PRIVACY STATEMENT OF MCDONALD'S CYPRUS

Updated Date: 22/11/2019

At Family Restaurants Andreou Co Limited (“McDonald's”), we respect your concerns about privacy. This Privacy Statement (“Statement”) describes the personal information practices of McDonald's with respect to information about our customers and others who visit our restaurants, websites and mobile apps, including the types of personal information we collect, how we may use this information, and with whom we may share it.

For the purposes of the Processing of Personal Data as per the General Data Protection Regulation Family Restaurants Andreou Co Ltd ('McDonald's, 'we' or 'us') is the 'data controller' (i.e. the company who is responsible for, and determines the purpose and manner of personal data processing).

If you have any questions about our privacy practices, please refer to the end of this privacy policy for information on how to contact us.

This privacy policy applies to information we collect:

  • on McDonald’s websites and mobile device applications

  • via Call Center

  • via e-mail, text messages and other communication between you and this Website

  • through mobile and desktop applications you download from this Website, which provide dedicated non-browser-based interaction between you and this Website

  • when you interact with our advertisements and applications on third-party websites and services, if these applications or advertisements include links to this privacy policy

 

  1. Information We Collect

 

We may collect personal information about you when you visit one of our restaurants, use McDonald's websites (“Sites”) or use our web or mobile device applications (“Mobile Apps”) or Call Center. We refer to our Sites and Apps collectively as “Online Services”.

The types of personal information we collect may include:

  • Transaction information, such as product purchased, price, method of payment and payment details.

  • Personal details such as name, postal address, email address, phone number, date of birth, and other contact information when you provide this information to us, such as if you register with our Online Services, including when you register for online orders, or place orders via Call Center, or book a Birthday Party at our stores, or enter a McDonald's contest, competition, prize draw, or sweepstakes.

  • Account information, such as username, password and other identifiers or credentials used to access our Online Services or to acquire McDonald's products and services.

The circumstances in which you provide personal information may include when you:

  • purchase products at our restaurants

  • register to use our Online Services, including when you register for online orders

  • use our Call Center

  • request to receive marketing or other communications

  • use our Wi-Fi networks, kiosks or other in-store technologies

  • enter in one of our contests, competitions, prize draws, or sweepstakes

  • submit information when providing feedback

  • use interactive features of our Online Services

  • correspond (including e-mail addresses) with us

Information Collected Through Automated Means

We may collect information from your computer system or mobile device through automated technologies when you visit our restaurants or use our Online Services or in-restaurant technologies. These automated technologies may include cookies, local shared objects, and web beacons. Additional information regarding the use of cookies and other automated technologies is provided in the Statement below. The information we collect may include your Internet Protocol (IP) address; computer/mobile device operating system and browser type; type of mobile device; mobile device settings; the unique device identifier (UDID) or mobile equipment identifier (MEID) for your mobile device; device and component serial numbers; advertising identifier (e.g., IDFAs and IFAs) or similar identifier; the referring website or application; the linked sites, third-party websites, applications or social media where you share Online Services content; and activity related to your use of our Online Services such as the pages you visit on our Sites or in our Mobile Apps.

The providers of third-party apps, tools, widgets and plug-ins on our Online Services, such as Facebook "Like" buttons, also may use automated means to collect information regarding your interactions with these features. This information is subject to the privacy policies or notices of these providers.

Location Information

McDonald's Online Services and in-restaurant technologies may collect precise information about the location of your mobile device or computer using geolocation and location presence awareness technologies such as GPS, Wi-Fi, Bluetooth, or cell tower proximity. For most mobile devices and computer systems, you are able to withdraw your permission for McDonald's to acquire this information on your location through the device or Web browser settings. If you have questions about how to disable collection of precise location information, we recommend you contact your mobile device service provider, the device manufacturer, or your Web browser provider. Please note that certain Online Services and in-restaurant technologies may not function properly without precise location information. When you access our Website from a mobile device like a tablet or phone, we receive information about your location, your device, including one or more unique identifiers for your device, and your mobile carrier. We use this information to provide you with location-based services, such as advertising, search results, and other personalized content. Most devices allow you to turn off location services.

