YONNY 海外特许经营商隐私政策 YONNY Overseas Franchisee Privacy Policy

北京鱼享信息技术有限公司始终认识到数据保护对其特许经营商而言是一项重要议题，并理解在处理个人数据时所承担的责任。本隐私政策阐述了北京鱼享信息技术有限公司及其关联公司（统称“YONNY”或“我们”）在向现有及潜在特许经营商的相关数据主体（“您”）提供服务和产品（“服务”）以及引用本隐私政策的网站、应用程序（“平台”）时，关于个人数据收集、使用、存储及其他处理活动的隐私实践。本政策解释了您对自身个人数据所享有的权利和选择。

Beijing Yuxiang Information Technology Co.Ltd. (北京鱼享信息技术有限公司) has always recognized data protection as an important issue for its franchisees and understands the responsibility that comes with the processing of personal data. This Privacy Policy describes the privacy practices of Beijing Yuxiang Information Technology Co., Ltd. and its affiliates (together “YONNY” or “we”) related to personal data collected, used, stored, and otherwise processed in connection with the services and products provided (the “Services”) and the websites, apps where this Privacy Policy is referenced (the “Sites”) to relevant data subjects of our current and potential franchisees (“You”). It explains the rights and choices available to you with respect to your personal data.

数据控制方：北京鱼享信息技术有限公司（“我们”或“YONNY”）。联系邮箱：privacy@yunizaiyiqi.com。联系地址：【北京市北京经济技术开发区景园北街2号5号楼】。

Controller: YONNY. Contact email: privacy@yunizaiyiqi.com. Address:[No. 5, Building 5, North Jingyuan Street, Beijing Economic-Technological Development Zone, Beijing]

数据保护官（DPO）：您可通过 privacy@yunizaiyiqi.com 联系我们的DPO。

Data Protection Officer (DPO): You may contact our DPO via privacy@yunizaiyiqi.com.

请注意，部分国家/地区特定条款可能适用，详见本隐私政策末尾。若国家/地区特定条款与本隐私政策其余部分存在不一致之处，则以国家/地区特定条款为准。

Please also be aware that some country/region-specific terms may be applicable as detailed at the end of this Privacy Policy, and where discrepancies exist between the country/region-specific terms and the remainder of this Privacy Policy, the country/region-specific terms will take precedence.

1. 本隐私政策的适用范围
I.Applicable Scope of this Privacy Policy

本隐私政策适用于YONNY作为数据控制方（即决定相关个人数据处理目的和方式的一方）在全球范围内（中国境外）开展的各种企业对企业（B2B）业务场景中的个人数据处理活动，包括：

This Privacy Policy applies to the personal data processing activities YONNY carry out as a data controller, i.e., as the party that determines the purpose and means of the said personal data processing activities, in the context of YONNY’s various business-to-business (B2B) scenarios outside the territory of China, including：

• 潜在特许经营商的咨询 consultations by prospective franchisees
• 特许经营协议的签订与履行 execution and performance of franchise agreements
• 特许经营合作的实施 implementation of franchise cooperation
• YONNY特许餐厅的运营与管理支持 operation and management support of YONNY franchised restaurants
• YONNY特许经营商的培训 and training of YONNY franchisees.

本隐私政策不适用于以下情况：

This Privacy Policy does not apply to：

• 关于YONNY员工/候选人或消费者个人数据的处理; personal data about YONNY employees/candidates or customers;
• YONNY代表第三方处理且由第三方决定处理目的与方式的个人数据（此时应以第三方隐私政策/通知为准）；或 personal data that YONNY process on behalf of third parties where the third party determines the purposes and means of processing (in which case the third party’s privacy notice/policy applies); or
• YONNY在中国境内进行的B2B个人数据处理活动（以另有适用政策为准）。 B2B personal data processing activities YONNY carry out within the territory of China (where a separate policy may apply).

2. 本隐私政策的内容
II.Contents of this Privacy Policy

本隐私政策提供了以下信息：

This Privacy Policy provides information about:

• YONNY可以收集的关于您的个人数据类型及可能进行的个人数据处理活动； The types of personal data YONNY may collect about you and personal data processing activities YONNY may carry out;
• 处理您个人数据的目的和法律依据； The purposes and legal basis of processing your personal data;
• 您个人数据的留存期限； The data retention periods of your personal data;
• 您个人数据的跨境传输； International transfers of your personal data;
• 您对个人数据的权利和选择； Your rights and choices about your personal data;
• YONNY为保护您个人数据所采取的措施； The measures YONNY take to protect your personal data;
• 如何联系我们； How to contact us; and
• 国家/地区特定附加条款。 Additional Country-specific Terms.

3. YONNY 收集和处理哪些个人数据
III.What Personal Data Is Collected and Processed by YONNY

个人数据是指与已识别或可识别的自然人相关的任何信息。可识别的自然人是指能够直接或间接地，特别是通过参照一个识别号码或通过一项或多项特定于该自然人的因素而被识别的自然人。

Personal data means any information relating to an identified or identifiable person. An identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to the natural person.

我们将在涉及特许经营商的各种B2B业务场景中收集和处理您的个人数据。主要场景、处理目的以及我们收集和处理的个人数据详情如下所示（敏感个人数据将以粗体加下划线标示）。无论如何，YONNY处理的个人数据仅限于实现本隐私政策所述目的所必需的数据。

We will collect and process your personal data in various B2B business scenarios involving franchisees. The main scenarios and purposes for our processing of your personal data, as well as the details of the personal data we collect and process, are set out below (sensitive personal data will be indicated in bold and underlined). In any event, the personal data processed by YONNY is limited to data necessary for the purposes described in this Privacy Policy.

(1) 特许经营相关信息咨询
Consultation on Franchise-Related Information

当您通过YONNY特许经营官方网站、特许经营热线、在线客服或电子邮件等渠道咨询我们时，我们将收集您的称呼、联系方式、意向加盟城市以及您自愿向我们提供的任何其他信息，以便回复您的咨询。

When you consult us through channels such as the YONNY franchise official website, franchise hotline, online customer service and email, we will collect your salutation, contact information, intended franchise city, and any other information you voluntarily provide to us, in order to respond to your inquiries.

