General Terms and Conditions of Business (“GTCB”) for MICK – my identity check, the video-based online identification of customers
1. General Terms
These General Terms and Conditions of Business (“GTCB”) shall apply to the use of MICK the video-based online customer identification service. By means of MICK the video-based online identification service, the principal carries out the authentication of identity of the customer on the basis of these GTCBs. These GTBCs shall apply exclusively. Any deviating or contradicting general terms and conditions of business shall only become part of this agreement in as far as they agree to the content of these GTCBs, or if expressly acknowledged by the principal. This shall equally apply in the case that the principal renders services without reservation in the knowledge of conditions of the customer that are contradicting, or deviating from these.
2. The subject of the MICK
shall be: - the determination, checking and confirmation of the identity of the customer for the principal as commissioned by the latter and/or the customer by the commissioned service provider, “youniqx Identity AG”. The latter shall be entitled, in his turn, to use sub-contractors in rendering the service of video-based online identification; - the transfer of the data and information received to the principal together with the explicit consent from the customer, which the latter automatically gives upon accepting these GTCBs, the storage of a user profile with the service provider, youniqx Identity AG for the purpose of a future authentication of identity.
3. Process of authentication of identity of the customer
The authentication of the identity of the customer shall be carried out by the service provider following the request of the principal, who wishes to verify the identity of the customer or needs to verify the same on the basis of the legal provisions (e.g. in compliance with the financial market anti-money laundering legislation) before a contract with the principal can be established in the first place. The authentication of identity shall be carried out as part of the overall procedure by way of a video conference involving the customer and an identity agent of the service provider, and shall be recorded as proof, in whole or in parts, using image and sound data. In the context of the identification process, such data is processed as described according to the relevant legislation (e.g. the financial market anti-money laundering legislation), or as otherwise expedient or required in order to determine the identity of the customer with the greatest reliability, or to verify the details provided by the customer, respectively; as well as data which is required for the process of video-based online identification of customers (especially the customer’s email address and/or mobile telephone number for the TAN transmission and establishing of contact). The data surveyed by the service provider is subsequently compared with the personal data of the customer as provided by the principal to see if there is a match. The kind and scope of the survey together with the processing of the data on the part of the service provider shall be based at the request of the principal within the specifc legal requirements for video-based online identification. The surveyed data usually contain the customer’s full name, date of birth, nationality, document number, email, mobile telephone number, and address. Checking the stated data is carried out using a valid official photo ID card; this is a document issued by a state authority and equipped with a portrait photograph of the customer which cannot be (ex)changed, and which contains the full name, date of birth and signature of the customer, as well as stating the issuing authority. When checking the photo ID card, both the front and back needs checking, and screenshots must be taken of the security features and customer. During the video conference, the customer shall receive a centrally generated transaction number (TAN) for the purpose of a one-off and unambiguous allocation either by email or via text message which the customer must then enter immediately during the video conference. Only after successfully entering the TAN can the authentication of identity be completed. The identity of the customer vis-á-vis the principal through the service provider shall only be confirmed once the data required for the authentication of identity has been fully submitted and found to comply with the specifc legal preconditions. The service provider shall notify the principal of the successful completion of the identification of the customer, and shall pass on to the principal all the screenshots made in the context of the identification process together with all other data and reports provided by the customer.
4. Availability of MICK the video-based online identification service
The principal herewith reserves the right, at any time, to terminate, change or alter the identification service in whatever way. This shall apply especially in the case that the legal framework regarding the permissibility of video-based online identification is changed. The principal, together with his service provider, shall endevour to thebest of his ability to make the video-based online identification service available without interruption. However, the principal or service provider cannot take on any liability for the continuous availability of the identification service. In fact, the availability of the identification service can be limited for a short period of time particularly if this is required for security or integrity reasons of the server, or when carrying out technical repair or maintenance work.
5. Registration
Registration shall be done by filling in an eletronic form fully and as applicable on the website of the principal or on the landing page of the service provider, youniqx Identity AG, and subsequently sending off the form to the service provider, youniqx Identity AG, by clicking the relevant button. The customer is then transferred to the site “video-based online identification service” of the service provider, youniqx Identity AG. The service provider, youniqx Identity AG, shall be entitled to contact the customer before beginning the identification process at the email address given by him if the identification process is discontinued by Österreichische Staatsdruckerei or when discontinued by the customer, and to give information about the further steps for the identification to be carried out. The service provider, youniqx Identity AG, shall, in the spirit of this paragraph, include also any sub-contractors of the former. The customer must expressly agree to these General Terms and Conditions of Business before being able to register successfully.
6. Consent
By sending off the registration form, the customer gives his binding consent for the rendering of the video-based online identification service and the confirmation of his identity vis-á-vis the principal, and for any further processing and storage and transfer of his data on the basis of these GTCBs.
7. Participation performance and other obligations of the customer
The customer is obliged to appropriately contribute towards fullfilling the service of video-based online identification. In particular, the customer is obliged to make available any data relevant for the identification truthfully and complete. In order to make possible the video-based online idenfication service, the customer requires a terminal equipped with an internet access and a webcam (picture and sound). It is encumbent upon the customer to guarantee that his terminal shows all relevant performance characteristics in order for the identification process to be successfully carried out. The customer is obliged to secrecy concerning all data transferred to him by the principal or by youniqx Identity AG. He shall make sure that the data is only used by him and protects it against access from third parties and in particular from the access of persons under age. If the customer infringes one of his obligations under these GTCBs, the principal or the service provider may interrupt the identification process at any point in time.
