http___mcdonalds.hr_izjava-o-privatnosti__1.xml
1.1 2.1 2.2 3.1 3.2 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 18.2 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 29.2 30.1 31.1 31.2 31.3 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 40.2 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 50.2 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 74.1 74.2 75.1 76.1 77.1 77.2 78.1 78.2 79.1 80.1 81.1 82.1 83.1 83.2 83.3 84.1 84.2 85.1 86.1 87.1 87.2 88.1 89.1 90.1 91.1 91.2 92.1 93.1 94.1 95.1 95.2 95.3 96.1 96.2 96.3 97.1 97.2 98.1 98.2 98.3 99.1 99.2 100.1 100.2 101.1 101.2 101.3 102.1 102.2 102.3 103.1 103.2 104.1 105.1 105.2 106.1 106.2 107.1 108.1 109.1 110.1 111.1 112.1 112.2 112.3 113.1 113.2 114.1 114.2 115.1 116.1 116.2 117.1 117.2 117.3 118.1 119.1 120.1 120.2 121.1 122.1 123.1 123.2 123.3 123.4 123.5 124.1 124.2 124.3 125.1 125.2 125.3 126.1 127.1 127.2 127.3 128.1 129.1 130.1 130.2 130.3 131.1 132.1 132.2 133.1 133.2 134.1 135.1 136.1 137.1 138.1 139.1 140.1
Privacy Policy Alpega values the privacy of those who provide personal data to us. This privacy policy (the “Policy”) describes how and why we collect, store and use personal data, and provides information about individual’s rights. This Policy applies to both personal data provided to us either by an individual or by organisations. We may use personal data provided to us for any of the purposes as set out in this Policy, or as otherwise disclosed at the point of collection. This Policy should be read together with the Terms of use of the Alpega Websites and, in case of use of the Services, with the Agreement as concluded between Customer and Alpega. What terms are used in this Privacy Policy? "Affiliate" means any company, corporation or other entity that directly or indirectly controls, or is controlled by, or is under common control with either Alpega or Customer. "Agreement" means the General Terms and Conditions of Alpega, any order form or contract proposal accepted by the Customer under any form for the subscription to Services and the approval thereof by Alpega, the documentation relating to the Services (including without limitation user manuals, training materials, supporting materials, technical specifications and requirements), and where applicable, any applicable Special Terms and Conditions of Alpega, this Policy, together constituting the entire agreement governing the relationship between Alpega and the Customer. "Alpega" means Alpega S.A./N.V., a Belgian company with its registered office at Belgicastraat 17, 1930 Zaventem (Belgium), registered under number 0872.586.165 in the Belgian Registry of Companies, as well as its Affiliates. "Customer" means the (legal or natural) person subscribing to the Services. "Data Protection Legislation" means the provisions of the EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) and the Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector, as well as any national legislation and/or regulations implementing them, as this legislation may be amended or replaced from time to time. "Services" means the products and services of Alpega and its Affiliates, as these may change from time to time, to which the Customer has subscribed under the Agreement. "User" refers in this Policy to the visitors of the Websites and/or to the users of the Services on behalf of the Customer. “you” and “your” (and other similar terms) to refer to Customers, individuals associated with Customers, Users, contacts, suppliers and job applicants. “we”, “us”, and “our” (and other similar terms) to refer to Alpega. "Websites" refers to all internet pages and applications provided and operated by Alpega. For the purpose of this Policy, other terms such as "personal data", "processing", "data subject", "data controller", "data processor" and "supervisory authority" shall have the meanings set out in the applicable Data Protection Legislation . Who is responsible for your personal data? Alpega is the data controller responsible for your personal data. Our contact details are provided below. What personal data do we collect and process? We collect and process the following personal data from you: - Identity and Contact Data, including your name, address, telephone number, date of birth, language, marital status, passport number, employment history, educational or professional background, tax status, employee number, job title and function, seniority and other personal data concerning your preferences relevant to our Services; - Financial and Payment Data, including your bank account and other data necessary for processing payments and fraud prevention, including credit/debit card numbers, security code numbers and other related billing information; - Business Information, including information provided in the course of the Agreements or otherwise voluntarily provided by you or your organisation; - Communication Information, including the content of communications exchanged between you and us or between you and others Users; - Profile and Usage Data, including your