Privacy Policy
Last updated: May 1, 2023
I. INTRODUCTION
Golden Donuts, Inc. (collectively, the “GDI”, “Dunkin’ Ph”, “we”, or “us”) is the exclusive Philippine franchisee of the global brand “Dunkin’”. We respect your privacy and recognizes the need for appropriate measures to protect and manage the personal data you entrusted us. To ensure that we remain worthy of your confidence and trust, we have developed this Privacy Policy in accordance with the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), other issuances of National Privacy Commission (NPC), as well as other relevant laws of the Philippines in order to protect your personal data.
Personal information refers to “any information, whether or not recorded in any form, from which the identity of an individual is apparent or can reasonably and/or directly be ascertained by the entity holding the information, or, when put together with other information, would directly and certainly identify an individual”. Personal data pertains to all types of personal information, sensitive personal information and privileged information.
This Privacy Policy pronounces how we process (collect, use, share, retain, and dispose) and protect your personal data. It also provides you with steps you can take should you request for any change in the way we process your personal data, or if you want us to stop using your personal data.
Your privacy matters to us. Thus, PLEASE READ AND UNDERSTAND THE FOLLOWING CAREFULLY.
II. PROCESSING OF PERSONAL DATA
A. Why we collect your personal data
It is important that we collect, use, store and retain your personal data when it is reasonable and necessary to enable us to perform processes related with our business and transactions with all our customers as well as to help us in our compliance with the regulatory requirements.
In general, we are using the personal data you entrusted us to:
Perform activities in relation with the services we are offering;
Perform processes related with security monitoring, incident reporting and CCTV surveillance to ensure safety and security of all guests, staffs and other visitors; and,
Comply with our obligations under the law and as required by other government organizations.
We may also use your personal information depending on your transactions with us in any of the following:
A.) When you want to become a part of our team as employee or intern:
To consider and evaluate your suitability for internship;
To conduct pre-assessment procedures through interviews;
To communicate with you about the status of your internship application;
To evaluate your performance which will be the basis of your completion of the internship program;
To inform and consider you for future job opportunities that you may be interested in;
Perform procedures as necessary for your pre-employment such as, but not limited to: conducting pre-employment medical examination with our accredited clinic service provider, and your submission of required documents which will form part of your employee 201 file;
Conduct procedures as necessary for your employment such as, but not limited to: ID creation, timekeeping, payroll processing, tax processing, benefits processing, HMO enrollment, annual drug checking, government loan processing, and other purposes that may demand processing of your personal data (e.g., business travels, social activities, emergencies, and so on);
Update your personal profile annually from the date of initial collection or last update (whichever is later), for any amendments of your personal information;
Evaluate your performance which will be the basis of your regularization and/or promotions;
Initiate your career development within the company which may include activities such as seminars, trainings and workshops;
As necessary, execute business transactions such as preparation and/or approval of business documents and any other functions that are directly related and/or incidental to your job and that will demand processing of your personal data;
As necessary, perform procedures related to your lateral transfer within the organization;
Upon separation, facilitate procedures such as exit clearance, exit interview, preparation of your final pay, and issuance of your Certificate of Employment;
Analyze the demographics of employees within GDI to help improve employee satisfaction;
Comply with our obligations under the law and as required by government organizations such as Department of Labor and Employment (DOLE), Bureau of Internal Revenue (BIR), Social Security Services (SSS), Home Development Mutual Fund (Pag-IBIG) and Philippine Health Insurance Corporation (PhilHealth), and local government units; and
Perform processes related with security monitoring, incident reporting, and CCTV surveillance to ensure safety and security of all customers, employees, contractors, and other visitors.
B.) When you are our customer:
To provide customer care activities, monitor our quality and security, and provide services timely and efficiently;
To facilitate the creation / registration of your account;
To facilitate your request for promotions and online offers;
To respond to specific complaints, enquiries, and requests, it may be necessary to ask for your personal information;
To conduct research and analysis (through surveys or feedback forms) to improve customer experience/satisfaction;
To carry out your requests, fulfil orders, process payments, and provide delivery services;
To allow you to access and use our online Services, where without them, our online Services may not work properly;
To market you through targeted advertising;
To maintain, manage, and improve our offers, promotions, and Services and for the development of other technology;
To protect against, identify, and prevent fraud and other crime, claims, and other liabilities;
Any other purposes for which you have consented, such as those that may be set out in this Policy, and other purposes as permitted or required by any applicable law; and
Comply with any applicable laws or rules and regulations or investigative proceedings.
C.) When you transact with us online:
To facilitate the creation of your online account;
To supply you with information about the products we are offering which you might be interested in;
To perform functions necessary for us to deliver the goods and other products we offer; and,
To allow us to personalize the site for the user and view how and when specific users visit the site, helping us to improve the site. The use of cookies is an industry standard. Cookies are stored on your computer and are used only to view information on your hard drive that was put there by a cookie from this site. If you do not wish to receive cookies you may set your web browser to prevent them.
