Go to contents Global navigation Go to footer

Privacy Policy

A. Personal Information Handling/Processing Policy

HanGook McDonald’s Co., Ltd. (hereinafter the “Company”) emphasizes the protection of customers’ personal information and complies with laws and regulations concerning the protection of its customers’ personal information, including the Act on Promotion of Information and Telecommunication Network Utilization and Information Protection, etc. and the Personal Information Protection Act. Through this Privacy Policy (“Privacy Policy”), the Company notifies customers of the purposes and methods by which personal information provided by customers is used, and what measures are being taken to protect the personal information. If the Company amends this Privacy Policy, it will notify the amended terms and causes thereof without delay through the Company’s website (“Website”).

This Privacy Policy is in force from April 1, 2012.

What are the items of personal information collected by the Company, purposes of collection and use, and the method of collection?

The Company, for the purpose of providing the McDelivery Service (“MDS”), collects customers’ names, telephone numbers, and delivery addresses that the customer provides when placing a telephone order.

The Company, for the purpose of handling customers’ inquiries, complaints, claims for damages (insurance settlement), etc., collects customers’ names, addresses, name of store used, e-mail addresses, inquiries or complaints, and any other personal information described in the documents supporting damages (written diagnosis, medial records, or quotation, receipt) via telephone call through the customer center, 1:1 customer inquiry through the Website, or mail.

• The Company, for the purpose of providing giveaways when opening a store/the MDS, or providing information on various events and products, collects customers’ names, telephone numbers, and addresses through application tickets.

How long does the Company retain the personal information collected as above?

The Company will immediately destroy the personal information when the purpose of collection of the relevant personal information is completely fulfilled. However, if the Company is otherwise required to retain the personal information under other laws, including the Act on the Consumer Protection in Electronic Commerce, etc., the Company retains the relevant personal information for the period as prescribed by such laws.

How does the Company destroy personal information?

When the Company confirms the personal information to be destroyed, the personal information stored in the electronic files shall be permanently destroyed in an irrevocable manner, and records, printings and documents, and any other record media will be shredded or incinerated.

Does the Company transfer the collected personal information to a third party?

In principle, unless there is separate consent from the customer or unless otherwise specifically set forth under other laws, the Company does not transfer the personal information collected as above to, or share the same with, a third party. However, the Company transfers the personal information as follows for the purpose of providing services or handling complaints.

Information on receiving party, use purpose of receiving party, personal information item provided, storage and use period by receiving party for inherent identification information.
Recipients Recipients’ Purpose of Use Items of Transferred Personal Information Recipients’ Period of Retention and Use
AON Insurance settlement of personal or property damage Name, telephone number, facts concerning the occurrence of damage, documents supporting the damages (diagnosis, copy of medical records, quotation, or receipts) To be destroyed without delay upon the fulfillment of the purpose of use
Franchisees Handling of order and delivery, and settlement of customer’s complaints Resident registration number To be destroyed without delay upon the fulfillment of the purpose of use

