PRIVACY STATEMENT OF MCDONALD'S CYPRUS

Effective Date: 01/04/2018 At Family Restaurants Andreou Co Limited (“McDonald's”), we respect your concerns about privacy. This Privacy Statement (“Statement”) describes the personal information practices of McDonald's with respect to information about our customers and others who visit our restaurants, websites and mobile apps, including the types of personal information we collect, how we may use this information, and with whom we may share it.

For the purposes of the Processing of Personal Data as per the General Data Protection Regulation Family Restaurants Andreou Co Ltd ('McDonald's, 'we' or 'us') is the 'data controller' (i.e. the company who is responsible for, and determines the purpose and manner of personal data processing).

If you have any questions about our privacy practices, please refer to the end of this privacy policy for information on how to contact us.

This privacy policy applies to information we collect:

• on this Website
• via e-mail, text messages and other communication between you and this Website
• through mobile and desktop applications you download from this Website, which provide dedicated non-browser-based interaction between you and this Website
• when you interact with our advertisements and applications on third-party websites and services, if these applications or advertisements include links to this privacy policy

1. Information We Collect

We may collect personal information about you when you visit one of our restaurants, use McDonald's websites (“Sites”), or use our web or mobile device applications (“Mobile Apps”). We refer to our Sites and Apps collectively as “Online Services”.

The types of personal information we collect may include:

• Transaction information, such as product purchased, price, method of payment and payment details.
• Personal details such as name, postal address, email address, phone number, date of birth, and other contact information when you provide this information to us, such as if you register with our Online Services, including when you register for online orders, or enter a McDonald's contest, competition, prize draw, or sweepstakes.
• Account information, such as username, password and other identifiers or credentials used to access our Online Services or to acquire McDonald's products and services.

The circumstances in which you provide personal information may include when you:

• purchase products at our restaurants
• register to use our Online Services, including when you register for online orders
• request to receive marketing or other communications
• use our Wi-Fi networks, kiosks or other in-store technologies
• enter in one of our contests, competitions, prize draws, or sweepstakes
• submit information when providing feedback
• use interactive features of our Online Services
• correspond (including e-mail addresses) with us

Information Collected Through Automated Means

We may collect information from your computer system or mobile device through automated technologies when you visit our restaurants or use our Online Services or in-restaurant technologies. These automated technologies may include cookies, local shared objects, and web beacons. Additional information regarding the use of cookies and other automated technologies is provided in the Statement below. The information we collect may include your Internet Protocol (IP) address; computer/mobile device operating system and browser type; type of mobile device; mobile device settings; the unique device identifier (UDID) or mobile equipment identifier (MEID) for your mobile device; device and component serial numbers; advertising identifier (e.g., IDFAs and IFAs) or similar identifier; the referring website or application; the linked sites, third-party websites, applications or social media where you share Online Services content; and activity related to your use of our Online Services such as the pages you visit on our Sites or in our Mobile Apps.

The providers of third-party apps, tools, widgets and plug-ins on our Online Services, such as Facebook "Like" buttons, also may use automated means to collect information regarding your interactions with these features. This information is subject to the privacy policies or notices of these providers.

Location Information

McDonald's Online Services and in-restaurant technologies may collect precise information about the location of your mobile device or computer using geolocation and location presence awareness technologies such as GPS, Wi-Fi, Bluetooth, or cell tower proximity. For most mobile devices and computer systems, you are able to withdraw your permission for McDonald's to acquire this information on your location through the device or Web browser settings. If you have questions about how to disable collection of precise location information, we recommend you contact your mobile device service provider, the device manufacturer, or your Web browser provider. Please note that certain Online Services and in-restaurant technologies may not function properly without precise location information. When you access our Website from a mobile device like a tablet or phone, we receive information about your location, your device, including one or more unique identifiers for your device, and your mobile carrier. We use this information to provide you with location-based services, such as advertising, search results, and other personalized content. Most devices allow you to turn off location services.

If you would like us to delete location information we have collected, identifiable to you, please contact us at the email or postal address listed below. Please note that we may be required by law to retain certain information.

Combined Information

We may combine personal information that we collect with information we receive from other sources, information about your prior transactions with McDonald's and information that is automatically collected.