D.) When you are a supplier, a potential supplier, or a contractor:
To initially check the completeness of the requirements you have sent to us through e-mail or in hard copy;
To evaluate your credentials as our potential supplier in terms of your business/company profile, list of products/services, and list of clients;
To conduct a methodical way of accreditation through visits in supplier premises;
To evaluate your proposal, including your manpower, technical, and operational capacity;
To re-assess and re-evaluate your credentials and performance in continuance of our business relationship;
To perform actions necessary to implement the terms and conditions of our contract and processes related to or in connection with our business, including those processing disclosures that may be required under the law or regulations;
To hold your personal information from your previous transaction with the company to manage your records specifically those coming from your initial accreditation; and,
To be used as a requirement for taxation purposes, and serve as a reference for processes related with Procurement and Accounting Departments.
E.) When you are a franchisee or a potential franchisee:
To verify your identification;
To conduct initial screening procedures and evaluate your financial capability and viability to become our franchisee;
Facilitate procedures as necessary for our franchise agreement;
Execute business transactions such as preparation and/or approval of business documents and any other functions that are directly related and/or incidental to your job and that will demand processing of your personal data; and,
Comply with our obligations under the law and as required by government organizations;
Perform processes related with security monitoring, incident reporting, and CCTV surveillance to ensure safety and security of all customers, employees, contractors, and other visitors.
F.) When you are a visitor or a guest:
To perform processes related with security monitoring, incident reporting and CCTV surveillance to ensure safety and security of all guests, staffs and other visitors;
For monitoring of all persons who were given access to the company premises; and,
For reference in case of security or emergency-related incidents occurring within the company premises.
B. What personal data we collect from you
We collect information to provide you with details and information regarding our product, services, and promotions and to enable us to perform processes related to our business or transactions with you. This includes information such as:
Personal information such as full name, present address, provincial address, delivery address, email/Facebook account, telephone number, cellphone number, photos, position/designation, signature;
Sensitive personal information such as age, sex, height, weight, blood type, birthdate, religion, citizenship, civil status, educational background, associations/affiliations, government-issued identification documents (e.g., SC ID, PWD ID, SSS, TIN, Philhealth, Pag-IBIG, Residence Certificate, NBI Clearance, Passport Number, BTRCP Registration Number, PCAB License Number), and government license/s;
Siblings’ information such as name, sex, age, educational attainment, occupation, employer’s name (if working);
Parent’s information such as name, birthdate, birthplace, educational attainment and occupation;
Spouse’s information such as name, birthdate, birthplace, educational attainment and occupation;
Children’s information such as name, sex, age, educational attainment, school, employer’s name (if applicable);
Information collected using our CCTV surveillance system and other security systems.
Please note that you are responsible for ensuring that all personal data you submit is accurate, complete, and up-to-date.
C. How we collect or acquire your personal data
We collect your data when you:
Submit your resume either through JobStreet.com, Facebook page (@Dunkin’), Public Employment Service Office (PESO), job fairs, and walk-in application;
Fill-out our forms and submit necessary documents as part of your pre-employment requirements;
Provide personal information in relation to inquiries, requests, and complaints;
Submit company profiles, proposals/quotations, and business cards;
Fill out the Supplier’s Application for Accreditation Form;
Send requirements as listed in the Supplier Application for Accreditation Form;
Disclose your personal information through phone calls, e-mails, SMSs or verbal communication with our authorized representatives;
Order goods from us or use our facebook, mobile app, website, and other e-commerce platform as they arise;
Complete any customer survey; and,
Enter any of the company’s premises, your footages and images may be collected through our camera surveillance (i.e., CCTV).
D. Who we share your personal data with
As a general rule, we are not allowed to share your data to any third party, except in some limited circumstances as noted below. By giving your consent, you authorize GDI to disclose your personal data to accredited/affiliated third parties or independent/non-affiliated third parties, whether local or foreign in any of the following situations:
As necessary for the proper execution of processes related to the declared purposes in this Privacy Policy.
The use or disclosure is reasonably necessary, required or authorized by or under law
This means we might disclose your personal data to the following:
Our affiliates, subsidiaries, partner companies, organizations, or agencies including their sub-contractors or prospective business partners that act as our service providers and contractors; and,
Law enforcement and government agencies;
However, these companies may only use such personal data in a manner that is consistent with and for the purpose(s) as enumerated in this Privacy Policy.
E. Cookies, Related Technologies, and How We Collect Computer Data
Golden Donuts, Inc. or our authorized service providers may use cookies, web beacons, and other similar technologies for storing information to help provide you with a better, faster, safer, and personalized experience when you use the Services and/or access the Platform.
When you visit Golden Donuts, Inc., our company servers will automatically record information that your browser sends whenever you visit a website. This data may include:
Your computer’s IP address
Browser type
Webpage you were visiting before you came to our Platform
The pages within the Platform which you visit
The time spent on those pages, items and information searched for on the Platform, access times and dates, and other statistics.
This information is collected for analysis and evaluation in order to help us improve the Platform and the services and products we provide.
Cookies are small amount of data generated by a website and saved by a web browser. Its purpose is to provide information to the website owners. Essentially, cookies help in making the browsing of our site easier by, among other things, saving your name, addresses, passwords, and other preferences. They also allow us to recognize a particular device or browser and help us to personalize the content to match your preferred interests more quickly, and to make our Services and Platform more convenient and useful to you.