(2) 申请成为特许经营商及其他合作
Application to Become a Franchisee and Other Cooperation

如果您希望成为我们的特许经营商或与我们开展其他形式的合作，为核实您的身份并在批准您的加盟申请后与YONNY签订特许经营协议，您需要填写《YONNY（海外门店）特许经营申请表》，并提交真实姓名、性别、身份证件号码、联系地址、电话/手机号码、电子邮箱地址等个人信息（具体信息可能因特许经营实体的身份而异）。此外，您还需提供您的投资状况、拟合作城市、合作模式、餐饮行业经验与背景、其他行业经验与背景以及个人经历与背景等信息，以便我们审核您的加盟申请。

If you wish to become our franchisee or engage in other forms of cooperation with us, for the purposes of verifying your identity and, upon approval of your franchise application, entering into a franchise agreement with YONNY, you will be required to fill out a YONNY (Overseas Store) Franchise Application Form and provide personal data such as your real name, gender, identification number, contact address, telephone/mobile number, and email address when submitting a franchise application (which may vary depending on the identity of the franchise entity). In addition, you will be required to provide information regarding your investment status, proposed cooperation city, cooperation model, experience and background in the catering industry, experience and background in other industries, as well as your personal experience and background, so that we may review your franchise application.

(3) 面试、选址与餐厅审核
Interview, location selection and Restaurant Review

在您的申请通过初步审核后，我们将进行线上或线下的面试。当您通过面试并申请进行选址审核时，您需要提供以下信息：姓名、性别、手机号码、身份证件号码、签约人身份证正反面照片、银行账户名、银行卡号、银行名称、经营模式、股东人数、餐饮行业经验与背景、其他行业经验与背景、投资状况、个人经历与背景，以及待审核餐厅的相关信息。

After your application has passed the preliminary review, we will conduct interviews either online or offline. Once you pass the interview and apply for location review, you will be required to provide information including your name, gender, mobile phone number, identification number, photographs of the front and back of the signatory’s identification card, bank account name, bank card number, bank name, business operation model, number of shareholders, catering industry experience and background, experience and background in other industries, investment status, personal experience and background, as well as information relating to the restaurant to be reviewed.

(4) 餐厅运营与管理
Restaurant Operation and Management

当您正式加入成为特许经营商后，我们将根据特许经营协议，在生产、运营、信息技术等领域为您提供支持，并通过YONNY To-B网络和信息系统协助您管理特许餐厅。您可以通过我们的系统获取管理、培训和运营支持，我们亦可以通过此类系统向您发送相关通知。

After you officially join as a franchisee, we will provide support in areas such as production, operations, and information technology in accordance with the franchise agreement, and assist you in managing your franchise restaurant through the YONNY To-B network and information systems. You may obtain management, training, and operational support through our systems, and we may also send you relevant notices via such systems.

为协助您开通餐厅钱包功能并遵守银行的反洗钱和受益所有人验证要求，我们需要获取并处理您在加盟申请审核期间提交的部分或全部信息，包括银行账户名、银行卡号、银行名称。我们还可能收集您的关联方（如受益所有人、法定代表人、控股股东等）的信息，包括其姓名、性别、手机号码、身份证件号码、身份证正反面照片、惯常居住地、电子邮箱地址以及与您的关系。

In order to assist you in enabling the restaurant wallet function and to comply with banks’ anti-money laundering and beneficial owner verification requirements, we need to obtain and process all or part of the information you submitted during the franchise application review, including bank account name, bank card number, and bank name. We may also collect information of your related parties (such as beneficial owners, legal representatives, controlling shareholders, etc.), including their name, gender, mobile phone number, identification number, photographs of the front and back of their identification cards, habitual residence, email address, and relationship with you.

此外，为确保YONNY产品和服务质量的一致性，我们可能会收集您餐厅的原材料订单、营业订单以及监控视频录像等信息，并在实地或远程检查中对不符合规范的操作场景进行拍照记录。在日常运营和管理中，我们还可能收集餐厅经理或您指定的其他人员的姓名、性别和手机号码等信息。

In addition, to ensure consistency in the quality of YONNY products and services, we may collect information such as your restaurant’s raw material orders, business orders, and surveillance video footage, and may take photographs of non-compliant operational scenarios during on-site or remote inspections. In daily operation and management, we may also collect information such as the name, gender, and mobile phone number of restaurant managers or other personnel designated by you.

当您参加我们的活动（包括但不限于运营培训课程和年度会议）时，我们可能会收集参与者的姓名、性别、手机号码、身份证件号码、培训学习内容及学习表现等信息。

When you participate in our activities (including but not limited to operation training sessions and annual meetings), we may collect participants’ names, gender, mobile phone numbers, identification numbers, training and learning content, and learning performance.

最后，关于特许餐厅员工的个人数据，我们将作为数据处理方协助数据控制方进行处理活动。

Finally, with respect to the personal data of franchise restaurant employees, we will assist the data controller in carrying out processing activities as a data processor.

(5) 在第三方外卖平台上开设餐厅
Opening Restaurants on Third-Party Food Delivery Platforms

如果您希望在与我们合作的第三方平台（如Grab、DoorDash、Uber Eats或其他类似平台）上开设与您的YONNY特许经营餐厅对应的线上餐厅，您需要向我们提供相关信息。我们将收集这些信息并提供给合作的第三方平台，以协助您在这些平台上开设线上餐厅。

If you wish to open an online restaurant corresponding to your YONNY franchise restaurant on third-party platforms cooperating with us (such as Grab, DoorDash, Uber Eats or other similar platforms), you will need to provide us with the relevant information. We will collect such information and provide it to the cooperating third-party platforms to assist you in opening an online restaurant on those platforms.