* 2016. 4. 1 McDonald’s Franchises list
Dongincheon,Sajik,Youngdeungpo,Samsun,YangchunDT,Paris ParkDT,Tanhyun,Mangwon,Pyongchon Hogye,Gumi HyunggokDT,Shinheung DT,Garak DT, Youngin Suzi,Mega-Mart Namcheon,Bundang Hyoja,Homeplus Sangdong,Daejeon TimeWorld,Shindorim Techno,YangsanDT,SsangmunDT,Apgoojeong CGV,Ulsan SK DT,Jongno 3-ga,Ansung,Dongtan SK DT, Joenjoo-Jooghwasan D/T,Seocho GS DT,Chunan Dojung DT,Seolleung,Daegu Siji DT,Uijungbu Nokyang DT,Daegu Pyeongri DT,Buk Suwon DT,Daejeon Hannamdae DT,Daegu Heemang DT,Wonju dangu DT,Gongduk,Guwol DT,Isu,Daejeon Terminal,Gasan Business Center,Uijungbu GeumoDT,Gimpo Gochon SK DT, Pyungtaek Seojeong D/T,MyeongDong 2,Cheonan Ssangyong SK DT,Children`s Grand Park,Jungsan DT,Daegu Jincheon DT,Ulsan Byungyoung DT,Sinwol SK DT,Ansan,Yatop Newcore,Choeup DT,Madu Station,Ori Station,Wonju Dangye SK DT,Daegu Manchon DT,Seoul Gyodae,Changwon St. DT,Jeonju Inhu DT,Incheon Munhak DT,Osan Segyo DT,Gumi Doryang DT,Busan Hwangnyeong DT,Mokwon University,Hwaseong Byeongjeom st. DT,Suncheon Deogam DT,Dongsungro Kyobo,Mansu DT,Jangan Sageori,Busan Suyeong DT,Daejeon KAIST,Gwangju Sanjeong DT,Daejeon Sintanjin DT,Suwon Ajou Univ.,Seongnam Sinheung DT,Cheongju Yullyang,Daegu Bolli DT,Daejeon Yucheon DT,Songdo GS DT,Busan Gunam DT,Myongji Univ.,Incheon Samsan DT,Daejeon Yuseong DT,Mokpo Hadang DT,Guri Sutaek,Gunpo Sanbon DT,Yeomchang DT, Cheongju Geumcheon DT, Incheon Ongnyeon DT,Ulsan Gulhwa DT,Anguk Station,Yangsan Bukjeong DT,Seoul Banghak DT,Chungnam Dangjin DT,Sangildong,Hanam City Hall DT,Seoultech Univ., Yangsan Deokgye DT, Yongin Shingal DT, Busan Haeundae DT, Seoul Beondong DT, Gwangmyeong Soha DT, Gumi Indong DT, Bucheon Simgok DT, Bucheon Wonjong DT, Daegu Bokhyeon DT, Ujangsan DT, Jecheon DT, Chungnam Asan DT, Chungnam Seosan DT, Gwangju Jinwol GS DT, Gubendari St. DT, Gunpo Dangdong DT, Gocheok DT, Daegu Education Univ. DT

Does the Company outsource the processing of personal information?

The company outsources personal data handling as follows to provide certain services, as well as to ensure smooth processing and safe storage of the customer information.

Information on consignment party and consignment work for personal information handling consignment
Service Provider Outsourced Services
Leo Burnett, Inc. Development, repair and maintenance of the Company’s website and IT systems
INO Company Operation of the MDS Call Center, receipt of order, management and storage of customer information
Daesung Global Co., Ltd. Operation of customer center, handling of complaints, management and storage of customer information
Cuscapi Berhad Maintenance and repair of data and system
Mesh Korea Co., Ltd. Delivery operation

What measures are taken by the Company to ensure the security of the personal information?

The Company is taking the following measures in order to ensure the security of the personal information.

  • Managerial measures: Establishment and implementation of the internal management plan, providing regular training sessions concerning the protection of personal information to the members of the Company, etc.
  • Technical measures: Management of access right to the personal information processing system, etc., installation of access control system, encryption of unique identification information, installation of security programs, etc.
  • Physical measures: Access control of the place storing the personal information including computer room and data room, etc.

What kind of rights do the customer and his/her legal representative have, and how do they exercise such rights?

Customer and his/her legal representative may at any time access and correct the registered personal information of his/her own or children under age 14, and may request the Company to delete the same. If you wish to access, correct or delete such information, you may either use the 1:1 customer center within the Website, or contact the Personal Information Manager described below. Upon the receipt of such request, the Company will take measures without delay.

If you request the correction of errors in the personal information, the Company will not use or transfer the relevant personal information until the correction is completed. If the Company has already transferred the erroneous personal information to a third party, it will immediately notify such third party of the result of correction so that the errors can be corrected.

Does the Company operate a device that automatically collects the personal information, such as Internet access information file?

The Company operates cookie in order to improve the Website services by finding out the taste and interest of users upon analyzing the frequency of access to the Website or visiting time. A cookie is a small piece of text file that the server used in operating the Company’s Website transmits to your browser, and is saved in the hard disk of your computer.

You have the right to allow installation of cookies. By selecting the settings option in your web browser, you can choose to enable all cookies, save cookies, or disable and choose not to save cookies.

What can I do if I have inquiries concerning the processing of personal information?

