Effective Date: 01/04/2018 At Family Restaurants Andreou Co Limited (“McDonald’s”), we respect your concerns about privacy. This Privacy Statement (“Statement”) describes the personal information practices of McDonald’s with respect to information about our customers and others who visit our restaurants, websites and mobile apps, including the types of personal information we collect, how we may use this information, and with whom we may share it.
For the purposes of the Processing of Personal Data as per the General Data Protection Regulation Family Restaurants Andreou Co Ltd (‘McDonald’s, ‘we’ or ‘us’) is the ‘data controller’ (i.e. the company who is responsible for, and determines the purpose and manner of personal data processing).
on this Website
via e-mail, text messages and other communication between you and this Website
through mobile and desktop applications you download from this Website, which provide dedicated non-browser-based interaction between you and this Website
We may collect personal information about you when you visit one of our restaurants, use McDonald’s websites (“Sites”), or use our web or mobile device applications (“Mobile Apps”). We refer to our Sites and Apps collectively as “Online Services”.
The types of personal information we collect may include:
Transaction information, such as product purchased, price, method of payment and payment details.
Personal details such as name, postal address, email address, phone number, date of birth, and other contact information when you provide this information to us, such as if you register with our Online Services, including when you register for online orders, or enter a McDonald’s contest, competition, prize draw, or sweepstakes.
Account information, such as username, password and other identifiers or credentials used to access our Online Services or to acquire McDonald’s products and services.
The circumstances in which you provide personal information may include when you:
purchase products at our restaurants
register to use our Online Services, including when you register for online orders
request to receive marketing or other communications
use our Wi-Fi networks, kiosks or other in-store technologies
enter in one of our contests, competitions, prize draws, or sweepstakes
submit information when providing feedback
use interactive features of our Online Services
correspond (including e-mail addresses) with us
Information Collected Through Automated Means
The providers of third-party apps, tools, widgets and plug-ins on our Online Services, such as Facebook “Like” buttons, also may use automated means to collect information regarding your interactions with these features. This information is subject to the privacy policies or notices of these providers.
McDonald’s Online Services and in-restaurant technologies may collect precise information about the location of your mobile device or computer using geolocation and location presence awareness technologies such as GPS, Wi-Fi, Bluetooth, or cell tower proximity. For most mobile devices and computer systems, you are able to withdraw your permission for McDonald’s to acquire this information on your location through the device or Web browser settings. If you have questions about how to disable collection of precise location information, we recommend you contact your mobile device service provider, the device manufacturer, or your Web browser provider. Please note that certain Online Services and in-restaurant technologies may not function properly without precise location information. When you access our Website from a mobile device like a tablet or phone, we receive information about your location, your device, including one or more unique identifiers for your device, and your mobile carrier. We use this information to provide you with location-based services, such as advertising, search results, and other personalized content. Most devices allow you to turn off location services.
If you would like us to delete location information we have collected, identifiable to you, please contact us at the email or postal address listed below. Please note that we may be required by law to retain certain information.
We may combine personal information that we collect with information we receive from other sources, information about your prior transactions with McDonald’s and information that is automatically collected.
McDonald’s may use the personal information we collect to:
We use automated information for purposes such as to (i) personalize the visitor experience in our restaurants or on our Online Services, (ii) deliver content (including advertising) tailored to our users’ interests and the manner in which our users browse our Online Services or in-restaurant technologies, and (iii) manage our business. We also use this information to help diagnose technical and service problems; administer our Online Services; identify users of our Online Services; identify a device for fraud prevention purposes, to target advertising or to personalize users’ experiences; and gather demographic information about our users. We also use automated information to determine usage patterns and how we may tailor our Online Services to better meet the needs of our users.
We may use the information we obtain about you in other ways for which we provide specific notice at the time of collection.
McDonald’s does not sell or otherwise share personal information about you, except as described in this Privacy Statement.
McDonald’s may share personal information within the McDonald’s Family. The McDonald’s Family includes McDonald’s Corporation, its affiliates, subsidiaries, suppliers, vendors, and franchisees. Members of the McDonald’s Family that receive this information from McDonald’s are not authorized to use or disclose the information except as provided in this Privacy Statement.
McDonald’s may share personal information with vendors that provide services to McDonald’s, such as fulfilling orders, processing payments, providing data processing and other information technology services, administering promotions, contests, prize draws and sweepstakes, conducting research and performing analytics, and personalizing individual McDonald’s experiences. We do not authorize these vendors to use the personal information or to disclose it for any purpose other than to perform services on our behalf.
Circumstances may arise where, whether for strategic or other business reasons, McDonald’s decides to sell or transfer all or a portion of our business. We may transfer information we have collected and stored, including personal information, to the party or parties involved in the transaction or as part of that transaction.
McDonald’s reserves the right to use or disclose personal information as needed to satisfy any law, regulation or legal request, to protect the integrity of our Online Services and in-restaurant technologies, to bring or defend against legal claims, to protect the rights, interests, safety and security of McDonald’s, McDonald’s employees or franchisees, or members of the public, or in connection with the investigation of fraud, illegal activity or violation of McDonald’s policy.