If you would like us to delete location information we have collected, identifiable to you, please contact us at the email or postal address listed below. Please note that we may be required by law to retain certain information.

Combined Information

We may combine personal information that we collect with information we receive from other sources, information about your prior transactions with McDonald's and information that is automatically collected.


How We Use the Information We Collect

McDonald's may use the personal information we collect to:

  • fulfill your requests or orders and process payments for our products and services;

  • register you as a McDonald’s customer through Online Services or Call Center

  • communicate with you about products and services of McDonald's or our business partners that we believe may interest you;

  • communicate with you about and administer your participation in contests, competitions, prize draws, sweepstakes, offers, promotions or special events;

  • send communications to you about your orders, purchases or accounts with McDonald's;

  • provide customer support, respond to, and communicate with you about your requests, questions and comments;

  • enable you to post on our blogs and interact with McDonald's through social media;

  • personalize your experience on our Online Services and in-restaurant technologies, such as providing you with content in which you may be interested, and making navigation on our Sites and Mobile Apps easier;

  • perform data analytics, including consumer research, trend analysis, and financial analysis;

  • operate, evaluate and improve our business, including the development of new products and services; determine the effectiveness of our sales, marketing and advertising efforts; and analyze and improve our products, offers, promotions, and Online Services and other technologies;

  • protect against, identify and prevent fraud and other criminal activity, claims and other liabilities; and comply with applicable law.

We use automated information for purposes such as to (i) personalize the visitor experience in our restaurants or on our Online Services, (ii) deliver content (including advertising) tailored to our users' interests and the manner in which our users browse our Online Services or in-restaurant technologies, and (iii) manage our business. We also use this information to help diagnose technical and service problems; administer our Online Services; identify users of our Online Services; identify a device for fraud prevention purposes, to target advertising or to personalize users' experiences; and gather demographic information about our users. We also use automated information to determine usage patterns and how we may tailor our Online Services to better meet the needs of our users.

We may use the information we obtain about you in other ways for which we provide specific notice at the time of collection.


How We Share the Personal Information We Collect

McDonald's does not sell or otherwise share personal information about you, except as described in this Privacy Statement.

McDonald's may share personal information within the McDonald's Family. The McDonald's Family includes McDonald's Corporation, its affiliates, subsidiaries, suppliers, vendors, and franchisees. Members of the McDonald's Family that receive this information from McDonald's are not authorized to use or disclose the information except as provided in this Privacy Statement.

McDonald's may share personal information with vendors that provide services to McDonald's, such as fulfilling orders, processing payments, providing data processing and other information technology services, administering promotions, contests, prize draws and sweepstakes, conducting research and performing analytics, and personalizing individual McDonald's experiences. We do not authorize these vendors to use the personal information or to disclose it for any purpose other than to perform services on our behalf.

Circumstances may arise where, whether for strategic or other business reasons, McDonald's decides to sell or transfer all or a portion of our business. We may transfer information we have collected and stored, including personal information, to the party or parties involved in the transaction or as part of that transaction.

McDonald's reserves the right to use or disclose personal information as needed to satisfy any law, regulation or legal request, to protect the integrity of our Online Services and in-restaurant technologies, to bring or defend against legal claims, to protect the rights, interests, safety and security of McDonald's, McDonald's employees or franchisees, or members of the public, or in connection with the investigation of fraud, illegal activity or violation of McDonald's policy.


Children's Privacy Notice

McDonald's understands the importance of privacy of users of our Online Services. We are especially committed to protecting the privacy of children who visit or use our Online Services. This Privacy Notice for children is designed to answer your questions regarding our practices with respect to personal information we collect through our Online Services from children under the age of 18.

