Privacy Policy
1. collection, processing and use of personal data
IAMX AG offers the service to verify official identification documents (in particular passports, identity cards and driver’s licenses) (“Identification Documents”) and to match them with this person (“End User”). IAMX offers this service to its customers, e.g. financial institutions, insurance companies, online platforms, car sharing providers, rental car providers and operators of entertainment platforms (“Partners”), in order to comply with legal requirements (e.g. Money Laundering Act, Road Traffic Act) or to increase security regarding the identity of the End Users. In doing so, IAMX acts according to the instructions of the customer as well as the applicable regulatory and legal requirements.
a. Verification process
The end user of the service uses a technical device (e.g. his PC, tablet or smartphone) to record the ID document and himself via video chat or photo with the help of the integrated camera.
The verification process with the corresponding steps and the associated data processing is explained below. The user is usually made aware of the identification service by IAMX’s partner. IAMX generally requires the following data from the end user to perform the identification service: first and last name, address, date of birth, place of birth, mobile number, e-mail address. This data is either collected by the Partner or entered by the End User on IAMX’s website or app. During the identification process, photo and/or video recordings of the ID document are taken to match the previously obtained end-user data with the data on the ID document. The data collected by IAMX varies depending on the customer’s identification document and use case. For passports and identity cards, in particular, first and last name, place of birth and date of birth are collected. For identification in accordance with the Money Laundering Act, the issuing authority, ID card number, nationality and the address of the end user are also collected. For driver’s licenses, the first and last name, date of issue, driver’s license category and date of birth are collected in particular. In addition to the end-user data, IAMX also stores the photo and video recordings of the ID documents. In a second step, depending on the partner configuration, photo or video images of the end user’s face are created using the IDnow software licensed by IAMX. The photo images are either taken by the end user or are taken by an IAMX employee. If customer identification is required in accordance with the Money Laundering Act, the data is collected during a video chat. For this purpose, the IP address of the end user is transmitted to the company TokBox Inc (WebRTC platform), which then establishes the video connection between the end user and IAMX’s network. The conversation between the end user and IAMX employee is recorded acoustically. The exact procedure of the verification process is described in detail in section 4 of IAMX’s GTC.
b. Consent, storage and deletion
All data collected by IAMX is used exclusively to verify identification documents and/or to identify the end user. Prior to any identification process, the end user will be informed by IAMX or the partner which data will be collected by IAMX and transmitted to the partner. This information can be found in the respective valid GTC of IAMX or in the GTC and privacy policy of the partner. Any processing of personal data beyond the scope of the legal permissions will only be done on the basis of the explicit consent of the end user. The data is transmitted to the partner and deleted from the IAMX servers after 90 days at the latest, unless the partner has issued a deletion request beforehand. The data may be stored at the Partner for the duration of and up to ten years after the termination of the business relationship between the Partner and the End User due to statutory retention periods (e.g. within the scope of the Money Laundering Act).
2. further information and contacts
If you have any questions about this privacy policy, please contact us. You can find the contact address here: https://iamx.id/imprint/. You can ask at any time whether and which of your data is stored by us. In addition, you can send us information, deletion and correction requests and also suggestions by e-mail or letter.