您需要提供以下信息（具体个人数据可能因您所在司法管辖区和目标第三方平台而异）：

You are required to provide the following information (the specific personal data may vary depending on your jurisdiction and intended third-party platform):

• (i) 特许经营餐厅信息，包括营业执照名称、实际经营餐厅名称、营业执照上显示的法定代表人/经营者姓名、营业执照地址、营业执照有效期、餐厅照片、食品经营许可证信息； Franchise restaurant information, including the business license name, operating restaurant name, name of the legal representative/operator as shown on the business license, address on the business license, validity period of the business license, restaurant photos, and food business license information;
• (ii) 特许经营商银行账户信息（可能因特许经营商是个体工商户、公司还是分公司而异）； Franchisee bank account information (which may vary depending on whether the franchisee is an individual business, company, or branch);
• (iii) 特许经营商负责人或特许餐厅员工的个人数据（包括身份证件号码、身份证照片、特许经营商负责人手持身份证照片、健康证照片），如适用。 Personal data of the franchisee’s responsible person or franchise restaurant employees (including identification number, identification card photos, photos of the franchisee’s responsible person holding the identification card, and health certificate photos), if applicable.

以上信息是在第三方平台开设线上餐厅所必需的。如果您不同意我们收集并将此类信息提供给第三方平台，我们将无法协助您在这些平台上开设线上餐厅。

The above information is necessary for opening an online restaurant on third-party platforms. If you do not consent to our collection of and provision of such information to third-party platforms, we will be unable to assist you in opening an online restaurant on those platforms.

(6) 反欺诈与安全防护
Anti-Fraud and Security Protection

为保障您的账户安全、交易安全以及YONNY To-B网络和信息系统的安全运行，在您使用我们服务期间，经您授权，我们可能会获取您的设备信息，包括设备属性、连接和状态信息，例如设备型号、唯一设备标识符（OAID/IMEI/Android ID/GAID/DEVICE_ID/IDFA、SIM卡/IMSI信息/手机号码）、设备MAC地址、软件列表以及电信运营商信息。

In order to safeguard your account security, transaction security, and the secure operation of the YONNY To-B network and information systems, during your use of our services and with your authorization, we may obtain your device information, including device attributes, connection, and status information, such as device model, unique device identifiers (OAID/IMEI/Android ID/GAID/DEVICE_ID/IDFA, SIM card/IMSI information/mobile phone number), device MAC address, software list, and telecom operator information.

为增强您使用服务期间的安全性，并更准确地防范钓鱼网站诈骗和木马病毒，经您授权或依法共享，我们可能会使用或整合您的个人数据与我们关联公司或其他相关方获得的信息。基于您的使用习惯和常用软件信息，我们将综合评估您的账户和交易风险，包括身份验证，以及防范、检测和调查潜在的欺诈、网络病毒、网络攻击以及其他违反我们或我们关联公司协议、政策或规则的行为，以保护您、其他用户、我们及我们关联公司的合法权益。我们还可能记录我们认为存在风险的某些链接（“URL”）。

To enhance security during your use of our services and to more accurately prevent phishing website fraud and Trojan viruses, we may use or integrate your personal data with information obtained by our affiliates or other relevant parties with your authorization or shared in accordance with the law. Based on your usage habits and commonly used software information, we will comprehensively assess the risk of your account and transactions, including identity verification, and the prevention, detection, and investigation of potential fraud, network viruses, cyberattacks, and other security risks, as well as conduct that violates our or our affiliates’ agreements, policies, or rules, in order to protect the legitimate rights and interests of you, other users, ourselves, and our affiliates. We may also record certain links (“URLs”) that we consider posing risks.

请注意，本服务并非为适用的数据保护法所定义的未成年人设计。如果您是未成年人，则不允许使用本服务。如果YONNY得知或被告知其已从儿童或未成年人处收集了个人数据，将尽快删除该信息。

Please be aware that the Services are not designed for children who are considered as minors under applicable data protection laws. If you are a minor, you are not allowed to use Services. If YONNY learn or are informed that it has collected personal data from a child or minor, it will delete that information as quickly as possible.

4. YONNY 为何处理您的个人数据
IV.Why Your Personal Data is Processed by YONNY

YONNY仅在法律允许的情况下使用您的个人数据。YONNY处理您个人数据的法律依据和目的如下：

YONNY only use your personal data as permitted by law. The legal bases and purposes of YONNY processing of your personal data are described below:

基于您的同意。
With your consent.

• 与您沟通，包括处理您关于特许经营相关事项的咨询、特许经营商申请审核和面试、餐厅运营和管理审核、第三方配送平台申请； to communicate with you, including processing your consultation on franchise-related information, franchisee application review and interview, restaurant operation and management review, third-party delivery platform application;
• 了解您的需求和兴趣，以便为您量身提供最合适的服务； to ascertain your requirements and interests and provide you with the most suitable Services;

为与您订立协议并提供服务。
To enter into agreement with you and provide you with Services.

• 创建终端用户账户以访问服务； To create an end-user account to have access to Services;
• 使YONNY能够管理与您的业务关系（连同订单、支持，包括服务用户的必要信息及服务安全）； To enable YONNY to manage its business relationships with you, (in conjunction with orders, support, including essential information for users of Services and security of Services);
• 运营、维护、管理和改进服务及平台。 To operate, maintain, administer and improve the Services and Sites.

基于以下合法利益。
To pursue the following legitimate interests.

YONNY基于以下合法利益处理您的个人数据：

YONNY process your personal data for purposes based on the following legitimate interests:

• 当您以YONNY品牌和商标为顾客提供服务时，使YONNY能够管理与您的业务关系； To enable YONNY to manage its business relationships when you are serving customers under the YONNY brand and trademark;
• 保护YONNY的专有信息； To protect the proprietary information of YONNY;
• 保护、调查和防范欺诈、有害、未经授权、不道德或非法活动，以及进行安全防范。 To protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity as well as for security and safety prevention.

YONNY在基于合法利益处理您的个人数据前，会考虑并权衡任何潜在的对您的影响（正面和负面）以及您的权利。除非我们获得您的同意，或法律另有要求或许可，否则我们不会在对您的影响超过我们处理个人数据的合法利益的情况下使用您的个人数据。

YONNY take into consideration and balance any potential impact on you (both positive and negative) and your rights before processing your personal data for purposes based on legitimate interests. Unless YONNY have your consent or is otherwise required or permitted to do so by law, YONNY will not use your personal data in circumstances where the impact on you outweighs its legitimate interests in processing your personal data.

为遵守适用法律。
To comply with applicable law.

