2 48.3 48.4 48.5 48.6 48.7 49.1 50.1 50.2 50.3 50.4 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 82.2 82.3 83.1 84.1 84.2 85.1 85.2 86.1 86.2 86.3 87.1 88.1 89.1 89.2 89.3 90.1 90.2 90.3 91.1 92.1 93.1 93.2 93.3 93.4 93.5 94.1 94.2 94.3 94.4 95.1 95.2 96.1 97.1 97.2 97.3 97.4 98.1 99.1 100.1 101.1 101.2 101.3 102.1 102.2 103.1 104.1 105.1 106.1 107.1 108.1 108.2 109.1 110.1 111.1 112.1 113.1 114.1 115.1 116.1 117.1 118.1 119.1 120.1 121.1 122.1 122.2 122.3 123.1 123.2 123.3 124.1 124.2 125.1 126.1 127.1 128.1 128.2 128.3 128.4 128.5 128.6 129.1 129.2 130.1 131.1 131.2 131.3 131.4 132.1 132.2 133.1 134.1 134.2 134.3 135.1 136.1 136.2 136.3 137.1 138.1 138.2 138.3 138.4 138.5 139.1 140.1 140.2 140.3 141.1 141.2 142.1 142.2 143.1 144.1 144.2 145.1 145.2 145.3 146.1 146.2 146.3 146.4 147.1 147.2 148.1 149.1 150.1 150.2 150.3 150.4 151.1 152.1 152.2 152.3 153.1 154.1 155.1 156.1 157.1 158.1 159.1 160.1 161.1 162.1 163.1 164.1 165.1 166.1 167.1 168.1 169.1 170.1 171.1 172.1 172.2 172.3 173.1 174.1 175.1 176.1 177.1 178.1 179.1 180.1 181.1 182.1 183.1 184.1 185.1 186.1 186.2 186.3 187.1 188.1 189.1 190.1 191.1 192.1 193.1 194.1 195.1
McDonald’s Global Privacy Statement Last updated: 18 May 2018 This privacy statement describes how McDonald’s in the countries listed below – collect, use, protect and share the personal information of our customers. Customers include those who visit our restaurants, use our websites and mobile apps, and otherwise interact with us. Some of the countries in which we operate have laws that require us to share specific privacy information with our customers in those countries. As such, this privacy statement is comprised of two sections – a globally applicable statement and country specific addendum. This initial section describes how McDonald’s collects, uses, protects and shares customer information. Where there are variations for a specific country or additional information that is required to be provided under applicable country law, please refer to the applicable country specific addendum (clicking on a country will take you to the country specific addendum): Austria Belgium Czech Republic France Germany Hungary Ireland Italy Netherlands Poland Portugal Slovakia Spain Switzerland United Kingdom United States The data controller of your personal information is the McDonald’s entity in the jurisdiction where your personal information is collected. Please note that in some countries, there may be an additional entity that is the data controller. Please refer to the applicable country specific addendum for more information regarding the data controller of your personal information. If you are a customer in a country not listed above, please visit the country’s McDonald’s website for the applicable privacy statement. You can find McDonald’s country websites here Many of our restaurants are owned and operated by franchisees, who are independent businessmen and women. This privacy statement does not apply to our franchisees or to websites or mobile apps they operate. Please see our franchisees’ privacy notices for information on how they use customer information. Information We Collect We may collect personal information about you when you visit our restaurants, use our websites or mobile apps (“online services”), and otherwise interact with us (collectively, “services”). The information we collect falls into three categories: (a) information you provide us; (b) information we collect through automated methods, and (c) information we collect from other sources. Generally, your providing of your personal information is voluntary. However, there may be situations where your providing of personal information is necessary to provide a service or is required by law. Please note that in certain cases, we may be unable to provide you with our services unless you provide the information. We will let you know when the providing of your personal information is necessary. We may combine the information you provide us, with information that is collected through automated methods, and with information we receive from other sources. We collect information you provide us You may provide the following information to us, depending on how you interact with us: - personal details, such as your name, postal and email addresses, phone number, birthday information and other contact information, when you register with our online services, log-in to Wi-Fi, enter one of our competitions, or contact us by phone or through our online services; - transaction information, including information about the products you buy, prices, method of payment and payment details; - account information, such as your username or password (or anything else that identifies you) used to access our online services or to buy or use our products and services; - profile information, including products and services you like, or times you prefer to visit us; and - other personal information you choose to provide us when you interact with us. We collect information through automated methods We may use automated technology to collect information from your computer system or mobile device when you visit our restaurants, use our online services, or in-restaurant technology. Automated technology may include cookies, local shared objects, and web beacons. There is more information below about cookies and other technologies in Section 6. We may collect information about your: - internet protocol (IP) address; - date and time of access of our online services or in-restaurant technology; - name and URL of the file retrieved when you use our online services; - computer or mobile-device operating system and browser type; - type of mobile device and its settings; - unique device identifier (UDID) or mobile equipment identifier (MEID) for your mobile device; - device and component serial numbers; - advertising identifiers (for example, IDFAs and IFAs) or similar identifiers; - referring website (a site that has led you to ours) or application; and - activity related to how you use our online services, such as the pages you visit on our sites or in our mobile apps. Our online services and in-restaurant technology may collect information about the exact location of your mobile device or computer using geolocation and technology such as GPS, Wi-Fi, Bluetooth, or cell tower proximity. For most mobile devices and computer systems, you will be requested to give your permission for McDonald’s to process this information. You are able to withdraw your permission for us to collect this information by using the device or web-browser settings. If you have any questions about how to prevent us from collecting exact information about your location, we recommend you contact your mobile-device service provider, the device manufacturer, or your web-browser provider. Some online services and in-restaurant technology may not work properly without information about your location. If you would like us to delete information we have collected which could identify your location, please contact us at our Global or Local Data Protection Office using the contact information provided below. By law, we may need to keep certain information. We collect information from other sources We may collect information about you from other companies and organizations, including public databases, social media platforms, or third party partners such as analytics or marketing providers. We may also collect information that is publicly available. For example, we may collect public profile information about you when you interact with us through social media. We may also collect communications to us or regarding us on social media. We