http___mcdonalds.hr_izjava-o-privatnosti__2.xml
1.1 2.1 3.1 3.2 3.3 4.1 4.2 5.1 5.2 5.3 6.1 7.1 8.1 9.1 10.1 12.1 12.2 12.3 13.1 13.2 13.3 13.4 13.5 13.6 14.1 14.2 15.1 16.1 16.2 17.1 18.1 19.1 20.1 21.1 22.1 22.2 23.1 24.1 25.1 25.2 26.1 26.2 27.1 28.1 28.2 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 36.2 36.3 37.1 38.1 39.1 40.1 41.1 41.2 42.1 43.1 44.1 44.2 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 54.2 54.3 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 66.2 66.3 67.1 68.1 69.1 70.1 71.1 72.1 73.1 74.1 75.1 76.1 77.1 78.1 78.2 78.3 79.1 79.2 79.3 80.1 81.1 81.2 82.1 82.2 82.3 82.4 83.1 83.2 83.3 84.1 84.2 85.1 85.2 85.3 85.4 86.1 86.2 87.1 87.2 88.1 88.2 89.1 90.1 91.1 92.1 92.2 93.1 93.2 94.1 95.1 96.1 96.2 96.3 96.4 97.1 97.2 97.3 98.1 98.2 99.1 99.2 100.1 101.1 101.2 102.1 102.2 102.3 102.4 103.1 103.2 103.3 103.4 103.5 103.6 103.7 104.1 104.2 105.1 106.1 106.2 106.3 106.4 106.5 106.6 107.1 108.1 109.1 110.1 110.2 110.3 110.4 111.1 112.1 113.1 114.1 115.1 116.1 117.1 117.2 118.1 118.2 119.1 119.2 119.3 119.4 120.1 120.2 121.1 121.2 121.3 122.1 122.2 123.1 123.2 124.1 124.2 124.3 124.4 125.1 125.2 125.3 125.4 125.5 126.1 126.2 126.3 126.4 126.5 126.6 127.1 127.2 127.3 127.4 128.1 128.2 129.1 129.2 129.3 129.4 130.1 131.1 132.1 132.2 133.1 133.2 133.3 134.1
Project Firefly Privacy Policy Last updated on August 22, 2018. This Privacy Policy (the “Privacy Policy”) describes the principles based on which Project Firefly (hereinafter “Project Firefly”, “we” or “us”) processes personal data collected through this website (the “Website”). It informs you in particular about what personal data we collect, for which purposes it is processed, with whom it may be shared, for how long we retain it and which rights and options relating to the use of your personal data you may have. “Personal data" or “Personal information” means any and all information relating to an identified or identifiable natural person, for example name, address, e-mail address, an online identifier or the phone number. This Privacy Policy applies as far as the processing activities are not subject to other privacy policies or are provided for by applicable law. Moreover, this Privacy Policy forms an integral part of the Terms and Conditions of Project Firefly. Please read this Privacy Policy carefully. By signing up for an account or otherwise by using the services of our Website you consent to the collection and processing of your personal information as set forth in this Privacy Policy.1. Controller of Personal Data and Contact Details Controller of your personal data collected through this Website is: Project Firefly Bodanstrasse 8 9000 St. Gallen, Switzerland Email: info@project-firefly.com Project Firefly determines the purposes and means of the processing of your personal data and is therefore responsible for the processing and use of your personal data as described in this Privacy Policy. If you have any questions or concerns regarding privacy or how we handle your personal data, kindly contact us at any time by sending an email to info@project-firefly.com.2. How do we process personal data Any personal data collected through the Website is processed in accordance with the provisions of applicable data protection and privacy laws. We collect and process personal data carefully and for the purposes described in this Privacy Policy. In accordance with applicable law, we may also use your personal data in other ways as described in this Privacy Policy. In such event, we will provide specific privacy policies or notices at the time of collection and obtain your consent where necessary. We always seek, to the extent reasonably possible, to collect information on an anonymized or pseudonymized basis so we cannot recognize your identity.3. What kind of personal data is collected? Project Firefly seeks to create a vibrant sustainable community among driven, emerging Thought Leaders. In order to fully participate, join discussions on our Website and submit essays’s for review, you must create a personal account. Information provided by you When you sign up for a personal account as Contributor on the Website, we may ask you for the following different kinds of personal information: (i) basic information, (ii) account information, (iii) educational background, (iv) career history and (v) additional information. Such personal information includes the following personal data: - Basic information includes: first, middle and last name, username, date of birth, gender, country of residence, nationality, email address, University, most recent degree and expected graduation date. - Account information includes: profile picture, CV/Resume, short biography. - Educational background information includes: University, most recent degree, subject of study, expected graduation date, advanced qualifications, language skills, extracurricular activities. - Career history information includes: places of work, positions, preferred area of work, career aspirations, organization memberships. - Additional information includes: social media profiles (e.g. Linked In, Facebook, Twitter, how you did hear about us, topic of interest. Additional personal data might be collected in case of a participant winning a competition or challenge (e.g. for travelling to an event such as World Economic Forum). Such additional personal information includes the following personal data: - Scan of university matriculation, scan of passport (e.g. for winners travelling), contact details, home address, phone number, any visa restrictions, health and food restrictions and accommodation restrictions, team Bio, up to date resumé, university name, team member names, degrees studied, languages spoken, industry experience, indicate team member locations during a consulting project and Skype ID Moreover, each Contributor will be assigned a User ID - Number to better anonymize information (e.g. if necessary for providing information for grading or restricted information to corporate partners). During the registration process, you are not required to provide all the above mentioned data and you may choose to leave some of the registration fields blank and not to provide certain information to Project Firefly. Some of the personal data, however, needs to be provided and such data is specifically marked (*). The providing of such personal data will always be voluntary based on your consent. Without providing such information you may, however, not be able to use the services or purposes for which the information is requested. Information automatically collected Project Firefly collects and stores information that your browser automatically transmits to us in "server log files" when visiting our Website. These may include the following data: - Browser type and browser version - Operating system used - Referrer URL - Host name of the accessing computer - Time of the server request - IP address - These data will not be combined with data from other sources. This data is collected automatically and cannot be deactivated. It is stored by us until it is automatically deleted within three months at the latest.4. For what purposes and on which legal basis is the personal data processed? Purposes of processing for information provided by you The personal data collected during the registration process, by interacting on the Website, and uploading Submissions is used for the lawful purposes which were evident from the circumstances or indicated at the time of collection which may include the following