Privacy Policy

01.  Policy Purpose

HanGook McDonald's Co., Ltd. (hereinafter the "Company") emphasizes the protection of customers' personal information and complies with laws and regulations concerning the protection of its customers' personal information, including the Act on Promotion of Information and Telecommunication Network Utilization and Information Protection, etc., and the Personal Information Protection Act. Through this Privacy Policy ("Privacy Policy"), the Company notifies customers of the purposes and methods by which personal information provided by customers is used, and what measures are being taken to protect the personal information. If the Company amends this Privacy Policy, it will notify the amended terms and causes thereof without delay through the Company's website and mobile application ("Website").

Effective from April 1, 2012

Last revised June 20, 2016

02.  Collection of Personal Information

02_1. Q) What are the mandatory items of personal information collected by the Company, purposes of collection and use, and the method of collection?

The Company collects/uses personal information to provide McDelivery Service ("MDS") as listed below.

ItemsPurpose of Collection/UseItems for collection/use and methods of collection
MandatoryProvide MDS; Contact customer on the course of providing MDS; Settle the payment for MDS servicei) Order by phone
Name, phone number, delivery address, email address, and password provided by the customer
ii) Sign up for online membership/online order
Name, phone number, delivery address, email address, and password provided by the customer
Handle customer inquiry, complaints, and compensation for damage, if any. (insurance settlement)Call submitted via customer center. 1:1 Q&A on website. Personal information submitted via post mail including customer's name, phone number, visited store name, e-mail address, inquiry, or complaints (including attached files), information contained in documents proving damage (diagnosis, copy of medical records, quotation, or receipt).

02_2. Q) What are the optional items of personal information collected by the Company, purposes of collection and use, and the method of collection?

The Company collects personal information to provide giveaways and various event benefits as listed below.

ItemsPurpose of Collection/UseItems for collection/use and methods of collection
OptionalProvide giveaways on store/MDS opening occasions; Provide information on various events and productsName, website ID, phone number, e-mail address, order information contained in event application coupons
Conduct customer analysis and customized marketing activitiesPersonal information provided by customer when signing up for online membership and ordering via website (name, gender, cell phone number, email address)
McDonald's website usage records (service usage records, access log, access IP information, payment record, improper usage records, order records), information that can be automatically collected on the course of providing internet or mobile services (unique identification number, OS, OS version and model name, telecommunications carrier of your mobile phone, PUSH notification choice, dates of your agreement on using the service), collected information when interfacing with social network platforms (username, profile photo, friends list, etc.)

03. Period of Retention and Use

Q) How long does the Company retain the personal information collected as above?

➀ The Company can retain and use customer's personal information from the date of customer's consent until his/her confirmation of membership withdrawal (for optional items, until the customer terminates his/her agreement on providing the information or his/her membership cancellation is confirmed).

➁ Notwithstanding ➀, the personal information will be retained when it is legally required under the Act on the Consumer Protection in Electronic Commerce, etc., or other applicable laws, for a period as prescribed by the law(s).
-Act on the Consumer Protection in Electronic Commerce, etc.
Records relating to contract and cancellation of order: 5 years
Records relating to payment and supply of goods, etc.:5 years
Records relating to settlement of consumer complaint or dispute:3 years
-Protection of Communications Secretes Act
Log-in records: 3 months

➂ Notwithstanding ➀, personal information of customers who have not used MDS service for 1 year or longer will be destroyed unless otherwise required by applicable law(s).

04. Outsourcing of Personal Information Management

04_1. Q) Does the Company outsource the processing of personal information?

The company outsources personal data handling as follows to provide certain services, as well as to ensure smooth processing and safe storage of the customer information.

Service ProviderOutsourced Services
CNT Tech Co.MDS Call Center operation, management of customer complaints
igate
Restaurant Application Development International LLCMaintenance and repair of data and system
Infosys Ltd.
Food Tech Korea
STERIA Asia Pte LtdDevelopment, maintenance and repair of the website and relevant system
MESH KOREADelivery operation
BAROGO
Food Tech KoreaExternal order provider

04_2. Q) Does the Company outsource the processing of personal information based on customers' agreement?