Our policy is not to process personal information from children under the age of 16, unless for a specific activity where the consent of the child's parent or guardian has been secured in advance.

A. What Personal Information Does McDonald's Collect?

We may collect personal information, such as name, postal address, email address, phone number and date of birth from children (not year) as part of an activity. For example:

  • We may collect a child's email address to notify the child if he or she has won or lost a contest, competition, prize draw or sweepstakes. In this event, we will notify the child using the email address the child supplies. We will not keep the email address or use it for any other purpose.

  • We may collect a child's email address in order to respond to a request from the child on a one-time basis, such as to send the child a screen saver. In this case, we promptly delete the email address from our system once we have responded, and we do not use the address for any other purpose.

  • We collect a child's name, postal address, email address, phone number and date of birth to process a child's online order. We do not use this information for any other purpose.

B. How Does McDonald's Use the Personal Information It Collects?

We use email addresses submitted by a child in order to respond to the child's request or to notify the child if he or she has won or lost a contest, competition, prize draw, or sweepstakes they entered. We also use the child's name, postal address, email address, phone number and date of birth to process a child's online order. In case we collect the email address of a child's parent or guardian we use the given email address in order to provide the parent or guardian with notice of our practices or to seek the parent's or guardian's consent.

C. How Does McDonald's Share Personal Information?

We may share a child's personal information with third parties to the extent reasonably necessary to protect the security or integrity of our Online Services, take precautions against liability, or respond to judicial process or requests from other governmental authorities, or when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual illegal activity.

We also may share personal information collected from children with vendors that perform services for McDonald's. These services may include hosting our Sites, providing technical services to McDonald's, fulfilling requests or administering a contest, competition, prize draw, or sweepstakes and processing of payments. We do not authorize such vendors to disclose the personal information we share with them other than as necessary to perform the relevant service for McDonald's.

D. Requests from Parents Regarding Our Children's Privacy Practices.

Parents may review personal information we have collected from their child that has not been deleted and can request that the personal information be deleted from our records if it has not been already. Parents also may refuse to permit further collection, processing or use of their child's personal information, when the parent has previously provided consent. To do so, please contact us at the address, telephone number or email address provided below with your request.

E. Who Should I Contact with Questions about Children's Privacy?

We urge parents to regularly monitor and supervise their children's online activities. If you have any questions about our children's privacy practices, please contact us at

Email: dpo@mcdonalds.com.cy
Telephone: 24818131


Choices About How We Collect, Use and Disclose Your Personal Information

We strive to provide you with choices regarding the Personal Information you provide to us.

  • You can choose not to provide us with certain Personal Information, but this may result in you being unable to use certain features of our Website because such information may be required in order for you to register as a member; purchase products or services; participate in a contest, promotion, survey, or sweepstakes; ask a question; or initiate other transactions on our Website.

  • You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe’s website. If you disable or refuse cookies, please note that some parts of the Website may then be inaccessible or may not function properly.

  • When you register on our Website, you may be given a choice as to whether you want to receive email messages, newsletters or both about product updates, improvements, special offers, or special distributions of content by us.If you no longer want to receive commercial or promotional emails or newsletters from us, you will need to use the unsubscribe mechanism set out in the applicable communication. It may take up to seven days for us to process an opt-out request. We may send you other types of transactional and relationship e-mail communications, such as service announcements, administrative notices and surveys, without offering you the opportunity to opt out of receiving them. Please note that opting out of receiving promotional email communications will only affect future activities or communications from us. If we have already provided your information to a third party before you changed your preferences or updated your information, you may have to change you preferences directly with that third party.

  • If you submit Personal Information, you may delete your account with us at any time. If you delete your account, your Personal Information and any or all other account related information including, but not limited to, user profile data, sharing data and any other data, or content specifically associated with your account will no longer be accessible by you. After deleting your account, if you choose to have an account with us in the future, you will have to sign up for a new account as none of the information you previously provided or saved within your account will have been saved.