2. How We Use the Information We Collect

McDonald's may use the personal information we collect to:

• fulfill your requests or orders and process payments for our products and services;
• communicate with you about products and services of McDonald's or our business partners that we believe may interest you;
• communicate with you about and administer your participation in contests, competitions, prize draws, sweepstakes, offers, promotions or special events;
• send communications to you about your orders, purchases or accounts with McDonald's;
• provide customer support, respond to, and communicate with you about your requests, questions and comments;
• enable you to post on our blogs and interact with McDonald's through social media;
• personalize your experience on our Online Services and in-restaurant technologies, such as providing you with content in which you may be interested, and making navigation on our Sites and Mobile Apps easier;
• perform data analytics, including consumer research, trend analysis, and financial analysis;
• operate, evaluate and improve our business, including the development of new products and services; determine the effectiveness of our sales, marketing and advertising efforts; and analyze and improve our products, offers, promotions, and Online Services and other technologies;
• protect against, identify and prevent fraud and other criminal activity, claims and other liabilities; and comply with applicable law.

We use automated information for purposes such as to (i) personalize the visitor experience in our restaurants or on our Online Services, (ii) deliver content (including advertising) tailored to our users' interests and the manner in which our users browse our Online Services or in-restaurant technologies, and (iii) manage our business. We also use this information to help diagnose technical and service problems; administer our Online Services; identify users of our Online Services; identify a device for fraud prevention purposes, to target advertising or to personalize users' experiences; and gather demographic information about our users. We also use automated information to determine usage patterns and how we may tailor our Online Services to better meet the needs of our users.

We may use the information we obtain about you in other ways for which we provide specific notice at the time of collection.

3. How We Share the Personal Information We Collect

McDonald's does not sell or otherwise share personal information about you, except as described in this Privacy Statement.

McDonald's may share personal information within the McDonald's Family. The McDonald's Family includes McDonald's Corporation, its affiliates, subsidiaries, suppliers, vendors, and franchisees. Members of the McDonald's Family that receive this information from McDonald's are not authorized to use or disclose the information except as provided in this Privacy Statement.

McDonald's may share personal information with vendors that provide services to McDonald's, such as fulfilling orders, processing payments, providing data processing and other information technology services, administering promotions, contests, prize draws and sweepstakes, conducting research and performing analytics, and personalizing individual McDonald's experiences. We do not authorize these vendors to use the personal information or to disclose it for any purpose other than to perform services on our behalf.

Circumstances may arise where, whether for strategic or other business reasons, McDonald's decides to sell or transfer all or a portion of our business. We may transfer information we have collected and stored, including personal information, to the party or parties involved in the transaction or as part of that transaction.

McDonald's reserves the right to use or disclose personal information as needed to satisfy any law, regulation or legal request, to protect the integrity of our Online Services and in-restaurant technologies, to bring or defend against legal claims, to protect the rights, interests, safety and security of McDonald's, McDonald's employees or franchisees, or members of the public, or in connection with the investigation of fraud, illegal activity or violation of McDonald's policy.

4. Children's Privacy Notice

McDonald's understands the importance of privacy of users of our Online Services. We are especially committed to protecting the privacy of children who visit or use our Online Services. This Privacy Notice for children is designed to answer your questions regarding our practices with respect to personal information we collect through our Online Services from children under the age of 18.

Our policy is not to process personal information from children under the age of 16, unless for a specific activity where the consent of the child's parent or guardian has been secured in advance.

A. What Personal Information Does McDonald's Collect?

We may collect personal information, such as name, postal address, email address, phone number and date of birth from children (not year) as part of an activity. For example:

• We may collect a child's email address to notify the child if he or she has won or lost a contest, competition, prize draw or sweepstakes. In this event, we will notify the child using the email address the child supplies. We will not keep the email address or use it for any other purpose.
• We may collect a child's email address in order to respond to a request from the child on a one-time basis, such as to send the child a screen saver. In this case, we promptly delete the email address from our system once we have responded, and we do not use the address for any other purpose.
• We collect a child's name, postal address, email address, phone number and date of birth to process a child's online order. We do not use this information for any other purpose.

B. How Does McDonald's Use the Personal Information It Collects?

We use email addresses submitted by a child in order to respond to the child's request or to notify the child if he or she has won or lost a contest, competition, prize draw, or sweepstakes they entered. We also use the child's name, postal address, email address, phone number and date of birth to process a child's online order. In case we collect the email address of a child's parent or guardian we use the given email address in order to provide the parent or guardian with notice of our practices or to seek the parent's or guardian's consent.

C. How Does McDonald's Share Personal Information?

We may share a child's personal information with third parties to the extent reasonably necessary to protect the security or integrity of our Online Services, take precautions against liability, or respond to judicial process or requests from other governmental authorities, or when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual illegal activity.

We also may share personal information collected from children with vendors that perform services for McDonald's. These services may include hosting our Sites, providing technical services to McDonald's, fulfilling requests or administering a contest, competition, prize draw, or sweepstakes and processing of payments. We do not authorize such vendors to disclose the personal information we share with them other than as necessary to perform the relevant service for McDonald's.