The Company outsources the handling of personal information in order to provide McDonald's related information and/or promotions (giveaways and assorted event benefits) as listed below:

Service ProviderOutsourced Services
Daou TechnologySend e-mails and SMS/MMS on Company-related information and promotional events
Maillink
Leo Burnett KoreaSend McDonald's related marketing information; create research/statistics data; overall operations of assorted promotions
CHAI communication
FacebookShow McDonald's-related ads to Facebook users who are also McDonald's Web Ordering Service users
Daum KakaoSend customized marketing information via Daum Kakao products/service
LINE CorporationSend customized marketing information via LINE Corporation products/service
Daewon Tax Accounting Corp.General handling of tax filings related to event prizes
Applied Predictive Technologies, Inc.Data analysis and results reporting based on gender, transaction data, phone number, e-mail address, etc. provided by customers on McDelivery registration and placement of order
Tasseologic, Inc.
MILVUS

05. Disclosure to Thrid Parties

05_1. Q) What are the mandatory items of personal information the Company transfer to a third party?

RecipientsRecipients' Purpose of UseItems of Transferred Personal InformationRecipients' Period of Retention and Use
*FranchiseeHandling of order and delivery, and settlement of customer's complaints*Information relating to order/delivery: name, phone number, delivery address provided by the customer, order records
*Information relating to the handling of customer complaints: customer's name, phone number, visited store name, e-mail address, inquiry, or complaints (including attached files), information contained in documents proving damage (diagnosis, copy of medical records, quotation, or receipt)
Will be destroyed within five years from the date of order and delivery

* Click to view a list of McDonald's franchise stores >> Click

05_2. Q) What are the optional items of personal information the Company transfer to a third party?

RecipientsRecipients' Purpose of UseItems of Transferred Personal InformationRecipients' Period of Retention and Use
Daou TechnologySend e-mails and SMS/MMS on Company-related information and promotional eventsE-mail address, mobile phone numberWill be destroyed without delay within 30 days from the termination of service partnership
Maillink
Leo Burnett KoreaSend McDonald's related marketing information; create research/statistics data; overall operations of assorted promotionsPersonal information provided by customer when joining online membership and ordering via website (name, gender, cell phone number, email address)
McDonald's website usage records (service usage records, access log, access IP information, payment record, improper usage records, order records), information that can be automatically collected on the course of providing internet or mobile services (unique identification number, OS, OS version and model name, telecommunications carrier of your mobile phone, PUSH notification choice, date of your agreement on using the service), collected information when interfacing with social network platforms (username, profile photo, friends list, etc.)
Will be destroyed without delay within 30 days from the termination of service partnership
CHAI communication
FacebookShow McDonald's-related ads to Facebook users who are also McDonald's Web Ordering Service usersE-mail address, mobile phone numberWill be destroyed without delay within 30 days from the termination of service partnership
Daum KakaoSend customized marketing information via products/services of Daum Kakao Co.Mobile phone numberWill be destroyed without delay within 30 days from the termination of service partnership
LINE CorporationSend customized marketing information via products/services of LINE Co.Mobile phone numberWill be destroyed without delay within 30 days from the termination of service partnership
Daewon Tax Accounting Corp.General handling of tax filings related to event prizesSocial security number, address, name, phone numberWill be destroyed without delay within 30 days from the termination of service partnership
Applied Predictive Technologies, Inc.Conduct customer analysis and results reportingGender, transaction data, mobile phone number, e-mail address information provided customers on registration and placement of orderWill be destroyed without delay within 30 days from the termination of service partnership
Tasseologic, Inc.
MILVUS

06. Q) Does the Company transfer the personal information to offshore?

The Company transfers personal information with consent of the concerned customer to offshore as listed below:

