Version of February 10 2026

Consent to identification of person and verification of person’s identity data with the use of information technology means (video identification session)

By clicking the checkbox, I hereby express my explicit consent to the identification of my person and the verification of my identity through a video-identification session. The consent is provided to the organisation with which I wish to establish a business relationship after completion of the KYC process (hereinafter – the “Company”). I hereby acknowledge that my personal data will be processed by the Company’s technical service provider, Sumsub Group of Companies (hereinafter – “Service Provider” or “Sumsub”), in order to verify my identity for the Company’s purposes of complying with Spanish anti-money laundering legislation (Law 10/2010 and its implementing regulations) and the authorisation criteria issued by SEPBLAC (Servicio Ejecutivo de la Comisión de Prevención del Blanqueo de Capitales e Infracciones Monetarias). Please refer to Sumsub Privacy Notice for details about the identity and contact details of Sumsub.

I acknowledge and agree that/to:

  • 1. My identity will be verified remotely by means of a real-time video identification session, as an alternative to face-to-face identification, in accordance with SEPBLAC-authorised procedures.
  • 2. I expressly consent to the audio and video recording of the entire identification session. I understand that the Service Provider will ensure the integrity, non-alteration, and confidentiality of the recording
  • 3. I will personally participate in the session and will display my face and the original, valid identity document requested, allowing its data and security features to be captured and verified.
  • 4. Facial images of myself are processed to confirm the liveliness of my face and/or to confirm that a given identity document is presented by me, its legitimate owner.
  • 5. I may receive purely technical assistance from another person during the session, solely to resolve technical difficulties, without that person participating in the identification process.
  • 7. All information and data submitted by me is true and accurate.
  • 8. I am aware of the consequences associated with the submission of incorrect, misleading or incomplete information, such as rejection of the application or other as prescribed by law.
  • 9. The audio and video streams of the video identification session will be recorded and stored for as long as it is necessary for AML purposes.
  • 10. The delegation of personal data processing by the Company:
  • 10.1. I know the Company details (including the address), which is the data controller. Any orders, directions or instructions for processing, designation of the purposes of the processing, determination of personal data subject to processing and other similar matters are the responsibility of the Company.
  • 10.2. I understand that personal data may be disclosed to entities associated with Sumsub Group of Companies or to its sub-processors that are obliged to implement appropriate technical and organisational measures to ensure the safety of the personal data to achieve the purpose of the processing under this consent.
  • 11. Data processing methods

    This consent covers the following processing activities: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission to the Company or Service Provider and data processors, dissemination or otherwise making available for the performance of a task carried out in the public interest or in the exercise of official authority, transfer (including cross-border transfer, where necessary), alignment or combination, restriction, erasure and destruction. Personal data are processed by video identification means, means of automated reading, verification of the authenticity and other automated processing as stated in the Privacy Notice available here, which includes the processing of facial scan while passing liveness, video-selfie or video identification process, biometric authorisation, face comparison from the photo of an identity document and the facial image, searching of multiple identity creation, work and development of fraud control network to detect and prevent fraud and criminal activity. The personal data may be checked in multiple databases, including International Politically Exposed Persons (PEPs), Sanctions, Country-Specific Sanctions Lists and other ‘watch’ lists. It may also be reviewed in media information sources.

  • 12. Types of personal data subject to processing

    The following categories of personal data are processed:

    • general personal data: full name, sex, personal identification code or number, date of birth, legal capacity, nationality and citizenship, location (street, city, country, postcode);
    • facial image data; photos of a face (including selfie images) and photo or scan of a face on the identification document, videos, and sound recordings;
    • biometrical data: facial scan(s);
    • identity document data: document type, issuing country, number, expiry date, MRZ, information embedded into document barcodes (may vary depending on the document), security features;
    • banking details: cardholder name, expiry date, first 6 and last 4 digits of the card number, data extracted from documents provided as proof of source of funds/wealth; contact details: address, e-mail address, phone number, IP address;
    • technical data: information regarding the date, time and activity in the Services; IP address and domain name; software and hardware attributes (camera name and type); general geographic location (e.g., city, country) from Data Subject’s device;
    • unique identifier (Applicant ID) created only for the association Data Subject and its personal data inside the Informational System;
    • relevant publicly available data: information regarding a person being a Politically Exposed Person (PEP) or included in sanctions lists;
    • personal information that the Data Processor has received from the Controller, such as contact details;
    • personal information additionally provided by Data Subjects, such as data obtained during their communications with the Data Processor (e.g., requests, reports)
    • activity profile, area of activity, purpose and nature of establishment of a business relationship, connection of economic or family interests with the country of residence,
    • expected volumes of the services used in appropriate cases.
  • 13. Data subject rights

    I hereby represent that I have been informed about my rights to:

    • withdraw consent to personal data processing, if the processing is based on consent, not other legal basis requiring notification only;
    • access and adjust personal data;
    • make a justified demand in writing to suspend the processing of personal data due to a particular reason;
    • object to the processing of personal data;
    • object to the transfer of personal data; including the right to object to engaging any third parties to process personal data;
    • object to being subject to a decision based solely on automated processing/profiling;
    • make a justified demand in writing to erase personal data subject to applicable laws and regulations;

    all of which may be exercised by contacting the Company directly or the Service Provider with a respective notice at [email protected].

    Some rights are not exclusive and may be limited to the statutory legal obligations vested in the Company or the Service Provider.

    I also acknowledge that I have the right to lodge a complaint with the supervisory authority. When it is related to the processing activities of the Company, please refer to the methods specified in its privacy policies. When it relates to the processing activity of Sumsub, please see Sumsub Privacy Notice here for more details.

  • 14. I hereby represent that I have been informed that my personal data will be retained and stored by the Company and the Service Provider and will be permanently destroyed by the Company or based on the Company’s instructions when the Company’s initial purpose and/or retention period prescribed by applicable law expires. Where the Service Provider independently defines the compatible purposes for data processing, personal data will be retained and stored as specified in Sumsub Privacy Notice.
  • 15. I hereby represent that I have carefully read all of the above provisions, including the Sumsub Privacy Notice, and do voluntarily and unequivocally agree with them.