The Company, for the purpose of providing the McDelivery Service (“MDS”), collects customers’ names, telephone numbers, and delivery addresses that the customer provides when placing a telephone order.
The Company, for the purpose of handling customers’ inquiries, complaints, claims for damages (insurance settlement), etc., collects customers’ names, addresses, name of store used, e-mail addresses, inquiries or complaints, and any other personal information described in the documents supporting damages (written diagnosis, medial records, or quotation, receipt) via telephone call through the customer center, 1:1 customer inquiry through the Website, or mail.
• The Company, for the purpose of providing giveaways when opening a store/the MDS, or providing information on various events and products, collects customers’ names, telephone numbers, and addresses through application tickets.
The Company will immediately destroy the personal information when the purpose of collection of the relevant personal information is completely fulfilled. However, if the Company is otherwise required to retain the personal information under other laws, including the Act on the Consumer Protection in Electronic Commerce, etc., the Company retains the relevant personal information for the period as prescribed by such laws.
When the Company confirms the personal information to be destroyed, the personal information stored in the electronic files shall be permanently destroyed in an irrevocable manner, and records, printings and documents, and any other record media will be shredded or incinerated.
In principle, unless there is separate consent from the customer or unless otherwise specifically set forth under other laws, the Company does not transfer the personal information collected as above to, or share the same with, a third party. However, the Company transfers the personal information as follows for the purpose of providing services or handling complaints.
|Recipients||Recipients’ Purpose of Use||Items of Transferred Personal Information||Recipients’ Period of Retention and Use|
|AON||Insurance settlement of personal or property damage||Name, telephone number, facts concerning the occurrence of damage, documents supporting the damages (diagnosis, copy of medical records, quotation, or receipts)||To be destroyed without delay upon the fulfillment of the purpose of use|
|Franchisees||Handling of order and delivery, and settlement of customer’s complaints||Resident registration number||To be destroyed without delay upon the fulfillment of the purpose of use|
* 2016. 4. 1 McDonald’s Franchises list
Dongincheon,Sajik,Youngdeungpo,Samsun,YangchunDT,Paris ParkDT,Tanhyun,Mangwon,Pyongchon Hogye,Gumi HyunggokDT,Shinheung DT,Garak DT, Youngin Suzi,Mega-Mart Namcheon,Bundang Hyoja,Homeplus Sangdong,Daejeon TimeWorld,Shindorim Techno,YangsanDT,SsangmunDT,Apgoojeong CGV,Ulsan SK DT,Jongno 3-ga,Ansung,Dongtan SK DT, Joenjoo-Jooghwasan D/T,Seocho GS DT,Chunan Dojung DT,Seolleung,Daegu Siji DT,Uijungbu Nokyang DT,Daegu Pyeongri DT,Buk Suwon DT,Daejeon Hannamdae DT,Daegu Heemang DT,Wonju dangu DT,Gongduk,Guwol DT,Isu,Daejeon Terminal,Gasan Business Center,Uijungbu GeumoDT,Gimpo Gochon SK DT, Pyungtaek Seojeong D/T,MyeongDong 2,Cheonan Ssangyong SK DT,Children`s Grand Park,Jungsan DT,Daegu Jincheon DT,Ulsan Byungyoung DT,Sinwol SK DT,Ansan,Yatop Newcore,Choeup DT,Madu Station,Ori Station,Wonju Dangye SK DT,Daegu Manchon DT,Seoul Gyodae,Changwon St. DT,Jeonju Inhu DT,Incheon Munhak DT,Osan Segyo DT,Gumi Doryang DT,Busan Hwangnyeong DT,Mokwon University,Hwaseong Byeongjeom st. DT,Suncheon Deogam DT,Dongsungro Kyobo,Mansu DT,Jangan Sageori,Busan Suyeong DT,Daejeon KAIST,Gwangju Sanjeong DT,Daejeon Sintanjin DT,Suwon Ajou Univ.,Seongnam Sinheung DT,Cheongju Yullyang,Daegu Bolli DT,Daejeon Yucheon DT,Songdo GS DT,Busan Gunam DT,Myongji Univ.,Incheon Samsan DT,Daejeon Yuseong DT,Mokpo Hadang DT,Guri Sutaek,Gunpo Sanbon DT,Yeomchang DT, Cheongju Geumcheon DT, Incheon Ongnyeon DT,Ulsan Gulhwa DT,Anguk Station,Yangsan Bukjeong DT,Seoul Banghak DT,Chungnam Dangjin DT,Sangildong,Hanam City Hall DT,Seoultech Univ., Yangsan Deokgye DT, Yongin Shingal DT, Busan Haeundae DT, Seoul Beondong DT, Gwangmyeong Soha DT, Gumi Indong DT, Bucheon Simgok DT, Bucheon Wonjong DT, Daegu Bokhyeon DT, Ujangsan DT, Jecheon DT, Chungnam Asan DT, Chungnam Seosan DT, Gwangju Jinwol GS DT, Gubendari St. DT, Gunpo Dangdong DT, Gocheok DT, Daegu Education Univ. DT
The company outsources personal data handling as follows to provide certain services, as well as to ensure smooth processing and safe storage of the customer information.
