privacy policy
Yanolja FNB Solution Co., Ltd. (hereinafter referred to as the "Company") collects and processes users' personal information while providing Now Waiting services. The Company considers the protection of users' personal information to be extremely important and strives to comply with the Personal Information Protection Act and other relevant laws and regulations. Pursuant to Article 30 of the Personal Information Protection Act, the Company establishes and discloses the following personal information processing policy to protect users' personal information and promptly and smoothly address any complaints related to such information.
1. Personal information collection items and processing purposes
When a company collects personal information, it must notify the user of the fact in advance and obtain consent. The purpose of use, items, and retention period of the collected personal information are as follows.
A. Member (Consent of the information subject)
개인정보보호법 제 15조 1항 제 1호(정보주체의 동의)
-
계약의 이행 및 서비스 제공
-
서비스 이용실적 정보 통계 분석
-
신규 서비스 개발 및 서비스 개선
-
고지·안내 사항 전달
-
상담·불만·민원처리
-
불법·부정 이용방지
<모바일> 카카오톡 연동시(필수) 휴대전화번호,닉네임,전자우편주소
<모바일>보인 인증시 휴대전화번호
<현장>웨이팅 시 휻전화번호(단,외국인에 대해서는 전자우편주소)
<현장) 주문시 휴대전화번호
동의철회 또는 탈퇴 시 지체없이 파기
관계법령에 따라 보존할 필요가 있는 경우 해당 법령에서는 요구하는 기한까지 보관
법 제 15조 1항 제 1호(정보주체의 동의)
개인정보보호법제15조제1항제1호
-
개인맞춤형 상품·서비스 혜택에 관한 정보 제공
휴대전화번호,이메일주소
동의철회 또는 탈퇴 시 지체없이 파기
B. Service users (personal information that may be collected without consent)
법적 근거
수집 · 이용동의목적
항목
보유·이용기간
개인정보보호법제15조제1항제4호(계약이행,나우웨이팅서비스)
계약의 이행 및 서비스 제공
웨이팅 예약시 휴대폰 번호,이름
입장일 기준 5일 이내 삭제
D. Member information provided by a third party (collected from sources other than the data subject)
Where to get it
수집 항목
수집 · 이용동의목적
보유 · 이용기간
개인정보보호법제20조(정보주체이외로부터의 수집) / 신세계
휴대전화번호
줄서기/예약서비스 가입 및 서비스 이용
동의 철회 또는 탈퇴 시 지체없이 파기
단,관계법령에 따라 보존할 필요가 있는 경우 해당 법령에서 요구하는 기한까지 보관
개인정보보호법제20조(정보주체이외로부터의 수집) / 스타필드
이름,휴대전화번호
줄서기/예약서비스 가입 및 서비스 이용
동의 철회 또는 탈퇴 시 지체없이 파기단,관계법령에 따라 보존할 필요가 있는 경우 해당 법령에서 요구하는 기한까지 보관
A. Affiliate
개인정보보호법제15조제1항제4호(계약이행,나우웨이팅 서비스)
-
계약의 이행 및 서비스 제공
-
요금 정산·청구 수납추심
-
고지안내사항전달
-
상담불만·민원 처리
<신청서 작성 시>
-
사업자정보(사업자명,사업주명,사업자등록번호,사업자연락처,사업자주소)
-
납부자정보(납부자명,연락처,생년월일)
<스팟관리 시>
-
매장정보(매장명(지점명),대표자 연락처,휴대전화번호,주소,이메일
-
스텝관리(이름,휴대전화번호,이메일)
<청구서 관리 시>
-
세금계산서 정보(담당자명,전자우편주소,연락처)
계약종료시까지
관계법령에 따라 보존할 필요가 있는 경우 해당 법령에서 요구하는 기한까지보관
개인정보보호법제15조제1항제4호(계약이행,토스결제)
-
계약의 이행 및 서비스 제공
-
요금 정산·청구 수납추심
-
고지안내사항전달
-
상담불만·민원 처리
이름,이메일주소,납부자번호(생년월일 또는 사업자등록번호),신용카드번호,신용카드유효기간,비밀번호 앞2자리
계약종료시까지
관계법령에 따라 보존할 필요가 있는 경우 해당 법령에서 요구하는 기한까지보관
개인정보보호법제15조제1항제4호(계약이행,CMS자동이체 신청)
-
계약의 이행 및 서비스 제공
-
요금 정산·청구 수납추심
-
고지안내사항전달
-
상담불만·민원 처리
계좌이체
신청인 정보(이름,사업자명,연락처,휴대전화번호,금융정보(은행명,예금주명,계좌번호,사업자등록번호,예금주,휴대전화번호)
신용카드결제
이름,휴대전화번호,납부자번호(생년월일 또는 사업자등록번호),신용카드번호,신용카드유효기간,비밀번호 앞 2자리,전자우편주소
자동이체신청해지 후 5년간 보관
개인정보보호법제15조제1항제4호
-
상담문의
담당자명,이메일,휴대포번호,매장정보(지점명,업종,지역),문의내용
상담문의 종료시까지
(단,계약진행되지않은 경우 등록일 기준 1년간 보관)
Information may be automatically generated or collected during the process of using the service for purposes such as ensuring service stability, providing safe services, and restricting violations of laws and service terms and conditions.