preferences in receiving marketing information from us, your communication preferences and information about how you use our Services, social media pages and Websites including the Services you viewed or searched for, page response times, download errors, length of visits and page interaction information (such as scrolling, clicks, and mouse-overs), dates and times of when you perform various activities on the Websites or Alpega applications and the status of your personal account settings; - Technical Data, including information collected during your visits to the Websites, the Internet Protocol (IP) address, login data, browser type and version, device type, time zone setting, browser plug-in types and versions, operating system and platform; - Geolocation Data including information about your locations or estimate time of arrival collected during your use of the Services; - Physical Access Data, relating to details of your visits to our premises; If you provide information to us about any person other than yourself (your family, employer, employees, counterparties, advisers, suppliers…), you must ensure that they understand how their information will be used, and that they have given their permission for you to disclose it to us and for you to allow us, and our outsourced service providers, to use it. If we need personal data in respect of individuals associated with Customers in order to provide Services we ask Customers to provide this Policy to such individuals as data subjects. How do we collect your personal data? In the majority of circumstances we will collect personal data (1) from Customers and Users or (2) if you sign up to attend any of our events and/or to receive our communications. In some circumstances (3) we may collect personal data from third parties. The circumstances in which we can collect personal data about you are the following: - when you use any of our Services; - when you seek advice from us; - when you offer to provide, or provides, services to us; - when you correspond with us by phone, email or other electronic means, or in writing, or when you provide other information directly to us, including in conversation with our staff, external providers or consultants; - when you browse, complete a form or make an enquiry or otherwise interact on our Websites or other online platforms; - when you attend our events or sign up to receive information from us ; - by making enquiries from your organisation or other organisations with whom you have dealings such as former employers and educational institutions; - by making enquiries from third party sources such as government agencies, credit reporting agency, database and information service providers or from publicly available records. Where we need to collect personal data by law or in order to perform the Agreement and you fail to provide that data when requested, we may not be able to perform the Agreement we have or are trying to enter into with you. In this case, we may have to cancel our Agreement you have with us, but we will notify you if this is the case at the time. How will we use your personal data and on what basis? We will use your personal data, in such a manner as we believe is reasonably necessary, only for the following purposes and on the following legal basis: - The processing is necessary for the performance of a contract you are party to or in order to take steps at your request prior to you entering into a contract with us: - Quotes and information : to answer your questions in relation to our Services or to provide you with Services related information (such as demos and price quotation ); - Customer engagement: to register you as a Customer of us and to carry out certain background searches to verify whether or not there are any potential issues that may mean we cannot work with a particular person; - Products and services: to provide you with our Services; - Customer management : to carry out the actions in relation to the management of your account (such as exchange of correspondence in the context of the Agreement, entries in directories, …); - Administration: to agree upon payment arrangements and to collect our fees and costs owing to us in connection with the Agreement; - Job applicants: to process applications for employment; - Managing supplier relationships: to receive the provision of services from our suppliers (including administration, billing and payment). If a supplier is assisting us in delivering services to our Customers we will process personal data to manage that relationship. - The processing is necessary in order for us to comply with our legal obligations: - compliance processing in relation to financial and tax obligations; - maintaining records : for example we must hold your personal data on a suppression file to ensure there is a record of your objection to direct marketing. - Where you have given consent to the processing of your personal data: - to send you updates time, news about any events we are organising or participating in, and/or other information about us and the