• 管理YONNY与合规法律相关的法定义务，包括但不限于反腐败法、适用的出口法、由美国及其他国家发布的贸易制裁和禁运令（如有）。这可能包括 (i) 根据适用的受制裁主体清单，针对本隐私政策所载的全部用户注册信息以及您所提供的其他身份相关信息进行自动化筛查；(ii) 在受制裁主体清单更新或您更新信息时，定期重复此类检查；(iii) 若存在潜在匹配情况，中止访问服务；以及 (iv) 在存在潜在匹配情况时，联系您核实身份； To manage YONNY legal obligations related to compliance laws, including but not limited to anti-corruption laws, applicable export laws, trade sanctions, and embargoes issued, by the U.S. and other countries, if any. This may include (i) conducting automated checks of any user registration data identified in this Privacy Policy and other information you provide about your identity against applicable sanctioned-party lists; (ii) regular repetition of such checks whenever a sanctioned-party list is updated or when you update your information; (iii) blocking of access to Services in case of a potential match; and (iv) contacting you to confirm your identity in case of a potential match;
• 响应传票或政府主管部门的请求等合法要求和法律程序，如后文所述。 To comply with lawful requests and legal process such as to respond to subpoenas or requests from government authorities as detailed hereinafter.

5. 您的个人数据保留多久
V.How Long Your Personal Data is Retained

YONNY不会将您的个人数据存储超过必要期限，且仅在实现上述目的所需的时间内存储。保留期限可能因数据类别和处理活动而异。为确定个人数据的适当保留期限，YONNY将考虑个人数据的数量、性质和敏感程度、未经授权使用或披露您的个人数据可能造成的损害风险、YONNY处理您个人数据的目的以及YONNY是否能通过其他方式实现这些目的，以及适用的法律要求：

YONNY do not store your personal data for more time than necessary and only as long as required to fulfill the purposes set out above. Retention periods may vary depending on the data categories and the processing activities. To determine the appropriate retention period for personal data, YONNY will consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which YONNY process your personal data and whether YONNY can achieve those purposes through other means, and the applicable legal requirements:

• 经您同意收集的，保留至您撤回同意为止； where you gave your consent, until you withdraw it;
• YONNY与您或您的雇主签订了特许经营协议的，保留至协议有效期届满，且顺延至相关地方诉讼时效届满之时； where YONNY have entered into a franchise agreement with you or your employer, as long as the franchise agreement is in force plus the applicable local statutes of limitations;
• YONNY基于合法利益使用您的个人数据的，保留期限为保障个人信息公平处理的合理有限期间，或保留至您对YONNY的使用行为提出异议之时（若YONNY存在正当且有说服力的合法理由继续处理，且该理由优先于您提出异议的相关权益，或为实现、行使或抗辩相关法律主张之需的，除外）； where YONNY have a legitimate interest in using your personal data, for a limited period of time appropriate to ensure a fair processing of your personal data or until you object to YONNY’s use of your personal data, subject to YONNY’s compelling legitimate grounds for continued processing which override your interest in objecting or for the establishment, exercise or defense of legal claims;
• YONNY为履行法定义务需保留个人信息的，保留期限依适用法律规定确定； where YONNY are required to comply with a legal obligation, the retention period will be determined according to the applicable law;
• 为主张或抗辩相关法律主张而需使用您个人信息的，YONNY将保留您的个人数据至保留期限届满，或至所涉法律主张解决之时。 Where your personal data is required to assert or defend against legal claims, YONNY will retain your personal data until the end of the relevant retention period or until the claims in question have been settled.

在保留期限结束后，您的个人数据将根据适用的数据保护标准，通过相应流程和方法予以删除或匿名化处理。

At the end of the retention period, your personal data will be deleted or anonymized using process and methods in accordance with applicable data protection standards.

6. YONNY 可与谁分享您的个人数据
VI.With Whom YONNY May Disclose Your Personal Data

YONNY不会出租或出售您的信息。另一方面，为实现上述特许经营管理目的，YONNY可向以下类别的组织委托、披露或转让您的个人数据：

YONNY do not rent or sell your information. On the other hand, for the aforementioned franchise management purposes, YONNY may entrust, disclose or transfer your personal data with the following categories of organizations:

• YONNY集团内部：YONNY是一家跨国企业，在中国、美国和东南亚等地均设有餐厅。在此全球化背景下，YONNY维护着各种To-B网络和信息系统，以统一特许餐厅体验并提高效率。为此，YONNY可在YONNY集团内部（包括负责数字基础设施的子公司）为与本隐私政策一致的目的（例如，为您提供特许经营支持）共享您的个人数据。 Within YONNY Group : YONNY Group is a multinational business with restaurant presence in China, the United States and Southeast Asia. In that globalized context, YONNY maintains various To-B network and information systems, in order to unify franchise restaurant experience and increase efficiency. To that end, YONNY may need to share your personal data for purposes consistent with this Privacy Policy (e.g., to provide you with franchise support) within the YONNY group (including our subsidiary responsible for digital infrastructure).
• YONNY的服务提供商：YONNY可委托供应商、服务提供商和其他合作伙伴为我们处理信息，以提供更全面、高质量的特许经营支持。此类支持包括但不限于代为提供的技术基础设施服务、数据存储、处理和统计分析服务、短信发送服务、物流服务和支付处理服务。这些第三方在与YONNY签订的数据处理协议约束下，仅可根据YONNY的指示并按照本隐私政策的方式使用您的个人数据，且禁止为任何其他目的使用或披露您的个人数据。 With YONNY’s service providers : YONNY may entrust information to vendors, service providers, and other partners that support our business for processing, in order to provide you with more comprehensive and high-quality franchise support. Such support includes, without limitation, technical infrastructure services provided on our behalf, data storage, processing and statistical analysis services, SMS delivery services, logistics services, and payment processing services. These third parties, contractually bound by data processing agreements with YONNY, will use your personal data only as directed by YONNY and in a manner consistent with this Privacy Policy and are prohibited from using or disclosing your personal data for any other purpose.
• 为遵守适用法律而与第三方共享：根据适用法律规定，YONNY可能向政府或执法官员或私人方披露您的部分个人数据，(a) 如果YONNY善意地认为此类披露对于遵守法律程序（例如搜查令、传票或其他法院命令）是合理必要的，(b) 执行管理服务的条款和条件，(c) 保护YONNY、YONNY客户或公众的权利、财产或安全，以及 (d) 保护、调查和防范欺诈、有害、未经授权、不道德或非法活动。YONNY将审查这些请求，以确保其符合适用法律。如果请求索取过多信息，YONNY将尝试缩小范围，如果可能，将反对提供任何信息。 With third parties to comply with applicable laws : YONNY may, depending on the applicable law, disclose some of your personal data to government or law enforcement officials or private parties, (a) if YONNY believes in good faith that such disclosure is reasonably necessary to comply with legal process (for example, a warrant, a subpoena, or other court order), (b) enforce the terms and conditions that govern Services, (c) protect the rights, property, or safety of YONNY, YONNY’s customers, or the public and (d) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity. YONNY will review the requests to make sure they satisfy applicable laws. If a request asks for too much information, YONNY will try to narrow it, and if possible, will object to producing any information at all.
• 并购（M&A）场景：YONNY可在商业交易（或潜在商业交易）中，例如合并、兼并、收购、重组、资产出售或破产，或YONNY控制权变更、整体或部分清算时，转让或以其他方式共享其部分或全部业务或资产（包括您的个人数据）。在此情况下，YONNY将做出适当努力，要求接收方遵守本隐私政策。 M&A Scenarios : YONNY may transfer or otherwise share some or all of its business or assets, including your personal data, in connection with a business deal (or potential business deal) such as a merger, consolidation, acquisition, reorganization or sale of assets or in the event of bankruptcy, or a change of control or a total or partial liquidation of YONNY, in which case YONNY will make appropriate efforts to require the recipient to honor this Privacy Policy.

