HanGook McDonald's Co., Ltd. (hereinafter the "Company") emphasizes the protection of customers' personal information and complies with laws and regulations concerning the protection of its customers' personal information, including the Act on Promotion of Information and Telecommunication Network Utilization and Information Protection, etc., and the Personal Information Protection Act. Through this Privacy Policy ("Privacy Policy"), the Company notifies customers of the purposes and methods by which personal information provided by customers is used, and what measures are being taken to protect the personal information. If the Company amends this Privacy Policy, it will notify the amended terms and causes thereof without delay through the Company's website and mobile application ("Website").
Effective from April 1, 2012
Last revised June 20, 2016
The Company collects/uses personal information to provide McDelivery Service ("MDS") as listed below.
Items | Purpose of Collection/Use | Items for collection/use and methods of collection |
Mandatory | Provide MDS; Contact customer on the course of providing MDS; Settle the payment for MDS service | i) Order by phone |
Name, phone number, delivery address, email address, and password provided by the customer | ||
ii) Sign up for online membership/online order | ||
Name, phone number, delivery address, email address, and password provided by the customer | ||
Handle customer inquiry, complaints, and compensation for damage, if any. (insurance settlement) | Call submitted via customer center. 1:1 Q&A on website. Personal information submitted via post mail including customer's name, phone number, visited store name, e-mail address, inquiry, or complaints (including attached files), information contained in documents proving damage (diagnosis, copy of medical records, quotation, or receipt). |
The Company collects personal information to provide giveaways and various event benefits as listed below.
Items | Purpose of Collection/Use | Items for collection/use and methods of collection |
Optional | Provide giveaways on store/MDS opening occasions; Provide information on various events and products | Name, website ID, phone number, e-mail address, order information contained in event application coupons |
Conduct customer analysis and customized marketing activities | Personal information provided by customer when signing up for online membership and ordering via website (name, gender, cell phone number, email address) McDonald's website usage records (service usage records, access log, access IP information, payment record, improper usage records, order records), information that can be automatically collected on the course of providing internet or mobile services (unique identification number, OS, OS version and model name, telecommunications carrier of your mobile phone, PUSH notification choice, dates of your agreement on using the service), collected information when interfacing with social network platforms (username, profile photo, friends list, etc.) |
➀ The Company can retain and use customer's personal information from the date of customer's consent until his/her confirmation of membership withdrawal (for optional items, until the customer terminates his/her agreement on providing the information or his/her membership cancellation is confirmed).
➁ Notwithstanding ➀, the personal information will be retained when it is legally required under the Act on the Consumer Protection in Electronic Commerce, etc., or other applicable laws, for a period as prescribed by the law(s).
-Act on the Consumer Protection in Electronic Commerce, etc.
Records relating to contract and cancellation of order: 5 years
Records relating to payment and supply of goods, etc.:5 years
Records relating to settlement of consumer complaint or dispute:3 years
-Protection of Communications Secretes Act
Log-in records: 3 months
➂ Notwithstanding ➀, personal information of customers who have not used MDS service for 1 year or longer will be destroyed unless otherwise required by applicable law(s).
The company outsources personal data handling as follows to provide certain services, as well as to ensure smooth processing and safe storage of the customer information.
Service Provider | Outsourced Services |
CNT Tech Co. | MDS Call Center operation, management of customer complaints |
igate | |
Restaurant Application Development International LLC | Maintenance and repair of data and system |
Infosys Ltd. | |
Food Tech Korea | |
STERIA Asia Pte Ltd | Development, maintenance and repair of the website and relevant system |
MESH KOREA | Delivery operation |
BAROGO | |
Food Tech Korea | External order provider |
The Company outsources the handling of personal information in order to provide McDonald's related information and/or promotions (giveaways and assorted event benefits) as listed below:
Service Provider | Outsourced Services |
Daou Technology | Send e-mails and SMS/MMS on Company-related information and promotional events |
Maillink | |
Leo Burnett Korea | Send McDonald's related marketing information; create research/statistics data; overall operations of assorted promotions |
CHAI communication | |
Show McDonald's-related ads to Facebook users who are also McDonald's Web Ordering Service users | |
Daum Kakao | Send customized marketing information via Daum Kakao products/service |
LINE Corporation | Send customized marketing information via LINE Corporation products/service |
Daewon Tax Accounting Corp. | General handling of tax filings related to event prizes |
Applied Predictive Technologies, Inc. | Data analysis and results reporting based on gender, transaction data, phone number, e-mail address, etc. provided by customers on McDelivery registration and placement of order |
Tasseologic, Inc. | |
MILVUS |
Recipients | Recipients' Purpose of Use | Items of Transferred Personal Information | Recipients' Period of Retention and Use |