services that we and/or our Affiliates and/or our trading partners, provide that we believe may be of interest to you; - to send you details of client surveys, marketing campaigns, market analysis, or other promotional activities; - to collect information about your preferences to personalise and improve the quality of our communications with you. - The processing is necessary for the pursuit of our legitimate business interests : - to administer and manage our relationship with you, including accounting, auditing, and taking other steps linked to the performance of our business relationship including identifying persons authorised to represent Customers, suppliers or service provider; - to carry out background checks, where permitted and where the processing is necessary for the purpose of preventing fraud; This can include automated verifications of personal data you provide about your identity against relevant databases and contacting you to confirm your identity, or making records of our communications with you for compliance purposes. - to perform analytics (such as trends, sales intelligence, marketing effectiveness); - to analyse and improve our Services and communications and to monitor compliance with our policies and standards; - to manage access to our premises and for security purposes; - to ensure our network and information security and prevent or detect security threats, frauds or other criminal or malicious activities; - To identify potential job applicants and contact them; - for insurance purposes; - to exercise or defend our legal rights or to comply with court orders. - to communicate with you to keep you up-to-date on the latest developments, announcements, and other information about Services, events and initiatives (including briefings, newsletters and other information about business and industry developments). - to collect information about your preferences to personalise and improve the quality of our communications with you. - For better understanding how the Websites are being used as to improve them on a regular basis or for diagnosing technical issues on the Websites. - For statistical purposes in connection with the use of the Services. - For sharing information between Customers and contacts within our services directories. Who else may have access to your personal data? On occasion, we may need to share your personal data with third parties. We will only share personal data where we are legally permitted to do so. Where you provide us with personal data as a client, we will assume, unless you instruct us otherwise in writing, that we can disclose your personal data in such manner as we believe is reasonably necessary to provide our Services (including as described in this Policy), or as is required under applicable law. We share your personal data: - with our Affiliates for the purposes of providing you with Services, as described in this Policy. You can see more about our group entities here; - with our business partners, service providers and other affiliated third parties: to enable us to provide Services to you, we may need to share your personal data with our business partners (including accountants, auditors, bailiffs, lawyers, public notaries and authorities, consultants, mediators, experts, banks, insurances, software/hardware providers, logistic management solutions and system partners). Our arrangements with external service providers currently cover the provision of support services including IT, integrated software solution, legal accreditation, customer and supplier management, money laundering and terrorist financing checks, credit risk reduction and other fraud and crime prevention purposes checks, credit-checking for credit control reasons, events management, document production, financial, business and legal services, secretarial services, marketing and business development and facilities management; - on a confidential basis with third parties for the purposes of collecting your feedback on our Service provision, to help us measure our performance and to improve and promote our Services; - with courts, law enforcement authorities, regulators, government officials or attorneys or other parties where it is reasonably necessary for the establishment, exercise or defence of a legal or equitable claim, or for the purposes of a confidential alternative dispute resolution process; - if we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets to whom we assign or novate any of our rights and obligations; - When disclosures are required by law or regulation: in certain circumstances, please note that we may be required to disclose personal data under applicable law or regulation, including to law enforcement agencies or in connection with proposed or actual legal proceedings. - When certain Services offer a functionality to support the communication needs of Customers (e.g. to send a fax/email/sms via the Services). In these cases, other Users can consult your personal information and add your information in their address book. By using some