-
Service usage records, access logs, transaction records, IP information, cookies, records of improper and fraudulent use, mobile device information (model name, mobile carrier information, OS information, screen size, language and country information, advertising ID, device identification information, etc.)
-
Records of illegal/unauthorized access to services and service applications, records of attempted access to service applications, and information necessary to verify the safe operation environment of services and service applications.
Processing Items: We collect the minimum amount of personal information necessary to provide Now Waiting services.
Personal information collection: We collect mobile phone numbers for the Now Waiting service, and when collecting personal information when using a separate service, we always obtain consent before collecting personal information.
Automated Collection: During the use of the Now Waiting service, information such as service usage records, access logs, and IP addresses may be automatically generated and collected for the purpose of ensuring service stability.
Purpose of Processing: Personal information collected by Now Waiting services is processed only for the purposes necessary to provide services, including service registration, contract execution, service provision, and consultation, complaint, and civil complaint handling. When collecting personal information, users are always notified of the purpose of processing and their consent is obtained.
2. Use and provision without user consent
When a company collects personal information, it always notifies users in advance and obtains their consent. The information is used only for the stated purposes. However, in the following cases, personal information may be used or provided to third parties without the user's consent.
-
In cases where there are special provisions in the law or it is unavoidable to comply with statutory obligations
-
When necessary to perform a contract with a user or to take action at the user's request during the process of concluding a contract
-
When it is clearly deemed necessary to protect the life, body, or property of the user or a third party.
-
When necessary to achieve the company's legitimate interests and clearly takes precedence over the user's rights. In this case, the rights are significantly related to the company's legitimate interests and do not exceed a reasonable scope.
-
In cases where it is urgently necessary for public safety and well-being, such as public health
-
Review whether the user's interests are unfairly infringed upon within a reasonable scope related to the original purpose of collection, and if there is a possibility of predicting further use or provision of personal information in light of the circumstances of collection or processing practices, and if security measures such as pseudonymization or encryption are applied.
Recipient
제공목적
제공항목
법적근거
수사기관
범죄 수사를 위한 목적
이메일주소, 휴대전화번호, 서비스 이용 정보, 접속 로그, IP정보, 쿠키, 모바일 기기 정보 등 요청 시
형사소송법 제199조, 제477조
법원
법원 요청에 따른 정보 확인
이메일주소, 휴대전화번호, 서비스 이용 정보, 접속 로그, IP정보, 쿠키, 모바일 기기 정보 등 요청 시
Article 13-2 of the Communications Secrets Protection Act
Additional Use: Personal information may be additionally used and provided to a reasonable extent related to the purpose of collection, taking into account the original purpose of collection, relevance, circumstances of collection, processing practices, etc.
3. Retention period and destruction of personal information
The company destroys personal information without delay when the user withdraws consent, the personal information retention period expires, or the processing purpose is achieved.
If the retention period for personal information agreed upon by the user has expired or the purpose of processing has been achieved, but personal information must be retained for a certain period of time in accordance with the laws and regulations, the personal information will be stored separately for that period in accordance with the provisions of the laws and regulations.
Information held
Items held
Retention period
Legal basis
Regarding cancellation of contract or subscription, etc.
Mobile phone number, nickname, email address
5 years
Act on Consumer Protection in Electronic Commerce, etc.
Records of payment and supply of goods, etc.
Mobile phone number, nickname, email address
5 years
Act on Consumer Protection in Electronic Commerce, etc.
Records of consumer complaints or dispute resolution
Mobile phone number, nickname, email address
3 years
Act on Consumer Protection in Electronic Commerce, etc.
Records of display and advertising
Mobile phone number, nickname, email address
6
Act on Consumer Protection in Electronic Commerce, etc.
