personr

1. Collection and Use of Personal Information
2. Types of Personal Information Subject to Processing
3. Processing of Facial Images
4. Purpose and Delegation of Processing
5. Data processing activities
6. Retention and Destruction of Personal Information
7. Data Subject Rights
8. Acknowledgement and Agreement

1. Collection and Use of Personal Information

My name, date of birth, relevant document number, and other means of identification for the purposes of obtaining this consent shall be established in the course of the processing of my PII carried out in accordance with this consent.

My biometric information, the processing of which I hereby agree and express my voluntary and informed consent, includes facial features or facial scans.

2. Types of Personal Information Subject to Processing

The consent for the processing of personal data includes the following PII:

General personal data:

‍full name, sex, personal identification code or number, date of birth, legal capacity, nationality and citizenship, location (street, city, country, postcode);

Facial image data:

‍photos of a face (including selfie images) and photo or scan of a face on the identification document, videos, and sound recordings;Biometrical data: facial scan(s);

Identity document data:

‍document type, issuing country, number, expiry date, MRZ, information embedded into document barcodes (may vary depending on the document), security features;

Banking details:

‍cardholder name, expiry date, first six and last four digits of the card number, data extracted from documents provided as proof of source of funds/wealth;

Contact details:

‍address, e-mail address, phone number, IP address;Technical data: information regarding the date, time, and activity in the Services; IP address and domain name;

Software and hardware attributes: camera name and type, general geographic location (e.g., city, country) from Data Subject’s device;

Unique identifier:

‍Applicant ID created only for the association Data Subject and its PITT inside the Informational System;

Relevant publicly available data:

information regarding a person being a Politically Exposed Person (PEP) or included in sanctions lists.

3. Acknowledgement of Processing Purposes

Some of these PII types may not be processed depending on the Company's requirements.

I acknowledge and agree that facial images of myself are processed to confirm the liveliness of my face and/or to confirm that a given identity document is presented by me, the legitimate owner.

Processing shall be done for the purposes of the Company and may include compliance with applicable AML/CFT Acts, anti-fraud laws and regulations, age restriction acts, or other laws and regulations and/or the Company’s customer due diligence procedures.

Processing will also be carried out for other compatible purposes of the Service Provider acting as a separate business. Such compatible purposes include service development, fraud and criminal activity prevention, litigation hold, and statutory obligations.

The PII processed by the Service Provider for its own purposes includes biometric data and is defined in Section 2 above.

4. Delegation of PII Processing by the Company

I acknowledge that the Company is the primary data controller for the personal and biometric information I provide. The Service Provider acts as a data processor on behalf of the Company unless otherwise stated. In some cases, the Service Provider may act as a data controller for its own compatible purposes (e.g., fraud prevention), in accordance with applicable privacy laws.

I understand I may contact either the Company or the Service Provider to exercise my data rights, depending on the nature of the request and data relationship.

I confirm that I am authorised to provide this identity documentation, and I consent to this information being checked with third-party verification partners, which include verification by the document issuer, authorised record holder, or credit reporting agency.

The Company may entrust the processing of my PII and biometrics information to third party verification partners, including the Service Provider, through which the Company collects and processes my data if it is necessary for the processing purposes.

The Service Provider stores personal and biometric information in secure cloud storage solutions (such as Amazon Web Services or Google Cloud), which may be located in Australia or overseas. Where overseas transfer is required, we take reasonable steps to ensure that such recipients do not breach the Australian Privacy Principles, by putting in place contractual and technical safeguards.

I acknowledge that my PII and biometric information may be disclosed to entities associated with the Service Provider to achieve the purposes of the processing under this Consent. The Service Provider guarantees that such entities, and all subcontractors, implement appropriate technical and organisational measures to ensure personal data safety.

I agree that my PII and biometric information shall be processed by means of automated text extraction, authenticity checks, and other automated processing methods.

5. Data Processing Methods

Biometric processing may include liveness checks, facial comparisons with identity documents, and fraud detection. The Service Provider may also compare new images with previously verified records to prevent duplicate identities and spoofing. Checks may include Politically Exposed Persons (PEPs), sanctions lists, and adverse media databases.

The consent hereby covers all processing activities: collection, recording, structuring, storage, adaptation, retrieval, use, disclosure, cross-border transfer, restriction, erasure, and destruction.

6. Data Subject Rights

I have been informed of my rights to:

Withdraw consent;

Access and correct my personal data;

Request suspension or erasure of processing (subject to legal requirements);

Object to processing or profiling;

Lodge complaints with the Service Provider, the Company, the authorised record holder, or applicable privacy regulators.

These rights may be exercised by contacting privacy@personr.co or the Company directly.

Australian residents may also view and contact:

https://www.idmatch.gov.au/individuals

7. Retention and Destruction of Personal Information

PII will be retained based on the Company’s instructions and legal obligations. Biometric data processed independently by the Service Provider will be destroyed after its purposes are fulfilled or after seven (7) years, whichever is sooner, except where shorter limits apply (e.g. 1 year for Texas residents; 3 years for Illinois residents).

Retention periods for specific U.S. states only apply to residents of those jurisdictions. For all other users, including Australians, retention will comply with relevant national laws (e.g. Privacy Act 1988 (Cth)).

8. Acknowledgement and Agreement

I represent that I have read and voluntarily agree to the provisions of this Consent.