Services, you understand that the recipient of the communication will become aware that you are an Alpega Customer/User and/or may receive part of your personal data collected and processed by Alpega. - While using the Services, you may have to enter transaction information (including details of a freight or a transport operation or content of email, fax and SMS messages,…) for the purpose of communicating it to other parties via the Services. This information will be made available to other parties, on your request, according to the rules of the Service. International transfers of Information When we transfer your personal data to other countries, including in territories outside of the European Economic Area (“EEA”), we will safeguard that information as described in this Policy. The legal regimes of some countries outside of the EEA do not always offer the same standard of data protection as those inside the EEA, although we will ensure that your personal data is only ever treated in accordance with this Policy. We only transfer personal data to these countries when it is necessary for the Services we provide you, or it is necessary for the establishment, exercise or defense of legal claims or subject to safeguards that assure the protection of your personal data, such as European Commission approved standard contractual clauses. All our subsidiary undertakings and/or Affiliates throughout the world ensure a level of data protection at least as protective as that required in the European Economic Area. For further information, including obtaining a copy of the documents used to protect your information, please contact us using the contact details provided below. Security of your personal data We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We put in place strict confidentiality agreements (including data protection obligations) with our third party service providers. We have also put in place procedures to deal with any personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. Your rights You have various rights with respect to our use of your personal data: • Access: The right of access gives you the right to obtain a copy of your personal data. It helps you to understand how and why we are using your data, and check we are doing it lawfully. There are exceptions to this right, so that access may be denied if, for example, making the information available to you would reveal personal data about another person, or if we are legally prevented from disclosing such information. • Rectification: You have the right to have inaccurate personal data rectified and to have incomplete personal data completed. We encourage you to contact us using the contact details provided below to let us know if any of your personal data is not accurate or has changed, so that we can keep your personal data up-to-date. We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to us. • Erasure: You have the right to have your personal data erased. This right is not absolute and only applies in certain circumstances (for example if your personal data is no longer necessary for the purposes for which it was collected, or when your personal data have been unlawfully processed). • Restriction: You have the right to restrict the processing of your personal data in certain circumstances. This means that you can limit the way that we use your personal data where you have a particular reason for wanting the restriction. This may be because you have issues with the content of the information we hold or how we have processed your data. • Portability: You have the right to request that some of your personal data is provided to you, or to another data controller, in a commonly used, machine-readable format. This right to data portability only applies when our lawful basis for processing this information is consent or for the performance of a contract and we are carrying out the processing by automated means (i.e. excluding paper files). • Objecting: You have the absolute right to object to the processing of your personal data if it is for direct marketing purposes. In others specific circumstances, you also have the right to object to processing of your personal data and to ask us to block, erase and restrict your personal data. • Automated individual decision-making: You shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. The right is not absolute and only applies in certain circumstances. You will be specifically informed if we make such automated individual decision. • Complaints: We are committed to working with you to obtain a fair resolution of any complaint or concerns about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint with a supervisory authority, in the Member State of your habitual residence, of your place of work or of an alleged infringement of the data protection laws (for Belgium see www.dataprotectionauthority.be and for other countries click here ). You also have the right to seek a remedy through the courts. You may, at any time, exercise any of the above rights, by contacting us using