Personal information collected by Tomoarrow
1. Personal information processed with the consent of the information subject
(Common and general) Prevention of fraudulent transactions
Purpose of processing: Prevention of fraudulent transactions through arbitrary termination/re-subscription, prevention of fraud damage when reporting damage cases, prevention of money laundering, and confirmation of refund account when canceling payment
Processing items: Name, mobile phone number, account number, financial transaction history
Retention period: After membership withdrawal, retention period based on relevant laws and regulations, then destruction
(Common and General) Rewards
Purpose of processing: To prevent duplicate receipt and fraudulent behavior when receiving rewards according to events
Processing item: Mobile phone number
Retention period: Reward recipient's mobile phone number for 1 year
(Common and General) Biometrics
Purpose of processing: Biometric authentication
Processing items: To obtain device authorization and utilize biometric information stored on the device instead of a PIN number
(General) [Optional] Providing customized services
Processing items:
[Optional] General personal information: name, nickname, date of birth, gender, address, work and occupation information, email address, phone number, CI, membership identification value, family relationship, domestic and foreign status, public information, communication information, vehicle information, location information, delivery information, nationality, device identification information, (personal) business information, product application information, benefit information, event participation information, survey and questionnaire response history, counseling information
Credit Information: Card information, account information, transaction information, contract information, insurance information, loan information, financial product information, financial investment information, pension information, asset information, creditworthiness judgment information, tax information, real estate information, electronic payment method information, transaction setting history information, telecommunication credit transaction information
Information entered by the customer while using the Tomoarrow service, automatically generated information, and behavioral information may be used.
Retention period: Until withdrawal of consent or membership withdrawal
(General) [Optional] Provision of marketing services
Purpose of processing: [Optional] Providing advertisements, publicity, and promotions for products and services of Tomoarrow and its affiliates
Processing items: [Optional] Name, mobile phone number, email address, device identification number (device ID), PUSH token
Retention period: Until withdrawal of consent or membership withdrawal
(Payment) Tomopay
Purpose of processing: Issuance of cash receipts or proof of expenditure, storage of issuance means information
Processing items: Mobile phone number or cash receipt card number
Retention period: Until withdrawal of membership (withdrawal of consent) or termination of service
(Credit) [Optional] Credit model development
Purpose of processing: Development and verification of credit-related models, (statistical) analysis
Processing items: Financial transaction information collected by the company with the consent of the information subject, among the information inquired through the financial information inquiry service in the app or generated in the process of using the Tomoarrow service
Retention period: Upon withdrawal of consent or until the purpose of use is fulfilled
(Credit) Credit Laboratory
Purpose of processing: Providing customized credit and loan coaching services through the development and verification of Tomoarrow credit models, and other data statistics and analysis
Processing items:
[Information about individuals] Membership information
[App activity information] Tomoarrow app access history, service usage, payment/payment history and remittance information
Retention period: Upon withdrawal of consent or until the purpose of use is fulfilled
(Help) Tomoarrow Homepage/Customer Center (Common)
Purpose of processing: Receiving and responding to complaints related to the use of Tomoarrow's services
Items to be processed: Name, date of birth, mobile phone number, email address, complaint content
Retention period: Destroyed after completing the response to the complaint, or destroyed after a certain period of time based on relevant laws and regulations
(Authentication) Tomo Certificate
Purpose of processing:
To verify the uniqueness of user information by identifying whether the user is a Tomoarrow member.
Use of authentication service and identity verification service through Tomoarrow's electronic authentication service
To handle service-related complaints and disputes
Processing items: Name, date of birth, mobile phone number
Retention period: Until the purpose of use is achieved (when identifying the member) or until the relevant period as prescribed by relevant laws and regulations
(Authentication) Tomo Certificate
Purpose of processing:
To verify the identity of the user based on the real name to subscribe to Tomoarrow's electronic authentication service.
Issuance of a Tomo Certificate for use of the Tomoarrow Electronic Authentication Service
Provision of identity verification and electronic signature services through the Tomo e-certification service
Items to be processed: Identification documents (including a copy of the identification card and the date of issuance)
Items processed based on a copy of the front of the ID card:
National ID card: National ID number
Driver's license: Social security number, driver's license number
Alien registration card: Alien registration number
Passport: Social Security number, passport number
Retention period: 5 years from the date of expiration or revocation of the certificate (however, if the certificate was abandoned during the issuance process, it will be destroyed within 3 months)
(Authentication) Tomo Certificate
Purpose of processing:
Verification of identity and issuance of Tomo Certificate for subscription to the Tomo electronic authentication service.
When a user requests a backup of the Tomo certificate, the certificate is kept on the server
Items processed: Name, date of birth, gender, domestic/foreigner status, mobile phone number, financial institution name/account number/card number (last 8 digits), CI (linkage information), DI (duplicate subscription confirmation information)
CI (linked information) is destroyed immediately after completion of identity verification and certificate issuance
Retention period: 5 years from the date of expiration or revocation of the certificate (however, if the certificate is discontinued during the certificate issuance process, it is destroyed within 3 months) or until membership withdrawal (if required to be retained in accordance with relevant laws and regulations, the period is retained)
(Other) Tomo Easy Login/Membership Registration
Purpose of processing: Identification of Tomo members, use of Tomo Easy Login/Registration service, handling of service-related complaints and disputes
Items to be processed: Name, date of birth, mobile phone number
Retention period: Until you use the Tomo Easy Login/Registration service
(Other) CA Crash Report
Purpose of processing: Debugging, identifying crash errors
Processing items: Name, phone number, date of birth, carrier, gender, domestic/foreigner status
Retention period: 14 days and then immediately destroyed
2. Personal information that can be processed without the consent of the information subject
(Legal basis: Article 15 (1) (4) of the Personal Information Protection Act)
(Authentication) Tomo Certificate
Purpose of processing: Backing up Tomo certificates upon customer request
Items processed: Certificates
Retention period: 5 years from the date the certificate expires or is revoked
(Other) Events
Purpose of processing: Participation in events and sending out prizes
Items to be processed: Name, mobile phone number, address
Retention period: Destroyed without delay after sending out prizes