purposes: - for building a community among driven, emerging Thought Leaders by bringing together employers and students and recent graduates (who graduated within the last three years) and young professionals (who graduated more than 3 years ago) from universities around the world; - to publish and share a limited version of your profile on the Website; it details your personal bio and limited education history such as most recent degree and university; - to publish and share your profile with other contributors which can see all that the public profile displays and when signed in, they can additionally see further education information as well as your career history information. Project Firefly therefore recommends not to post and/or disclose sensitive Personal Data on these publicly accessible areas; - to enable you to build your unique network, to discuss challenging topics, debate and contribute to get ahead in your career; - to provide you with exclusive opportunities to earn interviews, projects, internships and jobs with leading companies around the world; - to publish and share Submissions, e.g. essay’s or videos, with the community on our Website. If your Submission is published, then it will be displayed together with your first and family names, including a limited version of your profile, on the Website and will then be publicly accessible; - for communicating with you (e.g. via email) and sending you with your agreement information we think may interest you, e.g. about new competitions and challenges; - for market research purposes and for sending you surveys and other questionnaires for receiving your opinion; - for statistical or analytical purposes in pseudonymized or anonymized summary form (e.g. to find out how many people from which countries participate in our competitions); - to provide examples of success stories to potential new corporate partners; - to inform universities and professors of their students’ progress and success (e.g. if they win a competition or a challenge); - for other lawful purposes where such processing was evident from the circumstances or indicated at the time when the personal data was collected. Purposes of processing for information automatically collected The data automatically collected as described above is processed for the purposes of proper functioning of our Website, e.g. for establishing a connection, ensuring stability and uninterrupted system security, to improve our services, for statistical analysis, e.g. in the event of attacks on the network infrastructure on which the Website is made available. Legal basis for processing The legal basis for processing your personal data for the purposes described above (see para. 4 lit. a and b) may be based on the following legal grounds: - your consent, only if it may be withdrawn at any time; - for the performance of a contract with you or for the intention to enter into a contract; - to comply with a legal obligation (e.g. for purposes of legal investigations or proceedings), or - for the purposes of our legitimate interests, including: - efficient and effective support, maintenance of contact and other communication with you outside of the processing of contracts; - advertising and marketing activities; - efficient and effective improvement of existing services and development of new services; - efficient and effective protection of data, secrets and assets of or entrusted to us including the protection and safety of our IT systems; - maintenance and secure, efficient and effective organization of business operations including a secure, efficient and effective operation and successful further development of the Websites and other IT systems; - compliance with legal and regulatory requirements and internal rules; - concerns regarding the prevention of fraud, offences and crimes as well as investigation in connection with such offences and other improper conduct, handling of claims and actions against Project Firefly, cooperation in legal proceedings and with public authorities as well as the prosecution, exercise of and defense against legal actions. Should the processing be based on your consent or our legitimate interests, you may withdraw consent or object to that processing at any time by contacting us directly at info@project-firefly.com. The withdrawal of consent shall, however, not affect the lawfulness of processing based on consent before its withdrawal.5. Who has access to your personal data and with whom do we share your data? We take necessary measures to ensure only authorized people will have access to your personal data to fulfill the purposes for which your personal data was collected. In accordance with applicable laws, we may share your personal data with the following categories of recipients for the purposes of processing as described in this Privacy Policy on our behalf or for their own purposes: - our corporate partners, contributors (see point 6) and other partners (e.g. universities or professors); - our trusted third-party service providers, including processors; - providers of technical services; - website designers and developers; - the public, including social media sites of Project Firefly, industry organizations, associations, organizations and other committees; - professional advisors and auditors; - acquires or parties interested in acquiring business units, companies or other parts of Project Firefly; - governmental administrations, courts and other competent authorities; - other parties in potential or actual legal proceedings. We choose our partners and data processors carefully and only upon sufficient guarantees they have appropriate technical and organizational measures in place. Our partners are subject to confidentiality requirements and may use your personal data solely to the extent necessary to fulfill the purpose for which your personal data was collected, except as otherwise required by law.6. Personal data disclosed to Corporate Partners and other Contributors The Corporate Partners will be informed of all relevant new Submissions. If a Submission is made in connection with a competition, the Corporate Partner sponsoring the competition chooses what personal data they would like to be made available to them. This normally includes the following personal data: - Names (e.g. of top performers), email addresses, submissions, university, residence, nationality, degree and education status e.g. graduate or student. This may result in the Corporate Partner, in the first instance contacting the Contributor directly. All other Corporate Partners only have access to limited personal data such as your place of study, subject of study, your university degree, language skills and other data which do not allow conclusions concerning the identity of the individual Contributor ("Limited Personal Data"). In any event, the Corporate Partners may use the personal data solely for recruitment and career development purposes. For example, a Corporate Sponsor may contact a Contributor for an internship or for a special recruiting event. If the Contributor has agreed, then the Corporate Sponsor may also use the personal data of a Contributor for market research purposes, for example for surveys. The Corporate Partner is not allowed to use personal data for commercial purposes nor to sell personal data to any third party. Since the Website is accessible for Corporate Partners all over the world, your personal data might also be transferred to or accessed by a Corporate Partner domiciled outside Switzerland (see para. Project Firefly has entered into an agreement with each Corporate Sponsor in order to afford an adequate protection of your personal data. However, by making your respective Submissions over the Website, you acknowledge and agree that your personal data is accessible by Corporate Partners domiciled outside Switzerland. Based on your published Submissions other registered Contributors can send a request directly to you to connect with you. It is then in your sole discretion whether you want to connect with other Contributors and disclose further personal information. After the contact between you and Corporate Partners/other Contributors has been established, you may interact directly with Corporate Partners/other Contributors. For personal data or any other data that is disclosed to a Corporate Partner/another Contributor directly by you and not through the Website, these data protection regulations will not apply. We take no responsibility with respect to such personal data or other data that is directly disclosed from you to a Corporate Partner/another Contributor and we therefore recommend being cautious when providing Corporate Partners/other Contributors with sensitive Personal Data.7. Where will your personal data be stored and international data transfers? We may transfer, store and process your personal data in data locations around the world, where our partners or our third-party providers are located, for example in the US where your data will be stored on Armor servers, located in Richardson, Texas. Therefore, we may transfer your personal data outside the EEA and Switzerland if it is required for the data processing described in this Privacy Policy in accordance with applicable data protection and privacy laws. If personal data is disclosed to countries that do not guarantee an adequate level of protection, we will ensure adequate protection of data disclosed by putting appropriate safeguards in place, e.g. on the basis of EU standard clauses adopted by the EU-Commission, binding corporate rules, on the basis of the EU-U.S. and the Swiss-U.S. Privacy Shield Framework for transfers to third parties based in the U.S., or transferring data pursuant to consent, conclusion or performance of a contract, or in connection with the determination, exercise or enforcement of legal claims according to applicable data protection laws.8. For how long will your personal data be stored? We retain your personal data for as long as necessary to fulfill the purposes for which your personal data was collected. For this reason, we will delete or anonymize personal data (or equivalent) once they are no longer necessary to achieve the purposes, subject however (i) to any applicable legal or regulatory requirements to store personal data for a longer period (e.g. for tax or accounting reasons), or (ii) to establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings, including legal holds, which we may enforce to preserve relevant information. On that basis, we normally process personal data subject to the following rules and obligations: - As a rule for contract related personal data (including business records and communication), we retain personal data as long as the contractual relation is ongoing and for ten years after the termination of the contractual relationship; - As a rule for operational data containing data (e.g. protocols, logs), we retain personal data for a period of 3 - 12 months; - Personal data relating to your user account will be stored for as long as you have a personal account with Project Firefly. Once you have deleted your user account, all your personal information will be deleted, and your Submissions will be taken off the Website unless we have received your consent to continue to publish your Submission(s) on our Website. When you access or use the Website, we may place so called cookies – small text files – or similar tools on your computer. We use these cookies to recognize you as a user of the Website, to customize content, to improve the Website's performance and to enhance your user experience. Categories of cookies we use Depending on their function and intended purpose, cookies we may use can be divided into the following categories: functional cookies, performance cookies, and advertising cookies. - Functional cookies: These cookies serve a variety of purposes to the presentation, functionality and performance of a website and in particular to enhance visitors’ experience and enjoyment of the Website. They enable a website to save details that have already been provided (e.g. user name, your location or language choices) and offer the visitors improved, more personal functions. Functional cookies are used, for example, to remember things like your log-in information. These cookies cannot track your movement on other websites. - Performance cookies: These cookies are used to collect information how a website is used – for example how visitors came to our website, which pages a visitor opens most frequently, how they navigated around our website during their visit and whether they receive error messages from a page. We also may use these cookies to provide us with certain statistical and analytics information, such as how many visitors came to our website. These cookies are used to monitor the level of activities of the Website and to improve the performance of the Website. - Advertising cookies enable the website owner or a third party service provider to place ads on the website of the website owner or on websites of third parties with products that the user may like, so that the advertisement the user see can be more relevant to the user’s preferences or interests (sometimes referred to as "targeting cookies"). They may also be used to evaluate effectiveness of advertising and promotion. These cookies may be placed by us or a third party on our behalf. To learn more about cookies and how they are used, please visit: http://www.allaboutcookies.org/. Google Analytics On your computer, we store the cookies of Google Analytics. Google Analytics is a web analytics service that is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The cookies of Google Analytics allow an analysis of the use of the website by you and other website users that Google provides to us. The information generated by the cookie about your use of our Website is usually transmitted to a Google server in the USA and stored there. This information may include number of times a user visits the website, dates of the first and last visit, duration of the visits, the page from where the user accessed the website, the search engine the user used to access the website or the link they clicked on, the place in the world from where the user accesses, etc. Google will use this information on our behalf to evaluate your use of the website, to compile reports on your website activity, and to provide other services regarding website activity and internet usage for us. We have activated the IP anonymization feature on our website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this Website. Furthermore you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under this link (https://tools.google.com/dlpage/gaoptout?hl=en). In addition, Google may monitor the use of the Website by the user and combine this data with data from other websites monitored my Google which the user has visited and Google may use these findings for its own benefits (e.g. to control advertisement), under their responsibility and based on their own