the contact details provided below. If we have doubt about your identity, we may request you to provide us with a proof of your identity, i.e. a copy of your ID card, or passport, or any other valid identifying document. Withdrawal of consent When personal data is processed on the basis of your consent, you may withdraw consent at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) to which you originally consented unless there is another legal ground for the processing. In the event that you no longer want to receive any marketing communications from us, please use the unsubscribe option (which is in all of our marketing emails to you), or contact us using the contact details provided below. Withdrawal of consent to receive marketing communications will not affect the processing of personal data for the provision of our Services. How long do we keep your personal data? We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements and, where required for us to assert or defend against legal claims, until the end of the relevant retention period or until the claims in question have been settled. Upon expiry of the applicable retention period we will securely destroy your personal data in accordance with applicable laws and regulations. Cookies What is a cookie ? Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. Cookies are useful because they allow a website to recognise a user’s device. Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improving the user experience. They can also help to ensure that adverts you see online are more relevant to you and your interests. Certain cookies contain personal information – for example, if you click to “remember me” when logging in, a cookie will store your username. Most cookies will not collect information that identifies you, and will instead collect more general information such as how Users arrive at and use websites, or a user’s general location. There are mainly four kinds of cookies: - Session cookies last only for the session. They are erased when the user closes the web browser. - Persistent cookies remain even after the session is closed. They are stored on a user’s hard drive until they expire (persistent cookies are set with expiration dates) or until the user deletes the cookie. Persistent cookies may be used to collect identifying information about the user, including web surfing behaviour or user preferences for a specific website. - First-party cookies belong to the site where you chose to go. - Third-party cookies are fetched from a site whose content is retrieved indirectly for example through an image tag or a banner. The majority of browsers support them (Internet Explorer, Mozilla Firefox, Netscape, Safari, etc.). However, users can set their browsers to decline cookies, or they can delete their cookies at will. What cookies does Alpega use? Generally, Alpega cookies perform different functions: - Essential cookies: Some cookies are essential for the operation of the Website. For example, some cookies allow Alpega to identify the user and ensure the user can access the registration or log in pages. These cookies do not gather information about you that could be used for marketing or remembering where you have been on the internet. This category should not be disabled. If a user opts to disable these cookies, the user will not be able to access all of the content that these pages entitles them to. - Performance and analytics cookies: These cookies collect information about how Users/visitors use a Website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies do not collect information that identifies you. All the information that these cookies collect is anonymous and is only used to improve how the Website works. - Functionality cookies: Alpega may use functionality cookies to allow Alpega to remember your preferences. For example, cookies save you the trouble of typing in your username every time you access the site, and recall your customization preferences, such as which regional edition of the Website you want to see when you log in. Alpega may also use functionality cookies to provide you with enhanced services such as allowing you to watch a video online or comment on a blog. How to control and delete cookies through the browser? The ability to enable, disable or delete cookies can also be completed at browser level. In order to do this, follow the instructions provided by your browser (usually located within the “Help”, “Tools” or “Edit” facility). You can find more information on how to do this and about cookies at: www.allaboutcookies.org. Please remember that if you do choose to disable cookies, you may find that certain sections of the Website do not work properly and be prevented from making use of all of the Services. Links to other websites Our Websites and social media pages may contain tools, widgets or content that link to other, unaffiliated third party websites and/or social media pages. Please note that we are not, and cannot, control or be responsible for the content or privacy and confidentiality