|Service Provider||Outsourced Services|
|Leo Burnett, Inc.||Development, repair and maintenance of the Company’s website and IT systems|
|INO Company||Operation of the MDS Call Center, receipt of order, management and storage of customer information|
|Daesung Global Co., Ltd.||Operation of customer center, handling of complaints, management and storage of customer information|
|Cuscapi Berhad||Maintenance and repair of data and system|
|Mesh Korea Co., Ltd.||Delivery operation|
The Company is taking the following measures in order to ensure the security of the personal information.
Customer and his/her legal representative may at any time access and correct the registered personal information of his/her own or children under age 14, and may request the Company to delete the same. If you wish to access, correct or delete such information, you may either use the 1:1 customer center within the Website, or contact the Personal Information Manager described below. Upon the receipt of such request, the Company will take measures without delay.
If you request the correction of errors in the personal information, the Company will not use or transfer the relevant personal information until the correction is completed. If the Company has already transferred the erroneous personal information to a third party, it will immediately notify such third party of the result of correction so that the errors can be corrected.
The Company operates cookie in order to improve the Website services by finding out the taste and interest of users upon analyzing the frequency of access to the Website or visiting time. A cookie is a small piece of text file that the server used in operating the Company’s Website transmits to your browser, and is saved in the hard disk of your computer.
You have the right to allow installation of cookies. By selecting the settings option in your web browser, you can choose to enable all cookies, save cookies, or disable and choose not to save cookies.
The Company operates a customer center as follows in order to protect the customers’ personal information as well as to address complaints arising out of the personal information, and designates the Personal Information Manager. Please direct any complaints concerning the protection of personal information that may arise in the course of using the service of the Company to the customer center.
Should you wish to report, or need any consultation concerning, any infringement of personal information, please contact the following institutions.
HanGook McDonald’s Korea Co., Ltd. (hereinafter referred to as “Company”) values the personal information of franchise applicants (hereinafter “Applicant”) and complies with the relevant laws and regulations with respect to the protection of the personal information of customers, including but not limited to the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc. and the Personal Information Protection Act. Through this Personal Information Handling/Processing Policy (hereinafter referred to as “Policy”), the Company hereby informs you of how the personal information provided by Applicant is utilized, including the purpose and the method and what kinds of measures are taken to protect the personal information. In the event of any revision of the Policy, the Company shall announce the revision and its reasons through its website without undue delay.
The Policy takes effect as of April 1, 2012.
In order to handle the work relating to franchise management, such as review of the qualifications of Applicant, contact information, education of franchise owners, franchise opening support, implementation of franchise contracts and franchise management, the Company collects the following personal information via McDonald’s franchise introduction page or the application sent by mail or email.
Name, address, date of birth, phone number, cell phone number, email address, current occupation, experience of operation of a business or a franchise, total assets, total debts, net assets, whether net worth is sufficient to invest in a McDonald’s store, whether a building or land is owned, whether one is willing to invest the whole day as a full-time job, and desired area for the operating of a franchise.