McDonald’s understands the importance of privacy of users of our Online Services. We are especially committed to protecting the privacy of children who visit or use our Online Services. This Privacy Notice for children is designed to answer your questions regarding our practices with respect to personal information we collect through our Online Services from children under the age of 18.
Our policy is not to process personal information from children under the age of 16, unless for a specific activity where the consent of the child’s parent or guardian has been secured in advance.
A. What Personal Information Does McDonald’s Collect?
We may collect personal information, such as name, postal address, email address, phone number and date of birth from children (not year) as part of an activity. For example:
B. How Does McDonald’s Use the Personal Information It Collects?
We use email addresses submitted by a child in order to respond to the child’s request or to notify the child if he or she has won or lost a contest, competition, prize draw, or sweepstakes they entered. We also use the child’s name, postal address, email address, phone number and date of birth to process a child’s online order. In case we collect the email address of a child’s parent or guardian we use the given email address in order to provide the parent or guardian with notice of our practices or to seek the parent’s or guardian’s consent.
C. How Does McDonald’s Share Personal Information?
We may share a child’s personal information with third parties to the extent reasonably necessary to protect the security or integrity of our Online Services, take precautions against liability, or respond to judicial process or requests from other governmental authorities, or when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual illegal activity.
We also may share personal information collected from children with vendors that perform services for McDonald’s. These services may include hosting our Sites, providing technical services to McDonald’s, fulfilling requests or administering a contest, competition, prize draw, or sweepstakes and processing of payments. We do not authorize such vendors to disclose the personal information we share with them other than as necessary to perform the relevant service for McDonald’s.
D. Requests from Parents Regarding Our Children’s Privacy Practices.
Parents may review personal information we have collected from their child that has not been deleted and can request that the personal information be deleted from our records if it has not been already. Parents also may refuse to permit further collection, processing or use of their child’s personal information, when the parent has previously provided consent. To do so, please contact us at the address, telephone number or email address provided below with your request.
E. Who Should I Contact with Questions about Children’s Privacy?
We urge parents to regularly monitor and supervise their children’s online activities. If you have any questions about our children’s privacy practices, please contact us at:
We strive to provide you with choices regarding the Personal Information you provide to us.
If at any time you would like to access, correct, or delete personal information we have collected from you or which is or was processed by us, please contact us at the email or postal address listed at the end of this Privacy Statement.
Please note that we may be required by law to retain certain information. Before McDonald’s is able to provide you with any information or correct any inaccuracies, we may ask you to verify your identity and/or provide other details to help us respond to your request. We will provide you with a response no later than 30 days from the request and free of charge.
We also use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). The technologies we use for this automatic data collection may include:
We currently use the following types of cookies:
Use the options in your web browser if you do not wish to receive a cookie or if you wish to set your browser to notify you when you receive a cookie. Click on the “Help” section of your browser to learn how to change your cookie preferences. If you disable all cookies, you may not be able to take advantage of all the features of this Site.
We may also use certain technologies to determine whether you have opened an e-mail or clicked on a link contained in an e-mail.
Where video is available on our Online Services, we may target and track the videos you view. You consent to our tracking of your video viewing through Online Services or third-party social media for up to two years, or as permitted by the applicable law, or until consent is withdrawn.
On our Online Services, we may collect information about your online activities for use in providing you with advertising tailored to your individual interests, provided you have opted-in to marketing communications. This section of our Privacy Statement provides details and explains how to manage your choices.
McDonald’s is committed to taking appropriate measures designed to keep personal information secure. We have in place organizational, technical, administrative, and physical procedures designed to protect personal information from accidental, unlawful or unauthorized destruction or loss, unauthorized dissemination, access, disclosure, use, alteration, or corruption and any other form of unlawful processing. Such measures aim to ensure a level of security which is analogous to the risks involved in the processing and the nature of the personal information being processed. While we take every effort to safeguard our information systems, no website, mobile application, computer system, or transmission of data over the Internet or any other public network can be guaranteed to be 100% secure.
We retain personal information for the period of time necessary to fulfill the purposes outlined in this Privacy Statement and per McDonald’s records retention policies which have been designed to abide with the GDPR and in particular the data minimization principle unless a longer retention period is required or permitted by law.
McDonald’s is a franchisee in the McDonald’s Family, a global organization with business processes, management structures and technical systems that cross borders. As such, we may share information about you within the McDonald’s Family and transfer it to countries in the world where the McDonald’s Family carries out business in connection with the uses identified above and in accordance with this Privacy Statement.
Subject to local law, you have certain rights regarding the Personal Information we collect, use or disclose that is related to you, including the right to:
If we ask for your consent to use your Personal Information, you can withdraw your consent at any time. Note that in case of a withdrawal of your consent you may no longer able to use several functions of our Website and our services.
You may, at any time, send us an e-mail at the email address below to exercise your above rights in accordance with the applicable legal requirements and limitations. If you are located in the European Economic Area, you have a right to lodge a complaint with your local data protection authority.
Note that some requests to delete certain Personal Information will require the deletion of your user account as the provision of user accounts are inextricably linked to the use of certain Personal Information (e.g., your e-mail address). Also note that it is possible that we may require additional information from you in order to verify your authorization to make the request and to honor your request.
You can delete your User Contributions from the Website as specified in the “User Contributions” section.
Changes to our Privacy Statement