privacy policies that can be found here (https://policies.google/). You can learn more about Google Analytics and how they process personal data here ( https://policies.google.com/technologies/partner-sites). Social Network Plug-ins Our Website provides the user with social plug-ins from various social networks, e.g. Facebook, Twitter, Youtube or LinkedIn. In the default setting of the website plug-ins are deactivated and, as a result, do not send any data. The user can thus choose when to activate them. Should the user do so, the social media providers are able to establish a direct connection to the user during his or her visit on the Website, which allows the provider to be aware of the user's visit and may analyze the respective information. The subsequent processing of the personal data will be conducted in the responsibility of the social media provider according to data protection and privacy laws and according to its data protection policies published on its website (such as www.facebook.com, www.twitter.com., www.youtube.com or www.linkedin.com). Please read carefully the privacy policies of your social networks for detailed information about their collection and transfer of personal data, your rights, and how you can achieve satisfactory privacy settings. List of Cookies we use Please find hereafter a complete list of the cookies currently used on this Website including the information about their purposes and their expiration. Management of Cookies If you do not want to accept these cookies you can change your browser settings to delete or prevent certain cookies from being stored on your computer or device without your consent. Each browser is different in the type, how it manages the cookie-settings. This is normally described in the «Help» menu of each browser. You will find this information for the most popular browsers under the following links: - Internet Explorer: https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies - Mozilla Firefox: http://support.mozilla.com/en-US/kb/Cookies - GoogleChrome: http://www.google.com/support/chrome/bin/answer.py?hl=en&answer=95647 - Safari: http://support.apple.com/kb/PH5042. Please note, however, that by disabling the cookies function in your browser settings, you may no longer be able to use all the functions of the Website. Legal basis The legal basis for the processing of personal data by using cookies or social network plug-ins are our legitimate interests in operating, protecting, analyzing, optimizing, and improving our Website.10. Email mailing and other business communication We will use your email address for sending you information about new challenges and other commercial communications that may be of interest for you as long as you will be subscribed to the email mailing list. You can unsubscribe from such emails at any time, by clicking the highlighted link “unsubscribe from this list” at the end of each email or by contacting us directly via email at info@project-firefly.com. Moreover, we use the email service of MailChimp, a third-party data processor, operated by The Rocket Science Group LLC, a company headquartered in the State of Georgia in the United States. MailChim manages our email subscriber list and send emails to our subscribers on our behalf. MailChimp stores your data in the US and may collect and process your data in accordance with their Privacy Policy. You can find out more about how MailChip collets and processes your personal data in the Privacy Policy available here (https://mailchimp.com/legal/privacy/). In addition, MailChimp provide us with information such as clicking rates, bounce rates, countries, and states. This information is not used to identify a specific individual, and therefore they are used pseudonymously. MailChimp has certified to the EU-U.S. and Swiss-U.S. Privacy Shield Framework to ensure an adequate level of protection (see their certification here). When you sign up to our email mailings, you agree to your data being stored and processed in this way.11. Security of your Personal Data In order to protect your Personal Data from accidental or unlawful destruction, loss, alteration, unauthorized use, disclosure or access, we have implemented technical and organizational security measures. We adapt these measures from time to time and try to provide a high level of security at all times. We may use third party data processors to collect and process your personal data on our behalf. Any data processors commissioned by us will only process your personal data in accordance with our instructions and are legally obliged to adhere to strict security procedures when handling personal data. Nevertheless, you have to be aware that, despite our best efforts, transmission of information via the internet is not whole secure and no security measures are perfect or impenetrable. In addition, and in order to help maintain a high level of security, we kindly ask you to keep your username and password confidential and not to disclose it to third parties. Although we do our utmost to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is done so at your own risk.12. Third-party privacy policies Please note that if you click on the link to a third-party website (e.g. google or social media websites), you will be taken to a website we do not control, and our Privacy Policy will no longer be in effect. Your browsing and interaction on any other website is subject to the terms of use and privacy policies and notices of such third-party websites. We strongly encourage you to read the terms of use and privacy policies and notices of other websites carefully before providing personal data through that website. We are not responsible or liable for the information or content on such third-party websites.13. What are Your Rights You can contact Project Firefly anytime and request that we inform you about all personal data that we have collected and stored about you. In addition, you may request that we correct, restrict or delete such personal data as well as to object to the processing of personal data. Please note, that if you request us to delete your personal data, you will no longer be able to use the Website and the services offered therein. By accessing your account on the Website, you have at any time the opportunity to correct, amend or delete your personal data. Of course, you may delete your personal account at any time. Please note, however, that upon deletion of your user account, you will not be able to use the services for which the information was collected and also Corporate Partners and other Contributors will no longer have access to your personal data. Should the processing of personal data be based on your consent, you may withdraw consent at any time. However, please note that a withdrawal does not affect the legitimacy of the processing activities that took place before you withdrew your consent. Moreover, if you withdraw consent, you will no longer be able to use the Website and the services offered for the purposes the personal data was collected. In countries of the EEA you may, in certain cases, have the right to obtain data generated during the use of online services in a structured, common and machine-readable format which allows for further use and transfer. Requests in this respect shall be submitted to us via the following email address: info@project-firefly.com. Project Firefly reserves the right to restrict the rights of the affected user in accordance with applicable law and e.g. not to disclose comprehensive