(Necessary Information) Name, picture, contact information, cell phone number, email address, financial status (annual income, monthly salary, bonus, fee, dividend, interest, other income sources, total amount), bank deposit cash, collateral price, deposit price, stocks (amount, owned shares, holding amount, appraised price, whether it is collateralized, appraised value of land), collateral security and bond price (debtor, relationship, amount, the term of redemption, principal, monthly allowance, current remaining amount), business profit value (Company name, address, explanation, business type, partner name and relationship, distribution ratio, whether one has decision-making power, value method, actual value), price of automobile and external assets (stocks, automobile, house), real property (address, location, date, district, building name, purchase price, current market price, current bank mortgage amount, other mortgage amount, actual value), loan amount (debtor, relationship, amount, whether it is collateralized, repayment deadline, principal, monthly allowance, interest ratio, current remaining amount), other debts (debtor, explanation, amount), bank account copy, certificate of seal impression
(Selective Information) spouse’s name, child or children’s name and age, name of place of work, office contact information, lawsuit progress status, bankruptcy application history (self or spouse), alma mater (university and graduate school name, graduation year, major, degree, whether one has received business management training), current and prior business career (occupation, Company name, address, position, employment period, reason for resignation, work specifics and number of subordinate employees, experience of operating one’s own business and agency, business failure experience), assets of spouse or other relations, inherited property, hobby, club activities, name and relationship of McDonald’s employee who is related via blood or regionalism, whether one has provided a product or services to McDonald’s, employment history with McDonald’s store, history of application to McDonald’s, agency, name, address, occupation and employment term, and place of work, business success or failure experience
(Necessary Inherent identification information) Resident registration number
(Selective Inherent identification information) Spouse resident registration number
(Selective Sensitive Information) Criminal record
Once the purpose of the collection of personal information has been achieved, the Company shall destroy the relevant personal information without undue delay. Notwithstanding the foregoing, if the Company is required to preserve personal information under laws and regulations, the personal information shall be kept for the legally-mandated duration. In addition, if you become the franchise owner, the collected information may be utilized and stored by the Company in a manner consistent with the purpose of the signing and implementation of franchise agreement.
Once the Company identifies personal information to be destroyed, personal information kept in the form of an electronic file should be deleted permanently, and the information kept in the form of document, printout, written or other recording medium shall be shredded or incinerated.
Unless the Company obtains separate consent from the Applicant or there is a special provision in the relevant laws and regulations, the collected personal information shall not be disclosed to or shared with a third party. Notwithstanding the foregoing, the following personal information shall be provided for the purpose of franchise opening support and the implementation of franchise contracts and franchise management.
|Receiving party (contact information)||Country||Use purpose of receiving party||Personal information item||Storage and use period by receiving party|
|US||franchise status||Store address, contact information,
|Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.|
|NICE Information Communications
|Local||credit card transaction approval||name, contact information, account copy||Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.|
|KT (100)||Local||Transfer of agent for existing local phone||name, certificate of seal impression||Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.|
|Samsung Internet Telephone
|Local||Transfer of agent for existing local phone||name, contact information, certificate of seal impression|
|My-B (1588-8990)||Local||franchise transaction application (Traffic card)||name, contact information, account number|
|Hanaro (1588-8990)||Local||franchise transaction application (Traffic card)||name, contact information, account number|
|Local||franchise transaction application (Traffic card)||name, contact information, account number|
|The Zone, Co., Ltd.
|Local||Franchise registration within the system, such as local payroll||name, contact information|
|Receiving party (contact information)||Country||Use purpose of receiving party||Personal information item||Storage and use period by receiving party|
|KT (100)||Local||Transfer of agent for existing local phone||resident registration number|
|Samsung Internet Telephone
|Local||Transfer of agent for existing local phone||resident registration number|
|My-B (1588-8990)||Local||franchise transaction application (Traffic card)||resident registration number|
|Hanaro (1588-8990)||Local||franchise transaction application (Traffic card)||resident registration number|
|Local||franchise transaction application (Traffic card)||resident registration number|
The Company consigns the handling of Applicant information as follows.
|consignment company||consignment work|
|Leo Burnett Co., Ltd.||Website and related system development, maintenance and repair|
To guarantee the safe handling of personal information, the Company takes the following measures.
Applicant and his/her legal representative can always view or correct the registered personal information of Applicant, or can request the deletion of personal information. To view, correct, or delete the personal information, please contact the relevant department as specified below or the Personal Information Management Supervisor. Your request will be processed immediately.
Also, in the event that a request is made to correct error(s) in personal information, the relevant personal information shall not be utilized or provided until and unless such correction is complete. Furthermore, in the event that incorrect personal information has been disclosed to a third party, the third party shall be immediately notified of the correction.
You have an option regarding the installation of Cookies: you can set your web browser to allow all Cookies, to obtain your approval before a Cookie is stored, or to reject all Cookies.
The Company has formed a responsible department and appointed a Personal Information Management Supervisor in order to protect the personal information of Applicants and handle any related complaints. You are advised to use the following service provided by the Company and contact the relevant department with any complaints regarding personal information protection.
If you wish to make a report or get advice regarding another type of personal information violation, please contact one of the following organizations.