7. 跨境数据传输
VII.International Data Transfers

作为一家总部位于中国的跨国企业，YONNY可能会将您的个人数据从您所在的司法管辖区传输到另一个司法管辖区。例如，当YONNY为您提供远程特许经营支持、特许经营申请审核或餐厅运营支持服务时，就会发生这种情况。YONNY将遵循数据最小化原则，遵守当地关于数据传输的法律要求，并采取管理或技术措施（例如，如法律要求则签署数据传输协议），以确保您个人数据的保密性、完整性和可用性。

As part of a multinational business headquartered in China, YONNY may transfer your personal data from the jurisdiction in which you reside to another jurisdiction. This can for example happen when YONNY provides you with Services such as remote franchise support, franchise application review or restaurant operation support services. YONNY will, following the principle of data minimalization, observe local legal requirements on data transfers and carry out management and/or technical measures (such as signing data transfer agreements if legally bound) so as to ensure the confidentiality, integrity and availability of your personal data.

有关跨境数据传输的更多适用信息，请参阅“国家或地区特定附加条款”部分。如果您想进一步了解YONNY在传输您个人数据时所使用的机制，也可以联系我们。

Please refer to the Section “Additional Country or Regional Terms” for more information applicable to you on international data transfers. You can also contact us if you want further information on the mechanism used by YONNY when transferring your personal data.

8. 您对个人数据拥有哪些权利
VIII.What Are Your Rights with Respect to Your Personal Data

根据适用的数据保护法，您拥有以下一项或多项权利：

Depending on the applicable data protection laws, you may have some or all of the following rights with regard to your personal data:

• 访问您的个人数据； access your personal data;
• 获取YONNY存储的您的个人数据副本； obtain a copy of your personal data stored by YONNY;
• 请求更正、补充、更新或删除您的个人数据； request the rectification, completion, update or erasure of your personal data;
• 限制处理； restrict processing;
• 若处理基于合法利益，则有权对此类特定处理提出异议； object to specific processing of your personal data if that processing is based on legitimate interests;
• 数据可携权； data portability; and
• 如果对您个人数据的处理基于您的同意，您有权随时撤回该同意（例如，选择退出或退订营销通信）。 If the processing of your personal data is based on your consent, you have a right to withdraw that consent at any time (e.g. opt-out or unsubscribe from marketing communications).

无论您身处何地，YONNY都将尊重您提出的不再因营销目的而被联系的请求。

Regardless of where you live, YONNY will honor your request to opt-out of being contacted for marketing reasons.

如果您拥有YONNY To-B网络和信息系统的终端用户账户，您可以通过登录您的账户并联系我们来行使部分权利。否则，您可以通过发送电子邮件至 privacy@yunizaiyiqi.com 向我们提交请求来行使您的权利。

If you have an end-user account to the YONNY to-B network and information systems, you can exercise some of your rights by logging on to your account and contact us. Otherwise, you may exercise your rights by submitting your request to us by sending emails to privacy@yunizaiyiqi.com.

根据请求的范围，且在适用法律允许的情况下，YONNY可收取合理的费用以覆盖与此类请求相关的成本。YONNY可在适用法律法规规定的有限情况下拒绝您访问个人数据的请求。

Depending on the scope of the request, and if permitted under applicable law, YONNY may charge a reasonable fee to cover costs incurred in connection with such request. YONNY may deny access to your personal data in limited circumstances in accordance with applicable laws and regulations.

YONNY有权要求您提供特定信息以确认您的身份或处理您的请求。适用法律有权要求或许可YONNY拒绝您的请求，但在所有情况下，YONNY都会向您说明其立场，但须遵守法律限制。

YONNY may request specific information from you to confirm your identity or process your request. Applicable laws may require or permit YONNY to decline your request but in all cases, YONNY will provide you with an explanation of its position, subject to legal restrictions.

9. 我们如何保护您的个人数据
IX.How We Protect Your Personal Data

YONNY采用适当的技术和组织措施，保护您的个人数据在传输过程中及归我们所有后免遭丢失、滥用以及未经授权的访问、披露、更改和破坏。

YONNY maintains appropriate technical and organizational measures to protect your personal data from loss, misuse and unauthorized access, disclosure, alteration and destruction during transmission and once in its possession.