The Company operates a customer center as follows in order to protect the customers’ personal information as well as to address complaints arising out of the personal information, and designates the Personal Information Manager. Please direct any complaints concerning the protection of personal information that may arise in the course of using the service of the Company to the customer center.

  • Customer center: 080-208-1588
  • Personal Information Manager: SungMin Won
  • E-mail: DataPrivacy@kr.mcd.com

Should you wish to report, or need any consultation concerning, any infringement of personal information, please contact the following institutions.

go to the top

B. Personal Information Handling/Processing Policy for Franchise Applicants

HanGook McDonald’s Korea Co., Ltd. (hereinafter referred to as “Company”) values the personal information of franchise applicants (hereinafter “Applicant”) and complies with the relevant laws and regulations with respect to the protection of the personal information of customers, including but not limited to the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc. and the Personal Information Protection Act. Through this Personal Information Handling/Processing Policy (hereinafter referred to as “Policy”), the Company hereby informs you of how the personal information provided by Applicant is utilized, including the purpose and the method and what kinds of measures are taken to protect the personal information. In the event of any revision of the Policy, the Company shall announce the revision and its reasons through its website without undue delay.

The Policy takes effect as of April 1, 2012.

In terms of the personal information collected by Company, what items of information are collected, for what purpose are they collected and used, and how are they collected?

In order to handle the work relating to franchise management, such as review of the qualifications of Applicant, contact information, education of franchise owners, franchise opening support, implementation of franchise contracts and franchise management, the Company collects the following personal information via McDonald’s franchise introduction page or the application sent by mail or email.

Online collection

Name, address, date of birth, phone number, cell phone number, email address, current occupation, experience of operation of a business or a franchise, total assets, total debts, net assets, whether net worth is sufficient to invest in a McDonald’s store, whether a building or land is owned, whether one is willing to invest the whole day as a full-time job, and desired area for the operating of a franchise.

Offline Collection

(Necessary Information) Name, picture, contact information, cell phone number, email address, financial status (annual income, monthly salary, bonus, fee, dividend, interest, other income sources, total amount), bank deposit cash, collateral price, deposit price, stocks (amount, owned shares, holding amount, appraised price, whether it is collateralized, appraised value of land), collateral security and bond price (debtor, relationship, amount, the term of redemption, principal, monthly allowance, current remaining amount), business profit value (Company name, address, explanation, business type, partner name and relationship, distribution ratio, whether one has decision-making power, value method, actual value), price of automobile and external assets (stocks, automobile, house), real property (address, location, date, district, building name, purchase price, current market price, current bank mortgage amount, other mortgage amount, actual value), loan amount (debtor, relationship, amount, whether it is collateralized, repayment deadline, principal, monthly allowance, interest ratio, current remaining amount), other debts (debtor, explanation, amount), bank account copy, certificate of seal impression

(Selective Information) spouse’s name, child or children’s name and age, name of place of work, office contact information, lawsuit progress status, bankruptcy application history (self or spouse), alma mater (university and graduate school name, graduation year, major, degree, whether one has received business management training), current and prior business career (occupation, Company name, address, position, employment period, reason for resignation, work specifics and number of subordinate employees, experience of operating one’s own business and agency, business failure experience), assets of spouse or other relations, inherited property, hobby, club activities, name and relationship of McDonald’s employee who is related via blood or regionalism, whether one has provided a product or services to McDonald’s, employment history with McDonald’s store, history of application to McDonald’s, agency, name, address, occupation and employment term, and place of work, business success or failure experience

(Necessary Inherent identification information) Resident registration number

(Selective Inherent identification information) Spouse resident registration number

(Selective Sensitive Information) Criminal record

How long does the Company keep the collected personal information?

Once the purpose of the collection of personal information has been achieved, the Company shall destroy the relevant personal information without undue delay. Notwithstanding the foregoing, if the Company is required to preserve personal information under laws and regulations, the personal information shall be kept for the legally-mandated duration. In addition, if you become the franchise owner, the collected information may be utilized and stored by the Company in a manner consistent with the purpose of the signing and implementation of franchise agreement.

How does the Company destroy personal information?

Once the Company identifies personal information to be destroyed, personal information kept in the form of an electronic file should be deleted permanently, and the information kept in the form of document, printout, written or other recording medium shall be shredded or incinerated.