practices of any third party websites. You must always carefully review the privacy and confidentiality policy of any third party websites that you may visit in order to understand how the operators of that websites may collect, store and use your personal data. Changes to our privacy policy We reserve the right to update and change this Policy from time to time in order to reflect any changes to the way in which we process your personal data or changing legal requirements. Any changes we may make to our Policy in the future will be posted on this page and, where appropriate, notified to you by email. This Policy was last updated in June 2018. Please check back regularly to keep informed of updates to this Policy. Contact Details Questions, comments and requests regarding this Policy are welcomed and should be addressed to privacy team at: Alpega S.A./N.V. Belgicastraat 17, 1930 Zaventem, Belgium Email: privacy@alpegagroup.com
1.1 2.1 3.1 4.1 5.1 6.1 6.2 7.1 8.1 9.1 10.1 11.1 12.1 12.2 12.3 12.4 13.1 13.2 13.3 13.4 14.1 14.2 14.3 15.1 15.2 15.3 15.4 15.5 15.6 16.1 16.2 16.3 16.4 17.1 18.1 18.2 18.3 19.1 19.2 20.1 21.1 21.2 21.3 22.1 23.1 24.1 25.1 26.1 27.1 27.2 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 39.2 39.3 40.1 41.1 41.2 41.3 42.1 42.2 43.1 43.2 44.1 44.2 44.3 45.1 45.2 45.3 45.4 45.5 45.6 46.1 46.2 46.3 47.1 47.2 47.3 48.1 49.1 49.2 49.3 50.1
- internet protokol (IP) adresi; - operativnom sustavu i vrsti preglednika kojeg posjetitelj koristi na računalu ili mobilnom uređaju; - vrsti mobilnog uređaja i postavkama; - jedinstvenom identifikatoru uređaja (UDID) ili identifikatoru mobilne opreme (MEID) za mobilni uređaj; - uređaju i serijskim brojevima njegovih komponenti; - identifikatoru oglašavanja (npr. IDFA i IFA) ili sličnom identifikatoru; - o internet stranicama ili aplikacijama s kojih je posjetitelj upućen na naše stranice; - o online aktivnostima na drugim stranicama, aplikacijama ili društvenim mrežama; - komunikaciji s nama ili u vezi s nama na društvenim mrežama, i - o aktivnostima, a u vezi načina na koje posjetitelj koristi naše online usluge, poput posjećenih sadržaja na našim stranicama ili na našim mobilnim aplikacijama. Naše online usluge i tehnologije u restoranima mogu prikupljati podatke o točnoj lokaciji mobilnog uređaja ili računala koristeći geolociranje i tehnologije poput GPS, Wi-Fi, Bluetooth ili blizinu odašiljača mobilnog signala. Većina mobilnih uređaja i računalnih sustava omogućuje posjetitelju uskratiti pristanak za prikupljanje podataka na ovakav način putem postavki uređaja ili web preglednika. U slučaju bilo kakvih pitanja o tome kako spriječiti prikupljanje podataka o lokaciji, potrebno je obratiti se davatelju mobilnih usluga, proizvođaču uređaja ili proizvođaču web preglednika. Ako posjetitelj želi da izbrišemo podatke koje smo prikupili, a koji mogu otkriti lokaciju, može nam se obratiti na adresi, broju telefona ili e-mail adresi mcd@hr.mcd.com. Postoji i mogućnost da smo prema zakonu dužni zadržati određene podatke. Podatke o posjetiteljima možemo, na način sukladan zakonu, prikupljati i od drugih društava ili organizacija. Također možemo prikupljati podatke koji su javno dostupni. Osobni podaci ispitanika prikupljaju se primjerice korištenjem kontakt obrasca na stranicama www.mcdonalds.hr te neposrednom predajom osobnih podataka prilikom predaje prigovora na proizvod/uslugu, rezervacije ugostiteljske usluge i slično. Osobni podaci mogu se prikupljati i prilikom otvaranja korisničkog računa, pretplate na newsletter, objavljivanjem (uploadanjem) sadržaja ili tekstova na stranici, sudjelovanjem na raznim natjecanjima i slično. Prilikom posjeta internet stranici www.mcdonalds.hr ili neposredno ispitanici mogu obavijestiti McDonald’s o svojim iskustvima vezanim uz konzumaciju McDonald’s proizvoda i usluga, dati prijedloge ili pohvale, prigovoriti proizvodu/usluzi, rezervirati ugostiteljske usluge ili stupiti u kontakt s voditeljem zbirke iz drugog razloga. Navedeno posjetitelji stranice čine slanjem kontakt obrasca dostupnog na stranici www.mcdonalds.hr i pritom McDonald’su dostavljaju podatke o svom imenu, prezimenu i e-mail adresi, a drugi ispitanici neposrednom predajom pismena (neovisno o tome koriste li u tu svrhu pripremljene obrasce ili ne) McDonald’su dostavljaju podatke o svom imenu, prezimenu i adresi. Pored navedenog McDonald’s može ispitanike zahtijevati i druge osobne podatke, ovisno o okolnostima pojedinog slučaja (telefonski broj, datum rođenja i slika). Svrha prikupljanja navedenih podataka sastoji se u omogućavanju neposrednog kontakta ispitanika i McDonald’sa, dobivanju informacija o stanju na tržištu, posebice o vlastitoj ponudi, primanju prigovora ili pohvala potrošača, omogućavanju neposrednog informiranja ispitanika i povratnom kontaktiranju ispitanika o navedenim okolnostima, unaprjeđenju rada stranice, analizi i unaprjeđenju oglašivačkih i promocijskih aktivnosti. Dostavljene informacije ispitanika (njihove opaske) mogu se koristiti u marketinške svrhe. Prikupljeni podaci mogu se koristiti i u marketinške svrhe, s