Web beacons are small graphic images that may be included on our Service and the Platform. They allow us to count users who have viewed these pages so that we can better understand your preference and interests.
Most web browsers allow some control of most cookies through the browser settings. You may opt to refuse all cookies or indicate when a cookie is being sent. However, if you choose not to accept cookies, you may experience some delay in browsing out website or it will not function properly or may be considerably slower. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.
F. Security of Your Personal Information
Golden Donuts, Inc. ensures that all information collected will be safely and securely stored. We protect your personal information by:
- Restricting access to personal information
- Maintaining technology products to prevent unauthorized computer access
- Securely destroying your personal information when it is no longer needed for any legal or business purpose
Golden Donuts, Inc. uses 128-bit SSL (secure sockets layer) encryption technology when processing your financial details. 128-bit SSL encryption is approximated to take at least one trillion years to break and is the industry standard.
Your password is the key to your account. Please use unique numbers, letters, and special characters, and do not share your Golden Donuts, Inc. password to anyone. If you do share your password with others, you will be responsible for all actions taken in the name of your account and the consequences. If you lose control of your password, you may lose substantial control over your personal information and other information submitted to Golden Donuts, Inc. You could also be subject to legally binding actions taken on your behalf. Therefore, if your password has been compromised for any reason or if you have grounds to believe that your password has been compromised, you should immediately contact us and change your password. You are reminded to log off your account and close the browser when finished using a shared computer.
G. Minor
Golden Donuts, Inc. does not sell products for purchase by children. If you are under 18 years old, you may use our website, and other e-commerce only with the involvement of your parents or guardian.
III. PRIVACY POLICY FOR CAMERA SURVEILLANCE
Golden Donuts, Inc. is using a CCTV system in capturing employees’ and guests’ images and videos to monitor anti-social behavior, crime, and emergency incidents or situations within Golden Donuts, Inc. premises. The CCTV data is stored in secure locations, accessed by authorized Golden Donuts, Inc. personnel for legitimate purposes and may be shared with the appropriate authority for investigatory purposes.
For questions or concerns, you may reach us through the contact details as listed under Part VII.
IV. DATA PROTECTION
We take reasonable steps to ensure that the personal data we process are accurate, complete, and up-to-date. We strictly enforce our Privacy Policy within GDI and we have also implemented technological, organizational and physical security measures to protect the information we hold about you from loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction. We put in effect safeguards such as the following:
We keep and protect your personal data using a secured server behind a firewall and by deploying adequate physical security controls; and,
We restrict access to your personal data only to qualified and authorized personnel who hold your personal data with strict confidentiality.
V. DATA RETENTION
The personal data will be kept in our facilities located in the Philippines in accordance with our retention schedule unless you request your personal data to be deleted in our systems, databases and hardcopies immediately. Once deleted, your personal data will no longer be searchable or included in anonymous searches and will be completely removed from all the storage location.
GDI reserves the right to retain your personal data in our files located in the Philippines under certain circumstances such as when your personal data may be necessary to resolve disputes, or if GDI is required to do so by law or in the good faith; provided that such action is necessary to comply with a legal obligation and/or protect and defend the rights or property of GDI or its affiliates. If GDI is required to retain any portion of your personal data for such purposes, it shall use reasonable efforts to limit such data to what is necessary to accomplish the particular purpose.
VI. CHANGES IN OUR PRIVACY POLICY
As necessary, this Privacy Policy may be updated from time to time. If we change our Privacy Policy, we will post the revised version in our website at www.dunkin.com.ph. Such updates will take effect immediately, so we suggest that you check our website periodically for the most up-to-date version of our Privacy Policy. Rest assured, that any changes will not be retroactively applied and will not alter how we handle previously collected personal data without obtaining your consent, unless required by law.
VII. YOUR DATA PRIVACY RIGHTS
Should you wish to exercise your rights as a data subject (which include the right to access, modify, erase, and object to the processing of your personal data) or should you have any inquiries and feedbacks on this Privacy Policy, and/or complaints to GDI, you may reach us through our “Contact Us” menu in our website at www.dunkin.com.ph, through a duly signed written request of data subject form/letter with our Data Protection Officer (DPO).
Our contact details are as follows:
Data Protection Officer
Golden Donuts, Inc.
GDI Bldg., Reliance cor. Sheridan Sts. Highway Hills, Mandaluyong City
Office: 8988-7300 local 230
Email address: dpo@goldendonuts.ph
You may also lodge a complaint before the National Privacy Commission (NPC). For further details, please refer to NPC’s website: www.privacy.gov.ph/mechanics-for-complaints/.
Our decisions to provide such access or consider any request for correction, erasure and objection to process your personal data as it appears in our records are always subject to any exceptions under applicable and relevant laws and/or the DPA, its IRR and other issuances of NPC.
By continuing, you hereby give your consent to Golden Donuts, Inc. (GDI) to process your personal data in order to facilitate the services as stated in this Privacy Policy.