YONNY通过建立数据分类制度、数据安全管理规范和数据安全开发规范来管理和规范个人数据的存储和使用。我们使用保密协议、监控和审计机制来控制和保障数据安全。

YONNY manages and regulates the storage and use of personal data by establishing a data classification system, data security management specifications, and data security development specifications. We use confidentiality agreements, monitoring, and auditing mechanisms to control and safeguard data security.

YONNY仅允许需要知晓您个人数据的员工和其他授权人员访问相关信息。YONNY还要求所有可能接触到您个人数据的人员遵守相应的保密义务。

YONNY only allows employees and other authorized personnel who need to know your personal data to access relevant information. YONNY also requires all personnel who may have access to your personal data to comply with their corresponding confidentiality obligations.

然而，尽管YONNY努力保护您的个人数据，但鉴于互联网固有的风险，YONNY无法保证完全防止任何泄露。

However, while YONNY strives to protect your personal data, in light of the inevitable risks linked to the Internet, YONNY cannot guarantee full protection against any leak.

您应谨慎行事，防止个人数据遭受未授权访问。您对自身账户的密码及账户所载信息负有保密义务。因此，若您在共用计算机上使用本服务，务必注销会话。

It is important for you to exercise caution to prevent unauthorized access to your personal data. You are responsible for the confidentiality of your password and information appearing on your account. Consequently, you must ensure that you log out of your session in the event of shared use of a computer.

一旦发生数据安全事件，我们将根据适用的数据保护相关法律规定及时告知您。告知内容可能包含安全事件的基本信息和可能影响、我们已采取或将要采取的处置措施以及风险缓解建议等。我们将通过电子邮件、信函、电话、推送通知等方式通知您安全事件。当难以逐一通知每位最终用户时，我们将采用合理有效的方式发布公告。

In the event of a data security incident, we will promptly notify you in accordance with the applicable data protection laws, the notification may contain the basic information and possible impact of the security incident, the disposal measures we have taken or will take, and the risk mitigation suggestions, etc. We will notify you of the security incident by email, letter, telephone, push notification, etc. When it is difficult to notify every end-user one by one, we will adopt a reasonable and effective way to publish an announcement.

10. Cookie 和类似技术
X.Cookies and Similar Technologies

YONNY 使用的 Cookie
Cookies used by YONNY

为了改善您在我们服务或平台上的浏览体验，YONNY使用Cookie或其他类似技术（例如YONNY To-B网络和信息系统中的SDK），这些技术可能会处理您的个人数据。

In order to improve your browsing experience on our Services or Sites, YONNY uses cookies or other similar technologies (such as SDKs in YONNY To-B network and information systems) that may process your personal data.

根据服务的不同，YONNY使用不同类型的Cookie：

Depending on the Services, YONNY uses different types of cookies:

• 严格必要型Cookie始终启用，此类Cookie对于您正常使用本服务至关重要，无法关闭。例如，此类Cookie可助您保存个性化设置（如语言选择、服务呈现方式）。 Strictly necessary cookies are always used; as they are essential for you to properly use the Services and cannot be switched off. For example, they allow you to save your personalization settings (choice of language, presentation of a service).
• 功能型Cookie的使用旨在提升本服务性能，通过收集您使用服务时的信息，为您提供优化的功能和更个性化的体验。功能型Cookie还包括分析和性能型Cookie，可用于收集关于我们平台流量以及用户如何使用我们服务的信息。YONNY将使用此信息，提升网站运营效率，收集广泛的人口统计信息以及监控平台或服务上的活动水平。 Functional cookies are used in order to improve the performance of the Services, to provide you with optimized features and a more personal experience by collecting information when you use Services. Functional cookies also include analytics and performance cookies that are used to collect information about the traffic to our Sites and how users use our Services. YONNY uses this information to help operate Sites more efficiently, to gather broad demographic information and to monitor the level of activity on Sites or Services.

禁用 Cookie
Disabling Cookies

您可以通过Cookie横幅随时移除或拒绝功能型和广告型Cookie。但是，如果您不接受某些Cookie，服务的某些功能和特性可能无法正常工作，您在使用时可能会遇到一些不便。例如，YONNY可能无法识别您的计算机或移动设备，您每次访问我们的平台或访问我们的服务时都可能需要重新登录。

You can remove or reject functional and advertising cookies at any time through the cookies banner. However, if you do not accept certain cookies, some functionalities and features of the Services may not function properly, and you may experience some inconvenience in their use. For example, YONNY may not be able to recognize your computer or mobile device and you may need to log in every time you visit our Sites or access to our Services.

11. 您如何联系我们
XI.How You Can Contact Us

YONNY致力于确保您个人数据的隐私。如果您：

YONNY is committed to ensuring the privacy of your personal data. If:

• 对本隐私政策有任何疑问； you have any questions about this Privacy Policy;
• 在访问您的个人数据或行使上述权利时遇到任何问题； you encounter any issue when having access to your personal data or related to your rights as described above;
• 认为YONNY未遵守适用的当地数据保护法； you believe that YONNY is not complying with the applicable local data protection laws;
• 有理由相信您的个人数据安全已受到威胁或被滥用； you have a reason to believe that the security of your personal data has been compromised or misused.

您可以通过发送电子邮件至 privacy@yunizaiyiqi.com与我们联系。若您需要提起申诉，请注明所涉数据处理的名称或参考编号，并提供YONNY合理要求的其他补充信息。

You can contact us by sending email to privacy@yunizaiyiqi.com. If you need to lodge a complaint, please specify the name or reference of the concerned processing and provide any additional information as reasonably requested by YONNY.

12. 隐私政策的变更
XII.Changes to Privacy Policy

YONNY保留根据自身需求和情况或适用法律法规的要求，随时修改和更新本隐私政策的权利。我们建议您定期查阅此页面，以了解本公司隐私实务的最新信息。若本隐私政策发生重大变更，YONNY将通过电子邮件，或其认为合理有效送达您的其他方式通知您。这可能包括在本公司网站上发布特定公告，或通过本公司服务推送通知。

YONNY reserves the right to modify and update this Privacy Policy at any time in accordance with YONNY requirements and circumstances, or where required by applicable laws and regulations. YONNY encourage you to periodically review this page for the latest information on its privacy practices. If major changes occur to this Privacy Policy, YONNY may inform you via email or another manner that YONNY believes reasonably likely to reach you. This may include posting a specific announcement on our Sites or sending notices through our Services.