  • You can disable the location services on your mobile device or tablet. Most likely, these controls are located in the device’s settings menu. If you have questions about how to disable your device’s location services, we recommend you contact your mobile service carrier or your device manufacturer.


Access to and Correction and Deletion of Personal Information

If at any time you would like to access, correct, or delete personal information we have collected from you or which is or was processed by us, please contact us at the email or Call Center listed at the end of this Privacy Statement.

For Online Services registered users, access/correction/deletion can be done through the Websites or Mobile application or Call Center.

Please note that we may be required by law to retain certain information. Before McDonald's is able to provide you with any information or correct any inaccuracies, we may ask you to verify your identity and/or provide other details to help us respond to your request. We will provide you with a response no later than 30 days from the request.


Cookies and Similar Technologies

McDonald's uses cookies and other similar technologies to collect information for the purposes described in this Privacy Statement under “How We Use the Information We Collect.”

We also use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). The technologies we use for this automatic data collection may include:

  • Cookies (or browser cookies). Cookies are small text files that are stored in your web browser or downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognizes that cookie, and allow a website to recognize a user’s device.

We currently use the following types of cookies:

  • Cookies that are strictly necessary: These are cookies that are required for the operation of our Website. These include, for example, cookies that enable a user to log into the members’ area of our Website and to check if a user is allowed access to a particular service or content.

  • Analytical cookies: These cookies allow us to recognize and count the number of users and to see how users use and explore our Website. These cookies help us to improve our Website, for example by ensuring that all users are able to find what they are looking for easily.

  • Functionality cookies: We are always glad to see you back. These types of cookies allow us to recognize you when you return to our Website in order to greet you by name and to remember, for example, your choice of language.

  • Targeting cookies: These cookies record the visit of a user on our Website, the pages a user has visited and the links a user has followed in order to enable us to make our Website more relevant to the users’ interests. In addition, these cookies are used to identify the websites and the marketing materials you are accessing our Website from in order to target content (for example, to automatically show you our Website according to your language settings).

  • We do not require that you accept cookies and you may withdraw your consent to our use of cookies at any time by adjusting your browser’s privacy settings. However, if you decline to accept cookies, some functions on our Website may be disabled and you may be unable to access certain parts of our Website. Unless you have adjusted your browser settings so that it will refuse cookies, our system will issue cookies when you use your browser to access our Website. Cookies can be either session cookies or persistent cookies. A session cookie expires automatically when you close your browser. A persistent cookie will remain until it expires or you delete your cookies. Expiration dates are set in the cookies themselves; some may expire after a few minutes while others may expire after several years.

  • Flash Cookies. Certain features of our Website may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from and on our Website. Flash cookies are not managed by the same browser settings as are used for browser cookies. For information about managing your privacy and security settings for Flash cookies, see “Choices About How We Collect, Use and Disclose Your Personal Information”.

  • Web Beacons. Our Website pages and our e-mails may contain small electronic files known as web beacons (also known as clear gifs, pixel tags, single-pixel gifs and web bugs) that are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of web users or to access cookies. Unlike cookies, which are stored on the user’s computer hard drive, web beacons are embedded invisibly on the web pages (or in an email) and are about the size of the period at the end of this sentence. Web beacons may be used to deliver or communicate with cookies, to count users who have visited certain pages or opened an e-mail, to understand usage patterns and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity). We also may receive an anonymous identification number if you come to our site from an online advertisement displayed on a third-party website.

  • Device identifiers. When you use a mobile device like a tablet or phone to access our Website, we may access, collect, monitor, store on your device, or remotely store one or more “device identifiers”. Device identifiers are small data files or similar data structures stored on or associated with your mobile device, which uniquely identify your mobile device. A device identifier may be data stored in connection with the device’s hardware, data stored in connection with the device’s operating system or other software, or data sent to the device by the Website. A device identifier may deliver information to us or to a third party partner about how you browse and use the Website and may help others or us to provide reports or personalized content and advertisements. Some features of the Website may not function properly if use or availability of device identifiers is impaired or disabled.

