PRIVACY POLICY  

1.  GENERAL

• This Privacy Policy of Personal Data (hereinafter referred to as the Privacy Policy) applies to users of the kfc.by website (hereinafter referred to as the website) and the KFC mobile application. BY (hereinafter referred to as the mobile application); users of social networks (channels and groups of the official representative of KFC. BY); Wi-Fi users in KFC restaurants located on the territory of the Republic of Belarus; participants of the actions and their legal representatives; other entities, the interaction of which creates the need to process personal data.
• The following terms are used in this Privacy Policy:

"User of the site / mobile application" - a person (subject of personal data) who has access to the site / downloaded the mobile application and has access to them via the Internet;

"Personal data" means any information relating to an identified natural person or a natural person who can be identified;

"Processing of personal data" - any action or set of actions performed with personal data, including collection, systematization, storage, modification, use, depersonalization, blocking, distribution, provision, deletion of personal data;

"Operator" - a legal entity of the Republic of Belarus (LLC "Bel Food Service", UNP 192351693, Minsk, Pobediteley Ave., 103, room 5, 2nd floor), processing personal data;

"Site Administration" - authorized employees to manage the site, acting on behalf of the Operator, who organize and (or) carry out the processing of personal data, the purposes of processing and the composition of personal data";

"Confidentiality of personal data" is a mandatory requirement for the operator or other person who has access to personal data to prevent their distribution without the consent of the user of the site / mobile application (subject of personal data.

• Users' use of the website and mobile application constitutes acceptance of this privacy policy. In case of disagreement with the terms of the privacy policy, the user must stop using the website / mobile application.
• The site administration is not responsible for the sites of third parties to which the user clicked on the links available on the site / mobile application.
• The site administration does not verify the accuracy of the personal data of users.
• Compliance with the confidentiality of personal data is ensured by the site administration from the moment they are provided by users. The Privacy Policy establishes the obligations of the site administration to non-disclosure and ensure the confidentiality of personal data that the user provides at the request of the site administration when registering or when placing an order for the provision of services;
• This privacy policy is subject to the current legislation of the Republic of Belarus regarding the provision, storage and use of personal data of users.

2. PERSONAL DATA AND THE PROCEDURE FOR THEIR PROCESSING

2.1. Personal data permitted for processing are provided by users by filling out forms on the website / mobile application and include:

- surname, name and patronymic of the user

- the user's contact phone number

- the user's e-mail address

- the address to which the user needs to make delivery

- age (for candidates for employment).

2.2. Any other information not specified above, but which has become known to the operator (order history, IP address, browser used, operating system, geolocation, information from cookies, etc.) is not subject to distribution, except in cases of transfer of the above data to the state authorities of the Republic of Belarus on the grounds and in the manner established by the legislation of the Republic of Belarus.

2.3. The site administration undertakes to ensure the storage of personal data in secret, not to disclose without the prior written permission of the user, and also not to sell, exchange, publish or disclose other possible freedoms of the transferred personal data of the user, except for cases of transfer of the above data to the state authorities of the Republic of Belarus on the grounds and in the manner established by the legislation of the Republic of Belarus.

2.4. The user's personal data may be used (processed) for the following purposes:

- Delivery of ordered/agreed goods and provision of services to the user

- Conducting surveys and marketing, statistical and other studies, customer feedback, monitoring activity and its analytics

- Informing the user about the ongoing promotions, about new positions in the menu using various means of communication (e-mail, phone, notifications in the mobile application)

- Establishing feedback with the user, including sending notifications, requests regarding the use of the site and mobile application, the provision of services, the processing of requests and applications from the user

- Providing the user with technical support in case of problems related to the use of the site / mobile application

- For possible employment, with the possibility of processing personal data by entering them into electronic databases, inclusion in lists (registers), reporting forms, as well as any other methods corresponding to the purposes of processing

- For the purpose of sending advertising, advertising and information messages (mailings) to the user in the form of e-mails, SMS messages and other types of messages over telecommunication networks, including through the use of telephone, facsimile, mobile radiotelephone communications, data transmission networks (including mobile phones), as well as through social and other sites on the Internet for any promotions, news, discounts, activities and other possible information in the future for an unlimited period. The user hereby confirms that the e-mail address provided by him through the website / mobile application belongs to the user, and also that the phone number provided is a phone number allocated to the user by the telecom operator, and the user undertakes to compensate for any damage that may be caused in connection with the indication of incorrect data by him when providing his personal data through the site / mobile application in full.

The User can always refuse to receive information messages by sending the Operator a letter to the e-mail address of the info@kfc.by marked "Refusal of notifications"

2.5. The period of personal data processing is determined by the achievement of the purposes for which the personal data were collected, unless another period is provided for by applicable law.