may combine the information you provide us, with information that is collected through automated methods, and with information we receive from other sources. How We Use The Information We Collect We may use the information we collect in the following ways. To provide our services and contract with you: - carry out your requests, fulfill orders, and process payments for our products and services; - communicate with you about your orders, purchases or accounts with us, requests, questions, and comments; - provide online services to you, which includes our websites or mobile apps; and - provide customer support, including to process any concerns about our services. To market to you, improve our services, and the following additional legitimate business interests: - tell you about our products and services, competitions, offers, promotions or special events that we believe may interest you; - tell you about the products and services of our business partners; - personalize your experience in our restaurants and on our online services; - manage our business, including developing new products and services, conducting consumer and operations research, and assessing the effectiveness of our sales, marketing, and advertising; - use analytics and profiling technology to personalize your experience, deliver content (including advertising) tailored to your interests and how you use our online services or in-store technologies, manage our business, help diagnose technical and service issues, administer our online services and in-store technologies, identify users of our online services, identify a device for fraud prevention purposes, gather demographic information about our customers, and determine usage patterns of our services; - maintain, manage, and improve our products, offers, promotions, and online services and other technology; - ensure the security of our networks and systems. To comply with applicable law: - protect against, identify and prevent fraud and other crime, claims and other liabilities; - comply with legal obligations and our policies; - establish, exercise or defend a legal claim; and - monitor and report compliance issues. With your consent (where required by applicable law), we may use the information we collect for the following purposes: - to send you e-mails or text messages about our products and services, competitions, offers, promotions or special events that we believe may interest you; - to send you e-mails or text messages about the products and services of our business partners; - provide location-based services; - provide online services to children (if parental consent is provided); - deploy cookies and similar technologies; and - provide online services to you, which includes our websites or mobile apps. We may use the information we collect about you in other ways, which we will tell you about at the time we collect it or for which we will seek your consent. How We Share The Information We Collect We do not sell your personal information and only share your information as described in this privacy statement. We may share your personal information within the McDonald's Family. The McDonald's Family includes McDonald’s Corporation, our affiliates, our subsidiaries, and our franchisees. A list of these entities, or where you can find more information, is available here. Members of the McDonald’s Family who receive this information from us are not authorized to use or share the information, except as set out in this privacy statement. We may share your personal information with vendors who provide services to us, such as fulfilling orders, providing data processing and other information technology services, managing promotions, contests, prize draws and sweepstakes, carrying out research and analysis, and personalizing individual McDonald’s customer experiences. We do not allow these vendors to use this information or to share it for any purpose other than to provide services on our behalf. We may, for strategic or other business reasons, decide to sell or transfer all or part of our business. As part of that sale or transfer, we may pass information we have collected and stored, including personal information, to anyone involved in the sale or transfer. There may be times where we may share information when it does not directly identify you. For example, we may share anonymous, aggregated statistics about your use of our online services. Or we may combine information about you with other customers and share the information in a way that does not link to a specific customer. We have the right to use or share personal information as necessary to keep to any law, regulation or legal request, to protect our online services and in-restaurant technology, to bring or defend legal claims, to protect the rights, interests, safety and security of our organization, our employees or franchisees, or members of the public, or in connection with investigating fraud or other crime, or violations of our policies. Children's Privacy Notice We understand how important it is to protect your privacy when you use our online services. We are especially committed to protecting the privacy of children who visit or use our online services. For more information on how a specific country protects children’s privacy, please see the country specific addenda below. We urge parents to regularly monitor and supervise their children's online activities. If you have any questions about our children’s privacy practices, please contact us at our Global or Local Data Protection Office using the contact information provided below. If you are contacting a Local Data Protection Office, please choose the office in the country in which you are a customer. Your Choices Marketing Communications If you have agreed to receive marketing communications from us, you can later opt out by following the opt-out instructions in the marketing communications we send you. You can also generally find your communication preferences with instructions on how to opt out in the profile section of the online services that you use. You may also have the ability to change your communication preferences using your device settings. You can also opt out by contacting us at our Global or Local Data Protection Office using the contact information provided below. If you are contacting a Local Data Protection Office, please choose the office in the country in which you are a customer. If you do opt out of receiving marketing communications from us, we may still send communications to you about your transactions, any accounts you have with us, and any contests, competitions, prize draws or sweepstakes you have entered. Opting out of one form of communication does not mean you have opted out of other forms as well. For example, if you opt out of receiving marketing emails, you may still receive marketing text messages if you have opted in to receiving them. Please note that if you are receiving communications from a McDonald’s franchise, then you will need to opt out from them directly. We do not share personal information with third parties for their own direct marketing purposes, unless you give us permission to do so. When we give you notice, and you consent, we will share your personal information as you direct us to. Your Personal Information Rights In certain countries, individuals are entitled to the right to access, correct, transmit, restrict, delete and object to processing of the personal information we have collected. In these certain countries, individuals are also entitled to withdraw consent to processing of personal information. For more information regarding these rights, and the