Identity of the personal
data controller
I.1. ”Food Planet
Restaurants” S.R.L, hereinafter “McDonald’s” or “Operator” IDNO 1003600137218,
with headquarters: MD-2012, bd. Ștefan cel Mare, mun. Chisinau, Republic of
Moldova, registered at CNPDCP with no. 0002424.
The legal framework
The personal data collected
are processed in accordance with the provisions of Law 133/2011 on the
protection of personal data as well as in accordance with other applicable
legal provisions, but also in accordance with the conditions of processing
personal data set forth in this policy or other information published on that
site.
Until the communication
of personal data to the operator, the buyers have the obligation to get
acquainted with this Policy. Thus, by applying the check on the site, before
the data is transmitted, the potential buyer confirms that they have read the
given Policy, as well as the fact that the meaning of its text is fully
understood, agreeing to the processing of his personal data. and the processing
conditions described.
The basis and purpose of the processing of
personal data
The
personal data collected through the site is processed for the sale of
McDonald's products and the provision of information about them, communication
with consumers and for other actions arising from the relationship established
with the buyer / potential buyer for commercial
prospecting and quality of products sold and to administer, support and
evaluate McDonald's business, as well as to prevent breaches of security, law
and contractual terms.
Likewise, the personal data communicated can
be processed in order to analyze the applications
submitted to fill the vacancies within McDonald’s.
In case of consent, some categories of data
(name, surname, e-mail address, telephone number, other communication channels indicated
by the buyer) may be processed for the transmission of promotional communications to him.
The processing of personal data is carried out
by mixed means (manual and automatic), in compliance
with legal requirements and under conditions that ensure security,
confidentiality and respect for the
rights of data subjects.
Categories of personal
data and how they are processed
If the buyer wishes to
receive promotional communications, he will select the communication channel
through which those communications are to be transmitted. Thus, by selecting
the respective channel, he will express his consent for his personal data
(name, surname, communication channel) to be used for the transmission of the
given communications.
Some categories of
personal data may be processed for the fulfillment of legal obligations,
provided by the normative acts. If the data provided are insufficient to
fulfill those obligations, we will request additional data in order to fulfill
them.
At the same time,
personal data collected indirectly through cookies will be processed, taking
into account the legitimate interest of the operator to ensure the proper
functioning of the site and the functions offered by it, the platform, to
ensure protection against fraud, for statistics with about visitors, for
providing browsing experiences, about the duration of the visit, ads, products
accessed or searched, without being able to establish your identity, as well
as. your location, if you give your consent.
Term of retention of
personal data
Personal data will be
processed during the performance of contractual obligations, as well as during
the use of data in order to answer questions or to improve our activity,
complying with legal requirements and applicable law, after which they will be
archived and stored for a period of 3 years
At the same time, if the
buyer expresses his consent for the transmission of promotional communications,
the personal data necessary to achieve that purpose will be stored until the
withdrawal of consent by the buyer, by sending a notification to the e-mail
address: mcdonalds@mcdonalds.md
However, if there is a
legal obligation or a legitimate interest of the operator, the storage periods
mentioned above may be changed.
Disclosure of personal
data
The controller will
disclose the personal data collected (i) to the data subject or his legal
representative, (ii) to the authorities, state institutions, competent and
empowered in case of their motivated and legal request, as well as third
parties, authorized by the controller to process personal data, in accordance
with the legal provisions governing the field of personal data protection.
Scam E-mails
If you have received
emails that appear to be sent by McDonald's or a McDonald's partner
organization requesting information such as a password or username and even
sums of money in exchange for larger sums or other benefits, such as winning a
contest or a McDonald's promotion, these are "scam e-mails"
These messages may seem
quite convincing because they contain the McDonald’s logo or the logo of a
McDonald’s brand or come from an email address that appears to be from
McDonald’s.
In either case, these
emails are fake, so we suggest that you verify the authenticity of these types
of messages (regardless of how they are sent to you) before replying to them.
McDonald’s also recommends that you do not send money or other information
because requesting it in exchange for earnings, awards, job interviews or any other
type of registration is contrary to McDonald’s policy.
If you have any questions
regarding any e-mail you have received, please contact us using the
"Contact" Section to notify us of these incidents and take
appropriate action. You may also seek the assistance or advice of your service
provider. Internet.
Special note
If you are under the age
of 18, we advise you to consult with your parents, legal representative or
guardian BEFORE providing your personal information on the McDonald’s website.
If certain information in this section is not entirely clear to you, you should
seek the help of your parents, legal representative, or guardian. (according to
art. 5 (3) of Law 133/2011)
Parents / legal guardians
/ guardians recommend that you regularly check and monitor how your email
address is used, as well as the online activities your children do. Please make
sure that before submitting data to personal online, your child will ask your
permission in advance.
You can ask us to delete
any information related to your child by sending us a deletion request through
the "Contact" Section.
Consent to the processing
of personal data may be withdrawn by the buyer at any time by written request
sent to the e-mail address mcdonalds@mcdonalds.md.
Buyer's rights as a
subject of personal data
Additionally, we inform
you that you have the following rights provided by Law no. 133/2011 on the
protection of personal data:
The right to information consists in the right to
be informed about the identity of the controller, the purpose for which the
data are processed, the recipients or categories of recipients of the data, the
existence of the rights provided by the Law on personal data protection, and
the conditions under which can be exercised.
The right of access to
data
consists in the right to obtain from the operator on the basis of a request,
the confirmation / refutation of the fact whether the personal data concerning
him have been processed or not as well as the information concerning the right
to information.
The right to intervene consists in the right to
obtain on the basis of a request the rectification, updating, blocking,
deletion or transformation into anonymous data of data whose processing does
not comply with the requirements of the Law on protection of personal data,
especially incomplete data or inaccurate.
The right of opposition consists in the right to
oppose at any time, for good and legitimate reasons related to his particular
situation, that the data concerning him be processed, unless there are legal
provisions that provide otherwise.
The right not to be
subject to an individual decision consists in the right to request and
obtain the withdrawal, annulment or re-evaluation of any decision which has
legal effects on the subject of personal data, adopted exclusively on the basis
of automated data processing, intended to assess some aspects of his
personality, such as professional competence, credibility, behavior or other such
aspects.
The right to justice consists in the right to
address the National Center for Personal Data Protection or the court, for the
defense of any rights guaranteed by the Law on personal data protection.
In addition to the stated
rights, considering the applicability of the General Regulation on Data
Protection no. 679/2016 (GDPR) in relation to the cross-border processing of
personal data (the server of the information system being located in Germany),
you have the following rights:
The right to request the
restriction of data processing, which consists in the possibility to
request the data controller to preserve (keep intact certain categories or
volume of data) for the period of time that is justified in terms of the
purpose of the right concerned.
The right not to be a
part of automated decision making / automated profiling - consists in the right
of the data subject to ask the operator to review the automated process of
processing personal data in order to stop creating profiles or automated decisions.
Responsible for the
protection of personal data
The operator has
appointed a person responsible for ensuring compliance with legal provisions in
the process of processing personal data, as well as to provide assistance to
buyers in case of need, information or realization of his rights as a subject
of personal data.
In this regard, if the
buyer has ambiguities, complaints, claims regarding the processing of his
personal data, he can contact the person responsible for personal data
protection at the contact addresses of "Food Planet Restaurants"
S.R.L.