Biometric Data Consent

This consent is requested separately before the biometric check. It supplements the mono.ge Terms & Conditions and Privacy Policy. Language versions are governed by Section 0.3 of the Terms & Conditions.

1. Who processes the data

The data controller is Individual Entrepreneur ioli digital (IE ioli digital), identification number 305476865, registered in Georgia (“Platform Operator”).

The biometric check is technically performed by an identification technology provider acting solely as a processor on behalf of the Platform Operator and bound by confidentiality obligations.

2. What data is processed

• images and video of the face captured during the check;
• the facial photo from the identity document;
• the results of facial comparison with the document and liveness detection.

3. Purpose

Biometric data is processed only to:

• confirm that the applicant is the holder of the document presented;
• detect impersonation and attempts to use photos, video or synthetic images;
• confirm the identification result to the financial institution selected by the applicant.

The data is not used for any other purpose, including marketing and AI model training.

4. Who receives the data

The check result and the data needed to confirm it may be shared only with the financial institution or institutions selected by the applicant and with competent public authorities of Georgia where Georgian law requires it. The data is not shared with commercial third parties.

5. Retention

Biometric data is kept no longer than necessary to complete identification and confirm its result to the financial institution, and within any retention periods required by law. It is then deleted.

6. Voluntary consent and refusal

Consent is voluntary. The applicant may refuse to give it. In that case a remote application is not possible, but the applicant may complete identification in person at a bank branch in Georgia if the selected financial institution allows it.

7. Withdrawal of consent

The applicant may withdraw consent at any time by writing to the Platform Operator. Withdrawal does not affect the lawfulness of processing carried out before it. After withdrawal, biometric data is deleted unless retention is required by law. Further remote processing of the application may become impossible.

8. Rights and contacts

The applicant has all rights provided by the Law of Georgia on Personal Data Protection (No. 3144-XIმს-Xმპ of 14 June 2023) and Section 11 of the Privacy Policy, including the right to file a complaint with the State Audit Office of Georgia.

Email: [email protected] · Telegram: @mono_ge · WhatsApp: +995 599 799 810