countries where these rights are available, please see the country specific addenda below. You can also visit the GDPR Rights Center. Use of Our Online Services and Other Technology We, and our vendors who provide services to us, may use cookies, web beacons and other similar technologies on our online services and in other areas related to our business, such as online advertising, to collect information and provide you with the services or products that you have requested. Cookies and other technologies A “cookie” is a small text file that is placed onto an Internet user’s web browser or device and is used to remember and/or obtain information about the user. Some countries in which we operate may have a cookies policy. That specific information, by country, is provided below. A “web beacon” is a small object or image that is embedded into a web page, application, or email and is used to track activity. They are also sometimes referred to as pixels and tags. Please note the following: - You might be assigned a cookie when using our online services. - We offer certain features that are available only through the use of cookies and other similar technologies. - We may use both session (for the duration of your visit) and persistent (for the duration of a fixed period of time) cookies and other tracking technologies. - Our online services and other areas related to our business may have web beacons. We use cookies, web beacons and other similar technology, to collect information for the purposes described in this privacy statement. We may also combine the information collected by these technologies with information we have collected about you by other means that are described in this privacy statement. We may use these technologies to: - uniquely identify you or your device; - allow you to access and use our online services, where without them, our online services may not work properly; - further system security where appropriate; - statistical purposes, in order to measure use of our websites and mobile apps; - improve our products and services; - help us monitor the performance (e.g., traffic, errors, page load time, popular sections, etc.) of our online services; - remember you, for your convenience, when you visit our online services - help customize your experience; - to market to you through targeted advertising; and - for other purposes described in the section of this privacy statement titled, “How we use the information we collect.” For example, we may use certain technologies to determine whether you have opened an e-mail or clicked on a link contained in an e-mail, how you use the pages and content in our mobile apps, or whether you have clicked on a McDonald’s online advertisement. Both we and others (such as our advertising networks) may use these technologies to collect information about your online activities, over time and across third-party websites and devices, and when using our online services to further personalize your experience with us. Use the options in your web browser if you do not wish to receive a cookie or if you wish to set your browser to notify you when you receive a cookie. Click on the “Help” section of your browser to learn how to change your cookie preferences. If you disable all cookies, you may not be able to take advantage of all the features available on a website. Some newer web browsers may have a "Do Not Track" preference that transmits a "Do Not Track" header to the websites you visit with information indicating that you do not want your activity to be tracked. McDonald’s does not currently take actions to respond to Do Not Track signals because a uniform technological standard has not yet been developed. We continue to review new technologies and may adopt a standard once one is created. Where video is available on our online services, we may target and track the videos you view. You consent to our tracking of your video viewing through online services or third-party social media for up to two years, or as otherwise permitted by applicable law, or until you withdraw your consent. More information regarding how cookies and technology are used in a country in which you are a customer may be available in the country specific addenda. Targeted advertising When you use our online services, we (and our vendors who provide services to us) may collect information about your activities so that we can provide you with advertising tailored to your interests. Because we take part in advertising (“ad”) networks, you may see certain ads on other websites. Ad networks allow us to target the information we send you based on your interests, other information related to you, and contextual means. These ad networks track your online activities over time by collecting information through use of cookies, web beacons, and web-server logs. The ad networks use this information to show you advertisements that may be of particular interest to you. The ad networks we take part in may collect information about your visits to websites that also take part in the relevant ad network, such as the pages or advertisements you view and how you use the websites. We use this information, both on our online services and on third-party websites that take part in the ad networks, to provide you with advertising tailored to you, and to help us assess how effective our marketing is. You can opt out of targeted advertising by visiting www.aboutads.info/choices or www.networkadvertising.org/managing/opt_out.asp . If you choose to opt out, you will continue to receive advertisements but they will not be tailored to your interests. Links to Other Websites and Social Media Our online services may offer links to websites that are not run by us but by third parties. If you visit one of these linked websites, you should read the website’s privacy policy, terms and conditions, and their other policies. We are not responsible for the policies and practices of third parties. Any information you give to those organizations is dealt with under their privacy policy, terms and conditions, and other policies. We may also have providers of other apps, tools, widgets and plug-ins on our online services, such as Facebook “Like” buttons, which may also use automated methods to collect information about how you use these features. These organizations may use your information in line with their own policies Information Security We are committed to taking appropriate measures designed to keep your personal information secure. Our technical, organizational and physical procedures are designed to protect personal information from accidental, unlawful or unauthorized loss, access, disclosure, use, alteration, or destruction. While we make efforts to protect our information systems, no website, mobile application, computer system, or transmission of information over the internet or any other public network can be guaranteed to be 100% secure. Retention We keep your information for the length of time needed to carry out the purposes outlined in this privacy statement and to adhere to our policies on keeping records (unless a longer period is needed by law). Our records policies reflect applicable laws. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax/revenue laws), resolve disputes, enforce our agreements, and as otherwise described in this statement. International Data Transfers McDonald’s is a global organization with business processes, management structures and technical systems that cross borders. As such, we may share information about you within the McDonald’s Family and transfer it to countries in the world where we do business in connection with the uses identified above. Any international data transfers will be in accordance with this Privacy Statement and in compliance with applicable laws. Some countries in which we operate may have requirements pertaining to international data transfers. That specific information, by country, is provided below in the country specific addenda. McDonald’s Corporation participation in the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks McDonald’s Corporation participates in the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks (“Privacy Shield”) administered by the U.S. Department of Commerce regarding the collection, use and retention of personal information from European Union member countries and Switzerland. McDonald’s Corporation’s participation in the Privacy Shield subjects it to the investigatory and enforcement power of the Federal Trade Commission. You can view a complete list of all Privacy Shield participants, including McDonald’s Corporation, at https://www.privacyshield.gov/list. As a Privacy Shield participant, McDonald’s Corporation is committed to and has certified that it adheres to the Privacy Shield Principles for all personal information received from the European Union and Switzerland in reliance on the Privacy Shield. Please note the following: - McDonald’s Corporation may share personal information that is subject to the Privacy Shield Principles with vendors who provide services to it, as described above in Section 3. McDonald’s Corporation may be liable under the Privacy Shield if these vendors process such personal information in a manner inconsistent with the Privacy Shield and McDonald’s Corporation is responsible for the event giving rise to the damage. - McDonald’s Corporation may disclose personal information received in reliance on the Privacy Shield in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. - You have the right to request access to personal information received by McDonald’s Corporation in reliance on the Privacy Shield, and to exercise choice in limiting McDonald’s Corporation use and disclosure of such information. If you are interested in exercising your right and choice, please contact McDonald’s Corporation at the address, phone number or email address below. McDonald’s Corporation’s privacy practices are provided in this Privacy Statement. McDonald’s Corporation encourages you to contact it at any time with questions, concerns or complaints about its privacy practices and participation in the Privacy Shield; simply use the address, phone number or email address provided below. You may also refer a complaint to your local data protection authority and McDonald’s Corporation will work with them to resolve your concern. If McDonald’s Corporation is unable to resolve your concern regarding your personal information received by McDonald’s Corporation under the Privacy Shield, you have the right to direct your unresolved concern to JAMS, an independent dispute resolution service based in the United States, to provide recourse at no charge to you. To seek recourse for an unresolved concern, please click here. If JAMS is unable to resolve your concern, you may have the right to invoke binding arbitration under certain conditions. To learn more about this option, click here. Please note that the foregoing processes apply only to the resolution of disputes regarding personal information received by McDonald’s Corporation under the Privacy Shield. All other disputes that you may have with McDonald’s Corporation or any other members of the McDonald’s Family, or any agents, representatives, agencies, officers, directors, or employees, must be resolved in accordance with the terms and conditions of any applicable websites, mobile apps, email newsletters, email subscriptions or other digital properties owned or controlled by a member of the McDonald’s Family. For more information about the Privacy Shield program, and to view McDonald’s Corporation’s certification, please visit the Privacy Shield website. Changes To Our Privacy Statement This privacy statement is in effect as of the date noted at the top of the statement. We may change this privacy statement from time to time. If we do, we will post the revised version here and change the “last updated date” (the date it applies from) at the top of the statement. You should check here regularly for the most up-to-date version of the statement. How To Contact Us You can contact us at any time about McDonald’s privacy practices at our Global or Local Data Protection Offices. Our Local Data Protection Offices can assist with country-specific queries or information. Contact information for our Local Data Protection Offices can be found in the country specific addenda. Global Data Protection Office Attention: Global Data Protection Office Privacy at McDonald's, Dept. 282 110 North Carpenter Street Chicago, IL 60607-2101, USA contact.privacy@us.mcd.com Ireland Last updated: 18 May 2018 Data Controller McDonald’s Restaurants of Ireland Limited is the data controller for the processing of your personal information. Your Personal Information Rights In connection with your personal information rights, you may request the following: - Where processing your personal information is based on your consent you may withdraw this consent at any time; the withdrawal of the consent shall not affect the lawfulness of processing based on consent before its withdrawal; - Request access to your personal information and obtain a copy of it; - Obtain your personal information in a structured, commonly used and machine-readable format and request us to transmit it directly to another company in case your personal information is processed based on your prior consent, or required for the performance of a contract; - Have your personal information corrected when it is inaccurate or incomplete; - Object on grounds relating to your particular situation to our processing of your personal information based on our legitimate business interest, including profiling, and to the sending of marketing communications; - Have your personal information erased, including any links to, copy or replication of such information, as permitted under applicable law; for instance, when your information is outdated, not necessary or unlawful or when you withdraw your consent to our processing based on such consent, or when you successfully object to our processing; - Obtain the restriction of the processing while we are processing your request or challenge pertaining to the accuracy of your personal information or the lawfulness of the processing of your personal information and our legitimate interests to process this information, or if you need the personal information for litigation purposes. You may exercise these rights free of charge by contacting us via https://customerservices.mcdonalds.co.uk/hc/en-gb/requests/new. However, subject to the applicable law, McDonald’s may charge a reasonable fee or refuse to act on a request if it is manifestly unfounded or excessive, in particular because of its repetitive character. In some situations, McDonald’s may refuse to act or impose limitations on the information disclosed if, for instance, the disclosure is likely to adversely affect the rights and freedoms of others, prejudice the execution or enforcement of the law, or interfere with pending or future litigation. You also have the right to lodge a complaint about our processing of your personal information with the Data Protection Commissioner, which is the Supervisory Authority in Ireland, by e-mailing info@dataprotection.ie Children’s Privacy Notice Our policy is not to collect personal information from any child under 