Does the Company disclose the collected personal information to a third party?

Unless the Company obtains separate consent from the Applicant or there is a special provision in the relevant laws and regulations, the collected personal information shall not be disclosed to or shared with a third party. Notwithstanding the foregoing, the following personal information shall be provided for the purpose of franchise opening support and the implementation of franchise contracts and franchise management.

General personal information

Information on receiving party (contact information), country, use purpose of receiving party, personal information item, storage and use period by receiving party for general personal information
Receiving party (contact information) Country Use purpose of receiving party Personal information item Storage and use period by receiving party
McDonald’s Corporation
(+1-630-623-8604)
US franchise status Store address, contact information,
email address
Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.
NICE Information Communications
(02-2187-2700)
Local credit card transaction approval name, contact information, account copy Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.
KT (100) Local Transfer of agent for existing local phone name, certificate of seal impression Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.
Samsung Internet Telephone
(1577-0300)
Local Transfer of agent for existing local phone name, contact information, certificate of seal impression Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.
My-B (1588-8990) Local franchise transaction application (Traffic card) name, contact information, account number Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.
Hanaro (1588-8990) Local franchise transaction application (Traffic card) name, contact information, account number Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.
T-Money
(080-208-2992)
Local franchise transaction application (Traffic card) name, contact information, account number Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.
The Zone, Co., Ltd.
(02-890-3000)
Local Franchise registration within the system, such as local payroll name, contact information Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.

Inherent identification information

Receiving party (contact information), country, use purpose of receiving party, personal information item, storage and use period by receiving party for inherent identification information
Receiving party (contact information) Country Use purpose of receiving party Personal information item Storage and use period by receiving party
KT (100) Local Transfer of agent for existing local phone resident registration number Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.
Samsung Internet Telephone
(1577-0300)
Local Transfer of agent for existing local phone resident registration number Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.
My-B (1588-8990) Local franchise transaction application (Traffic card) resident registration number Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.
Hanaro (1588-8990) Local franchise transaction application (Traffic card) resident registration number Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.
T-Money
(080-208-2992)
Local franchise transaction application (Traffic card) resident registration number Unless specified otherwise under the relevant laws and regulations, it shall be immediately destroyed once the purpose of use is achieved.

Dose the Company consign the handling of personal information?

The Company consigns the handling of Applicant information as follows.

Information such as consignment company and consignment work for personal information handling consignment
consignment company consignment work
Leo Burnett Co., Ltd. Website and related system development, maintenance and repair

What kinds of measures does the Company take to guarantee the safe handling of personal information?

To guarantee the safe handling of personal information, the Company takes the following measures.

  • Management measures: establishment and implementation of internal management plan, regular personal information protection education for members, etc.
  • Technology measures: access authorization control, such as personal information handling system, access control system installment, encryption such as inherent identification information, security program installment, etc.
  • Physical measures: restriction of access to personal information storage place, such as IT room, data storage room, etc.

What are the rights of the Applicant and his/her legal representative, and how can the Applicant exercise his/her right?

Applicant and his/her legal representative can always view or correct the registered personal information of Applicant, or can request the deletion of personal information. To view, correct, or delete the personal information, please contact the relevant department as specified below or the Personal Information Management Supervisor. Your request will be processed immediately.

Also, in the event that a request is made to correct error(s) in personal information, the relevant personal information shall not be utilized or provided until and unless such correction is complete. Furthermore, in the event that incorrect personal information has been disclosed to a third party, the third party shall be immediately notified of the correction.

Does the Company operate any technologies that enable it to automatically collect personal information, such as internet access information files?

To improve the website service by obtaining data on website access frequency, visit duration or other factors, thus identifying the tendency and interest areas of a user, the Company website uses Cookies. A Cookie is a very small text file sent to your browser by the server that is utilized in the operation of the Company website. It is stored on your computer’s hard disk.

You have an option regarding the installation of Cookies: you can set your web browser to allow all Cookies, to obtain your approval before a Cookie is stored, or to reject all Cookies.

How can I contact you if I have questions regarding the handling of personal information?

The Company has formed a responsible department and appointed a Personal Information Management Supervisor in order to protect the personal information of Applicants and handle any related complaints. You are advised to use the following service provided by the Company and contact the relevant department with any complaints regarding personal information protection.