information or not to delete data. If we refuse your request or if you are not satisfied with our processing, you are also entitled to lodge a complaint with the competent supervisory authority and seek a judicial remedy. For users located in Switzerland, the competent authority is the Federal Data Protection and Information Commissioner in Switzerland (http://www.edoeb.admin.ch). For the users located in the EU Countries, a list of the supervisory authorities can be found here.14. Where to contact If you have any questions regarding this Privacy Policy, the handling of your personal data or would like to exercise your rights, please contact: Project Firefly, Rorschacherstrasse 43, 9000 St. Gallen, Switzerland by sending an email to info@project-firefly.com. We take your concerns seriously and we will try to resolve any issue relating to your personal data for you as soon as possible in accordance with applicable laws.15. Changes to this Privacy Policy Project Firefly may change this Privacy Policy from time to time and without prior notice or announcement. All changes to this Privacy Policy are effective when they are posted on the website unless indicated otherwise. When we change the policy in a material manner, we will let you know via email and/or a prominent notice on our website or in another appropriate manner prior to the change becoming effective and update the ‘effective date’ at the top of this page. We recommend that you regularly check this Privacy Policy when you access your personal account.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 9.2 9.3 10.1 11.1 12.1 13.1 14.1 15.1 15.2 16.1 16.2 17.1 18.1 19.1 20.1 20.2 20.3 21.1 22.1 23.1 24.1 25.1 26.1 27.1 27.2 28.1 29.1 30.1 30.2 30.3 30.4 30.5 31.1 32.1 32.2 32.3 33.1 34.1 34.2 34.3 35.1 35.2 36.1 36.2 37.1 38.1 38.2 39.1 40.1 40.2 40.3 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 68.2 68.3 69.1 69.2 70.1 70.2 70.3 71.1 72.1 73.1 73.2 74.1 74.2 75.1 75.2 76.1 77.1 77.2 77.3 77.4 78.1 79.1 79.2 79.3 80.1 80.2 81.1 81.2 82.1 83.1 83.2 84.1 85.1 86.1 87.1 88.1 89.1 90.1 91.1 92.1 93.1 94.1 94.2 95.1 95.2 96.1 97.1 97.2 98.1 99.1 100.1 100.2 101.1 102.1 103.1 104.1 105.1 106.1 107.1 108.1 109.1 110.1 111.1 112.1 113.1 114.1 115.1 115.2 116.1 116.2 116.3 117.1 118.1 118.2 119.1 119.2 119.3 120.1 121.1 121.2 121.3 121.4 122.1 122.2 123.1 124.1 124.2 124.3 125.1 126.1 127.1 127.2 127.3 127.4 128.1 128.2 128.3 129.1 129.2 130.1 130.2 131.1 132.1 132.2 133.1 134.1 135.1 136.1 136.2 136.3 136.4 137.1 138.1 139.1 140.1 141.1 142.1
GLOBALNA HRANA d.o.o., Zagreb, Rudeška cesta 87/a, matični broj (MBS): 080064649 upisano u sudski registar Trgovačkog suda u Zagrebu, OIB 97492131626 kao voditelj obrade podataka pripremio je za Vas ovu Obavijest u namjeri da vas upoznamo s postupkom obrade i zaštite Vaših osobnih podataka. GLOBALNA HRANA d.o.o. je nositelj franšize za prodaju proizvoda branda McDonald’s na području Republike Hrvatske, zbog čega se u nastavku ove Izjave za GLOBALNU HRANU d.o.o. kao voditelja obrade koristi pojam McDonald’s. Ova obavijest postavili smo na našu internet stranicu kako bi Vam u svakom trenutku učinili dostupnim informacije o obradi Vaših osobnih podataka. Ova obavijest na snazi je od 25.05.2018. - Podaci koje prikupljamo Podatke koje prikupljamo spadaju u tri kategorije: (a) informacije koje nam Vi dajete; (b) informacije koje prikupljamo na automatizirane načine; i (c) informacije koje prikupljamo iz drugih zakonitih izvora. Za pojedine svrhe obrade pripremili smo i posebne obavijesti o obradi osobnih podataka, kojima možete pristupiti na slijedećem LINKU. Posebnim obavijestima možete pristupiti i na slijedeći način: U pravilu, podatke prikupljamo od Vas neposredno i Vi nam ih dajete dobrovoljno. Mi ćemo vas obavijestiti kada je davanje Vaših osobnih podataka neophodno za pružanje usluge ili obvezno po zakonu. Molimo Vas imajte na umu kako Vam, u slučaju da je podatak nužan za pružanje usluge ili obvezan po zakonu, ukoliko nam ne date potrebne podatke nećemo moći pružiti našu uslugu. Prikupljanje podataka od Vas neposredno Možete nam dati sljedeće podatke: - osobne podatke, poput Vašeg imena, poštanske i e-mail adrese, broja telefona, datuma rođenja i druge kontakt podatke prilikom Vaše registracije na naše online ili SMS usluge, kada sudjelujete u nekoj od naših nagradnih igara ili nam se obratite telefonom ili putem online usluga kako biste nam postavili upit, dali pohvalu ili izjavili prigovor na naše proizvode i/ili usluge; - podatke o transakcijama, uključivo s podacima o proizvodima koje kupujete, cijenama, načinu plaćanja i detaljima plaćanja; - podatke o Vašem korisničkom računu, poput Vašeg korisničkog imena i lozinke koje koristite da bi pristupili našim online uslugama ili kupili, odnosno koristili naše proizvode i usluge. Gore navedene podatke prikupljamo radi sklapanja i ispunjenja ugovora sa Vama, ispunjenja naših zakonskih obveza odnosno na temelju našeg legitimnog interesa sukladno čl. 1. tč. b, c i f Opće uredbe o zaštiti podataka (dalje u tekstu pod pojmom GDPR). Pored navedenog, od Vas temeljem Vaše privole sukladno čl. 1. tč. a GDPR-a možemo prikupljati i slijedeće podatke: - informacije o Vašem profilu, uključivo s proizvodima i uslugama koje volite, vremenu u kojem nas najčešće posjećujete; i - ostale osobne podatke koje nam dobrovoljno otkrijete prilikom komunikacije s nama. Prikupljanje podataka na automatizirane načine Automatiziranu tehnologiju možemo koristiti za prikupljanje podataka s Vašeg računala ili mobilnog uređaja kada posjećujete naše restorane, koristite naše online usluge ili koristite tehnologije u našim restoranima. Automatizirane metode prikupljanja podataka mogu uključivati „kolačiće“, local shared objects i web tražilice. U nastavku se nalazi više informacija o „kolačićima“ (cookies) i drugim tehnologijama. Na taj način možemo prikupljati podatke o: - internet protokol (IP) adresu; - operativnom sustavu Vašeg računala ili mobilnog uređaja te korištenom Internet pregledniku; - vrsti mobilnog uređaja i njegovim postavkama; - jedinstvenom identifikatoru uređaja (UDID) ili identifikatoru mobilne opreme (MEID) za Vaš mobilni uređaj; - o uređaju i serijskim brojevima komponenti; - reklamne identifikatore (npr. IDFA i IFA) ili slične identifikatore; - Vašu komunikaciju s nama ili u vezi nas na društvenim mrežama; i - Vašim aktivnostima, u odnosu na način na koji koristite naše online usluge, poput sadržaja koje posjećujete na našim mobilnim aplikacijama. Nastojat ćemo, kada god to bude tehnički moguće i razumno očekivati od nas, od Vas zatražiti i ishoditi Vašu privolu za prikupljanje i obradu ovih podataka od strane McDonald’sa. Možete nam uskratiti takvu privolu za prikupljanje podataka odbijanjem izdavanja zatražene privole, kao i koristeći postavke svog uređaja ili internet preglednika i prateći upute Vašeg pružatelja mobilnih usluga, proizvođača uređaja ili pružatelja Internet preglednika, kome se u tu svrhu možete obratiti. Neke od online usluga i tehnologija u restoranima možda neće ispravno raditi ukoliko nemaju informaciju o Vašoj lokaciji, o čemu ćemo Vas nastojati izvijestiti. Ukoliko želite da izbrišemo informacije koje smo prikupili, a koje mogu otkriti vašu lokaciju, molimo Vas da nam se obratite na adresu navedene u nastavku. Moguće je da smo neke od takvih podataka dužni zadržati po zakonu. Prikupljanje podataka iz drugih izvora Podatke o vama možemo prikupiti od drugih legitimnih izvora, uz jamstvo da su podaci legalno prikupljeni. Možemo prikupljati i podatke koji su javno dostupni. Na