13 unless for a specific activity where the child's parent or guardian has first provided us with written consent to that specific activity. Cookies and Other Technologies A copy of McDonald’s UK cookies policy can be found here. Facebook Custom Audiences Where you are a registered user of Facebook, we will use your email address in an encrypted format to match with your Facebook profile so that we can provide you with personalised advertising on Facebook. Please note that such activity is also subject to the privacy choices you have elected to make on Facebook. Facebook Lookalike Audiences Where you are a registered user of Facebook, we will use your email address in an encrypted format to enable Facebook to find other registered users of their services that share similar interests to you based on: - information that we observe about you from your interactions with our Services, or when you visit one of our restaurants; and - the information Facebook holds about you. International Data Transfers As a resident of the European Economic Area, we may transfer your personal information to countries that have not been found by the European Commission to provide adequate protection. In such cases, we take measures (such as standard data protection clauses) necessary to ensure that your personal information receives an adequate level of protection. If you have any questions about the safeguards we use when transferring your personal information internationally or if you want to obtain a copy of the standard contractual clauses we use to safeguard personal information we transfer, please contact us using the contact information provided below. How to Contact McDonald’s Ireland If you have data protection questions specific to McDonald’s Ireland, you can reach us via the following link: https://customerservices.mcdonalds.co.uk/hc/en-gb/requests/new or by writing to us at: Attention: Data Protection Office McDonald's Restaurants of Ireland Limited Customer Services 11-59 High Road East Finchley London N2 8AW UK
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 9.2 9.3 10.1 11.1 12.1 13.1 14.1 15.1 15.2 16.1 16.2 17.1 18.1 19.1 20.1 20.2 20.3 21.1 22.1 23.1 24.1 25.1 26.1 27.1 27.2 28.1 29.1 30.1 30.2 30.3 30.4 30.5 31.1 32.1 32.2 32.3 33.1 34.1 34.2 34.3 35.1 35.2 36.1 36.2 37.1 38.1 38.2 39.1 40.1 40.2 40.3 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 68.2 68.3 69.1 69.2 70.1 70.2 70.3 71.1 72.1 73.1 73.2 74.1 74.2 75.1 75.2 76.1 77.1 77.2 77.3 77.4 78.1 79.1 79.2 79.3 80.1 80.2 81.1 81.2 82.1 83.1 83.2 84.1 85.1 86.1 87.1 88.1 89.1 90.1 91.1 92.1 93.1 94.1 94.2 95.1 95.2 96.1 97.1 97.2 98.1 99.1 100.1 100.2 101.1 102.1 103.1 104.1 105.1 106.1 107.1 108.1 109.1 110.1 111.1 112.1 113.1 114.1 115.1 115.2 116.1 116.2 116.3 117.1 118.1 118.2 119.1 119.2 119.3 120.1 121.1 121.2 121.3 121.4 122.1 122.2 123.1 124.1 124.2 124.3 125.1 126.1 127.1 127.2 127.3 127.4 128.1 128.2 128.3 129.1 129.2 130.1 130.2 131.1 132.1 132.2 133.1 134.1 135.1 136.1 136.2 136.3 136.4 137.1 138.1 139.1 140.1 141.1 142.1
GLOBALNA HRANA d.o.o., Zagreb, Rudeška cesta 87/a, matični broj (MBS): 080064649 upisano u sudski registar Trgovačkog suda u Zagrebu, OIB 97492131626 kao voditelj obrade podataka pripremio je za Vas ovu Obavijest u namjeri da vas upoznamo s postupkom obrade i zaštite Vaših osobnih podataka. GLOBALNA HRANA d.o.o. je nositelj franšize za prodaju proizvoda branda McDonald’s na području Republike Hrvatske, zbog čega se u nastavku ove Izjave za GLOBALNU HRANU d.o.o. kao voditelja obrade koristi pojam McDonald’s. Ova obavijest postavili smo na našu internet stranicu kako bi Vam u svakom trenutku učinili dostupnim informacije o obradi Vaših osobnih podataka. Ova obavijest na snazi je od 25.05.2018. - Podaci koje prikupljamo Podatke koje prikupljamo spadaju u tri kategorije: (a) informacije koje nam Vi dajete; (b) informacije koje prikupljamo na automatizirane načine; i (c) informacije koje prikupljamo iz drugih zakonitih izvora. Za pojedine svrhe obrade pripremili smo i posebne obavijesti o obradi osobnih podataka, kojima možete pristupiti na slijedećem LINKU. Posebnim obavijestima možete pristupiti i na slijedeći način: U pravilu, podatke prikupljamo od Vas neposredno i Vi nam ih dajete dobrovoljno. Mi ćemo vas obavijestiti kada je davanje Vaših osobnih podataka neophodno za pružanje usluge ili obvezno po zakonu. Molimo Vas imajte na umu kako Vam, u slučaju da je podatak nužan za pružanje usluge ili obvezan po zakonu, ukoliko nam ne date potrebne podatke nećemo moći pružiti našu uslugu. Prikupljanje podataka od Vas neposredno Možete nam dati sljedeće podatke: - osobne podatke, poput Vašeg imena, poštanske i e-mail adrese, broja telefona, datuma rođenja i druge kontakt podatke prilikom Vaše registracije na naše online ili SMS usluge, kada sudjelujete u nekoj od naših nagradnih igara ili nam se obratite telefonom ili putem online usluga kako biste nam postavili upit, dali pohvalu ili izjavili prigovor na naše proizvode i/ili usluge; - podatke o transakcijama, uključivo s podacima o proizvodima koje kupujete, cijenama, načinu plaćanja i detaljima plaćanja; - podatke o Vašem korisničkom računu, poput Vašeg korisničkog imena i lozinke koje koristite da bi pristupili našim online uslugama ili kupili, odnosno koristili naše proizvode i usluge. Gore navedene podatke prikupljamo radi sklapanja i ispunjenja ugovora sa Vama, ispunjenja naših zakonskih obveza odnosno na temelju našeg legitimnog interesa sukladno čl. 1. tč. b, c i f Opće uredbe o zaštiti podataka (dalje u tekstu pod pojmom GDPR). Pored navedenog, od Vas temeljem Vaše privole sukladno čl. 1. tč. a GDPR-a možemo prikupljati i slijedeće podatke: - informacije o Vašem profilu, uključivo s proizvodima i uslugama koje volite, vremenu u kojem nas najčešće posjećujete; i - ostale osobne podatke koje nam dobrovoljno otkrijete prilikom komunikacije s nama. Prikupljanje podataka na automatizirane načine Automatiziranu tehnologiju možemo koristiti za prikupljanje podataka s Vašeg računala ili mobilnog uređaja kada posjećujete naše restorane, koristite naše online usluge ili koristite tehnologije u našim restoranima. Automatizirane metode prikupljanja podataka mogu uključivati „kolačiće“, local shared objects i web tražilice. U nastavku se nalazi više informacija o „kolačićima“ (cookies) i drugim tehnologijama. Na taj način možemo prikupljati podatke o: - internet protokol (IP) adresu; - operativnom sustavu Vašeg računala ili mobilnog uređaja te korištenom Internet pregledniku; - vrsti mobilnog uređaja i njegovim postavkama; - jedinstvenom identifikatoru uređaja (UDID) ili identifikatoru mobilne opreme (MEID) za Vaš mobilni uređaj; - o uređaju i serijskim brojevima komponenti; - reklamne identifikatore (npr. IDFA i IFA) ili slične identifikatore; - Vašu komunikaciju s nama ili u vezi nas na društvenim mrežama; i - Vašim aktivnostima, u odnosu na način na koji koristite naše online usluge, poput sadržaja koje posjećujete na našim mobilnim aplikacijama. Nastojat ćemo, kada god to bude tehnički moguće i razumno očekivati od nas, od Vas zatražiti i ishoditi Vašu privolu za prikupljanje i obradu ovih podataka od strane McDonald’sa. Možete nam uskratiti takvu privolu za prikupljanje podataka odbijanjem izdavanja zatražene privole, kao i koristeći postavke svog uređaja ili internet preglednika i prateći upute Vašeg pružatelja mobilnih usluga, proizvođača uređaja ili pružatelja Internet preglednika, kome se u tu svrhu možete obratiti. Neke od online usluga i tehnologija u restoranima možda neće ispravno raditi ukoliko nemaju informaciju o Vašoj lokaciji, o čemu ćemo Vas nastojati izvijestiti. Ukoliko želite da izbrišemo informacije