Published: October 14, 2024
Version: 1
Consent to the Processing of Biometric Data and Automated Decision-Making during Digital Identification via aIDentix
By clicking “Agreed,” “Begin Verifying”, “Start Verifying” or similar actions, or by using the aIDentix Services, you agree to enter a legally binding contract with aIDentix (the “Service Provider”) for the purpose of using the aIDentix digital identity verification and KYC service (the “Service”). If you do not agree to these Terms, do not click “Agreed” (or similar), and do not access or otherwise use any of our Services.
I. General Terms
This Consent to the Processing of Biometric Data and Automated Decision-Making during Digital Identification via aIDentix applies to “aIDentix” ltd. a Bulgarian company registered in the Commercial Register at the Registry Agency under UIC 204788710, with mailing address: 5A Baku str, floor 6, 1700 Sofia, Bulgaria, email: office@aidentix.com (“aIDentix”, “Service Provider”, “we,” “us,” or “our”).
As part of the digital identity verification process, aIDentix requires your explicit consent to collect, process, and use your biometric data. This data includes facial recognition information obtained from a selfie or video and the image of your identification document. In addition, aIDentix may use automated decision-making as part of this process to determine whether the digital identification is successful.
This consent form explains how aIDentix will process your biometric data and how automated decision-making will be used. It also outlines your rights under the General Data Protection Regulation (GDPR).
By proceeding with the digital identification process, you are providing your explicit consent to the processing of your biometric data and the use of automated decision-making as described below.
II. What Biometric Data Do We Collect?
We will collect and process the following types of biometric data during the digital identification process:
- A facial scan from a selfie photo or video you provide.
- A facial image from your government-issued identification document (e.g., passport or ID card).
- Data related to the geometry of your face, which will be compared between the selfie/video and the identification document to verify your identity.
III. Purpose of Processing Biometric Data
We process your biometric data for the following purposes:
- Identity Verification: To confirm that the individual submitting the selfie or video is the same as the individual in the identification document.
- Liveness Detection: To ensure that you are physically present and to prevent fraud by verifying that the selfie or video was captured in real-time.
- Fraud Prevention: To detect and prevent identity fraud by comparing your biometric data to ensure consistency between the selfie/video and the identification document.
Your biometric data is necessary for the accurate and secure completion of the identity verification process. Without this data, aIDentix cannot complete the verification.
IV. Automated Decision-Making
As part of the digital identification process, aIDentix uses automated decision-making technology to assess the validity of your identification document and biometric data. This means that the decision about whether your digital identification is successful may be made automatically, without human intervention.
The automated decision-making system evaluates the following:
- Whether the biometric data from your selfie or video matches the biometric data from your identification document.
- Whether the liveness detection process confirms your physical presence.
This automated decision will determine if the digital identification is approved, rejected, or requires further review.
V. Legal Basis for Processing Biometric Data
Under Article 9 of the GDPR, biometric data is classified as a special category of personal data. aIDentix processes your biometric data based on your explicit consent. By proceeding with the digital identification process, you are voluntarily agreeing to the collection, processing, and use of your biometric data for the purposes outlined above.
VI. Retention of Biometric Data
Your biometric data will be retained only for the time necessary to complete the identity verification process. Once the process is complete, your biometric data will be securely deleted unless aIDentix is required to retain it by law.
- If the verification is successful, biometric data will be deleted immediately after the Corporate Client receives the verification result.
- If the verification is unsuccessful or cancelled, biometric data will be deleted immediately after the conclusion of the process.
VII. Your Rights under the GDPR
Under the GDPR, you have the following rights regarding your personal and biometric data:
- Right to Withdraw Consent: You have the right to withdraw your consent to the processing of biometric data at any time. However, please note that withdrawal of consent may prevent the completion of the identity verification process.
- Right to Access: You have the right to request access to the biometric data we have collected from you and obtain information about how it has been used.
- Right to Rectification: You have the right to request the correction of any inaccurate or incomplete biometric data we hold about you.
- Right to Erasure: You may request the deletion of your biometric data, subject to legal requirements and our data retention policy.
- Right to Restriction of Processing: You may request that we limit the processing of your biometric data in certain circumstances.
- Right to Object: You have the right to object to the processing of your biometric data if you believe it is not being processed in accordance with GDPR principles.
- Right to Not Be Subject to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing (including profiling) if it has significant legal effects on you. In the context of this verification process, you may request human intervention if the automated decision is unsatisfactory.
To exercise any of these rights, please contact us at privacy@aidentix.com
VIII. Data Security
Your biometric data is processed securely, using encryption in compliance with GDPR standards. Access to your data is strictly limited to authorized personnel and is shared only with the Corporate Client that requested the verification.
IX. How to Withdraw Consent
You can withdraw your consent for the processing of biometric data and automated decision-making at any time by contacting us at privacy@aidentix.com. Please note that withdrawing consent may result in the termination of the identity verification process.
X. Contact Information
If you have any questions about this consent form or your rights under the GDPR, please contact us at:
aIDentix ltd.
5A Baku str., floor 6, Sofia, Bulgaria
XI. Acknowledgement and Consent
By proceeding with the digital identification process, you confirm that you have read, understood, and agree to the processing of your biometric data and the use of automated decision-making as described above.
Ready to get started?
Hop on a call and let our identity experts help you integrate our automated solution into your existing processes.
aIDentix is a seamless solution for identity verification that reduces friction and manual work associated with onboarding new customers, while ensuring compliance with KYC regulations by leveriging OCR technology and machine-learning.