čime se ispitanici unaprijed upoznaju. Ispitanici su ovlašteni odbiti da se njihovi podaci koriste u marketinške svrhe, o čemu će biti obaviješteni u svakoj marketinškoj poruci koju prime, u kojem slučaju kontakt sa McDonald’som neće biti moguć. Ispitanike McDonald’s, uz uvjet da su ispitanici s time suglasni, može obavještavati i o proizvodima i uslugama poslovnih partnera. Suglasnost za korištenje podataka u marketinške svrhe odnosno radi primanja obavijesti o proizvodima i uslugama partnera moguće je povući kontaktiranjem McDonald’sa na e-mail adresi mcd@hr.mcd.com. Ako posjetitelj odustane od primanja naših marketinških komunikacija, McDonald’s će mu i dalje moći poslati poruke u vezi transakcija, korisničkih računa, kao i o bilo kakvim natjecanjima, nagradnim igrama ili izvlačenjima i dr. Odustajanje od jednog oblika komunikacije ne znači odustanak od ostalih oblika. Na primjer, u slučaju odustanka od primitka marketinških e-mail poruka posjetitelj će i dalje primati tekstualne poruke s marketinškim sadržajem, ako je ranije na njih pristao. U slučaju primanja poruka od davatelja franšize McDonald’sa odnosno drugih članica grupacije, posjetitelj će postupak odustajanja morati provesti izravno s njima. Pored navedenog, McDonald’s može dostavljene osobne podatke koristiti radi ispunjenja i poštivanja međusobnih ugovora (uključujući ovih uvjeta korištenja i drugih uvjeta korištenja osobnih podataka odnosno resursa McDonald’sa), poštivanja pozitivnih propisa, u druge zakonom utvrđene svrhe i suradnju s nadležnim ovlaštenim tijelima. McDonald’s je ovlašten prikupljati i informacije koje ne identificiraju specifičnog posjetitelja stranice, uključujući Uniform Resource Locator (URL) internetske stranice koju je posjetitelj posjetio prije otvaranja Internetske stranice McDonalds’a, URL internetske stranice koju je posjetitelj posjetio nakon napuštanja stranice, vrstu pretraživača kojeg koristi te Internet Protocol (IP) adresu. Ovlašteni pružatelji usluga i oglašivači, mogu automatski prikupljati ove informacije prilikom posjete ove Internetske stranice, putem „kolačića“ i drugih alata. Ovako prikupljeni podaci koriste se isključivo za rješavanje problema, administriranje Internetske stranice, analizu trendova, skupljanje demografskih podataka, analizu sukladnosti s pozitivnim propisima i suradnju sa službama za provođenje zakona. McDonald’s i njegovi dobavljači mogu na web stranici odnosno putem dostupnih aplikacija koristiti tzv. “kolačiće“, web-pratilice i druge slične tehnologije u svrhu prikupljanja podataka i isporuke promo sadržaja te, ako se nude, traženih proizvoda i usluga. “Kolačići“ (cookies) i drugi alati „Cookies“ su male tekstualne datoteka koje se postavljaju na korisnikov internet preglednik ili na uređaj u cilju bilježenja i/ili prikupljanja podataka o korisniku. Web-pratilica (web-beacon) je mali objekt ili slika koja je ugrađena u internet stranicu, aplikaciju ili e-mail i koristi se za praćenje aktivnosti. Ponekad se nazivaju i „pixel“ ili „tag“. Posjetitelji trebaju imati na umu sljedeće: - Prilikom korištenja naših online usluga može im biti proslijeđen “kolačić”. - Neke od funkcionalnosti koje se nude moguće je koristiti samo uz pomoć “kolačića“ i sličnih alata. - On-line usluge i aplikacije koriste privremene „kolačiće“ i druge alate („session cookies“ – traju samo za vrijeme posjete stranici) i trajne („persistent cookies“ – traju određeno vrijeme). - Online usluge, kao i druga područja povezana s poslovanjem mogu imati web- pratilice (web-beacons). “Kolačiće“, web-pratilice i druge slične alate koriste se za prikupljanje podataka u svrhe opisane u ovoj Izjavi. Prikupljeni podaci mogu se kombinirati s podacima koje smo o vama prikupili na druge načine opisane u ovoj Izjavi o privatnosti. Spomenute tehnologije mogu se koristiti u sljedeće svrhe: - kako bi jednoznačno identificirali posjetitelja i njegov uređaj; - kako bi omogućili pristup i korištenje naših online usluga koje, bez ovih tehnologija, možda ne bi ispravno funkcionirale; - za unaprjeđenje naših proizvoda i usluga; - za praćenje učinkovitosti naših online usluga (npr. posjećenost, greške, vrijeme odziva stranica, popularnost pojedinih sadržaja, itd.); - kako bi posjetitelja zapamtili prilikom posjeta našim online uslugama, radi ugodnijeg korisničkog iskustva; - kako bi omogućili prilagodbu naših usluga željama i interesima posjetitelja; - za marketinške aktivnosti putem ciljanog oglašavanja; i - u druge svrhe opisane u ovoj Izjavi. Na primjer, McDonald’s može koristiti određene alate kako bi utvrdio je li posjetitelj otvorio e-mail poruku ili kliknuo na poveznicu sadržanu u e-mail poruci; ili kako koristi naše stranice i sadržaj naših mobilnih aplikacija; ili je li otvorio online reklamu za McDonald’s. McDonald’s i treće strane navedene u ovoj Izjavi (npr. mreže putem kojih se oglašavamo) mogu koristiti ove tehnologije za prikupljanje podataka o online aktivnostima, kroz određeno vrijeme i preko internet stranica i uređaja trećih strana, kao i tijekom korištenja McDonald’s online sadržaja, u cilju prilagodbe