HanGook McDonald's Co., Ltd. (hereinafter the "Company") emphasizes the protection of customers' personal information and complies with laws and regulations concerning the protection of its customers' personal information, including the Act on Promotion of Information and Telecommunication Network Utilization and Information Protection, etc., and the Personal Information Protection Act. Through this Privacy Policy ("Privacy Policy"), the Company notifies customers of the purposes and methods by which personal information provided by customers is used, and what measures are being taken to protect the personal information. If the Company amends this Privacy Policy, it will notify the amended terms and causes thereof without delay through the Company's website and mobile application ("Website").
Effective from April 1, 2012
Last revised June 20, 2016
02_1. Q) What are the mandatory items of personal information collected by the Company, purposes of collection and use, and the method of collection?
The Company collects/uses personal information to provide McDelivery Service ("MDS") as listed below.
| Items | Purpose of Collection/Use | Items for collection/use and methods of collection |
| Mandatory | Provide MDS; Contact customer on the course of providing MDS; Settle the payment for MDS service | i) Order by phone |
| Name, phone number, delivery address, email address, and password provided by the customer | ||
| ii) Sign up for online membership/online order | ||
| Name, phone number, delivery address, email address, and password provided by the customer | ||
| Handle customer inquiry, complaints, and compensation for damage, if any. (insurance settlement) | Call submitted via customer center. 1:1 Q&A on website. Personal information submitted via post mail including customer's name, phone number, visited store name, e-mail address, inquiry, or complaints (including attached files), information contained in documents proving damage (diagnosis, copy of medical records, quotation, or receipt). |
02_2. Q) What are the optional items of personal information collected by the Company, purposes of collection and use, and the method of collection?
The Company collects personal information to provide giveaways and various event benefits as listed below.
| Items | Purpose of Collection/Use | Items for collection/use and methods of collection |
| Optional | Provide giveaways on store/MDS opening occasions; Provide information on various events and products | Name, website ID, phone number, e-mail address,order information contained in event application coupons |
| Conduct customer analysis and customized marketing activities | Personal information provided by customer when signing up for online membership and ordering via website (name, gender, cell phone number, email address) McDonald's website usage records (service usage records, access log, access IP information, payment record, improper usage records, order records), information that can be automatically collected on the course of providing internet or mobile services (unique identification number, OS, OS version and model name, telecommunications carrier of your mobile phone, PUSH notification choice, dates of your agreement on using the service), collected information when interfacing with social network platforms (username, profile photo, friends list, etc.) |
Q) How long does the Company retain the personal information collected as above?
04_1. Q) Does the Company outsource the processing of personal information?
The company outsources personal data handling as follows to provide certain services, as well as to ensure smooth processing and safe storage of the customer information.
| Service Provider | Outsourced Services |
| CNT Tech Co. | MDS Call Center operation, management of customer complaints |
| igate | |
|
Restaurant Application Development International LLC |
Maintenance and repair of data and system |
| Infosys Ltd. | |
| Food Tech Korea | |
| STERIA Asia Pte Ltd | Development, maintenance and repair of the website and relevant system |
| MESH KOREA | Delivery operation |
| BAROGO | |
| Food Tech Korea | External order provider |
04_2. Q) Does the Company outsource the processing of personal information based on customers' agreement?
The Company outsources the handling of personal information in order to provide McDonald's related information and/or promotions (giveaways and assorted event benefits) as listed below:
| Service Provider | Outsourced Services |
| Daou Technology | Send e-mails and SMS/MMS on Company-related information and promotional events |
| Maillink | |
| Leo Burnett Korea | Send McDonald's related marketing information; create research/statistics data; overall operations of assorted promotions |
| CHAI communication | |
| Show McDonald's-related ads to Facebook users who are also McDonald's Web Ordering Service users | |
| Daum Kakao | Send customized marketing information via Daum Kakao products/service |
| LINE Corporation | Send customized marketing information via LINE Corporation products/service |
| Daewon Tax Accounting Corp. | General handling of tax filings related to event prizes |
|
Applied Predictive Technologies, Inc. |
Data analysis and results reporting based on gender, transaction data, phone number, e-mail address, etc. provided by customers on McDelivery registration and placement of order |
| Tasseologic, Inc. | |
| MILVUS |
05_1. Q) What are the mandatory items of personal information the Company transfer to a third party?
| Recipients | Recipients' Purpose of Use | Items of Transferred Personal Information | Recipients' Period of Retention and Use |
| *Franchisee | Handling of order and delivery, and settlement of customer's complaints |
*Information relating to order/delivery: name, phone number,
delivery address provided by the customer, order records *고Information relating to the handling of customer complaints: customer's name, phone number, visited store name, e-mail address, inquiry, or complaints (including attached files), information contained in documents proving damage (diagnosis, copy of medical records, quotation, or receipt) |
Will be destroyed within five years from the date of order and delivery |
* Click to view a list of McDonald's franchise stores >> 클릭
05_2. Q) What are the optional items of personal information the Company transfer to a third party?