  • Responsible Department: Personal Information Protection Team
  • Tel: 080-208-1588
  • Personal Information Management Supervisor: Sungmin Won
  • E-mail: DataPrivacy@kr.mcd.com

If you wish to make a report or get advice regarding another type of personal information violation, please contact one of the following organizations.

go to the top

C. Personal Information Handling Policy for Applicants to Regular Full-time Positions

HanGook McDonald’s Co., Ltd. (hereinafter referred to as “Company”) values your personal information and complies with the relevant laws and regulations with respect to the protection of the personal information of applicants, including but not limited to the Personal Information Protection Act. Through this Personal Information Handling/Processing Policy (hereinafter referred to as “Policy”), the Company hereby informs you how your personal information is utilized, including the purpose and the method, and what kinds of measures are taken in order to protect personal information. In the event of a revision of the Policy, the Company shall announce the revision through a notice on its website (or through a separate notification).

The Policy takes effect starting from April 1, 2012.

1. What are the items of personal information collected by Company and the purpose of their use?

General Personal Information (mandatory)
Information on gathering and use purpose, gathering and use items for general personal information (mendatory)
Collection and Use Purpose Collection and Use Items
  • Identity of Applicant, education and career confirmation, past application history management, hiring decision and notification
  • Personal information: name, photo, date of birth, sex, nationality, phone number, cell phone number, email address, family information (relationship with you, name, age, occupation, cohabitation status, etc.)
  • Education and career: education (school name, major, admission and graduation year, graduation status, academic grade, etc.), career (place of work, position, duties, salary and payroll details, starting date and resignation date, employment term, etc.), qualifications, details on prize/disciplinary actions, military service record, inherent identification information
Purpose of Collection and Use Items Collected and Used
Information on gathering and use purpose, gathering and use items for inherent identification information
Collection and Use Purpose Collection and Use Items
Identity check and confirmation of Applicant Resident registration number, alien registration number
Sensitive Information
Information on gathering and use purpose, gathering and use items for sensitive information
Collection and Use Purpose Collection and Use Items
Hiring decision Disability, disability grade

2. How long does the Company keep and use the collected personal information?

Unless the Company has the obligation to preserve your personal information in accordance with the relevant laws and regulations, Company shall keep and use your personal information until the purpose of collection and use stated above is realized; provided, however, that the storage and use period for the realization of the collection and use purpose shall not exceed one (1) year.

3. Please explain the personal information destruction procedure and method?

Destruction Procedure

Once the relevant purpose has been achieved, the information provided by you shall be transferred to a separate DB and stored for a certain period in accordance with the information protection grounds under internal policy and other applicable laws and regulations (refer to the aforementioned personal information storage and use period), and then shall be destroyed. Personal information transferred to a separate DB shall not be utilized except for the purpose stipulated herein, unless the applicable laws and regulations state otherwise.

Destruction Method

If the personal information to be destroyed is stored in the form of an electronic file, it should be deleted permanently, and the information stored in the form of document, printout, written or other recording medium shall be shredded or incinerated.

4. Please explain the status of the Company’s disclosure of personal information to third parties.

Unless the provisions of the relevant laws and regulations stipulate disclosure, or the investigative authorities demand the disclosure in accordance with legally-mandated procedures and methods for the investigation purpose or you separately consent to the disclosure, the Company shall not disclose your personal information.

5. Please explain the status of the consignment by the Company with respect to personal information handling.

The Company consigns the handling of personal information as follows. In the event that consignment company or consignment work scope is revised, it shall be announced in accordance with this Handling Policy.

Information on consignment company and consignment work for personal information handling consignment
consignment company Consignment work scope
Leo Burnett Co., Ltd. Website and system management

When the personal information handling is consigned, Company shall explicitly stipulate in a document, such as a contract, the prohibition on the handling of personal information for purposes other than the execution of the consigned work in accordance with the provisions of the relevant laws and regulations, including but not limited to the Personal Information Protection Act, personal information technology and management protection measures, consignment work purpose and scope, re-consignment restriction, and accountability issues such as management and supervision of consignment company and damages, and shall supervise to ensure that personal information is processed in a safe manner by the consignment company.

