By clicking the “Continue” button, I hereby acknowledge and agree that my personal data which I am providing or have provided to the Company – the organisation with which I wish to establish a business relationship after completion of KYC, will be processed by Sumsub Group of Companies (hereinafter - the “Service Provider or Sumsub”), in order to verify my identity for the Company’s purposes of carrying out customer due diligence procedures in accordance with internal procedures and policies of the Company. Please refer to the Privacy Notice for details about the identity and contact details of Sumsub.
1. My name and other means of identification for the purposes of obtaining this Notification shall be established in the course of the processing of my personal data carried out in accordance with this Notification.
2. I hereby acknowledge and agree that processing shall be done for the purposes of the Company and may include matters of compliance with applicable AML/CFT, anti-fraud laws and regulations, age restrictions acts and/or other laws and regulations and/or the Company customer due diligence procedures in accordance with the laws governing the intended business relationship. The processing will also be carried out for other compatible purposes of the Service Provider acting as a separate data controller. Such compatible purposes include service development, fraud and criminal activity prevention, as well as ‘litigation hold’ and statutory obligations of the Service Provider, and are explained in detail in the Privacy Notice available here. The personal data categories processed by the Service Provider for its own purposes are provided in point 5 below and include biometric data.
3. I hereby acknowledge the delegation of personal data processing by the Company:
4. Data processing methods
I hereby acknowledge and agree that my personal data shall be processed by means of automated text extraction, verification of authenticity/validity and other methods of automated processing of photos and scanned copies of documents.
This Notification covers the following processing activities: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission to the Company or Service Provider and data processors, dissemination or otherwise making available for the performance of a task carried out in the public interest or in the exercise of official authority, transfer (including cross-border transfer, where necessary), alignment or combination, restriction, erasure and destruction.
The personal data may be checked in multiple databases, including International Politically Exposed Persons (PEPs), Sanctions, Country-Specific Sanctions Lists and other ‘watch’ lists. It may also be reviewed in media information sources.
Whenever a transfer of personal data outside the EEA is carried out, the Company and Sumsub implement appropriate safeguards as set out in the applicable laws by transferring on the basis of the EU adequacy decisions (or UK adequacy regulations) or by concluding standard contractual clauses. Third-party processors likewise rely on appropriate safeguards, which include binding corporate rules, standard contractual clauses, or other means as allowed by applicable laws. Cross-border personal data transfers from the UK to the EU/EEA countries are permitted by the UK Government.
I hereby acknowledge and agree that Company and Service Provider shall process my biometrics by means of automated reading, verification of the authenticity and other automated processing as stated in the Privacy Notice available here, which includes the processing of facial scan while passing liveness, video-selfie or video identification process, biometric authorisation, face comparison from the photo of an identity document and the facial image, searching of multiple identity creation, work and development of fraud control network to detect and prevent fraud and criminal activity.
5. Types of personal data subject to processing
The following categories of personal data are processed in accordance with this Notification:
6. Data subject rights
I hereby represent that I have been informed about my rights to:
7. I hereby represent that I have been informed that my personal data will be retained and stored by the Company and the Service Provider and will be permanently destroyed based on the Company’s instructions when the Company’s initial purpose and/or retention period prescribed by applicable law expires. Where the Service Provider independently defines the compatible purposes for data processing, personal data will be retained and stored as specified in Privacy Notice.
8. I hereby represent that I have carefully read all of the above provisions, including the Privacy Notice available here, and do voluntarily and unequivocally agree with them.