HanGook McDonald’s Co., Ltd. (hereinafter referred to as “Company”) values your personal information and complies with the relevant laws and regulations with respect to the protection of the personal information of applicants, including but not limited to the Personal Information Protection Act. Through this Personal Information Handling/Processing Policy (hereinafter referred to as “Policy”), the Company hereby informs you how your personal information is utilized, including the purpose and the method, and what kinds of measures are taken in order to protect personal information. In the event of a revision of the Policy, the Company shall announce the revision through a notice on its website (or through a separate notification).
The Policy takes effect starting from April 1, 2012.
|Collection and Use Purpose||Collection and Use Items|
|Collection and Use Purpose||Collection and Use Items|
|Identity check and confirmation of Applicant||Resident registration number, alien registration number|
|Collection and Use Purpose||Collection and Use Items|
|Hiring decision||Disability, disability grade|
Unless the Company has the obligation to preserve your personal information in accordance with the relevant laws and regulations, Company shall keep and use your personal information until the purpose of collection and use stated above is realized; provided, however, that the storage and use period for the realization of the collection and use purpose shall not exceed one (1) year.
Once the relevant purpose has been achieved, the information provided by you shall be transferred to a separate DB and stored for a certain period in accordance with the information protection grounds under internal policy and other applicable laws and regulations (refer to the aforementioned personal information storage and use period), and then shall be destroyed. Personal information transferred to a separate DB shall not be utilized except for the purpose stipulated herein, unless the applicable laws and regulations state otherwise.
If the personal information to be destroyed is stored in the form of an electronic file, it should be deleted permanently, and the information stored in the form of document, printout, written or other recording medium shall be shredded or incinerated.
Unless the provisions of the relevant laws and regulations stipulate disclosure, or the investigative authorities demand the disclosure in accordance with legally-mandated procedures and methods for the investigation purpose or you separately consent to the disclosure, the Company shall not disclose your personal information.
The Company consigns the handling of personal information as follows. In the event that consignment company or consignment work scope is revised, it shall be announced in accordance with this Handling Policy.
|consignment company||Consignment work scope|
|Leo Burnett Co., Ltd.||Website and system management|
When the personal information handling is consigned, Company shall explicitly stipulate in a document, such as a contract, the prohibition on the handling of personal information for purposes other than the execution of the consigned work in accordance with the provisions of the relevant laws and regulations, including but not limited to the Personal Information Protection Act, personal information technology and management protection measures, consignment work purpose and scope, re-consignment restriction, and accountability issues such as management and supervision of consignment company and damages, and shall supervise to ensure that personal information is processed in a safe manner by the consignment company.
Establishment and implementation of internal management plan, regular personal information protection education for members, etc.
Access authorization control, such as personal information handling system, access control system installation, encryption such as inherent identification information, security program installment, etc.
Restriction of access to personal information storage place, such as IT room, data storage room, etc.
You may demand the suspension of viewing or handling of your personal information. Notwithstanding the foregoing, in any of the following circumstances, the Company may notify you of the applicable ground and reject your demand of suspension:
You may demand the correction and deletion of errors in your personal information; however, if it is classified as the collection target under the relevant laws and regulations, you are not entitled to demand deletion.
In the event of a demand for correction and deletion demand in relation to personal information errors, the pertinent personal information shall not be utilized or provided. Also, incorrect personal information shall be revised without undue delay, if it is used or provided.
The aforementioned rights may be exercised through a representative, such as your legal representative or the person with power of attorney. In this case, the power of attorney form in Attachment No. 11 of the Enforcement Regulations of the Personal Information Protection Act shall be submitted.
In the event of a violation of the relevant laws and regulations, including but not limited to the Personal Information Protection Act, you shall not violate the personal information of or invade privacy of yourself or others handled by the Company.
The Company appoints a Personal Information Management Supervisor in order to protect the personal information of the Applicant and handle the related complaints. You are advised to use this service provided by the Company and make a report to the Personal Information Management Supervisor about any of your complaints regarding personal information protection. The Company will respond to your report quickly and to your satisfaction.
Personal Information Management Supervisor
If you desire to make a report or obtain advice regarding another type of personal information violation, please contact one of the following organizations.
McDonald’s Corporation, Ltd. Korea (hereinafter referred to as “Company”) installs and operates video information processing equipment (hereinafter referred to as “CCTV”) in order to prevent crimes, maintain facility safety, and prevent fire outbreaks in accordance with Article 25, Paragraph 1 of the Personal Information Protection Act.