| Recipients | Recipients' Purpose of Use | Items of Transferred Personal Information | Recipients' Period of Retention and Use |
| Daou Technology | Send e-mails and SMS/MMS on Company-related information and promotional events | E-mail address, mobile phone number | Will be destroyed without delay within 30 days from the termination of service partnership |
| Maillink | |||
| Leo Burnett Korea | Send McDonald's related marketing information; create research/statistics data; overall operations of assorted promotions | Personal information provided by customer when joining online membership and ordering via website (name, gender, cell phone number, email address) McDonald's website usage records (service usage records, access log, access IP information, payment record, improper usage records, order records), information that can be automatically collected on the course of providing internet or mobile services (unique identification number, OS, OS version and model name, telecommunications carrier of your mobile phone, PUSH notification choice, date of your agreement on using the service), collected information when interfacing with social network platforms (username, profile photo, friends list, etc.) | Will be destroyed without delay within 30 days from the termination of service partnership |
| CHAI communication | |||
| Show McDonald's-related ads to Facebook users who are also McDonald's Web Ordering Service users | E-mail address, mobile phone number | Will be destroyed without delay within 30 days from the termination of service partnership | |
| Daum Kakao | Send customized marketing information via products/services of Daum Kakao Co. | Mobile phone number | Will be destroyed without delay within 30 days from the termination of service partnership |
| LINE Corporation | Send customized marketing information via products/services of LINE Co. | Mobile phone number | Will be destroyed without delay within 30 days from the termination of service partnership |
| Daewon Tax Accounting Corp. | General handling of tax filings related to event prizes | Social security number, address, name, phone number | Will be destroyed without delay within 30 days from the termination of service partnership |
|
Applied Predictive Technologies, Inc. |
Conduct customer analysis and results reporting | Gender, transaction data, mobile phone number, e-mail address information provided customers on registration and placement of order | Will be destroyed without delay within 30 days from the termination of service partnership |
| Tasseologic, Inc. | |||
| MILVUS |
The Company transfers personal information with consent of the concerned customer to offshore as listed below.
| Recipient | Transferred information | Location | Transfer Time | Transfer Methods | Purpose | Period of retention and use |
| Facebook Inc. | Encrypted email address/ telephone number |
U.S.A., Sweden |
During advertis ement period | Encrypted data trans mission | To expose customized and targeted ads to Facebook users who match the provided encrypted data | Will be destroyed without delay within 30 days from the termination of service partnership |
|
Help desk: https: //www. face book. com/ help/ contact/ 14612 2332 0847982 |
||||||
|
Applied Predic tive Tech nologies, Inc. |
Encrypted order information of customer | U.S.A. | During advertis ement period | Encrypted data transmission | To expose customized and targeted ads to the service users who match the provided encrypted data | Will be destroyed without delay within 30 days from the termination of service partnership |
|
Email: info@ predic tivetech nologies .com |
||||||
|
Phone:+1-877-400-2559 (703) 875-7700 |
||||||
| Tasseologic, Inc. | Encrypted order information of customer | U.S.A. | During advertis ement period | Encrypted data transmission | To expose customized and targeted ads to the service users who match the provided encrypted data | Will be destroyed without delay within 30 days from the termination of service partnership |
|
Email: customer service@ tasseologic .com |
||||||
| Phone: 817-908-3106 |
Q) How does the Company dispose collected personal information?
When the Company identifies personal information that needs to be disposed of, information in electronic copy will be permanently deleted making them unrecoverable, and hard copy information will be shredded or incinerated. However, personal information that is required to be retained under applicable law(s), will be retained for a period as specified in above 03-➁.
Q) What measures does the Company undertake to ensure the security of collected personal information?
The Company is taking measures as listed below to ensure the data is securely protected
Q) What kind of rights do the customer and his/her legal representative have, and how do they exercise such rights?
Q) Does the Company operate a device that automatically collects the personal information, such as Internet access information file?
The Company operates cookie in order to improve the Website services by finding out the taste and interest of users upon analyzing the frequency of access to the Website or visiting time. A cookie is a small piece of text file that the server used in operating the Company's Website transmits to your browser, and is saved in the hard disk of your computer. You have the right to allow installation of cookies. By selecting the settings option in your web browser, you can choose to enable all cookies, save cookies, or disable and choose not to save cookies.
Q) What can I do if I have inquiries concerning the processing of personal information?
The Company operates a customer center as follows in order to protect the customers' personal information as well as to address complaints arising out of the personal information, and designates the Personal Information Manager. Please direct any complaints concerning the protection of personal information that may arise in the course of using the service of the Company to the customer center.
Should you wish to report, or need any consultation concerning, any infringement of personal information, please contact the following institutions.