koje smo prikupili, a koje mogu otkriti vašu lokaciju, molimo Vas da nam se obratite na adresu navedene u nastavku. Moguće je da smo neke od takvih podataka dužni zadržati po zakonu. Prikupljanje podataka iz drugih izvora Podatke o vama možemo prikupiti od drugih legitimnih izvora, uz jamstvo da su podaci legalno prikupljeni. Možemo prikupljati i podatke koji su javno dostupni. Na primjer, možemo prikupljati podatke koje ste objavili na Vašem javnom profilu dok komunicirate s nama putem tog profila. OBAVIJEST PREDSTAVNICIMA POSLOVNIH PARTNERA GLOBALNA HRANA se obvezuje prikupljenim osobnim podacima vlasnika, zastupnika ili drugih predstavnika PARTNERA postupati sukladno odredbama Opće uredbe o zaštiti podataka i pripadajućih primjenjivih propisa o zaštiti osobnih podataka. U tu svrhu GLOBALNA HRANA sukladno odredbama čl. 12 i 13. Opće uredbe daje slijedeće obavijesti: Osobne podatke prikupljene u postupku sklapanja i ispunjenja ugovora u svojstvu voditelja obrade prikuplja GLOBALNA HRANA d.o.o., Hrvatska, Zagreb, Rudeška cesta 87/a, OIB 97492131626. Kontakt Službenika za zaštitu osobnih podataka GLOBALNE HRANE je povjerljivost@hr.mcd.com. GLOBALNA HRANA prikupljene osobne podatke može koristiti u svrhu sastavljanja i ispunjenja ugovora o suradnji. Sukladno navedenom, podaci se prikupljaju na temelju legitimnog interesa GLOBALNE HRANE, a u svrhu sklapanja i ispunjenja ugovornih odnosa. Podaci koji se prikupljaju su podaci kontakt osoba partnera – direktora, vlasnika i/ili djelatnika zaduženog za kontakt sa GLOBALNOM HRANOM (ime i prezime, radno mjesto, službeni mobitel i službeni fiksni telefon). Prikupljeni podaci mogu se dostavljati nadležnim tijelima sukladno odredbama primjenjivih propisa (primjerice, policiji, sudovima, poreznoj upravi i slično). Prikupljeni podaci se ne izvoze izvan EU. Prikupljeni podaci zadržavaju se u rokovima propisanim pozitivnim propisima (porezni i računovodstveni propisi), a podredno na rok od 2 mjeseca računajući od isteka zastarnog roka za prava i obveze GLOBALNE HRANE. GLOBALNA HRANA poštuje prava ispitanika na pristup, ispravak, brisanje i ograničavanje obrade osobnih podataka, kao i prava na ulaganje prigovora na obradu i prava na prenosivost podataka. Navedena prava ispitanici ostvaruju podnošenjem pisanog zahtjeva GLOBALNOJ HRANI i/ili Službeniku za zaštitu osobnih podataka. Pravo na podnošenje prigovora ostvaruje se prigovorom Agenciji za zaštitu osobnih podataka RH. - Kako koristimo podatke koje prikupimo Podatke koje prikupimo možemo koristiti na sljedeće načine: Da bi Vam pružili naše usluge i izvršili ugovorne obveze: - ispunili Vaše zahtjeve, izvršili narudžbu, obradili plaćanje za naše proizvode i usluge; - komunicirali s Vama u vezi Vaših narudžbi, kupovine ili Vaših računa kod nas, kao i u vezi Vaših zahtjeva, pitanja ili komentara; - omogućili Vam korištenje naših online usluga (uključivo s mobilnim aplikacijama); i - pružili uslugu podrške kupcima, uključivo s obradom pritužbi na naše usluge. Da bi vam ponudili, odnosno popravili naše usluge te iz drugih opravdanih poslovnih razloga: - kako bi Vas obavijestili o našim proizvodima i uslugama, nagradnim igrama, ponudama, promocijama ili posebnim događajima za koje smatramo da bi Vas mogle zanimati (ukoliko nam date dopuštenje da to činimo); - kako bi personalizirali Vaše iskustvo u našim restoranima i na online uslugama odnosno kako bi koristili tehnologije analize i izrade profila u cilju personalizacije Vašeg iskustva, dostavljali Vam sadržaje razvijene po mjeri Vaših procijenjenih interesa i prilagođene načinu na koji koristite naše online usluge ili tehnologije u restoranima, kojoj uporabi uvijek imate pravo prigovoriti; - za upravljanje našim poslovanjem, uključivo s razvojem novih proizvoda i usluga, provedbom istraživanja kupaca i poslovanja, za ocjenjivanje učinkovitosti naše prodaje, marketinga i reklama; - za upravljanje našim poslovanjem, za dijagnosticiranje tehničkih problema ili problema s uslugom, za upravljanje našim online uslugama i tehnologijama u restoranima, u cilju sprječavanja prijevara, za prikupljanje demografskih podataka o našim klijentima, te za utvrđivanje obrazaca ponašanja u korištenju naših usluga; - za održavanje, upravljanje i poboljšavanje naših proizvoda, ponuda, promocija te online usluga i drugih tehnologija; - za izbor naših djelatnika na natječajima za slobodna radna mjesta U svrhu djelovanja sukladno zakonskim propisima: - u svrhu zaštite od, otkrivanja i sprječavanja prijevara i drugih kaznenih djela, kao i zaštite od ili podnošenja naših tužbi i zahtjeva po osnovi odgovornosti; - u svrhu djelovanja u skladu s zakonskim obvezama i našim politikama; - za postavljanje, izvršavanje ili obranu od pravnih zahtjeva prema nama; i - praćenje i izvješćivanje o pitanjima sukladnosti. Uz Vašu suglasnost podatke koje prikupljamo možemo koristiti za sljedeće svrhe: - za pružanje usluga koje se baziraju na lokaciji; - za pružanje online-usluga maloljetnicima mlađim od 16 godina (uz privolu roditelja); - za korištenje kolačića i sličnih tehnologija; - za pružanje online usluga (uključivo s mobilnim aplikacijama) Vama. Podatke koje prikupljamo o Vama možemo koristiti i na druge načine, o kojima ćemo vas obavijestiti u trenutku prikupljanja podataka ili za koje ćemo tražiti Vašu privolu. - Kako dijelimo podatke koje prikupimo Vaše osobne podatke ne prodajemo, a s drugima ih dijelimo samo na način opisan u ovoj Izjavi o privatnosti. Vaše osobne podatke možemo dijeliti s dobavljačima koji za nas obavljaju određene usluge, poput izvršavanja narudžbi, obrade podataka ili drugih usluga informacijske tehnologije, vođenje promocija, provedbe natjecanja, izvlačenja nagrada, provedbe istraživanja i analiza te personalizacije iskustva korisnika s McDonald’som. U takvim slučajevima poduzimamo mjere (poput korištenja standardnih odredbi o zaštiti podataka) potrebne za osiguranje odgovarajuće razine zaštite Vaših osobnih podataka.. Ovim dobavljačima ne dopuštamo korištenje tih podataka, niti njihovo dijeljenje, u bilo koju svrhu osim za obavljanje usluga za nas. Moguće je da zbog strateških ili drugih poslovnih razloga odlučimo prodati ili prenijeti sav ili dio našeg poslovanja. U sklopu takve prodaje ili prijenosa možemo prenijeti i podatke koje smo prikupili i čuvali, uključivo s osobnim podacima, na bilo koga uključenog u takvu prodaju ili prijenos. Ponekad je moguće da dijelimo podatke koji Vas ne identificiraju izravno. Primjerice, možemo dijeliti anonimne, zbirne statističke podatke o Vašem korištenju naših online usluga. Ili možemo kombinirati podatke o Vama s podacima o drugim korisnicima i dijeliti ih s nekim drugim na način koji ne može dovesti do identifikacije pojedinog ispitanika. Osim toga, ovlašteni smo koristiti i dijeliti podatke kada je to neophodno potrebno za ispunjavanje zakonskih ili regulatornih zahtjeva, za zaštitu naših online usluga i tehnologije u restoranima, za podizanje ili obranu od tužbi i drugih pravnih zahtjeva, za zaštitu prava, interesa i sigurnosti našeg društva ili sustava McDonald’s kojem pripadamo, naših zaposlenika ili trećih osoba, ili u sklopu istrage prijevare ili drugih kaznenih djela, ili kršenja naših politika. - Zaštita djece U McDonald’su smo svjesni značaja zaštite Vaše privatnosti kada koristite naše online usluge. Posebno smo predani zaštiti privatnosti djece koja posjećuju ili koriste naše online usluge. Osobe mlađe od 16 godina mogu koristiti naše online usluge isključivo uz suglasnost roditelja ili skrbnika, ovisno o tome što je primjenjivo. Nećemo svjesno prikupljati i zadržavati osobne podatke osoba mlađih od 16 godina (u pogledu on-line usluga) odnosno maloljetnika u pogledu svih drugih