Website visit history
Email address, mobile phone number, access log, IP information, cookies, mobile device information
3 months
Article 15-2 of the Communications Secrets Protection Act
Retention Period: Once the purpose of processing personal information has been achieved or the retention period has expired, the relevant personal information will be securely destroyed without delay. However, if personal information must be retained for a certain period of time by law, the information will be stored separately for that period in accordance with the relevant legal provisions.
Destruction Method: The procedures and methods for destroying personal information are as follows.
-
Destruction Procedure: After the purpose of personal information collection is achieved, it is stored separately for a certain period of time in accordance with internal guidelines and obligations under relevant laws and regulations, and then destroyed.
-
Destruction Method: Personal information stored in electronic file format is permanently destroyed in a way that prevents the records from being reused, and personal information printed on paper documents is destroyed by shredding or incineration.
4. Provision of personal information to third parties
In principle, the company uses users' personal information within the scope of the purposes stated in 1. Personal information collection items and purposes of use.
Additionally, to ensure smooth service provision, we provide personal information to third parties in accordance with Article 17, Paragraph 4 of the Personal Information Protection Act after providing users with notice. The current status of personal information provision to third parties is as follows.
Legal basis
Recipient (country, contact information)
Purpose of provision
Items provided
Retention/Use Period
Article 17, Paragraph 1, Item 1 of the Personal Information Protection Act
(Consent of the information subject)
Stores that have signed up for the Now Waiting service
(List of third-party providers of personal information)
Confirmation of contract performance and service provision, user and usage information, resolution of consumer disputes such as complaint handling, and confirmation of sales statistics
Mobile phone number (e-mail address for foreigners), service usage information (when entered by user), name
If consent is withdrawn, the information will be destroyed without delay. If it is necessary to preserve the information in accordance with relevant laws and regulations, the information will be kept for the period required by the relevant laws and regulations.
Article 17, Paragraph 4 of the Personal Information Protection Act
(Contract performance)
Credit Finance Association
Check card sales and deposit information
ID, password
Until the purpose of use is achieved
Third-Party Provision: When using the Now Waiting service, your personal information is provided to participating stores and other third-party providers for contract fulfillment and service provision. A list of third-party providers can be found in the Personal Information Third-Party Provision Status section.
5. Entrustment of personal information processing
To ensure smooth service provision, the company entrusts personal information processing tasks as follows. When concluding an entrustment contract, the company specifies in the contract or other document matters related to responsibilities such as prohibition of processing personal information for purposes other than those entrusted, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the trustee, and compensation for damages. Furthermore, the company supervises the trustee to ensure the safe processing of personal information. The current status of personal information entrustment is as follows.
A. Domestic
Trustee (sub-trustee)
Details of entrusted work (sub-entrusted work)
LG U+, KT, Sweet Tracker Co., Ltd.
Message sending related services
Korea Information & Communication Corporation, Hyosung FMS Co., Ltd., Toss Payments Co., Ltd.
Electronic payment service
Kbiz Market Co., Ltd.
Service introduction consultation and installation
My Warehouse, CJ Korea Express
Product delivery, product installation, returns, refunds
Link Hub
Issuance of tax invoice
Channel Corporation, Content Bridge, and Onpia
System operation for customer consultation (chat) service
All signed
Provision of electronic signature services
B. Overseas
The data subject may refuse international transfer of personal information by contacting the personal information protection officer in writing, by phone, or by email, as outlined in "7. Personal Information Protection Officer and Remedies for Rights Infringement." If the data subject refuses the international transfer of personal information, the company will exclude the subject from international transfer. However, if the subject refuses the transfer, services requiring international transfer will be unavailable.
Trustee
Information Management Officer Contact Information
The country being transferred
Details of consignment work
Personal information items to be entrusted
Date and method of consignment
Retention/Use Period
Salesforce
USA
B2B Customer Relationship Management System (CRM)
Contact information, contract details
Transmission through the network at the time of service use
Upon withdrawal of consent or termination of the contract
Wix.comLtd.
Israel
Customer Service
Name, store name, contact information, inquiry details
Transmission through the network at the time of service consultation
Upon withdrawal of consent or termination of the contract
※Processing Consignment: To provide smooth service, we consign some personal information processing tasks to external companies. When contracting with a company entrusted with our work, we explicitly state the relevant provisions to ensure compliance with personal information protection laws and regulations, and regularly manage and supervise them.
6. User rights and obligations and exercise methods
Users may exercise their rights to access, correct, delete, or suspend the processing of their personal information at any time.