primjer, možemo prikupljati podatke koje ste objavili na Vašem javnom profilu dok komunicirate s nama putem tog profila. OBAVIJEST PREDSTAVNICIMA POSLOVNIH PARTNERA GLOBALNA HRANA se obvezuje prikupljenim osobnim podacima vlasnika, zastupnika ili drugih predstavnika PARTNERA postupati sukladno odredbama Opće uredbe o zaštiti podataka i pripadajućih primjenjivih propisa o zaštiti osobnih podataka. U tu svrhu GLOBALNA HRANA sukladno odredbama čl. 12 i 13. Opće uredbe daje slijedeće obavijesti: Osobne podatke prikupljene u postupku sklapanja i ispunjenja ugovora u svojstvu voditelja obrade prikuplja GLOBALNA HRANA d.o.o., Hrvatska, Zagreb, Rudeška cesta 87/a, OIB 97492131626. Kontakt Službenika za zaštitu osobnih podataka GLOBALNE HRANE je povjerljivost@hr.mcd.com. GLOBALNA HRANA prikupljene osobne podatke može koristiti u svrhu sastavljanja i ispunjenja ugovora o suradnji. Sukladno navedenom, podaci se prikupljaju na temelju legitimnog interesa GLOBALNE HRANE, a u svrhu sklapanja i ispunjenja ugovornih odnosa. Podaci koji se prikupljaju su podaci kontakt osoba partnera – direktora, vlasnika i/ili djelatnika zaduženog za kontakt sa GLOBALNOM HRANOM (ime i prezime, radno mjesto, službeni mobitel i službeni fiksni telefon). Prikupljeni podaci mogu se dostavljati nadležnim tijelima sukladno odredbama primjenjivih propisa (primjerice, policiji, sudovima, poreznoj upravi i slično). Prikupljeni podaci se ne izvoze izvan EU. Prikupljeni podaci zadržavaju se u rokovima propisanim pozitivnim propisima (porezni i računovodstveni propisi), a podredno na rok od 2 mjeseca računajući od isteka zastarnog roka za prava i obveze GLOBALNE HRANE. GLOBALNA HRANA poštuje prava ispitanika na pristup, ispravak, brisanje i ograničavanje obrade osobnih podataka, kao i prava na ulaganje prigovora na obradu i prava na prenosivost podataka. Navedena prava ispitanici ostvaruju podnošenjem pisanog zahtjeva GLOBALNOJ HRANI i/ili Službeniku za zaštitu osobnih podataka. Pravo na podnošenje prigovora ostvaruje se prigovorom Agenciji za zaštitu osobnih podataka RH. - Kako koristimo podatke koje prikupimo Podatke koje prikupimo možemo koristiti na sljedeće načine: Da bi Vam pružili naše usluge i izvršili ugovorne obveze: - ispunili Vaše zahtjeve, izvršili narudžbu, obradili plaćanje za naše proizvode i usluge; - komunicirali s Vama u vezi Vaših narudžbi, kupovine ili Vaših računa kod nas, kao i u vezi Vaših zahtjeva, pitanja ili komentara; - omogućili Vam korištenje naših online usluga (uključivo s mobilnim aplikacijama); i - pružili uslugu podrške kupcima, uključivo s obradom pritužbi na naše usluge. Da bi vam ponudili, odnosno popravili naše usluge te iz drugih opravdanih poslovnih razloga: - kako bi Vas obavijestili o našim proizvodima i uslugama, nagradnim igrama, ponudama, promocijama ili posebnim događajima za koje smatramo da bi Vas mogle zanimati (ukoliko nam date dopuštenje da to činimo); - kako bi personalizirali Vaše iskustvo u našim restoranima i na online uslugama odnosno kako bi koristili tehnologije analize i izrade profila u cilju personalizacije Vašeg iskustva, dostavljali Vam sadržaje razvijene po mjeri Vaših procijenjenih interesa i prilagođene načinu na koji koristite naše online usluge ili tehnologije u restoranima, kojoj uporabi uvijek imate pravo prigovoriti; - za upravljanje našim poslovanjem, uključivo s razvojem novih proizvoda i usluga, provedbom istraživanja kupaca i poslovanja, za ocjenjivanje učinkovitosti naše prodaje, marketinga i reklama; - za upravljanje našim poslovanjem, za dijagnosticiranje tehničkih problema ili problema s uslugom, za upravljanje našim online uslugama i tehnologijama u restoranima, u cilju sprječavanja prijevara, za prikupljanje demografskih podataka o našim klijentima, te za utvrđivanje obrazaca ponašanja u korištenju naših usluga; - za održavanje, upravljanje i poboljšavanje naših proizvoda, ponuda, promocija te online usluga i drugih tehnologija; - za izbor naših djelatnika na natječajima za slobodna radna mjesta U svrhu djelovanja sukladno zakonskim propisima: - u svrhu zaštite od, otkrivanja i sprječavanja prijevara i drugih kaznenih djela, kao i zaštite od ili podnošenja naših tužbi i zahtjeva po osnovi odgovornosti; - u svrhu djelovanja u skladu s zakonskim obvezama i našim politikama; - za postavljanje, izvršavanje ili obranu od pravnih zahtjeva prema nama; i - praćenje i izvješćivanje o pitanjima sukladnosti. Uz Vašu suglasnost podatke koje prikupljamo možemo koristiti za sljedeće svrhe: - za pružanje usluga koje se baziraju na lokaciji; - za pružanje online-usluga maloljetnicima mlađim od 16 godina (uz privolu roditelja); - za korištenje kolačića i sličnih tehnologija; - za pružanje online usluga (uključivo s mobilnim aplikacijama) Vama. Podatke koje prikupljamo o Vama možemo koristiti i na druge načine, o kojima ćemo vas obavijestiti u trenutku prikupljanja podataka ili za koje ćemo tražiti Vašu privolu. - Kako dijelimo podatke koje prikupimo Vaše osobne podatke ne prodajemo, a s drugima ih dijelimo samo na način opisan u ovoj Izjavi o privatnosti. Vaše osobne podatke možemo dijeliti s dobavljačima koji za nas obavljaju određene usluge, poput izvršavanja narudžbi, obrade podataka ili drugih usluga informacijske tehnologije, vođenje promocija, provedbe natjecanja, izvlačenja nagrada, provedbe istraživanja i analiza te personalizacije iskustva korisnika s McDonald’som. U takvim slučajevima poduzimamo mjere (poput korištenja standardnih odredbi o zaštiti podataka) potrebne za osiguranje odgovarajuće razine zaštite Vaših osobnih podataka.. Ovim dobavljačima ne dopuštamo korištenje tih podataka, niti njihovo dijeljenje, u bilo koju svrhu osim za obavljanje usluga za nas. Moguće je da zbog strateških ili drugih poslovnih razloga odlučimo prodati ili prenijeti sav ili dio našeg poslovanja. U sklopu takve prodaje ili prijenosa možemo prenijeti i podatke koje smo prikupili i čuvali, uključivo s osobnim podacima, na bilo koga uključenog u takvu prodaju ili prijenos. Ponekad je moguće da dijelimo podatke koji Vas ne identificiraju izravno. Primjerice, možemo dijeliti anonimne, zbirne statističke podatke o Vašem korištenju naših online usluga. Ili možemo kombinirati podatke o Vama s podacima o drugim korisnicima i dijeliti ih s nekim drugim na način koji ne može dovesti do identifikacije pojedinog ispitanika. Osim toga, ovlašteni smo koristiti i dijeliti podatke kada je to neophodno potrebno za ispunjavanje zakonskih ili regulatornih zahtjeva, za zaštitu naših online usluga i tehnologije u restoranima, za podizanje ili obranu od tužbi i drugih pravnih zahtjeva, za zaštitu prava, interesa i sigurnosti našeg društva ili sustava McDonald’s kojem pripadamo, naših zaposlenika ili trećih osoba, ili u sklopu istrage prijevare ili drugih kaznenih djela, ili kršenja naših politika. - Zaštita djece U McDonald’su smo svjesni značaja zaštite Vaše privatnosti kada koristite naše online usluge. Posebno smo predani zaštiti privatnosti djece koja posjećuju ili koriste naše online usluge. Osobe mlađe od 16 godina mogu koristiti naše online usluge isključivo uz suglasnost roditelja ili skrbnika, ovisno o tome što je primjenjivo. Nećemo svjesno prikupljati i zadržavati osobne podatke osoba mlađih od 16 godina (u pogledu on-line usluga) odnosno maloljetnika u pogledu svih drugih naših usluga, bez da za to tražimo suglasnost roditelja ili skrbnika. Pozivamo roditelje da redovito provjeravaju i nadziru online aktivnosti svoje djece. Ukoliko imate bilo kakvih pitanja o našem pristupu zaštiti privatnosti djece, molimo vas obratite