*Franchisee | Handling of order and delivery, and settlement of customer's complaints | *Information relating to order/delivery: name, phone number, delivery address provided by the customer, order records *Information relating to the handling of customer complaints: customer's name, phone number, visited store name, e-mail address, inquiry, or complaints (including attached files), information contained in documents proving damage (diagnosis, copy of medical records, quotation, or receipt) | Will be destroyed within five years from the date of order and delivery |
* Click to view a list of McDonald's franchise stores >> Click
Recipients | Recipients' Purpose of Use | Items of Transferred Personal Information | Recipients' Period of Retention and Use |
Daou Technology | Send e-mails and SMS/MMS on Company-related information and promotional events | E-mail address, mobile phone number | Will be destroyed without delay within 30 days from the termination of service partnership |
Maillink | |||
Leo Burnett Korea | Send McDonald's related marketing information; create research/statistics data; overall operations of assorted promotions | Personal information provided by customer when joining online membership and ordering via website (name, gender, cell phone number, email address) McDonald's website usage records (service usage records, access log, access IP information, payment record, improper usage records, order records), information that can be automatically collected on the course of providing internet or mobile services (unique identification number, OS, OS version and model name, telecommunications carrier of your mobile phone, PUSH notification choice, date of your agreement on using the service), collected information when interfacing with social network platforms (username, profile photo, friends list, etc.) | Will be destroyed without delay within 30 days from the termination of service partnership |
CHAI communication | |||
Show McDonald's-related ads to Facebook users who are also McDonald's Web Ordering Service users | E-mail address, mobile phone number | Will be destroyed without delay within 30 days from the termination of service partnership | |
Daum Kakao | Send customized marketing information via products/services of Daum Kakao Co. | Mobile phone number | Will be destroyed without delay within 30 days from the termination of service partnership |
LINE Corporation | Send customized marketing information via products/services of LINE Co. | Mobile phone number | Will be destroyed without delay within 30 days from the termination of service partnership |
Daewon Tax Accounting Corp. | General handling of tax filings related to event prizes | Social security number, address, name, phone number | Will be destroyed without delay within 30 days from the termination of service partnership |
Applied Predictive Technologies, Inc. | Conduct customer analysis and results reporting | Gender, transaction data, mobile phone number, e-mail address information provided customers on registration and placement of order | Will be destroyed without delay within 30 days from the termination of service partnership |
Tasseologic, Inc. | |||
MILVUS |
The Company transfers personal information with consent of the concerned customer to offshore as listed below:
Recipient | Transferred information | Location | Transfer Time | Transfer Methods | Purpose | Period of retention and use |
Facebook Inc. | Encrypted email address/telephone number | U.S.A., Sweden | During advertisement period | Encrypted data transmission | To expose customized and targeted ads to Facebook users who match the provided encrypted data | Will be destroyed without delay within 30 days from the termination of service partnership |
Help desk: https://www.facebook.com/help/contact/1461223320847982 | ||||||
Applied Predictive Technologies, Inc. | Encrypted order information of customer | U.S.A. | During advertisement period | Encrypted data transmission | To expose customized and targeted ads to the service users who match the provided encrypted data | Will be destroyed without delay within 30 days from the termination of service partnership |
Email: info@predictivetechnologies.com | ||||||
Phone:+1-877-400-2559 (703) 875-7700 | ||||||
Tasseologic, Inc. | Encrypted order information of customer | U.S.A. | During advertisement period | Encrypted data transmission | To expose customized and targeted ads to the service users who match the provided encrypted data | Will be destroyed without delay within 30 days from the termination of service partnership |
Email: customerservice@tasseologic.com | ||||||
Phone: 817-908-3106 |
When the Company identifies personal information that needs to be disposed of, information in electronic copy will be permanently deleted making them unrecoverable, and hard copy information will be shredded or incinerated. However, personal information that is required to be retained under applicable law(s), will be retained for a period as specified in above 03-➁.
The Company is taking measures as listed below to ensure the data is securely protected:
The Company operates cookie in order to improve the Website services by finding out the taste and interest of users upon analyzing the frequency of access to the Website or visiting time. A cookie is a small piece of text file that the server used in operating the Company's Website transmits to your browser, and is saved in the hard disk of your computer.
You have the right to allow installation of cookies. By selecting the settings option in your web browser, you can choose to enable all cookies, save cookies, or disable and choose not to save cookies.
The Company operates a customer center as follows in order to protect the customers' personal information as well as to address complaints arising out of the personal information, and designates the Personal Information Manager. Please direct any complaints concerning the protection of personal information that may arise in the course of using the service of the Company to the customer center.
Should you wish to report, or need any consultation concerning, any infringement of personal information, please contact the following institutions.