Identity of the personal data controller
I.1. ”Food Planet Restaurants” S.R.L, hereinafter “McDonald’s” or “Operator” IDNO 1003600137218, with headquarters: MD-2012, bd. Ștefan cel Mare, mun. Chisinau, Republic of Moldova, registered at CNPDCP with no. 0002424.
The legal framework
The personal data collected are processed in accordance with the provisions of Law 133/2011 on the protection of personal data as well as in accordance with other applicable legal provisions, but also in accordance with the conditions of processing personal data set forth in this policy or other information published on that site.
Until the communication of personal data to the operator, the buyers have the obligation to get acquainted with this Policy. Thus, by applying the check on the site, before the data is transmitted, the potential buyer confirms that they have read the given Policy, as well as the fact that the meaning of its text is fully understood, agreeing to the processing of his personal data. and the processing conditions described.
The basis and purpose of the processing of personal data
The personal data collected through the site is processed for the sale of McDonald's products and the provision of information about them, communication with consumers and for other actions arising from the relationship established with the buyer / potential buyer for commercial prospecting and quality of products sold and to administer, support and evaluate McDonald's business, as well as to prevent breaches of security, law and contractual terms.
Likewise, the personal data communicated can be processed in order to analyze the applications submitted to fill the vacancies within McDonald’s.
In case of consent, some categories of data (name, surname, e-mail address, telephone number, other communication channels indicated by the buyer) may be processed for the transmission of promotional communications to him.
The processing of personal data is carried out by mixed means (manual and automatic), in compliance with legal requirements and under conditions that ensure security, confidentiality and respect for the rights of data subjects.
Categories of personal data and how they are processed
If the buyer wishes to receive promotional communications, he will select the communication channel through which those communications are to be transmitted. Thus, by selecting the respective channel, he will express his consent for his personal data (name, surname, communication channel) to be used for the transmission of the given communications.
Some categories of personal data may be processed for the fulfillment of legal obligations, provided by the normative acts. If the data provided are insufficient to fulfill those obligations, we will request additional data in order to fulfill them.
At the same time, personal data collected indirectly through cookies will be processed, taking into account the legitimate interest of the operator to ensure the proper functioning of the site and the functions offered by it, the platform, to ensure protection against fraud, for statistics with about visitors, for providing browsing experiences, about the duration of the visit, ads, products accessed or searched, without being able to establish your identity, as well as. your location, if you give your consent.
Term of retention of personal data
Personal data will be processed during the performance of contractual obligations, as well as during the use of data in order to answer questions or to improve our activity, complying with legal requirements and applicable law, after which they will be archived and stored for a period of 3 years
At the same time, if the buyer expresses his consent for the transmission of promotional communications, the personal data necessary to achieve that purpose will be stored until the withdrawal of consent by the buyer, by sending a notification to the e-mail address: firstname.lastname@example.org
However, if there is a legal obligation or a legitimate interest of the operator, the storage periods mentioned above may be changed.
Disclosure of personal data
The controller will disclose the personal data collected (i) to the data subject or his legal representative, (ii) to the authorities, state institutions, competent and empowered in case of their motivated and legal request, as well as third parties, authorized by the controller to process personal data, in accordance with the legal provisions governing the field of personal data protection.
If you have received emails that appear to be sent by McDonald's or a McDonald's partner organization requesting information such as a password or username and even sums of money in exchange for larger sums or other benefits, such as winning a contest or a McDonald's promotion, these are "scam e-mails"
These messages may seem quite convincing because they contain the McDonald’s logo or the logo of a McDonald’s brand or come from an email address that appears to be from McDonald’s.
In either case, these emails are fake, so we suggest that you verify the authenticity of these types of messages (regardless of how they are sent to you) before replying to them. McDonald’s also recommends that you do not send money or other information because requesting it in exchange for earnings, awards, job interviews or any other type of registration is contrary to McDonald’s policy.
If you have any questions regarding any e-mail you have received, please contact us using the "Contact" Section to notify us of these incidents and take appropriate action. You may also seek the assistance or advice of your service provider. Internet.
If you are under the age of 18, we advise you to consult with your parents, legal representative or guardian BEFORE providing your personal information on the McDonald’s website. If certain information in this section is not entirely clear to you, you should seek the help of your parents, legal representative, or guardian. (according to art. 5 (3) of Law 133/2011)
Parents / legal guardians / guardians recommend that you regularly check and monitor how your email address is used, as well as the online activities your children do. Please make sure that before submitting data to personal online, your child will ask your permission in advance.
You can ask us to delete any information related to your child by sending us a deletion request through the "Contact" Section.
Consent to the processing of personal data may be withdrawn by the buyer at any time by written request sent to the e-mail address email@example.com.
Buyer's rights as a subject of personal data
Additionally, we inform you that you have the following rights provided by Law no. 133/2011 on the protection of personal data:
The right to information consists in the right to be informed about the identity of the controller, the purpose for which the data are processed, the recipients or categories of recipients of the data, the existence of the rights provided by the Law on personal data protection, and the conditions under which can be exercised.
The right of access to data consists in the right to obtain from the operator on the basis of a request, the confirmation / refutation of the fact whether the personal data concerning him have been processed or not as well as the information concerning the right to information.
The right to intervene consists in the right to obtain on the basis of a request the rectification, updating, blocking, deletion or transformation into anonymous data of data whose processing does not comply with the requirements of the Law on protection of personal data, especially incomplete data or inaccurate.
The right of opposition consists in the right to oppose at any time, for good and legitimate reasons related to his particular situation, that the data concerning him be processed, unless there are legal provisions that provide otherwise.
The right not to be subject to an individual decision consists in the right to request and obtain the withdrawal, annulment or re-evaluation of any decision which has legal effects on the subject of personal data, adopted exclusively on the basis of automated data processing, intended to assess some aspects of his personality, such as professional competence, credibility, behavior or other such aspects.
The right to justice consists in the right to address the National Center for Personal Data Protection or the court, for the defense of any rights guaranteed by the Law on personal data protection.
In addition to the stated rights, considering the applicability of the General Regulation on Data Protection no. 679/2016 (GDPR) in relation to the cross-border processing of personal data (the server of the information system being located in Germany), you have the following rights:
The right to request the restriction of data processing, which consists in the possibility to request the data controller to preserve (keep intact certain categories or volume of data) for the period of time that is justified in terms of the purpose of the right concerned.
The right not to be a part of automated decision making / automated profiling - consists in the right of the data subject to ask the operator to review the automated process of processing personal data in order to stop creating profiles or automated decisions.
Responsible for the protection of personal data
The operator has appointed a person responsible for ensuring compliance with legal provisions in the process of processing personal data, as well as to provide assistance to buyers in case of need, information or realization of his rights as a subject of personal data.
In this regard, if the buyer has ambiguities, complaints, claims regarding the processing of his personal data, he can contact the person responsible for personal data protection at the contact addresses of "Food Planet Restaurants" S.R.L.