nam se na kontakte navedene u nastavku. - Vaše mogućnosti i izbor Ukoliko ste nam dali privolu za primitak marketinških informacija, kasnije možete od toga odustati prateći upute za odustajanje koje se nalaze u marketinškim porukama koje smo Vam poslali. Isto tako, u općim uputama koje se nalaze u dijelu vašeg korisničkog profila na online uslugama koje koristite možete pronaći izbor komunikacijskih preferencija, uključivo s uputama o odustajanju. Također, na Vašem uređaju može postojati mogućnost podešavanja Vaših komunikacijskih postavki. A možete odustati i tako da nas kontaktirate na adresi, telefonskom broju ili e-mail adresi u nastavku. Ukoliko odustanete od primanja naših marketinških poruka, mi vam i dalje možemo slati poruke u vezi Vaših transakcija, Vaših korisničkih računa, kao i o bilo kakvim natjecanjima, nagradnim igrama ili izvlačenjima na koje ste se prijavili. Odustajanje od jednog oblika komunikacije ne znači da ste odustali od ostalih oblika. Na primjer, ukoliko ste odustali od primitka marketinških e-mail poruka i dalje možete primati tekstualne (SMS) poruke s marketinškim sadržajem, ukoliko ste tako izabrali. Molimo obratite pozornost da ukoliko primate poruke od drugih članica McDonald’s, tada postupak odustajanja trebate provesti izravno s njima. McDonald’s ne ustupa niti čini dostupnim osobne podatke trećim stranama za njihove izravne marketinške aktivnosti, osim ukoliko nam vi to ne dopustite. Nakon naše obavijesti i vašeg pristanka, vaše osobne podatke dijelit ćemo s trećima u skladu s vašim uputama. Vaše podatke čuvamo onoliko vremena koliko je potrebno za ispunjavanje svrha navedenih u ovoj Izjavi, što podrazumijeva da Vaše podatke nećemo čuvati dulje od razdoblja na koje ste nam dali Vašu privolu, odnosno do povlačenja privole (za podatke koji su prikupljeni i obrađuju se temeljem Vaše privole), odnosno u pravilu ne dulje od razdoblja od 6 godina računajući od kraja kalendarske godine u kojoj su podaci prikupljeni (osim kada je zakonom određeno dulje vrijeme, trajno čuvanje, ili kada ustanovimo da postoji naš legitimni interes za dulje čuvanje, primjerice u situaciji kada se očekuje ili je u tijeku postupak pred nadležnim tijelom). Za rokove čuvanja podataka prikupljenih u posebne svrhe, molimo pregledajte obavijesti navedene u uvodnom dijelu ove izjave. Vaša prava u odnosu na osobne podatke Za podatke koje prikupljamo i obrađujemo temeljem Vaše privole, imate pravo u svakom trenutku odustati od dane privole, dostavom odgovarajućeg zahtjeva na donje kontak adrese (navedeno ne utječe na zakonitost obrade prije povlačenja privole). GLOBALNA HRANA d.o.o. poštuje i prava ispitanika na pristup, ispravak i ograničavanje obrade osobnih podataka, kao i prava na ulaganje prigovora na obradu i pravo na prenosivost podataka. Predmetna prava podrazumjevaju primjerice slijedeće: - Kad se obrada Vaših osobnih podataka temelji na Vašoj privoli, privolu u svakom trenutku možete povući; povlačenje privole neće utjecati na zakonitost obrade provedene prije povlačenja privole; - Zatražiti pristup Vašim osobnim podacima i dobiti kopiju takvih podataka; - Dobiti Vaše osobne podatke u strukturiranom, uobičajeno korištenom i računalno čitljivom formatu te od nas zatražiti da ih proslijedimo izravno drugom društvu, u slučaju kad ste nam Vi dostavili svoje osobne podatke te kad se oni obrađuju temeljem vaše prethodne privole ili su neophodni za ispunjenje ugovorne obveze; - Ispravak Vaših osobnih podataka u slučaju kad su netočni ili nepotpuni; - Izjavljivanje prigovora zbog razloga povezanih s Vašom specifičnom situacijom protiv naše obrade Vaših osobnih podataka na temelju našeg legitimnog poslovnog interesa, uključivo s izradom profila i slanjem marketinških obavijesti; - Brisanje Vaših osobnih podataka, uključivo sa svim poveznicama na iste te svih kopija i preslika istih, u dopuštenoj mjeri; na primjer, ako su Vaši podaci zastarjeli, nepotrebni ili nezakoniti ili ako povučete Vašu privolu za obradu temeljenu na toj privoli te kad uspijete s prigovorom protiv obrade; - Ishođenje ograničavanje obrade za vrijeme dok mi obrađujemo Vaš zahtjev ili prigovor u odnosu na točnost Vaših osobnih podataka ili zakonitosti obrade vVaših osobnih podataka te legitimitet našeg interesa za obradom tih podataka, ili ukoliko su Vam osobni podaci potrebni za potrebe vođenja sudskog postupka; - Povrh toga, u svakom trenutku imate pravo povući privolu koju ste prethodno dali za obradu Vaših osobnih podataka. Navedena prava možete koristiti bez naplate naše naknade za njihovu realizaciju, osim u slučaju kad je zahtjev neosnovan ili pretjeran, npr. iz razloga što se ponavlja. Možemo odbiti postupiti po Vašem zahtjevu ili Vam postaviti neka ograničenja, u mjeri u kojoj je to dopušteno primjenjivim propisima. Prije no što vam McDonald’s može dostaviti ikakvu informaciju ili ispraviti netočnosti možemo od Vas zatražiti da potvrdite Vaš identitet i/ili dostavite dodatne pojedinosti kako bi nam pomogli odgovoriti na Vaš zahtjev. Navedena prava ispitanici ostvaruju podnošenjem pisanog zahtjeva GLOBALNOJ HRANI i/ili Službeniku za zaštitu osobnih podataka, na dolje navedene kontakte. Pravo na podnošenje prigovora ostvaruje se prigovorom Agenciji za zaštitu osobnih podataka RH. - Korištenje naših online usluga i drugih tehnologija McDonald’s može koristiti “kolačiće“, web-pratilice i druge slične tehnologije na našim online uslugama, kao i u drugim područjima našeg poslovanja, poput online oglašavanja, kako bi prikupili podatke i isporučili Vam usluge ili proizvode koje ste zatražili. Kao što smo naveli naprijed u ovoj izjavi, nastojat ćemo od Vas u svakom takvom slučaju ishoditi privolu za korištenje takvih funkcionalnosti. “Kolačići“ (cookies) i drugi alati „Kolačići“ su male tekstualne datoteke koje se postavljaju na korisnikov internet preglednik ili na uređaj u cilju bilježenja i/ili prikupljanja podataka o korisniku. Web-pratilica (web-beacon) je mali objekt ili slika koja je ugrađena u internet stranicu, aplikaciju ili e-mail i koristi se za praćenje aktivnosti. Ponekad se nazivaju i „pixel“ ili „tag“. Molimo Vas da imate na umu sljedeće: - Prilikom korištenja naših online usluga može vam se proslijediti “kolačić”. - „Kolačiće“ i druge alate možemo koristiti privremeno („session cookies“ – traju samo za vrijeme vaše posjete stranici) i trajno („persistent cookies“ – traju određeno vrijeme). - Naše online usluge, kao i druga područja povezana s našim poslovanjem mogu imati web-pratilice (web-beacons). “Kolačiće“, web-pratilice i druge slične alate koristimo za prikupljanje podataka u svrhe opisane u ovoj Izjavi. Spomenute tehnologije možemo koristiti u sljedeće svrhe: - kako bi Vam omogućili pristup i korištenje naših online usluga koje, bez ovih tehnologija, možda ne bi ispravno funkcionirale; - za unaprjeđenje naših proizvoda i usluga; - za praćenje učinkovitosti naših online usluga (npr. posjećenost, greške, vrijeme odziva stranica, popularnost pojedinih sadržaja, itd.); - kako bi nam omogućili prilagodbu naših usluga Vašim željama i interesima; - za marketinške aktivnosti putem ciljanog oglašavanja; i - u druge svrhe opisane u dijelu ove Izjave naslovljenom „Kako koristimo prikupljene podatke“. Na primjer, možemo koristiti određene alate kako bi utvrdili jeste li otvorili e-mail poruku ili kliknuli na poveznicu sadržanu u e-mail poruci; ili kako koristite naše stranice i sadržaj naših mobilnih aplikacija; ili jeste li otvorili online reklamu za McDonald’s. McDonald’s i treće strane (npr. mreže putem kojih se oglašavamo i na čija pravila o