The User may at any time withdraw his consent to the processing of personal data by sending a notification to the Operator by e-mail to the Operator's e-mail address info@kfc.by marked "Withdrawal of consent to the processing of personal data

2.6. The processing of personal data authorized by the subject of personal data for distribution must be stopped at any time at the request of the subject of personal data. This requirement should include the surname, name, patronymic (if any), contact information (phone number, e-mail address or postal address) of the subject of personal data, as well as a list of personal data, the processing of which is subject to termination. The personal data specified in this request may only be processed by the Operator to whom it is sent. The operator is obliged to stop processing personal data within fifteen days after receiving the application of the subject of personal data in accordance with its content, to delete them and notify the subject of personal data about it.

In the absence of the technical possibility of deleting personal data, the operator is obliged to take measures to prevent further processing of personal data, including their blocking, and notify the subject of personal data within the same period

2.7. The basis for the processing of personal data is the consent of the subject of personal data (user), except for cases established by the legislation of the Republic of Belarus, when the processing of personal data is carried out without obtaining such consent.

The consent of the subject of personal data is a free, unambiguous, informed expression of his will, through which he authorizes the operator to process his personal data.

Refusal to give consent to the processing of personal data entitles the operator to refuse to provide the user with the services of the site / mobile application.

2.8. The operator has the right to transfer personal data of users to its affiliated companies, CreativeFoodS-Vostok LLC, Yam! Restaurants International Russia C.S. (Russian Federation). The operator has the right to attract other companies to fulfill orders, assist in conducting marketing programs, providing technical services for the site / mobile application. Company data may have access to the data if it is necessary only to perform such functions.

2.9. The personal data processed by the Operator may be stored in databases on the servers of the operator, its affiliates, CreativeFoodS-Vostok LLC, Yam! Restaurants International Russia CS "(Russian Federation), service providers of operators, including those located in the territory of foreign countries. In this regard, the subject of personal data, when providing the operator with consent to the processing of personal data, also provides consent to the transfer of his personal data by the operator to such third parties, including in the territory of foreign countries.

2.10. Before the start of the cross-border transfer of personal data, the operator is obliged to make sure that the foreign state, to the territory of which the transfer of personal data is supposed to be carried out, ensures reliable protection of the rights of personal data subjects.

2.11. The operator is not responsible for the receipt by third parties of the user's personal data by gaining access to the user's account. The user is obliged to independently ensure the safety of his account data.

3. RIGHTS OF THE DATA SUBJECT

3.1. The subject of personal data has the right to receive information from the operator about the provision of his personal data to third parties once a calendar year free of charge.

To obtain information, the subject of personal data submits an application to the operator in writing, sent to the address of the info@kfc.by, or in the form of an electronic document sent to the e-mail address of the info@kfc.by. 

The operator is obliged within fifteen days after receiving the application of the subject of personal data to provide him with information about what personal data of this subject and to whom it was provided during the year preceding the date of submission of the application, or to notify the subject of personal data of the reasons for refusing to provide it.

The application must contain:

- surname, name, patronymic

- contact phone number of the subject of personal data

- e-mail address of the subject of personal data

- a statement of the essence of the claim

- personal signature (for a written application).

3.2. The subject of personal data has the right at any time without giving reasons to withdraw his consent to the processing of personal data and demand the termination of the processing of his personal data by submitting to the operator an application in writing sent to the address of the info@kfc.by, or in the form of an electronic document sent to the e-mail address of the info@kfc.by.

The operator is obliged to stop processing personal data within fifteen days after receiving the application of the subject of personal data in accordance with its content, to delete them and notify the subject of personal data about it. In the absence of the technical possibility of deleting personal data, the operator is obliged to take measures to prevent further processing of personal data, including their blocking, and notify the subject of personal data within the same period.

3.3. The subject of personal data has the right to receive information regarding the processing of his personal data by the operator.

The operator within five working days after receiving the application will provide him with the requested information or notify him of the reasons for the refusal to provide it.

3.4. The subject of personal data has the right to appeal against the actions (inaction) and decisions of the operator that violate his rights when processing personal data to the authorized body for the protection of the rights of personal data subjects (the National Center for personal data protection of the Republic of Belarus) in the manner prescribed by the legislation on appeals of citizens and legal entities.

4. FINAL PROVISIONS

4.1. The Operator has the right to make changes to this privacy policy without the consent of users.

4.2. The new privacy policy comes into force from the moment it is posted on the website / mobile application.  Any suggestions or questions about this privacy policy should be sent to the e-mail address of the site administrator info@kfc.by.

4.2. The current privacy policy is posted on the page at kfc.by/page/privacy-policy.