Use the options in your web browser if you do not wish to receive a cookie or if you wish to set your browser to notify you when you receive a cookie. Click on the “Help” section of your browser to learn how to change your cookie preferences. If you disable all cookies, you may not be able to take advantage of all the features of this Site.

Other Technologies

We may use other technologies, including web beacons and JavaScript, which sometimes work together with cookies and other means with our Sites and Mobile Apps to uniquely identify your device. These other technologies help enable features on our Sites and within our Mobile Apps.

We may also use certain technologies to determine whether you have opened an e-mail or clicked on a link contained in an e-mail.

  • Where video is available on our Online Services, we may target and track the videos you view. You consent to our tracking of your video viewing through Online Services or third-party social media for up to two years, or as permitted by the applicable law, or until consent is withdrawn.

 

Targeted Advertising

On our Online Services, we may collect information about your online activities for use in providing you with advertising tailored to your individual interests, provided you have opted-in to marketing communications. This section of our Privacy Statement provides details and explains how to manage your choices.

You may see certain advertisements on other websites because we participate in advertising networks. Advertising networks allow us to target our messaging to users through demographic, interest-based and contextual means. These networks track your online activities over time by collecting information through automated means, including through the use of cookies, web server logs, web beacons and other technologies. The networks use this information to show you advertisements that may be tailored to your individual interests. The information our advertising networks may collect includes information about your visits to websites that participate in the relevant advertising networks, such as the pages or advertisements you view and the actions you take on the websites. This data collection takes place both on our Online Services and on third-party websites that participate in the advertising networks. This process also helps us evaluate our marketing efforts.


Links to Other Websites and Social Media

Our Online Services may offer links to third-party websites that are not operated by McDonald's. If you visit one of these linked websites, you should review the website's privacy policy, terms and conditions, and other policies. We are not responsible for the policies and practices of third-parties. Any information you submit to these third-parties is subject to their privacy policy, terms and conditions, and other policies.


Information Security

McDonald's is committed to taking appropriate measures designed to keep personal information secure. We have in place organizational, technical, administrative, and physical procedures designed to protect personal information from accidental, unlawful or unauthorized destruction or loss, unauthorized dissemination, access, disclosure, use, alteration, or corruption and any other form of unlawful processing. Such measures aim to ensure a level of security which is analogous to the risks involved in the processing and the nature of the personal information being processed. While we take every effort to safeguard our information systems, no website, mobile application, computer system, or transmission of data over the Internet or any other public network can be guaranteed to be 100% secure.


Retention of Personal Information

We retain personal information for the period of time necessary to fulfill the purposes outlined in this Privacy Statement and per McDonald's records retention policies which have been designed to abide with the GDPR and in particular the data minimization principle unless a longer retention period is required or permitted by law.

Our Company’s retention policy related to McDelivery customers placing orders via Call Center, has been designed to maintain the data, only if the customer has provided his consent to do so and as long as the person is considered an “active” McDelivery customer.

For McDelivery Mobile Application or Online customers, our Company’s retention policy has been designed to maintain the data, only if the customer is registered as McDelivery Customer and as long as the person is considered an “active” McDelivery customer.

A person is considered an “active” McDelivery customer as long as he has placed a McDelivery Order (from any phone number and for any address, related with his account) within the last 12 months.

Our Company’s retention policy related to McDonald’s Mobile application (GMALite), has been designed to maintain the data, only if the customer has provided his consent to do so and as long as the person is considered an “active” McDonald’s customer.

A person is considered an “active” McDonald’s customer as long as he has redeemed an Offer within the last 12 months.

Our company’s retention policy related to BirthdayLine customers, has been designed to maintain the data until fifteen (15) days after the birthday party has taken place.