6. Please explain the technology, management and physical measures that the Company takes in order to guarantee the safe handling of personal information.

Management measures

Establishment and implementation of internal management plan, regular personal information protection education for members, etc.

Technology measures

Access authorization control, such as personal information handling system, access control system installation, encryption such as inherent identification information, security program installment, etc.

Physical measures

Restriction of access to personal information storage place, such as IT room, data storage room, etc.

7. What are my rights relating to my personal information and how can I exercise them?

You may demand the suspension of viewing or handling of your personal information. Notwithstanding the foregoing, in any of the following circumstances, the Company may notify you of the applicable ground and reject your demand of suspension:

  • (i) If there is a special provision under the relevant laws and regulations or if the viewing or handling of your personal information is unavoidable in order to comply with a legally-mandated obligation;
  • (ii) If there is a concern of damage to the life or body of others or if there is a concern of infringing the property of others or other interests; or
  • (iii) If it is difficult to execute the contract, e.g. may lead to a failure to provide the stipulated services, unless personal information is processed, and you have failed to convey your intention to terminate the contract in clear terms

You may demand the correction and deletion of errors in your personal information; however, if it is classified as the collection target under the relevant laws and regulations, you are not entitled to demand deletion.

In the event of a demand for correction and deletion demand in relation to personal information errors, the pertinent personal information shall not be utilized or provided. Also, incorrect personal information shall be revised without undue delay, if it is used or provided.

The aforementioned rights may be exercised through a representative, such as your legal representative or the person with power of attorney. In this case, the power of attorney form in Attachment No. 11 of the Enforcement Regulations of the Personal Information Protection Act shall be submitted.

In the event of a violation of the relevant laws and regulations, including but not limited to the Personal Information Protection Act, you shall not violate the personal information of or invade privacy of yourself or others handled by the Company.

8. How can I contact you if I have complaints or questions regarding personal information handling?

The Company appoints a Personal Information Management Supervisor in order to protect the personal information of the Applicant and handle the related complaints. You are advised to use this service provided by the Company and make a report to the Personal Information Management Supervisor about any of your complaints regarding personal information protection. The Company will respond to your report quickly and to your satisfaction.

Personal Information Management Supervisor

  • Name: Sungmin Won
  • E-mail: DataPrivacy@kr.mcd.com

9. Are there any other report or consultation organizations other than the Company?

If you desire to make a report or obtain advice regarding another type of personal information violation, please contact one of the following organizations.

go to the top

D. Operation and Management Policy Concerning Video Information Processing Equipment

1. Installation basis and purpose regarding video information processing equipment

McDonald’s Corporation, Ltd. Korea (hereinafter referred to as “Company”) installs and operates video information processing equipment (hereinafter referred to as “CCTV”) in order to prevent crimes, maintain facility safety, and prevent fire outbreaks in accordance with Article 25, Paragraph 1 of the Personal Information Protection Act.

2. CCTV installation status, management supervisor and those with access to video information

(As of June 30, 2013)

Information on management supervisor, those with access to video information, installation location, filming range and time, and number of units installed for CCTV installation status
Management Supervisor Those with Access Installed Locations Recording Scope and Time Number of Installed CCTVs
Company’s
263
directly operated stores
(Click the link for details)
Store manager Each store manager and officers and employees of the relevant departments including CS Counter Store counter / 24 hours 263
safes Store safe / 24 hours 260
Store inside Store exit, lobby, grill, inventory / 24 hours 795
Store outside part of customer parking lot, delivery bike parking space and Drive-thru passage / 24 hours 278

3. Storage duration, place, and storage, management and destruction methods regarding video information

Information on storage location, storage period, and destruction method of video information
Storage location and period Destruction method
Each store Manager room /up to one (1) month depending on the storage volume Automatic file-deletion if storage volume exceeded

4. Video information identification method and location by CCTV operator

Information on each restaurant for video information monitoring method and location of CCT operator
Each store Identification of video information stored in CCTV memory in manager room

5. Measures with respect to the demand, such as the viewing of video information by the information provider

Anyone or his/her representative can request the viewing or existence check (hereinafter referred to as “Viewing, etc.”) with respect to one’s video information recorded by Company CCTV, provided, however, that one should make such request for a Viewing, etc. in writing, stipulating a designation of the CCTV that has recorded one’s video information and recorded date and time, and Company shall allow the viewing once Company confirms the storage of the pertinent video information.