sadržaja interesima posjetitelja. Posjetitelji se upućuju da koriste postavke na web pregledniku ako ne žele primati “kolačiće“ ili ako žele podesiti preglednik da ih obavijesti kad prime “kolačić”. Koristeći dio „Pomoć“ na pregledniku posjetitelj se može upoznati s načinima promjene postavki u odnosu na “kolačiće“. Ako izabere opciju kojom blokirate sve “kolačiće“, može se dogoditi da neće moći koristiti sve ili neke značajke web stranica. Prikupljeni podaci čuvaju se za vrijeme potrebno za ispunjavanje svrha navedenih u ovoj Izjavi te za provedbu politika vođenja evidencije (osim kada je zakonom određeno dulje vrijeme). Svaki ispitanik koji je na stranici ostavio ili neposredno dostavio svoje osobne podatke, ima pravo istima pristupiti i ispravljati ih ili dopunjavati na način propisan Zakonom o zaštiti osobnih podataka, te se u tu svrhu voditelju zbirke može obratiti na gore navedenu adresu ili putem e-maila na mcd@hr.mcd.com. U svrhu dopune osobnih podataka ispitanik je dužan navesti ime i prezime, adresu i e-mail adresu, te koje informacije želi nadopuniti. Ispitanik također može svakodobno zatražiti brisanje ili uklanjanje informacija o svom korisničkom računu. Podaci se prikupljaju na dobrovoljnoj osnovi, a odbijanje davanja podataka neće rezultirati nikakovim štetnim posljedicama. U slučaju odbijanja davanja podataka, kada se radi o podacima čije prikupljanje je po ocjeni McDonalds’a nužno za određenu aktivnost kontakt sa McDonald’som neće biti moguć. McDonald’s prikupljene osobne podatke ne dostavlja niti čini dostupnim drugim primateljima osobnih podataka, izuzev dobavljačima koji za McDonald’s obavljaju određene usluge, primjerice partnerskim marketinškim agencijama u slučajevima korištenja u marketinške svrhe (primjerice radi dostavljanja marketinških obavijesti na e-mail adresu, newslettera i sličnih slučajeva) odnosno u slučajevima kada vrši dostavu naručenih proizvoda ili primjerice obrađuje plaćanja kreditnim karticama. Dobavljači nisu ovlašteni primljene podatke koristiti u bilo koju drugu svrhu izuzev za pružanje usluga McDonald’su. Za zaštitu osobnih podataka od slučajnog ili nezakonitog uništenja, gubitka ili izmjena te od neovlaštenog otkrivanja ili pristupa McDonald’s poduzima tehničke i organizacijske mjere sigurnosti. Ispitanik je upoznat s činjenicom da niti jedan prijenos podataka preko Interneta ili bilo koje bežične mreže ne može biti 100% siguran. McDonald’s ne može jamčiti 100% zaštitu bilo koje informacije prenesene na ili s njegove stranice te nije odgovoran za radnje bilo koje treće strane koja takve informacije odašilje ili primi. McDonald’s može pohranjivati na računalu ispitanika „kolačiće“ koji sadrže informacije o ispitaniku i koji se koriste radi uštede vremena ispitanika za vrijeme korištenja Internetskih stranica McDonald’s, radi praćenja i usmjeravanja ispitanikovih interesa s ciljem pružanja usluga prilagođenih svakom ispitaniku. „Kolačići“ također prikupljaju neosobne informacije. Za prikazivanje oglasa na svojoj Internetskoj stranici McDonald’s može koristiti treće agencije za oglašavanje. Kao dio njihove usluge treće agencije mogu staviti odvojene „kolačiće“ na računalo ispitanika, a nad kojima McDonald’s nema pristup ili kontrolu. Ispitanik može urediti postavke pretraživača kako bi odbio „kolačiće“, u kojem slučaju se može dogoditi da neki dijelovi McDonald’s Internetskih stranica možda neće pravilno raditi. McDonald’s može koristiti i druge standardne tehnologije za praćenje uporabe Internetskih stranica i promocija, te može dozvoliti Trećim pružateljima usluga korištenje ove metode u ime McDonald’sa. Ovi uvjeti korištenja odnose se samo na uporabu i objavljivanje informacija po McDonald’s. Druge Internetske stranice kojima se može pristupiti putem McDonald’s Internetske stranice imaju svoje izjave o povjerljivosti i prikupljanju podataka te načinima njihovog korištenja i objavljivanja na njima. McDonald’s za to ne snosi odgovornost. Maloljetne osobe mogu sudjelovati u promotivnim aktivnostima jedino i isključivo uz suglasnost roditelja ili skrbnika, ovisno o tome što je primjenjivo. McDonald’s neće svjesno prikupljati ili zadržavati informacije – osobne podatke maloljetnika bez inzistiranja na tome da pridobiju suglasnost roditelja odnosno skrbnika. Ako imate bilo kakvih pitanja vezano uz zaštitu privatnosti djece, molimo Vas da nam se obratite na mcd@hr.mcd.com. McDonald’s isključuje bilo koju i svu štetu prema korisnicima stranice odnosno prema svim osobama koje su mu dostavile osobne podatke, u najvišoj mjeri dopuštenoj zakonom. Ovi uvjeti korištenja osobnih podataka mogu se mijenjati odlukom McDonald’sa. Izmjene i dopune uvjeta korištenja objavit će se na isti način kao što su objavljeni ovi uvjeti (objavom izmjena ili dopuna ili nove verzije uvjeta korištenja), objavom na stranici www.mcdonalds.com, čime će stupiti na snagu. Korištenjem internet stranice nakon objave ovih uvjeta korištenja ili njihovih izmjena i dopuna korisnici stranice izražavaju svoj pristanak na navedene dokumente. Ovi uvjeti korištenja na snazi su od 17.05.2017.