(As of June 30, 2013)
|Management Supervisor||Those with Access||Installed Locations||Recording Scope and Time||Number of Installed CCTVs|
directly operated stores
(Click the link for details)
|Store manager||Each store manager and officers and employees of the relevant departments||including CS Counter||Store counter / 24 hours||263|
|safes||Store safe / 24 hours||260|
|Store inside||Store exit, lobby, grill, inventory / 24 hours||795|
|Store outside||part of customer parking lot, delivery bike parking space and Drive-thru passage / 24 hours||278|
|Storage location and period||Destruction method|
|Each store||Manager room /up to one (1) month depending on the storage volume||Automatic file-deletion if storage volume exceeded|
|Each store||Identification of video information stored in CCTV memory in manager room|
Anyone or his/her representative can request the viewing or existence check (hereinafter referred to as “Viewing, etc.”) with respect to one’s video information recorded by Company CCTV, provided, however, that one should make such request for a Viewing, etc. in writing, stipulating a designation of the CCTV that has recorded one’s video information and recorded date and time, and Company shall allow the viewing once Company confirms the storage of the pertinent video information.
The viewing of video information regarding a third party is only allowed to the extent that it is clearly necessary with respect to the impending life, body or property interests on the part of the information provider. In the event that those other than the information provider can be easily recognizable or there are concerns that their privacy may be invaded during the Viewing, etc., some proper measures may be taken, such as masking to obscure the applicable personal video information.
When Viewing, etc. is allowed, Company may take necessary measures so that the video information of others is not unfairly provided. Company may refuse Viewing, etc., ① when the pertinent information has been destroyed because the storage period of the aforementioned video information has expired or ② when the restriction on Viewing, etc. is inevitable in order to protect video information of others. In such cases, Company shall notify the requesting party of such grounds for refusal in writing within ten (10) days.
Whether Company permits or refuses the Viewing, etc., Company shall maintain the following records: ① name and contact information of information provider that has made a demand of Viewing, etc. concerning personal video information; ② personal video information file name and its contents for which the demand for Viewing, etc. has been made by the information provider; ③ purpose of Viewing, etc. of personal video information; ④ the specific grounds of refusal, if Viewing, etc. of personal video information is refused; and ⑤ the pertinent video information and the provision grounds, if personal video information copy is provided to information provider.
Demands for the correction of video information shall not be allowed due to the technological impossibility of such a request, and a request to delete video information may be permitted to the extent that the deletion shall not render the realization of the initial purpose of collection of the pertinent video information difficult. Company shall maintain the record of the destruction of personal information in response to the request of the information provider.
Company consigns the CCTV installment and A/S work as follows.
|consignment company||Consignment work scope||Person in charge|
|S1 Corporation||CCTV Installation and A/S||Manager Yongsik Shin|
Company explicitly stipulates in a document, such as a contract, the prohibition on the handling of personal information for purposes other than the execution of consignment work, personal information technology and management protection measures, consignment work purpose and scope, re-consignment restriction, and accountability issues such as management and supervision of consignment company and damages, and supervises whether personal information is processed in a safe manner by the consignment company.
Company establishes and implements the internal management plan for the safe handling of personal video information.
Company grants the access to personal video information in a discriminating manner by taking into account the authority of the person in charge or others, and restricts the access to personal video information by those without authorization.
Company shall take necessary measures for the safe storage and transfer of personal video information by encrypting the relevant recorded personal video information, if it has to be transferred, and setting a password for the applicable file of personal video information, if it has to be stored.
The production date of personal video information, and in the case of the reading of personal video information, the purpose, reader, reading date and time, shall be recorded and managed, and in order to prevent the forgery and falsification of these records, those without authorization are prohibited from having access to personal video information.
For the safe physical storage of personal video information, the Company establishes a separate storage facility that has a separate lock device so that those without authorization cannot access personal video information.
Company shall not operate CCTV in a public location for a purpose not allowed under the laws and regulations. Also, Company shall not install and operate CCTV within any place in which personal privacy is highly likely to be invaded, such as bathroom, rest room, sauna or fitting room, etc.
Company shall post a sign so that people can easily recognize that a CCTV has been installed and operated. For multiple CCTVs inside a building, a posted sign shall be installed in an easily discernible place, such as an exit, to indicate that the pertinent facility or the entire location is under the surveillance of CCTV.
Company CCTV shall not be manipulated arbitrarily for purposes other than the purpose for which it was established, and the recording function shall not be used. Furthermore, Company shall make efforts not to violate personal video information by conducting a self-inspection.