Confirm consent to collection of personal information and receipt of marketing information
-
You can review your consent details or withdraw your consent by visiting the Personal Information Collection and Marketing Agreement Confirmation page (https://policy.nowwaiting.co/agreements/). Withdrawing consent will be considered membership cancellation, and your personal information will be immediately deleted.
However, in the cases below, withdrawal of consent, suspension of processing, correction, and deletion may not be possible.
-
In cases where there are special provisions in the law or it is unavoidable to fulfill legal obligations
-
If there is a risk of harming another person's body or life, or if there is a risk of unfairly infringing on another person's property or other interests.
-
In cases where the service agreed upon with the user cannot be provided without processing personal information, and the user has not clearly expressed his/her intention to terminate the contract.
Users have the right to have their personal information protected, but they also have a responsibility to protect themselves and not infringe on the personal information of others. Be careful not to leak personal information, including your mobile phone number. You must not transfer or lend personal information to others. Using someone else's personal information without permission may result in the loss of your membership and punishment under applicable laws.
※Rights and Obligations: Now Waiting users may exercise their rights to access, correct, delete, or request suspension of processing of their personal information at any time. You can review your consent history or withdraw your consent through the consent confirmation page.
7. Personal Information Protection Officer and Remedies for Rights Infringement
The company is responsible for overall management of personal information processing, and has designated a personal information protection officer and a personal information protection department to handle user complaints related to personal information processing, receive and process requests to view personal information, and provide remedies for damages. If you need to inquire about other personal information infringements, you can contact a government agency.
-
Personal Information Protection Officer: The company has appointed a Personal Information Protection Officer who oversees the handling of personal information related to the service.
-
Personal Information Protection Officer: Jaeheon Kim (CEO/CPO)
-
Personal Information Protection Department: Business Operations Team (waiting@yanolja.com)
-
-
Complaints Handling Department: For all inquiries and complaints regarding personal information protection that arise while using Now Waiting services, please contact the Personal Information Protection Manager or Customer Center.
-
Customer Center: 1522-5954 / waiting@yanolja.com
-
-
Remedies for infringement of rights: If you need to report or consult about personal information, you can contact a government agency for assistance.
-
Personal Information Dispute Mediation Committee: 1833-6972 (without area code) (https://www.kopico.go.kr)
-
Personal Information Infringement Report Center: 118 (without area code) (https://privacy.kisa.or.kr)
-
Supreme Prosecutors' Office: 1301 (without area code) (https://www.spo.go.kr)
-
National Police Agency: 182 (without area code) (https://ecrm.police.go.kr)
-
8. Measures to ensure the security of personal information
The company is taking the following measures to ensure the security of users' personal information.
-
Administrative measures: Establishment and implementation of internal management plans, regular in-house training, internal audits, etc.
-
Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of personal information, installation of security programs, etc.
-
Physical measures: Access control to computer rooms, archives, etc.
※Safety Measures Obligation: The company complies with all legal requirements under the Personal Information Protection Act and strives to safely manage users' personal information through periodic internal/external security inspections.
9. Matters concerning the installation and operation of automatic personal information collection devices and their refusal.
Cookies are small pieces of information that a website sends to a user's browser (e.g., Edge, Chrome, Firefox, or other mobile browsers). The company uses cookies to store and retrieve user information. Cookies identify a user's computer or mobile device, but do not personally identify the user.
The company uses cookies for the following purposes:
-
Provide differentiated information for each device by loading advertising identifiers and device IDs into cookies.
-
Analyze the frequency of access and duration of stay of members and non-members to identify users' preferences and areas of interest and utilize this for target marketing.
-
We analyze details about the information you click on and the information you browse with interest to provide personalized services the next time you visit.
-
Analyze members' habits and use them as a measure for service improvement, etc.
Users have choices regarding cookies and can opt out of cookie storage using the instructions below. However, opting out may result in difficulties using some services. If you wish to opt out of cookie collection, please follow the instructions below.
web browser
-
Edge: Settings > Privacy, search, and services > Tracking prevention > Select whether to prevent tracking and the level
-
Chrome: Settings > Privacy & Security > Third-party Cookies > Block Third-party Cookies
-
Safari: Settings > Advanced > Block All Cookies
Mobile
-
Android
-
Chrome: Settings > Site settings > Third-party cookies > Choose whether to block third-party cookies
-
Samsung Internet: Settings > Browsing history > Clear browsing data > Select Cookies and site data > Delete data
-
-
iOS
-
Chrome: Settings > Privacy & Security > Clear Browsing Data > Select Cookies & Site Data > Clear Browsing Data
-
Safari: Settings > Safari > Advanced > Block all cookies
-
※Automated Collection: While using the Now Waiting service, information such as service usage records, access logs, and IP addresses may be automatically generated and collected. Cookies are used to provide differentiated information by device by loading advertising identifiers and device IDs, or for service improvements.