8. Remuneration
The video-based online identification service shall be free of charge for the customer. However, in the course of using the aforementioned service, connection and transmission fees may accrue which are levied by the internet provider, and which must be borne by the customer.
9. Data protection
The principal, the service provider youniqx Identity AG as well as any sub-contractors shall process the personal data of the customer exclusively for the purpose of rendering the identification service. The customer herewith explicitly agrees that his user profile be stored with youniqx Identity AG for the purpose of any future authentication of his identity. The legal data protection principal with regard to this stored user profile shall not be the principal, but rather youniqx Identity AG. Any further processing of this data going beyond its mere storage shall only be able to be carried out upon the explicit order of, or following the express consent from, the customer, respectively, e.g. for a later simplified identification and confirmation of identity vis-á-vis another official body (e.g. bank) required to confirm a person’s identity. The principal, service provider and sub-contractor may all use so-called “cookies”. Cookies are small text files that are stored on the terminal of the customer. They serve the recognition of the terminal when used again to visit the called-up website, or when analysing the individual parameters in connection with the use of the same. We differentiate between so-called session cookies and so-called permanent cookies. Session cookies are deleted from the terminal of the customer after the end of each session. Permanent cookies, however, remain on the terminal and serve to recognise the terminal upon renewed visits to the relevant website. Cookies solely identify the terminal, and not the person who uses it. Cookies do not entail the storage of personal data. The use of cookies can be deactivated on your internet browser at any time. However, the deactivation of cookies may result in restriction regarding the utilisation of websites and of the video-based online identification service. By accepting these GTCBs, the customer gives his consent to the use of cookies in the aforementioned kind and manner and for the aforementioned purpose. The principal, service provider or sub-contractor may all use Google Analytics on their websites. Google Analytics is a web analysis service run by Google Inc., USA (“Google”). The aforementioned service uses cookies and allows for an analysis of the use of the website by the individual users. The bits of information generated by the cookies are, as a rule, transferred to a Google server in the US, and are stored there. In the case of activating the IP anonymisation on the website called up by the customer, the IP address of the customer/ user is abbreviated by Google within the member states of the European Union, and in other contractual states that are subject to the European Economic Area. Only in exceptional cases will the complete IP-address be transferred to a Google server in the US, and abbreviated there. Following the order of the operator regarding the called-up websites in the context of the video-based online identification service, Google will use this information in order to evaluate the use of the website, compile reports on the website activities for the operator, and in order to render serivces in connection with the use of the website and of the internet altogether. Furthermore, Google may transfer this information to third parties in as far as this is legally permissible, and in as far as these third parties process this data as commissioned by Google. However, under no circumstances will Google use your IP-address and combine it with other Google data. Users can prevent the storage of cookies by changing the relevant setting in their browser software. However, the customer herewith acknowledges that in this case not all functions of the website may be able to be fully used. Additionally, the users can prevent the survey of data enabled by the use of the website and generated by the relevant cookie (inlcuding your IP-address) from being passed on to Google and from being processed by Google by downloading and installing the browser plugin at http://tools.google.com/dlpage/gaoptout?hl=de. However, by accepting these GTCBs, the customer agrees to the processing of the data compiled about him by Google in the aforementioned manner and for the aforementioned purpose. By placing a so-called opt-out cookie, the customer has the possibility to inhibit any form of user analysis regarding the relevant websites in the future. As long as the customer does not delete this cookie there will be no analysis of his user behaviour. Also, the customer has the opportunity to reactivate the web analysis for the website.
10. Liability
In as far as this restriction is permissible, the principal, service provider and sub-contractor shall be only be liable for damage that has been caused either unlawfully with intent, or by gross negligence. However, a liability for any harm caused to persons as well as for any damage caused under the product liability legislation shall remain untouched. For indirect damages, loss of income, loss of interest, omitted savings, follow-up and pecuniary loss, damages from claims of third parties, the loss of data and programs and their restorations, system outage, production down-time, interruptions to operation, as well as typical damages which were not able to be foreseen upon signing the agreement, all liability shall herewith be excluded. Any contributory nigligence on the part of the user shall reduce the amount of possible claims to damages; this shall apply, in particular, to the insufficient participation of the customer in rendering the video-based online identification service as well as to any organisational errors, insufficient securing of data or other infringements against any contractual obligation hereunder. In order to keep the damage to a minimum, if at all possible, the customer is obliged, without delay, to communicate any damages in the spirit of these liability regulations to the principal in writing.
11. Applicable law and legal venue
These GTCBs and all agreements connected with the same shall be subject to the legislation of the Republic of Austria with the exclusion of the law of conflicts and the United Nations Convention on Contracts for the International Sale of Goods dating 11th April,1980. The exclusive legal venue shall be Vienna.
12. Miscellaneous
Should one of the provisions under these GTCBs be or become ineffective or be or turn out to be inapplicable, or should there be a gap, the remaining provisions hereunder shall remain untouched. Instead, the parties hereunder are obliged, in lieu of the ineffective or inapplicable stipulation, to replace the same with one which comes as close as possible to the economic purpose of the one that has been rendered or found to be ineffective or inapplicable, and which can fill this gap. Any alterations or supplements to these GTCBs shall require written form.