RecipientTransferred informationLocationTransfer TimeTransfer MethodsPurposePeriod of retention and use
Facebook Inc.Encrypted email address/telephone numberU.S.A.,
Sweden
During advertisement periodEncrypted data transmissionTo expose customized and targeted ads to Facebook users who match the provided encrypted dataWill be destroyed without delay within 30 days from the termination of service partnership
Help desk: https://www.facebook.com/help/contact/1461223320847982
Applied Predictive Technologies, Inc.Encrypted order information of customerU.S.A.During advertisement periodEncrypted data transmissionTo expose customized and targeted ads to the service users who match the provided encrypted dataWill be destroyed without delay within 30 days from the termination of service partnership
Email:
info@predictivetechnologies.com
Phone:+1-877-400-2559
(703) 875-7700
Tasseologic, Inc.Encrypted order information of customerU.S.A.During advertisement periodEncrypted data transmissionTo expose customized and targeted ads to the service users who match the provided encrypted dataWill be destroyed without delay within 30 days from the termination of service partnership
Email:
customerservice@tasseologic.com
Phone: 817-908-3106

07. Personal information disposal procedures and methods
Q) How does the Company dispose collected personal information?

When the Company identifies personal information that needs to be disposed of, information in electronic copy will be permanently deleted making them unrecoverable, and hard copy information will be shredded or incinerated. However, personal information that is required to be retained under applicable law(s), will be retained for a period as specified in above 03-➁.

08. Personal Information Security
Q) What measures does the Company undertake to ensure the security of collected personal information?

The Company is taking measures as listed below to ensure the data is securely protected:

  • Management measures: Establish/implement internal management plans, implement regular training in regard to the protection of privacy of members, etc.
  • Technical measures: Control access to the personal information handling systems, install access control systems, encrypt personal identification information, install security software, etc.
  • Physical measures: Control access to information storages including the data processing department and information archives, etc.

09. Rights and obligations of customers on personal information collection and how to exercise those rights
Q) What kind of rights do the customer and his/her legal representative have, and how do they exercise such rights?

  1. Customer and his/her legal representative may at any time access and correct the registered personal information of his/her own or children under age 14, and may request the Company to delete the same.
  2. We do not collect personal information of minors under the age 14. However, if requested by his/her legal representative, we guarantee their rights as prescribed by applicable laws and regulations (a right to request disclosure, correction, destruction, and suspension of personal information of the minor, etc.)
  3. If you wish to access, correct or delete such information, you may either use the 1:1 customer center within the Website, or contact the Personal Information Manager described below.
  4. If you request the correction of errors in the personal information, the Company will not use or transfer the relevant personal information until the correction is completed. If the Company has already transferred the erroneous personal information to a third party, it will immediately notify such third party of the result of correction so that the errors can be corrected.

10. Use of Cookies
Q) Does the Company operate a device that automatically collects the personal information, such as Internet access information file?

The Company operates cookie in order to improve the Website services by finding out the taste and interest of users upon analyzing the frequency of access to the Website or visiting time. A cookie is a small piece of text file that the server used in operating the Company's Website transmits to your browser, and is saved in the hard disk of your computer.
You have the right to allow installation of cookies. By selecting the settings option in your web browser, you can choose to enable all cookies, save cookies, or disable and choose not to save cookies.

11. Protection of Personal Information
Q) What can I do if I have inquiries concerning the processing of personal information?

The Company operates a customer center as follows in order to protect the customers' personal information as well as to address complaints arising out of the personal information, and designates the Personal Information Manager. Please direct any complaints concerning the protection of personal information that may arise in the course of using the service of the Company to the customer center.

Should you wish to report, or need any consultation concerning, any infringement of personal information, please contact the following institutions.

  1. Personal Information Dispute Mediation Committee (http://privacy.kisa.or.kr/kor/committee/committee03_new.jsp)
  2. Online Privacy Association (http://www.eprivacy.or.kr/ 02-580-0533~4)
  3. Cybercrime Investigation Division (http://www.spo.go.kr/ 02-3480-2000)
  4. National Police Agency Cyber Bureau (http://www.netan.go.kr/ 02-393-9112)