Privacy policy

Updated on 05/02/2025

PREAMBLE

As part of its provision of the Website accessible at the address: htpps://dunkinfrance.fr (hereinafter: "the Website") to Users of the Website, DK France SAS (a simplified joint-stock company with a capital of 1,000 euros, whose registered office is located at Cap Sud, 106 avenue Marx Dormoy, 92120 MONTROUGE, registered with the Nanterre Trade and Companies Register under number 930992516) collects and processes personal data from The User. DK France SAS (hereinafter "DK France") acts as a data controller within the meaning of the General Data Protection Regulation (GDPR) [1].

 

The purpose of this personal data protection policy is to inform you of the methods of collection, processing, use, sharing, and protection of your personal data via the Website, the purposes pursued, as well as the rights you have over said data.

 

WHEN YOU CREATE A PERSONAL ACCOUNT ON THE WEBSITE, WHEN YOU LOG IN TO THE WEBSITE AND WHEN YOU USE IT, YOU AGREE THAT YOUR PERSONAL DATA WILL BE COLLECTED AND PROCESSED IN ACCORDANCE WITH THE PROVISIONS OF THIS PERSONAL DATA PROTECTION POLICY. IF YOU DO NOT AGREE TO THE TERMS OF THIS AGREEMENT, YOU MUST NOT CREATE OR USE AN ACCOUNT ON THE WEBSITE.

This personal data protection policy is governed by French law. Notwithstanding the above, if the User is a consumer and his/her habitual residence is located in a country of the European Union other than France, the mandatory provisions from the User's country of residence will apply.

In the event of a dispute relating to this policy, the French courts shall have jurisdiction to decide it. Notwithstanding the above, if the User is a consumer and his/her habitual residence is located in a country of the European Union other than France, the mandatory provisions from the User's country of residence will apply.

If a legislative or regulatory change, or a court decision, invalidates a clause of this personal data protection policy, the other clauses will remain valid.

DK France may make changes to this personal data protection policy, in particular to comply with any legislative, regulatory, jurisprudential or technological developments. The version available on the Website is the version in force; The date of its update will be clearly identified at the top of the personal data protection policy.

 

  1. ARTICLE 1: WHAT IS PERSONAL DATA?

Personal data (hereinafter referred to as "Personal Data") is any information relating directly or indirectly to an identified or identifiable natural person (surname, first name, telephone number, location data, etc.).

  1. ARTICLE 2: WHAT INFORMATION IS AVAILABLE ABOUT THE PROCESSING OF PERSONAL DATA?

DK France implements all of its Personal Data Processing by applying the relevant rules, and in particular:

  • The General Data Protection Regulation No. 2016/679 which came into force on 25 May 2018, as well as,
  • The Data Protection Act No. 78-17 of 6 January 1978 in its amended version.

The Processing of Personal Data carried out in the context of the operation of the Website is governed by the principles of fairness, lawfulness and transparency. DK France undertakes to provide clear, complete and easily accessible information on the methods of carrying out this processing.

The scope of the use and management of the Website leads DK France to carry out the Personal Data Processing detailed below:

  • Purpose of processing: Management of the recruitment of new DK France franchised restaurants via the Website.
  • Personal data transmitted to DK France: surname, first name, postal address, email address, telephone number, date of birth, professional life, financial situation.
  • Legal basis for processing: pre-contractual and contractual performance of DK France and the franchised restaurant.
  • Retention period of your personal data: retention for a period of 10 years after the termination of the franchise agreement. In the event of a profile not selected at the opening of the new franchised restaurant, retention for a period of 6 months. If the candidate has consented, storage for a period of 2 years.

 

  • Purpose of the processing: Management of activity and traffic on the Website
  • Personal data transmitted to DK France: type of Internet browser, Operating system, connection URL address including the associated date and times, content accessible via the Website.
  • Legal basis for processing: legitimate interest of DK France.
  • Retention period for your personal data: retention period for a maximum of 13 months.