naših usluga, bez da za to tražimo suglasnost roditelja ili skrbnika. Pozivamo roditelje da redovito provjeravaju i nadziru online aktivnosti svoje djece. Ukoliko imate bilo kakvih pitanja o našem pristupu zaštiti privatnosti djece, molimo vas obratite nam se na kontakte navedene u nastavku. - Vaše mogućnosti i izbor Ukoliko ste nam dali privolu za primitak marketinških informacija, kasnije možete od toga odustati prateći upute za odustajanje koje se nalaze u marketinškim porukama koje smo Vam poslali. Isto tako, u općim uputama koje se nalaze u dijelu vašeg korisničkog profila na online uslugama koje koristite možete pronaći izbor komunikacijskih preferencija, uključivo s uputama o odustajanju. Također, na Vašem uređaju može postojati mogućnost podešavanja Vaših komunikacijskih postavki. A možete odustati i tako da nas kontaktirate na adresi, telefonskom broju ili e-mail adresi u nastavku. Ukoliko odustanete od primanja naših marketinških poruka, mi vam i dalje možemo slati poruke u vezi Vaših transakcija, Vaših korisničkih računa, kao i o bilo kakvim natjecanjima, nagradnim igrama ili izvlačenjima na koje ste se prijavili. Odustajanje od jednog oblika komunikacije ne znači da ste odustali od ostalih oblika. Na primjer, ukoliko ste odustali od primitka marketinških e-mail poruka i dalje možete primati tekstualne (SMS) poruke s marketinškim sadržajem, ukoliko ste tako izabrali. Molimo obratite pozornost da ukoliko primate poruke od drugih članica McDonald’s, tada postupak odustajanja trebate provesti izravno s njima. McDonald’s ne ustupa niti čini dostupnim osobne podatke trećim stranama za njihove izravne marketinške aktivnosti, osim ukoliko nam vi to ne dopustite. Nakon naše obavijesti i vašeg pristanka, vaše osobne podatke dijelit ćemo s trećima u skladu s vašim uputama. Vaše podatke čuvamo onoliko vremena koliko je potrebno za ispunjavanje svrha navedenih u ovoj Izjavi, što podrazumijeva da Vaše podatke nećemo čuvati dulje od razdoblja na koje ste nam dali Vašu privolu, odnosno do povlačenja privole (za podatke koji su prikupljeni i obrađuju se temeljem Vaše privole), odnosno u pravilu ne dulje od razdoblja od 6 godina računajući od kraja kalendarske godine u kojoj su podaci prikupljeni (osim kada je zakonom određeno dulje vrijeme, trajno čuvanje, ili kada ustanovimo da postoji naš legitimni interes za dulje čuvanje, primjerice u situaciji kada se očekuje ili je u tijeku postupak pred nadležnim tijelom). Za rokove čuvanja podataka prikupljenih u posebne svrhe, molimo pregledajte obavijesti navedene u uvodnom dijelu ove izjave. Vaša prava u odnosu na osobne podatke Za podatke koje prikupljamo i obrađujemo temeljem Vaše privole, imate pravo u svakom trenutku odustati od dane privole, dostavom odgovarajućeg zahtjeva na donje kontak adrese (navedeno ne utječe na zakonitost obrade prije povlačenja privole). GLOBALNA HRANA d.o.o. poštuje i prava ispitanika na pristup, ispravak i ograničavanje obrade osobnih podataka, kao i prava na ulaganje prigovora na obradu i pravo na prenosivost podataka. Predmetna prava podrazumjevaju primjerice slijedeće: - Kad se obrada Vaših osobnih podataka temelji na Vašoj privoli, privolu u svakom trenutku možete povući; povlačenje privole neće utjecati na zakonitost obrade provedene prije povlačenja privole; - Zatražiti pristup Vašim osobnim podacima i dobiti kopiju takvih podataka; - Dobiti Vaše osobne podatke u strukturiranom, uobičajeno korištenom i računalno čitljivom formatu te od nas zatražiti da ih proslijedimo izravno drugom društvu, u slučaju kad ste nam Vi dostavili svoje osobne podatke te kad se oni obrađuju temeljem vaše prethodne privole ili su neophodni za ispunjenje ugovorne obveze; - Ispravak Vaših osobnih podataka u slučaju kad su netočni ili nepotpuni; - Izjavljivanje prigovora zbog razloga povezanih s Vašom specifičnom situacijom protiv naše obrade Vaših osobnih podataka na temelju našeg legitimnog poslovnog interesa, uključivo s izradom profila i slanjem marketinških obavijesti; - Brisanje Vaših osobnih podataka, uključivo sa svim poveznicama na iste te svih kopija i preslika istih, u dopuštenoj mjeri; na primjer, ako su Vaši podaci zastarjeli, nepotrebni ili nezakoniti ili ako povučete Vašu privolu za obradu temeljenu na toj privoli te kad uspijete s prigovorom protiv obrade; - Ishođenje ograničavanje obrade za vrijeme dok mi obrađujemo Vaš zahtjev ili prigovor u odnosu na točnost Vaših osobnih podataka ili zakonitosti obrade vVaših osobnih podataka te legitimitet našeg interesa za obradom tih podataka, ili ukoliko su Vam osobni podaci potrebni za potrebe vođenja sudskog postupka; - Povrh toga, u svakom trenutku imate pravo povući privolu koju ste prethodno dali za obradu Vaših osobnih podataka. Navedena prava možete koristiti bez naplate naše naknade za njihovu realizaciju, osim u slučaju kad je zahtjev neosnovan ili pretjeran, npr. iz razloga što se ponavlja. Možemo odbiti postupiti po Vašem zahtjevu ili Vam postaviti neka ograničenja, u mjeri u kojoj je to dopušteno primjenjivim propisima. Prije no što vam McDonald’s može dostaviti ikakvu informaciju ili ispraviti netočnosti možemo od Vas zatražiti da potvrdite Vaš identitet i/ili dostavite dodatne pojedinosti kako bi nam pomogli odgovoriti na Vaš zahtjev. Navedena prava ispitanici ostvaruju podnošenjem pisanog zahtjeva GLOBALNOJ HRANI i/ili Službeniku za zaštitu osobnih podataka, na dolje navedene kontakte. Pravo na podnošenje prigovora ostvaruje se prigovorom Agenciji za zaštitu osobnih podataka RH. - Korištenje naših online usluga i drugih tehnologija McDonald’s može koristiti “kolačiće“, web-pratilice i druge slične tehnologije na našim online uslugama, kao i u drugim područjima našeg poslovanja, poput online oglašavanja, kako bi prikupili podatke i isporučili Vam usluge ili proizvode koje ste zatražili. Kao što smo naveli naprijed u ovoj izjavi, nastojat ćemo od Vas u svakom takvom slučaju ishoditi privolu za korištenje takvih funkcionalnosti. “Kolačići“ (cookies) i drugi alati „Kolačići“ su male tekstualne datoteke koje se postavljaju na korisnikov internet preglednik ili na uređaj u cilju bilježenja i/ili prikupljanja podataka o korisniku. Web-pratilica (web-beacon) je mali objekt ili slika koja je ugrađena u internet stranicu, aplikaciju ili e-mail i koristi se za praćenje aktivnosti. Ponekad se nazivaju i „pixel“ ili „tag“. Molimo Vas da imate na umu sljedeće: - Prilikom korištenja naših online usluga može vam se proslijediti “kolačić”. - „Kolačiće“ i druge alate možemo koristiti privremeno („session cookies“ – traju samo za vrijeme vaše posjete stranici) i trajno („persistent cookies“ – traju određeno vrijeme). - Naše online usluge, kao i druga područja povezana s našim poslovanjem mogu imati web-pratilice (web-beacons). “Kolačiće“, web-pratilice i druge slične alate koristimo za prikupljanje podataka u svrhe opisane u ovoj Izjavi. Spomenute tehnologije možemo koristiti u sljedeće svrhe: - kako bi Vam omogućili pristup i korištenje naših online usluga koje, bez ovih tehnologija, možda ne bi ispravno funkcionirale; - za unaprjeđenje naših proizvoda i usluga; - za praćenje učinkovitosti naših online usluga (npr. posjećenost, greške, vrijeme odziva stranica, popularnost pojedinih sadržaja, itd.); - kako bi nam omogućili prilagodbu naših usluga Vašim željama i interesima; - za marketinške aktivnosti putem ciljanog oglašavanja; i - u druge svrhe opisane u dijelu ove Izjave naslovljenom „Kako koristimo prikupljene podatke“. Na primjer, možemo koristiti određene alate kako bi utvrdili jeste li otvorili e-mail poruku ili kliknuli na poveznicu sadržanu u e-mail poruci; ili kako koristite naše stranice i sadržaj naših mobilnih aplikacija; ili jeste