10. Processing of personal location information
The company protects users' personal location information in compliance with the Act on the Protection and Use of Location Information. Detailed information regarding the processing of personal location information can be found in the Location Information Terms of Use .
The company uses personal location information to provide the following services to the personal location information subject, and does not store location information in the system during the personal location information processing process.
-
Search results service using location information: When requesting information search or providing location information of the individual location information subject or mobile device, search results and nearby results (affiliated stores, etc.) using this location information are provided.
Pursuant to Article 16, Paragraph 2 of the Act on the Protection and Use of Location Information, the Company automatically records location information use/provision confirmation data for personal location information subjects in the location information system and stores it for six months.
The company does not store personal location information, but if the purpose of processing personal location information is achieved and destruction becomes necessary in the future, the information will be destroyed in a way that makes it impossible to recover or reproduce, as described below.
-
Personal information printed on paper: Shred or incinerate.
-
Personal information stored in electronic file format: Deleted using technical methods that render the records unrecoverable.
The company does not provide personal location information to third parties. If it becomes necessary to provide personal location information to a third party designated by the individual, the company will take the following measures.
-
Notify the recipient and purpose of provision to the personal location information subject in advance and obtain consent.
-
Immediately notify the person receiving the personal location information, the date and time of provision, and the purpose of provision to the personal location information subject through the relevant communication terminal device that collected the personal location information.
-
If the subject of personal location information uses a communication terminal device that does not have a text, voice, or video reception function, or requests in advance to be notified by a separate communication terminal device, e-mail, or electronic message, notification will be made by a communication terminal device, e-mail, or electronic message specifically designated in advance.
The rights and obligations of the company's guardians of children under the age of 8 and the methods of exercising them are as follows.
-
In the event that a person with a duty of care for a child under the age of 8 (hereinafter referred to as “children under the age of 8”) agrees to the use or provision of personal location information for the purpose of protecting the life or body of the child under the age of 8, the Company shall deem the consent of the child to have been given.
-
Children under 8 years old
-
A person who is incompetent
-
A person with a mental disability as defined in Article 2, Paragraph 2, Subparagraph 2 of the Welfare of Persons with Disabilities Act and who is a severely disabled person as defined in Article 2, Subparagraph 2 of the Act on Promotion of Employment of Persons with Disabilities and Vocational Rehabilitation (limited to a person registered as a disabled person as defined in Article 29 of the Welfare of Persons with Disabilities Act)
-
-
A guardian who wishes to consent to the use or provision of personal location information for the protection of the life or body of a child under the age of 8 must submit a written consent form to the company along with a document proving that he or she is the guardian.
-
If a guardian consents to the use or provision of personal location information of a child under the age of 8, the guardian may exercise all of the rights of the personal location information subject.
The company has appointed a location information manager to protect location information and handle complaints related to location information.
-
Location Information Manager: Jaeheon Kim
-
Phone number: 1522-5954
-
Email address: waiting@yanolja.com
※Location Information Collection: We provide location-based services to Now Waiting users, allowing us to provide search results and nearby results (such as affiliated stores) using their personal location information. When personal location information is collected, we obtain consent to the Location-Based Service Terms of Use.
If the company changes its privacy policy, it will notify users through its website and take steps to ensure that users can easily view the changes at any time.
※Processing Policy Revision: The personal information processing policy may be revised in accordance with changes in Now Waiting services or laws. When the personal information processing policy is revised, the revisions will be announced in advance through a notice.
Announcement Date: July 29, 2024
Effective Date: July 29, 2024
11. Revision of the Personal Information Processing Policy and Notification thereof
[Notice] Notice of Revision to Now Waiting's Privacy Policy (July 29, 2024)
Hello. This is Yanolja FNB Solution Co., Ltd.
To provide better service, we would like to inform you that Now Waiting Service's privacy policy has been changed as follows.
▶ Personal Information Processing Policy Change and Effective Date: July 29, 2024
▶ Major changes to the personal information processing policy
・ Changes to the layout and some wording of the privacy policy
Yanolja FNB Solution Co., Ltd. will always do its best to provide better service.
We ask for your continued interest and use of our services.
thank you