 

  1. ARTICLE 3: WHERE IS YOUR PERSONAL DATA STORED?

DK France may store your personal data, and thus transmit it to Subcontractors, for the following purposes:

  • The management of the hosting of the Website,
  • The management of IT resources and the maintenance of the Website.

In this context, DK France undertakes to verify their compliance with the rules of personal data protection, and to the implementation of a dedicated contractual framework, under the conditions required by the aforementioned rules.

DK France may also submit certain information to authorised persons and entities internally (employee, management and proposed members of the company) and externally, in particular to third parties authorised by virtue of legal, administrative or judicial prerogatives.

DK France may transfer your Personal Data outside the European Union if you agree that your data will be used for statistical purposes, audience measurement to improve our services.

Nevertheless, in the event of a transfer of data outside the European Union, DK France will apply the necessary regulatory framework adapted to the situation of the said Transfer, by ensuring:

  • Transmission of Personal Data within an adequate country with an adequate level of protection, or,
  • The signing of the Standard Contractual Clauses (SCCs) proposed by the European Commission or,
  • Any other warranty that will be considered appropriate within the meaning of Article 46 of the GDPR.
  1. ARTICLE 4: HOW IS YOUR PERSONAL DATA SECURED?

DK France undertakes, through all useful precautions, to implement all actions aimed at guaranteeing the security of your Personal Data.

To this end, DK France's commitments relate to the application of all technical and organizational measures within the meaning of Article 32 of the GDPR, which will ensure the confidentiality, integrity and availability of Personal Data, and thus a sufficient level of protection of the latter.

DK France and its employees have been trained and made aware of the protection of Personal Data, including the consideration and application of these measures.

In the event of a breach of your Personal Data, i.e. if the Personal Data for which DK France is responsible suffers a security incident that results in a breach of its confidentiality, availability or integrity, DK France will notify the Commission nationale de l'informatique et des libertés, as well as any competent national supervisory authority if applicable,  under the conditions prescribed by the applicable regulations.

  1. ARTICLE 5: WHAT ARE YOUR RIGHTS?

You have the possibility to request, at any time, the exercise of your individual rights, and in particular to request:

  • Access to your Personal Data in a clear and understandable format in order to know the information processed by DK France concerning you,
  • Rectification leading to the modification of any Personal Data that is incomplete or erroneously processed by DK France,
  • The deletion of your Personal Data under conditions predetermined by the Applicable Regulations,
  • The limitation of the processing of Personal Data under conditions predetermined by the Applicable Regulations,
  • The possible opposition to data processing by putting forward the legitimate reasons for which it must be satisfied,
  • The portability of Personal Data in a clear format that can be easily used by machine, with the possibility of transmitting said Data to another organization,
  • Determining the fate of your Personal Data in the event of its disappearance, with the transmission of the dedicated directives, to DK France.

The exercise of these rights can be exercised by contacting us through the following channels:

*By post:

DK France SAS

CAP SUD – 106 avenue Marx Dormoy

92120 MONTROUGE

*By email:

dpo@Dkfrance.com specifying "personal data" in the subject line of your email.

DK France may, in certain cases necessary for your identification, make the implementation and processing of your request conditional on the transmission of a valid proof of identity.

DK France undertakes to process any request concerning the exercise of your individual rights within thirty (30) days of receipt; this period may be extended to an additional sixty (60) days in the event of complexity in the investigation of the application, in particular. DK France undertakes in this case to keep you informed and to follow up on these requests.

If you believe that the processing of your Personal Data constitutes a violation of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the European Union member state of your habitual residence, place of work or place where the breach occurred. The supervisory authorities are as follows:

You can also lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL) in France, by post at the following address: CNIL – Service des plaintes, 3, place de Fontenoy –TSA 80715 –75334 PARIS CEDEX 07 Or online: https://www.cnil.fr/fr/cnil-direct/question/844 or https://www.cnil.fr/fr/plaintes.

[1] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.