This Privacy Notice is effective as of October 1, 2021.
Please carefully read this Privacy Notice.
CKE Restaurants Holdings, Inc., located at 6700 Tower Circle, Suite 1000, Franklin, TN 37067, United States of America, reachable at privacy@ckr.com ("CKE") is very sensitive to the privacy concerns of the visitors to its website. This Privacy Notice (this "Privacy Notice") outlines the types of Personal Data that you may provide to us on this website (https://www.europe.carlsjrfranchising.com) and other related websites or mobile applications controlled by CKE which link to this Privacy Notice (referred to, individually and collectively, as the "Website"), and explains how CKE, as controller of your Personal Data, handles such Personal Data. This Privacy Notice does not apply to Personal Data collected from websites or mobile applications that do not link to this Privacy Notice or to third-party websites to which the Website may link.
Personal Data is defined as information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly with a particular visitor or consumer and which is submitted to and/or collected by the Website and maintained by CKE in an accessible form, and includes information actively submitted by you and passively-collected information, as described below.
Topics:
CKE collects the following PersonalData from you:
When you contact us for information about franchise opportunities: Name, email, phone number, your company name and type (if applicable) and region of interest.
To verify your franchisee application form, we collect information about your professional experience, education background and other relevant information.
As part of our verification process, we collect information about your credit and legal history from third-party vetting agencies, where available. Some of this information originates with publicly-available sources, such as sanctions lists.
You directly provide CKE with most of the data (including Personal Data) we collect. We collect data and process data when:
If you do not provide Personal Data when you register online, we will not be able to respond to your request to receive information from us. The Personal Data we request on our franchisee application form and in follow-up to that form is required for us to evaluate your eligibility to enter into a franchise agreement with CKE.
Personal Data will be used only for the purposes enunciated in this Notice, and only when we have a legal justification (“legal basis”) for doing so. Specifically, your Personal Data may be used for the following purposes on the following legal bases:
Legal basis: To perform a contract with you or take steps to enter into a contract with you:
(1) to fulfill or meet the reason you provided the information (responding to a request for more information on franchise opportunities, to review and verify your franchisee application, evaluating your eligibility to enter into a franchisee agreement);
Legal basis: Processing is necessary for our legitimate interests to develop our products and services by improving their performance for our visitors and franchisees:
(2) to provide support and develop our Website and other products and services;
(3) to help CKE better understand visitors’ use of the Website;
(4) to provide support and respond to specific requests from visitors;
(5) to personalize your Website experience and deliver content and product and service offerings relevant to your interests;
Legal basis: Processing is necessary for our legitimate interests to protect our reputation by operating our business in compliance with the law, our contracts and our Code of Ethics:
(6) to protect the security or integrity of the Website;
(7) to comply with a non-UK or EEA law or a government investigation, to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
(8) to enforce our rights, to prevent or investigate a possible crime; in connection with litigation or a dispute proceeding; or to protect our own rights or property, or the rights, property or safety or use by others;
Legal basis: Processing is necessary for our legitimate interests to operate our business efficiently and profitably:
(9) in connection with any proposed or actual corporate transaction, including reorganization, financing, sale, merger, bankruptcy or liquidation;
Legal basis: To comply with a UK or EEA legal obligation:
(10) to comply with a UK or EEA law or a government investigation, to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
Legal basis: Where you provide your consent:
(11) Where required by law, we will market to you only with your prior consent, which you may withdraw at any time.
CKE may share your Personal Data with CKE group companies and external entities that perform services on our behalf, such as vetting agencies, marketing service providers, technology support service providers, and cloud platform providers. In each case, such providers are required to use adequate privacy and security protections and may use the information only for the purpose of providing services to us.
We may also share your personal information with CKE group companies and external entities that are controllers, such as our affiliates (including Carl’s Jr. Restaurants LLC), parent company and its and their respective franchisees, and our business partners, for purposes of evaluating your eligibility to enter into a franchise agreement with CKE.
If you enter into a franchise agreement, we will keep your Personal Data for the term of that agreement and the applicable statute of limitations. If your application is not accepted, CKE will keep your Personal Data submitted in connection with a request for information or a franchise application for no more than three (3) years after we’ve informed you that your application is not accepted. Once the relevant time period has expired, we will delete your data.
CKE is located in the United States. As part of the services offered to you through this Website, and during our ordinary business operations, the information you provide to us (including Personal Data) may be transferred to the United States and the UK. Our servers, databases, and service providers are located in the United States. The United States is not considered to provide adequate protection to Personal Data originating from your home country. The UK has received an adequacy decision from the European Commission.
When we transfer Personal Data to the United States, we sign data protection agreements incorporating, where applicable, European Commission-approved standard contractual clauses, binding corporate rules or other instructions or measures as permitted by applicable law. You may obtain information about these agreements by contacting us at privacy@ckr.com.
CKE would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following, subject to specific conditions pursuant to applicable law:
|
Objection: You can contact us to let us know that you object to the further use or disclosure of your Personal Data that we process in furtherance of our legitimate interests, on grounds relating to your particular situation. You have the right object at any time to our processing of your Personal Data for direct marketing purposes. |
For more information about these rights, or to submit a request, please email us at privacy@ckr.com. Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is excessive or manifestly unfounded, if it jeopardizes the rights of others, or if it is not required by applicable law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request.
CKE uses cookies on the Website to ensure security, provide functionality, serve ads to you based on your online behavior, measure the effectiveness of those ads, and track how users interact with our site by collecting data (including Personal Data) from your device and placing information on your device. Some of these cookies are necessary to the secure functioning of our site and cannot be refused. For more information about cookies and how CKE uses cookies, read our Cookie Notice here.
Google Analytics
We use Google Analytics, which tracks interactions of Site users to systematically evaluate those interactions, using cookies. The following data will be processed in connection with the use of Google Analytics:
The legal ground for the processing of your personal data is your consent according to Art. 6(1)(a) of the EEA and UK GDPR.
The purpose of the processing of your personal data is to analyze and evaluate your behavior on our Site. This helps us to constantly improve our own Site and its user-friendliness.
If you want to opt-out of the use of Google Analytics please use the following link: https://tools.google.com/dlpage/gaoptout/
The Website may contain links to other websites. Our Privacy Notice applies only to our Website, so if you click on a link to another website, you should read their Privacy Notice.
CKE keeps its Privacy Notice under regular review and places any updates on this web page. This Privacy Notice was last updated on October 1, 2021.
If you have any questions about Our Company’s Privacy Notice, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.
Email us at: privacy@ckr.com
Call us: 1 (800) 227-5757
Or write to us at: 6700 Tower Circle, Suite 1000, Franklin, TN, USA 37067
The supervisory authority in the UK is the ICO Home | ICO. A list of supervisory authorities in the EU is available here: https://edpb.europa.eu/about-edpb/board/members_en.