The viewing of video information regarding a third party is only allowed to the extent that it is clearly necessary with respect to the impending life, body or property interests on the part of the information provider. In the event that those other than the information provider can be easily recognizable or there are concerns that their privacy may be invaded during the Viewing, etc., some proper measures may be taken, such as masking to obscure the applicable personal video information.

When Viewing, etc. is allowed, Company may take necessary measures so that the video information of others is not unfairly provided. Company may refuse Viewing, etc., ① when the pertinent information has been destroyed because the storage period of the aforementioned video information has expired or ② when the restriction on Viewing, etc. is inevitable in order to protect video information of others. In such cases, Company shall notify the requesting party of such grounds for refusal in writing within ten (10) days.

Whether Company permits or refuses the Viewing, etc., Company shall maintain the following records: ① name and contact information of information provider that has made a demand of Viewing, etc. concerning personal video information; ② personal video information file name and its contents for which the demand for Viewing, etc. has been made by the information provider; ③ purpose of Viewing, etc. of personal video information; ④ the specific grounds of refusal, if Viewing, etc. of personal video information is refused; and ⑤ the pertinent video information and the provision grounds, if personal video information copy is provided to information provider.

Demands for the correction of video information shall not be allowed due to the technological impossibility of such a request, and a request to delete video information may be permitted to the extent that the deletion shall not render the realization of the initial purpose of collection of the pertinent video information difficult. Company shall maintain the record of the destruction of personal information in response to the request of the information provider.

6. Consignment of CCTV installment and management

Company consigns the CCTV installment and A/S work as follows.

Information on consignment company, contents of consignment work, and person in charge for consignment of CCTV installation and management
consignment company Consignment work scope Person in charge
S1 Corporation CCTV Installation and A/S Manager Yongsik Shin

Company explicitly stipulates in a document, such as a contract, the prohibition on the handling of personal information for purposes other than the execution of consignment work, personal information technology and management protection measures, consignment work purpose and scope, re-consignment restriction, and accountability issues such as management and supervision of consignment company and damages, and supervises whether personal information is processed in a safe manner by the consignment company.

7. Management, technology and physical protection measures for the protection of video information

Company establishes and implements the internal management plan for the safe handling of personal video information.

Company grants the access to personal video information in a discriminating manner by taking into account the authority of the person in charge or others, and restricts the access to personal video information by those without authorization.

Company shall take necessary measures for the safe storage and transfer of personal video information by encrypting the relevant recorded personal video information, if it has to be transferred, and setting a password for the applicable file of personal video information, if it has to be stored.

The production date of personal video information, and in the case of the reading of personal video information, the purpose, reader, reading date and time, shall be recorded and managed, and in order to prevent the forgery and falsification of these records, those without authorization are prohibited from having access to personal video information.

For the safe physical storage of personal video information, the Company establishes a separate storage facility that has a separate lock device so that those without authorization cannot access personal video information.

8. Other matters required for the installation, operation and management of CCTV

Company shall not operate CCTV in a public location for a purpose not allowed under the laws and regulations. Also, Company shall not install and operate CCTV within any place in which personal privacy is highly likely to be invaded, such as bathroom, rest room, sauna or fitting room, etc.

Company shall post a sign so that people can easily recognize that a CCTV has been installed and operated. For multiple CCTVs inside a building, a posted sign shall be installed in an easily discernible place, such as an exit, to indicate that the pertinent facility or the entire location is under the surveillance of CCTV.

Company CCTV shall not be manipulated arbitrarily for purposes other than the purpose for which it was established, and the recording function shall not be used. Furthermore, Company shall make efforts not to violate personal video information by conducting a self-inspection.

go to the top

footer

페이스북 인스타 유튜브 카카오스토리 WA Certification mark

McDonald's Korea l Representative: Joh, Jooyun l Business Reg: 101-81-26409

Phone Orders : 1600-5252 ㅣCOPYRIGHT ⓒ 2014 ALL RIGHTS RESERVED BY McDonald's