Images of the CCTV system will be recorded and kept for a minimum of 7 days. Any footage that shows a crime will be kept as long as it is needed to undertake criminal proceedings. Any footage that shows an incident which the individual has accused the Company or has been accused by the Company, will be kept as long as needed to undertake the legal procedures.

McDonald’s also captures your image at the time you place your order in Drive Thru. Image received at the time of placing your order in Drive Thru is not permanently saved onto any device but contributing to Operational Effectiveness by matching the correct order to the correct person.

Recordings

Calls are being recorded for safeguarding our legitimate interest and for service quality improvement. Recordings are kept for the period of 2 (two) months and then deleted. Call recording containing customer’s consent, is kept until the customer is no longer considered “active” (definition of “active” has been provided above).


Storage Location

  • McDonald’s, Cyprus

  • Plexure, New Zealand

  • MS Azure, Netherlands

  • MS Azure, Ireland

  • AWS Ireland

  • AWS Germany (Frankfurt)

  • McDonald’s, UK


International Data Transmissions/Transfers

McDonald's is a franchisee in the McDonald's Family, a global organization with business processes, management structures and technical systems that cross borders. As such, we may share information about you within the McDonald's Family and transfer it to countries in the world where the McDonald's Family carries out business in connection with the uses identified above and in accordance with this Privacy Statement.


CCTV

CCTV is used in McDonald’s restaurants for the following legitimate interests:

  • To detect and prevent crime and disorder

  • To assist in the apprehension of offenders

  • To provide evidence in the vent of legal proceeding be or against McDonald’s

  • To ensure restaurants are being run in a safe manner

  • To ensure operational effectiveness (Drive Thru)


Your Rights Related to Your Personal Information

Subject to local law, you have certain rights regarding the Personal Information we collect, use or disclose that is related to you, including the right to:

  • receive information on the Personal Information we hold concerning you and how such Personal Information is used (right to access);

  • rectify inaccurate Personal Information concerning you (right to data rectification);

  • delete/erase your Personal Information (right to erasure/deletion, “right to be forgotten”);

  • receive the Personal Information provided by you in a structured, commonly used and machine-readable format and to transmit this Personal Information to another data controller (right to data portability);

  • object to the use of your Personal Information where such use is based on our legitimate interests or public interests (right to object);

  • restrict our use of your Personal Information (right to restriction of processing) in some cases.

If we ask for your consent to use your Personal Information, you can withdraw your consent at any time. Note that in case of a withdrawal of your consent you may no longer able to use several functions of our Website and our services.

You may, at any time, send us an e-mail at the email address below to exercise your above rights in accordance with the applicable legal requirements and limitations. If you are located in the European Economic Area, you have a right to lodge a complaint with your local data protection authority.

Note that some requests to delete certain Personal Information will require the deletion of your user account as the provision of user accounts are inextricably linked to the use of certain Personal Information (e.g., your e-mail address). Also note that it is possible that we may require additional information from you in order to verify your authorization to make the request and to honor your request.

  

Changes to our Privacy Statement

We may modify or revise our privacy policy from time to time. Although we may attempt to notify you when major changes are made to this privacy policy, you are expected to periodically review the most up-to-date Privacy Statement found on our website, so that you are aware of any changes which are binding on you.

If we change anything in our privacy policy, the date of change will be reflected in the “last modified date”. You agree that you will periodically review this privacy policy and refresh the page when doing so. You agree to note the date of the last revision to our privacy policy. If the “last modified” date is unchanged from the last time you reviewed our privacy policy, then it remains unchanged. On the other hand, if the date has changed, this means that changes have been made, and you agree to review our privacy policy, and you agree to the new one. By continuing to use the Online and Call Center services, after an amended version of our privacy policy is available, you thereby consent to such an amendment.

 

How to Contact Us


Email: dpo@mcdonalds.com.cy
Telephone: 24818131

Call Center (McDelivery): 77772626

Call Center (BirthdayLine): 77777500