本隐私政策的任何修改，自YONNY发布新条款之日起，及/或自相关变更在本公司服务中实际生效之日起，正式生效。

Any modifications to this Privacy Policy will be effective upon YONNY posting of the new terms and/or upon implementation of the new changes in the Services.

13. 国家/地区特定附加条款
XIII.Additional Country or Regional Terms

根据您所在的司法管辖区，以下特定条款可能适用于您。当本隐私政策提及“个人数据”时，应根据您所在司法管辖区适用的相关数据保护法律，相应地解释为“个人信息”或其他类似术语。若这些国家/地区特定条款与本隐私政策其余部分存在不一致之处，则以国家/地区特定条款为准。

Depending on the jurisdiction in which you reside, some additional terms as detailed below may be applicable to you. Where the Privacy Policy refers to “personal data”, it shall be interpreted, as applicable, to mean “personal information” or other similar term as defined by the applicable data protection law in the jurisdiction in which you reside. Where discrepancies exist between these country/region-specific terms and the remainder of this Privacy Policy, the country/region-specific terms will take precedence.

1. 美国
USA

加州（CCPA） / California (CCPA)

本加州附录适用于加利福尼亚州居民，根据2018年《加州消费者隐私法案》（经《加州隐私权法案》修订，统称“CCPA”）对本隐私政策进行补充。

This California Addendum applies to individuals who are residents of the State of California and supplements the Privacy Policy in accordance with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “ CCPA ”)

• 收集的个人信息类别 / What are the Categories of Personal Information Collected: 除本隐私政策中描述的类别外，在法律允许的范围内，YONNY可收集按CCPA界定的下述个人信息类别：身份识别信息；商业信息；互联网或其他电子网络活动信息；职业或与就业相关的信息；以及敏感个人信息（如政府核发的身份证号码、金融账户信息等）。 In addition to the categories described in the Privacy Policy, YONNY may collect the following categories of personal information as defined under the CCPA: identifiers; commercial information; internet or other electronic network activity information; professional or employment-related information; and sensitive personal information (such as government-issued identification numbers and financial account information), to the extent permitted by law.
• 使用目的 / Purposes of Use: 个人信息的收集和使用是为了本隐私政策中描述的商业和业务目的，包括特许经营申请审核、合同管理、合规、防欺诈和IT系统安全。 Personal information is collected and used for the business and commercial purposes described in the Privacy Policy, including franchise application review, contract management, compliance, fraud prevention, and IT system security.
• 披露与共享 / Disclosure and Sharing: YONNY不会出于跨情境行为广告的目的出售或共享个人信息。YONNY可能会根据本隐私政策的描述，向服务提供商、承包商、关联公司和主管部门披露个人信息。 YONNY does not sell or share personal information for cross-context behavioral advertising. YONNY may disclose personal information to service providers, contractors, affiliates, and authorities as described in the Privacy Policy.
• 您的权利和选择 / What Are Your Rights and Choices: 根据您的居住州，您可能有权要求YONNY向您披露有关我们收集和使用您个人信息的某些信息。该信息可能包括： Depending on your state of residence, you may have the right to request that YONNY discloses to you certain information about YONNY’ collection and use of your personal information. That information may include:
  • YONNY收集的关于您的个人信息类别； The categories of personal information YONNY collected about you;
  • YONNY收集您个人信息的来源类别； The categories of sources from which YONNY collected your personal information;
  • YONNY收集或共享您个人信息的业务或商业目的； YONNY’ business or commercial purpose for collecting, or sharing your personal information;
  • YONNY与之共享您个人信息的第三方类别（如有）； The categories of third parties with whom YONNY shares your personal information, if any;
  • (v) 您的个人信息副本及相关收件人清单（如适用）。 A copy of your personal information and a list of recipients, as applicable.

经过验证，加州居民有权：(i) 知晓收集了哪些个人信息，以及这些信息的用途、披露或共享情况；(ii) 访问个人信息副本；(iii) 请求删除；(iv) 请求更正不准确的个人信息；(v) 限制敏感个人信息的使用和披露（如适用）；以及 (vi) 不会因行使这些权利而受到歧视。

Subject to verification, California residents have the right to: (i) know what personal information is collected, used, disclosed, or shared; (ii) access a copy of personal information; (iii) request deletion; (iv) request correction of inaccurate personal information; (v) limit the use and disclosure of sensitive personal information (where applicable); and (vi) not be discriminated against for exercising these rights.

请求可通过电子邮件发送至 privacy@yunizaiyiqi.com 提交。授权代理人可根据CCPA代表您提交请求。

Requests may be submitted via email at privacy@yunizaiyiqi.com. Authorized agents may submit requests on your behalf in accordance with the CCPA.

纽约（SHIELD 法案） / New York (SHIELD Act)

本纽约附录适用于身处纽约州的个人。YONNY将根据纽约州适用的法律处理个人数据（包括纽约SHIELD法案）。

This New York Addendum applies to individuals located in New York. YONNY processes personal data in accordance with applicable New York laws, including the New York SHIELD Act.

• 数据安全 / Data Security: YONNY将遵循SHIELD法案的要求，建立合理的管理、技术和物理保障措施，以保护个人数据的安全性、机密性和完整性。 YONNY maintains reasonable administrative, technical, and physical safeguards to protect the security, confidentiality, and integrity of personal data, consistent with the SHIELD Act requirements.
• 数据泄露通知 / Data Breach Notification: 如果发生涉及纽约州居民个人数据的数据安全泄露事件，YONNY将根据纽约州适用的数据泄露通知的相关法律履行告知义务。 In the event of a data security breach involving New York residents’ personal data, YONNY will provide notification in accordance with applicable New York data breach notification laws.

2. 新加坡（PDPA）
2.Singapore (PDPA)

本新加坡附录适用于受新加坡《2012年个人数据保护法》（“PDPA”）管辖的个人。

This Singapore Addendum applies to individuals subject to the Personal Data Protection Act 2012 of Singapore (“ PDPA ”).