li otvorili online reklamu za McDonald’s. McDonald’s i treće strane (npr. mreže putem kojih se oglašavamo i na čija pravila o zaštiti privatnosti ne utječemo) mogu koristiti ove tehnologije za prikupljanje podataka o Vašim online aktivnostima, kroz određeno vrijeme i preko internet stranica i uređaja trećih strana, kao i tijekom korištenja naših online sadržaja, u cilju prilagodbe naših sadržaja Vašim interesima. Savjetujemo Vam da podesite odgovarajuće postavke na Vašem web pregledniku ukoliko ne želite primati “kolačiće“ ili ako želite da Vas Vaš preglednik obavijesti kad primite “kolačić”. Koristeći sadržaj „Pomoć“ na vašem pregledniku upoznajte se s načinima promjene Vaših postavki u odnosu na “kolačiće“. Neki od novijih Internet preglednika mogu imati „Do Not Track“ („Ne prati me“) opciju koja odašilja poruku „Do Not Track“ svim web stranicama koje posjećujete, čime im dajete do znanja da ne želite da se Vaše aktivnosti prate. McDonald’s u ovom trenutku ne poduzima aktivnosti u odgovoru na „Do Not Track“ signal iz razloga što za ovo još nije razvijen jedinstveni tehnološki standard. No pratimo razvoj ovih tehnologija i moguće je da ćemo prihvatiti takav standard kada bude razvijen. Ciljano oglašavanje Prilikom korištenja naših online usluga McDonald’s može prikupljati informacije o Vašim aktivnostima kako bi Vam mogli ponuditi oglasne sadržaje sukladne Vašim interesima. Kao što je već navedeno naprijed u ovoj izjavi, ponuda oglasnih sadržaja uvjetovana je Vašom privolom, od koje uvijek možete odustati na način opisan naprijed u ovoj izjavi. Napominjemo da se naše oglasne poruke mogu nalaziti i na internet stranicama trećih osoba od kojih smo mi ili naši partneri (marketinške agencije, društva McDonald’s sustava) zakupili oglasni prostor radi postavljanja oglasnih sadržaja. U tom slučaju se na prikupljanje i praćenje podataka o pristupima takvim oglasnim sadržajima, primjenjuju pravila oglasnih stranica na kojima se sadržaji objavljuju. McDonald’s ne utječe na pravila privatnosti takvih oglasnih stranica, no poduzet će razumne napore da se njegovi oglasi ne objavljuju na oglasnim stranicama koje nisu implementirale GDPR i druge primjenjive propise o zaštiti osobnih podataka. - Poveznice na druge web stranice i društvene mreže Na našim online uslugama mogu se pojaviti poveznice na web stranice kojima ne upravljamo mi, već treće strane. Ukoliko posjećujete ove povezane web stranice savjetujemo vam da pročitate njihova pravila zaštite privatnosti, uvjete korištenja i druge politike. McDonald’s ne odgovara za politike i načine rada trećih strana. Svaki podatak koji dajete tim organizacijama tretirat će se u skladu s njihovim pravilima zaštite privatnosti, uvjetima korištenja i drugim politikama. Na našim online uslugama također možemo imati aplikacije, alate, spravice („gadget“) i programčiće („widget“) drugih dobavljača, primjerice Facebook-ov „Like“, a koji isto tako mogu koristiti automatsko prikupljanje informacija o načinu na koji koristite ove značajke. Ove organizacije mogu koristiti vaše podatke u skladu s njihovim politikama, na koje mi ne utječemo. - Informacijska sigurnost McDonald’s je predan poduzimanju svih odgovarajućih i razumnih mjera u cilju zaštite sigurnosti Vaših osobnih podataka. Naši postupci tehničke, administrativne i fizičke zaštite razvijeni su s ciljem zaštite Vaših osobnih podataka od slučajnog, nezakonitog i neovlaštenog gubitka, pristupa, otkrivanja, korištenja, izmjene ili uništenja. Iako u McDonald’su poduzimamo sve napore na zaštiti naših informacijskih sustava, niti jedna web stranica, mobilna aplikacija, računalni sustav ili prijenos podataka putem interneta ili druge javne mreže nisu zajamčeno 100% sigurni. - Prijenos podataka u inozemstvo Prijenos osobnih podataka u inozemstvo, u svrhe navedene u ovoj Izjavi ili, primjerice, radi pohrane Vaših osobnih podataka, izvršit ćemo u skladu s ovom Izjavom o privatnosti i primjenjivim propisima o zaštiti osobnih podataka. Vaši osobni podaci mogu se prenijeti ili pohraniti u Europskom gospodarskom prostoru (EEA). Podaci se mogu prenijeti i pohraniti i izvan Europskog gospodarskog prostora. U tom slučaju, podatke mogu obrađivati i naši dobavljači kao treća strana. Podaci se izvan Europskog gospodarskog prostora mogu prenijeti samo pod uvjetom da postoji adekvatna zaštita poput (1) odluke Europske komisije o adekvatnosti u vezi s državom u koju se podaci izvoze; (2) potvrde o postojanju „sigurnosnog štita“, u slučaju da se podaci izvoze u SAD; ili (3) odgovarajućeg i obvezujućeg poslovnika sukladnog propisima o zaštiti osobnih podataka. Matična organizacija McDonald’ sustava, McDonald’s Corporation djeluje u Okviru EU-SAD Štita privatnosti („Štit privatnosti“) kojim upravlja Ministarstvo trgovine SAD (U.S. Department of Commerce), a uređuje prikupljanje, korištenje i pohranu osobnih podataka iz država članica Europske Unije. Navedeno podrazumijeva da je izvoz osobnih podataka u to društvo dozvoljen. Kao sudionik u Štitu privatnosti, McDonald’s Corporation je certificiran za djelovanje sukladno načelima Štita privatnosti u odnosu na sve osobne podatke zaprimljene iz Europske Unije na temelju povjerenja u Štit privatnosti. Pri tome molimo Vas da vodite računa o sljedećem: - McDonald’s Corporation može dijeliti osobne podatke na koje se primjenjuju načela Štita privatnosti s dobavljačima koji mu pružaju usluge, na način opisan u Točki 3. Po načelima Štita privatnosti McDonald’s Corporation može snositi odgovornost u slučaju da takvi dobavljači obrađuju podatke na način koji nije u skladu s okvirom Štita privatnosti te McDonald’s Corporation odgovara za događaje koji bi za posljedicu imali nastanak štete. - McDonald’s Corporation može otkriti osobne podatke koji su mu proslijeđeni pouzdajući se u Štit privatnosti odgovarajući na zakonski utemeljene zahtjeve tijela javnih vlasti, uključivo s zahtjevima tijela državne sigurnosti i pravosudnih tijela. - Vaše je pravo zatražiti pristup osobnim podacima proslijeđenima McDonald’s Corporationu pouzdajući se u Štit privatnosti te iskoristiti mogućnost vašeg izbora u ograničavanju McDonald’s Corporation u korištenju i otkrivanju takvih podataka. Ukoliko ste zainteresirani iskoristiti svoje pravo i pravo izbora molimo Vas da nas kontaktirate na dolje navedene kontakte, a mi ćemo Vam dostaviti kontakt podatke McDonald’s Corporation. Za više informacija o programu Štita privatnosti, te za pregled McDonald’sova certifikata molimo posjetite stranicu Štita privatnosti na: www.privacyshield.gov/welcome. Ukoliko imate pitanja u vezi zaštitnih mehanizama koje koristimo pri međunarodnom prijenosu vaših osobnih podataka ili ako želite primjerak standardnih ugovornih odredbi koje koristimo za zaštitu osobnih podataka koje prenosimo, molimo vas obratite nam se na dolje navedene kontakt podatke. - Izmjene Izjave o privatnosti Ova Izjava o privatnosti primjenjuje se od dana naznačenog na početku Izjave. Izjava se s vremena na vrijeme može mijenjati. Ukoliko dođe do takvih izmjena, novu verziju objavit ćemo na ovom mjestu s izmijenjenim „Datumom zadnje promjene“ (tj. datumu od kojeg se primjenjuje) na početku Izjave. Savjetujemo da ovdje redovito provjeravate najnovije verzije Izjave. - Kako nam se možete obratiti Ukoliko nam se želite obratiti u vezi s pitanjem, zahtjevom (uključujući odustankom od privole ili zahtjevom za korištenjem prava na pristup, ispravak i ograničavanje obrade osobnih podataka, kao i prava na ulaganje prigovora na obradu i prava na prenosivost podataka) ili upitom u odnosu na Vaše osobne podatke, to možete učiniti na: Globalna hrana d.o.o. Rudeška cesta 87a, Zagreb Kontakt službenika za zaštitu podataka : privatnost@hr.mcd.com