zaštiti privatnosti ne utječemo) mogu koristiti ove tehnologije za prikupljanje podataka o Vašim online aktivnostima, kroz određeno vrijeme i preko internet stranica i uređaja trećih strana, kao i tijekom korištenja naših online sadržaja, u cilju prilagodbe naših sadržaja Vašim interesima. Savjetujemo Vam da podesite odgovarajuće postavke na Vašem web pregledniku ukoliko ne želite primati “kolačiće“ ili ako želite da Vas Vaš preglednik obavijesti kad primite “kolačić”. Koristeći sadržaj „Pomoć“ na vašem pregledniku upoznajte se s načinima promjene Vaših postavki u odnosu na “kolačiće“. Neki od novijih Internet preglednika mogu imati „Do Not Track“ („Ne prati me“) opciju koja odašilja poruku „Do Not Track“ svim web stranicama koje posjećujete, čime im dajete do znanja da ne želite da se Vaše aktivnosti prate. McDonald’s u ovom trenutku ne poduzima aktivnosti u odgovoru na „Do Not Track“ signal iz razloga što za ovo još nije razvijen jedinstveni tehnološki standard. No pratimo razvoj ovih tehnologija i moguće je da ćemo prihvatiti takav standard kada bude razvijen. Ciljano oglašavanje Prilikom korištenja naših online usluga McDonald’s može prikupljati informacije o Vašim aktivnostima kako bi Vam mogli ponuditi oglasne sadržaje sukladne Vašim interesima. Kao što je već navedeno naprijed u ovoj izjavi, ponuda oglasnih sadržaja uvjetovana je Vašom privolom, od koje uvijek možete odustati na način opisan naprijed u ovoj izjavi. Napominjemo da se naše oglasne poruke mogu nalaziti i na internet stranicama trećih osoba od kojih smo mi ili naši partneri (marketinške agencije, društva McDonald’s sustava) zakupili oglasni prostor radi postavljanja oglasnih sadržaja. U tom slučaju se na prikupljanje i praćenje podataka o pristupima takvim oglasnim sadržajima, primjenjuju pravila oglasnih stranica na kojima se sadržaji objavljuju. McDonald’s ne utječe na pravila privatnosti takvih oglasnih stranica, no poduzet će razumne napore da se njegovi oglasi ne objavljuju na oglasnim stranicama koje nisu implementirale GDPR i druge primjenjive propise o zaštiti osobnih podataka. - Poveznice na druge web stranice i društvene mreže Na našim online uslugama mogu se pojaviti poveznice na web stranice kojima ne upravljamo mi, već treće strane. Ukoliko posjećujete ove povezane web stranice savjetujemo vam da pročitate njihova pravila zaštite privatnosti, uvjete korištenja i druge politike. McDonald’s ne odgovara za politike i načine rada trećih strana. Svaki podatak koji dajete tim organizacijama tretirat će se u skladu s njihovim pravilima zaštite privatnosti, uvjetima korištenja i drugim politikama. Na našim online uslugama također možemo imati aplikacije, alate, spravice („gadget“) i programčiće („widget“) drugih dobavljača, primjerice Facebook-ov „Like“, a koji isto tako mogu koristiti automatsko prikupljanje informacija o načinu na koji koristite ove značajke. Ove organizacije mogu koristiti vaše podatke u skladu s njihovim politikama, na koje mi ne utječemo. - Informacijska sigurnost McDonald’s je predan poduzimanju svih odgovarajućih i razumnih mjera u cilju zaštite sigurnosti Vaših osobnih podataka. Naši postupci tehničke, administrativne i fizičke zaštite razvijeni su s ciljem zaštite Vaših osobnih podataka od slučajnog, nezakonitog i neovlaštenog gubitka, pristupa, otkrivanja, korištenja, izmjene ili uništenja. Iako u McDonald’su poduzimamo sve napore na zaštiti naših informacijskih sustava, niti jedna web stranica, mobilna aplikacija, računalni sustav ili prijenos podataka putem interneta ili druge javne mreže nisu zajamčeno 100% sigurni. - Prijenos podataka u inozemstvo Prijenos osobnih podataka u inozemstvo, u svrhe navedene u ovoj Izjavi ili, primjerice, radi pohrane Vaših osobnih podataka, izvršit ćemo u skladu s ovom Izjavom o privatnosti i primjenjivim propisima o zaštiti osobnih podataka. Vaši osobni podaci mogu se prenijeti ili pohraniti u Europskom gospodarskom prostoru (EEA). Podaci se mogu prenijeti i pohraniti i izvan Europskog gospodarskog prostora. U tom slučaju, podatke mogu obrađivati i naši dobavljači kao treća strana. Podaci se izvan Europskog gospodarskog prostora mogu prenijeti samo pod uvjetom da postoji adekvatna zaštita poput (1) odluke Europske komisije o adekvatnosti u vezi s državom u koju se podaci izvoze; (2) potvrde o postojanju „sigurnosnog štita“, u slučaju da se podaci izvoze u SAD; ili (3) odgovarajućeg i obvezujućeg poslovnika sukladnog propisima o zaštiti osobnih podataka. Matična organizacija McDonald’ sustava, McDonald’s Corporation djeluje u Okviru EU-SAD Štita privatnosti („Štit privatnosti“) kojim upravlja Ministarstvo trgovine SAD (U.S. Department of Commerce), a uređuje prikupljanje, korištenje i pohranu osobnih podataka iz država članica Europske Unije. Navedeno podrazumijeva da je izvoz osobnih podataka u to društvo dozvoljen. Kao sudionik u Štitu privatnosti, McDonald’s Corporation je certificiran za djelovanje sukladno načelima Štita privatnosti u odnosu na sve osobne podatke zaprimljene iz Europske Unije na temelju povjerenja u Štit privatnosti. Pri tome molimo Vas da vodite računa o sljedećem: - McDonald’s Corporation može dijeliti osobne podatke na koje se primjenjuju načela Štita privatnosti s dobavljačima koji mu pružaju usluge, na način opisan u Točki 3. Po načelima Štita privatnosti McDonald’s Corporation može snositi odgovornost u slučaju da takvi dobavljači obrađuju podatke na način koji nije u skladu s okvirom Štita privatnosti te McDonald’s Corporation odgovara za događaje koji bi za posljedicu imali nastanak štete. - McDonald’s Corporation može otkriti osobne podatke koji su mu proslijeđeni pouzdajući se u Štit privatnosti odgovarajući na zakonski utemeljene zahtjeve tijela javnih vlasti, uključivo s zahtjevima tijela državne sigurnosti i pravosudnih tijela. - Vaše je pravo zatražiti pristup osobnim podacima proslijeđenima McDonald’s Corporationu pouzdajući se u Štit privatnosti te iskoristiti mogućnost vašeg izbora u ograničavanju McDonald’s Corporation u korištenju i otkrivanju takvih podataka. Ukoliko ste zainteresirani iskoristiti svoje pravo i pravo izbora molimo Vas da nas kontaktirate na dolje navedene kontakte, a mi ćemo Vam dostaviti kontakt podatke McDonald’s Corporation. Za više informacija o programu Štita privatnosti, te za pregled McDonald’sova certifikata molimo posjetite stranicu Štita privatnosti na: www.privacyshield.gov/welcome. Ukoliko imate pitanja u vezi zaštitnih mehanizama koje koristimo pri međunarodnom prijenosu vaših osobnih podataka ili ako želite primjerak standardnih ugovornih odredbi koje koristimo za zaštitu osobnih podataka koje prenosimo, molimo vas obratite nam se na dolje navedene kontakt podatke. - Izmjene Izjave o privatnosti Ova Izjava o privatnosti primjenjuje se od dana naznačenog na početku Izjave. Izjava se s vremena na vrijeme može mijenjati. Ukoliko dođe do takvih izmjena, novu verziju objavit ćemo na ovom mjestu s izmijenjenim „Datumom zadnje promjene“ (tj. datumu od kojeg se primjenjuje) na početku Izjave. Savjetujemo da ovdje redovito provjeravate najnovije verzije Izjave. - Kako nam se možete obratiti Ukoliko nam se želite obratiti u vezi s pitanjem, zahtjevom (uključujući odustankom od privole ili zahtjevom za korištenjem prava na pristup, ispravak i ograničavanje obrade osobnih podataka, kao i prava na ulaganje prigovora na obradu i prava na prenosivost podataka) ili upitom u odnosu na Vaše osobne podatke, to možete učiniti na: Globalna hrana d.o.o. Rudeška cesta 87a, Zagreb Kontakt službenika za zaštitu podataka : privatnost@hr.mcd.com