• 数据保护官（DPO） / Data Protection Officer (DPO): 我们已任命一名DPO来监督我们对PDPA的合规情况。您可通过 privacy@yunizaiyiqi.com 联系我们的DPO。 We have appointed a DPO to oversee our compliance with the PDPA. You may contact our DPO via privacy@yunizaiyiqi.com.
• 数据传输 / Data Transfers: 在将数据传输至我们位于中国的总部时，我们确保接收方对所传输的个人数据提供的保护标准，与新加坡PDPA规定的保护标准相当。 When transferring data to our headquarters in China, we ensure the receiving party provides a standard of protection to the personal data so transferred that is comparable to the protection under the Singapore PDPA.

3. 马来西亚（PDPA）
3.Malaysia (PDPA)

本马来西亚附录适用于受马来西亚《2010年个人数据保护法》（“马来西亚PDPA”）管辖的个人。

This Malaysia Addendum applies to individuals subject to the Personal Data Protection Act 2010 of Malaysia (“Malaysia PDPA”).

• 敏感个人数据 / Sensitive Personal Data: 根据马来西亚PDPA，“敏感个人数据”包括与个人身体或精神健康状况、政治观点、宗教信仰或其他法律规定类别相关的数据。 我们仅在取得数据主体的明确同意，或在法律允许的其他情形下处理敏感个人数据。 Under the Malaysia PDPA, “sensitive personal data” includes personal data relating to a data subject’s physical or mental health, political opinions, religious beliefs, or other categories prescribed by law. We process sensitive personal data only with the explicit consent of the data subject or where otherwise permitted under the Malaysia PDPA.
• 数据传输 / Data Transfers: 个人数据可根据马来西亚PDPA规定，传输至马来西亚境外，包括在已采取充分保障措施或已获得同意的情况下。 Personal data may be transferred outside Malaysia in accordance with the Malaysia PDPA, including where adequate safeguards are in place or consent has been obtained.

4. 泰国（PDPA）
4.Thailand (PDPA)

本泰国附录适用于受泰国《个人数据保护法（佛历2562年，2019年）》（“泰国PDPA”）管辖的个人。

This Thailand Addendum applies to individuals subject to the Personal Data Protection Act B.E. 2562 (2019) of Thailand (“ Thailand PDPA ”).

• 合法基础 / Lawful Bases: YONNY根据泰国PDPA允许的同意、合同必要性、法定义务或合法利益，处理个人数据。 YONNY processes personal data based on consent, contractual necessity, legal obligations, or legitimate interests, as permitted under the Thailand PDPA.
• 数据主体权利 / Data Subject Rights: 您有权访问、更正、删除、限制、数据可携、异议以及撤回同意，但须遵守法定条件。 You have the right to access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent, subject to statutory conditions.
• 跨境传输 / Cross-Border Transfers: 向泰国境外传输个人数据将遵守泰国PDPA项下的适用要求。 Transfers of personal data outside Thailand will be conducted in compliance with applicable requirements under the Thailand PDPA.

5. 越南（PDPL）
5.Vietnam (PDPL)

本越南附录适用于受越南现行有效的个人数据保护法规（包括但不限于第91/2025/QH15号《个人数据保护法》及第356/2025/ND-CP号法令，以下统称“越南PDPL”）管辖的个人。

This Vietnam Addendum applies to individuals subject to currently effective personal data protection laws and regulations of Vietnam (including but not limited to Personal Data Protection Law (No. 91/2025/QH15) and Decree No. 356/2025/ND-CP，collectively "Vietnam PDPL").

• 数据处理与同意 / Data Processing and Consent: YONNY基于数据主体的同意，以及越南PDPL认可的其他合法依据处理个人数据。针对敏感个人数据，若法律有要求，YONNY将另行取得同意。 YONNY processes personal data based on data subject consent and other lawful grounds recognized under the Vietnam PDPL. Separate consent may be obtained where required for sensitive personal data.
• 数据主体权利 / Data Subject Rights: 根据越南法律，您有权获知信息、给予和撤回同意、访问、更正、删除、限制处理以及向主管当局投诉。 Under Vietnamese law, you have the right to be informed, to give and withdraw consent, to access, to correct, to delete, to restrict processing and to complain to the competent authorities.
• 跨境传输 / Cross-Border Transfers: 当个人数据传输至越南境外时，YONNY将遵守越南PDPL项下适用的备案、评估和报告要求，除非越南PDPL规定的相关豁免适用。 Where personal data is transferred outside Vietnam, YONNY will comply with applicable filing, assessment, and reporting requirements under the Vietnam PDPL, unless relevant exemptions under the Vietnam PDPL apply.

6. 印度尼西亚（PDPL）
6.Indonesia (PDPL)

本印度尼西亚附录适用于受印度尼西亚第27/2022号《个人数据保护法》（“印尼PDPL法”）管辖的个人。

This Indonesia Addendum applies to individuals subject to Law No. 27 of 2022 on Personal Data Protection of Indonesia (“Indonesia PDPL”).

• 合法处理 / Lawful Processing: YONNY基于同意、合同必要性、法定义务或印尼PDPL法承认的其他合法依据处理个人数据。 YONNY processes personal data based on consent, contractual necessity, legal obligations, or other lawful bases recognized under the Indonesia PDP Law.
• 数据主体权利 / Data Subject Rights: 您有权访问、更正、补充、更新、删除、撤回同意以及对某些处理活动提出异议，但须遵守适用法律。 You have the right to access, rectify, complete, update, delete, withdraw consent, and object to certain processing activities, subject to applicable law.
• 跨境传输 / Cross-Border Transfers: 个人数据的跨境传输将遵守印度尼西亚法律要求，包括确保接收方提供充分保护或在需要时获得同意。 Cross-border transfers of personal data will be carried out in compliance with Indonesian legal requirements, including ensuring adequate protection by the recipient or obtaining consent where required.
• 投诉 / Complaints: 您可根据适用法律，就个人数据处理事宜向YONNY或相关印度尼西亚监管机构提出投诉。 You may submit complaints regarding personal data processing to YONNY or to the relevant Indonesian supervisory authority, in accordance with applicable law.