D. Requests from Parents Regarding Our Children's Privacy Practices.

Parents may review personal information we have collected from their child that has not been deleted and can request that the personal information be deleted from our records if it has not been already. Parents also may refuse to permit further collection, processing or use of their child's personal information, when the parent has previously provided consent. To do so, please contact us at the address, telephone number or email address provided below with your request.

E. Who Should I Contact with Questions about Children's Privacy?

We urge parents to regularly monitor and supervise their children's online activities. If you have any questions about our children's privacy practices, please contact us at

Privacy at McDonald's
Email: info@mcdonalds.com.cy
Telephone: 24818131

5. Choices About How We Collect, Use and Disclose Your Personal Information

We strive to provide you with choices regarding the Personal Information you provide to us.

• You can choose not to provide us with certain Personal Information, but this may result in you being unable to use certain features of our Website because such information may be required in order for you to register as a member; purchase products or services; participate in a contest, promotion, survey, or sweepstakes; ask a question; or initiate other transactions on our Website.
• You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe’s website. If you disable or refuse cookies, please note that some parts of the Website may then be inaccessible or may not function properly.
• When you register on our Website, you may be given a choice as to whether you want to receive email messages, newsletters or both about product updates, improvements, special offers, or special distributions of content by us. If you no longer want to receive commercial or promotional emails or newsletters from us, you will need to use the unsubscribe mechanism set out in the applicable communication. It may take up to seven days for us to process an opt-out request. We may send you other types of transactional and relationship e-mail communications, such as service announcements, administrative notices and surveys, without offering you the opportunity to opt out of receiving them. Please note that opting out of receiving promotional email communications will only affect future activities or communications from us. If we have already provided your information to a third party before you changed your preferences or updated your information, you may have to change you preferences directly with that third party.
• If you submit Personal Information, you may delete your account with us at any time. If you delete your account, your Personal Information and any or all other account related information including, but not limited to, user profile data, sharing data and any other data, or content specifically associated with your account will no longer be accessible by you. After deleting your account, if you choose to have an account with us in the future, you will have to sign up for a new account as none of the information you previously provided or saved within your account will have been saved.
• You can disable the location services on your mobile device or tablet. Most likely, these controls are located in the device’s settings menu. If you have questions about how to disable your device’s location services, we recommend you contact your mobile service carrier or your device manufacturer.

6. Access to and Correction and Deletion of Personal Information

If at any time you would like to access, correct, or delete personal information we have collected from you or which is or was processed by us, please contact us at the email or postal address listed at the end of this Privacy Statement.

The period for which we keep your Personal Information that is necessary for compliance and legal enforcement purposes varies and depends on the nature of our legal obligations and claims in the individual case.

Please note that we may be required by law to retain certain information. Before McDonald's is able to provide you with any information or correct any inaccuracies, we may ask you to verify your identity and/or provide other details to help us respond to your request. We will provide you with a response no later than 30 days from the request and free of charge.

7. Cookies and Similar Technologies

McDonald's uses cookies and other similar technologies to collect information for the purposes described in this Privacy Statement under “How We Use the Information We Collect.”

We also use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). Cookies are small text files that are stored in your web browser or downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognizes that cookie, and allow a website to recognize a user’s device.

  We currently use the following types of cookies:

  • Cookies that are strictly necessary: These are cookies that are required for the operation of our Website. These include, for example, cookies that enable a user to log into the members’ area of our Website and to check if a user is allowed access to a particular service or content.
  • Analytical cookies: These cookies allow us to recognize and count the number of users and to see how users use and explore our Website. These cookies help us to improve our Website, for example by ensuring that all users are able to find what they are looking for easily.
  • Functionality cookies: We are always glad to see you back. These types of cookies allow us to recognize you when you return to our Website in order to greet you by name and to remember, for example, your choice of language.
  • Targeting cookies: These cookies record the visit of a user on our Website, the pages a user has visited and the links a user has followed in order to enable us to make our Website more relevant to the users’ interests. In addition, these cookies are used to identify the websites and the marketing materials you are accessing our Website from in order to target content (for example, to automatically show you our Website according to your language settings).
  • We do not require that you accept cookies and you may withdraw your consent to our use of cookies at any time by adjusting your browser’s privacy settings. However, if you decline to accept cookies, some functions on our Website may be disabled and you may be unable to access certain parts of our Website. Unless you have adjusted your browser settings so that it will refuse cookies, our system will issue cookies when you use your browser to access our Website. Cookies can be either session cookies or persistent cookies. A session cookie expires automatically when you close your browser. A persistent cookie will remain until it expires or you delete your cookies. Expiration dates are set in the cookies themselves; some may expire after a few minutes while others may expire after several years.