Remote ID Verification
Privacy Notice

Remote identity verification is an emerging method of individual biometric authentication that is conducted online. QuoVadis offers remote identity verification to customers of specific products and services, like our document signing solution, to allow more location flexibility with the identity verification process. Customer accounts wishing to use the optional remote identity verification workflow will require applicants to upload their identity documents and pass a “liveness” test in addition to providing the personal data necessary to register for a QuoVadis account. The specifics of the workflow and your data privacy are detailed below.

QuoVadis is a member of the DigiCert Group, whose parent company is DigiCert, Inc., located in Utah, USA. We take your privacy seriously and will only use your personal data to deliver the products and services requested.

Who are we?

QuoVadis is an EU and Swiss Qualified Trust Services Provider. QuoVadis provides services using a group of wholly owned subsidiaries.

Who are our Privacy Officers?

Our Data Protection Officer is Aaron Olsen (email: privacy@digicert.com). Our Privacy Officer is Barry Kilborn (email: privacy@quovadisglobal.com).

What data is collected?

In the remote identity verification process, our identity verification agents collect the necessary information for the provision of the services. We take privacy seriously and will only use your personal data to deliver the products and services requested. As part of this process, we collect and process the following personal data:

  • Account creation information (see QuoVadis Privacy Notice “What data is collected?” for the information collected in this process)
  • An image of the ID document you provide to verify your identity; with the ID document image, we will then collect and process the information contained on the ID document.
    • First Name
    • Last Name
    • Date of birth
    • Place of birth
    • ID Type
    • ID number
    • Machine Readable Zone
      • Dutch BSN number will always be masked
    • National identification number
      • Dutch BSN number will always be masked
    • ID valid until
    • Scan of ID document
      • Dutch BSN number will always be masked
    • Nationality
    • ID issuance date
    • Issuing authority
  • Images of your facial likeness (which include a three-dimensional facial scan) to compare to the image provided on your ID document
  • Additional information that may not be available from your ID document but required to complete certification application, including:
    • Maiden name (optional)
    • Job title (optional)
    • Place of birth
    • Issuing country/nationality
    • Address

Why do we collect information / Lawful basis for processing

Processing the personal data mentioned above is necessary to verify your identity to provide you with QuoVadis products and services. Our lawful basis for this optional biometric processing is consent and is available to the applicant at their request.

Who is collecting it?

We use third parties to collect data directly from you. Where we use such third parties they act entirely under our control and serve as a data processor.

How will it be used?

Your personal data will be used to verify your identity for the purpose of user registration. These third parties are contractually bound as data processors only to collect and process the personal data according to our instructions and not to use it for any other purpose.

Who will it be shared with?

Your personal data will not be shared with any other person or party outside the DigiCert Group.

Where will it be stored?

Personal data collected during remote identity verification is processed entirely within the European Economic Area and may be temporarily stored by our processor for up to 90 days.

  • The following data elements are retained by us:
    • First Name
    • Last Name
    • Date of birth
    • Place of birth
    • ID Type
    • ID number
    • ID valid until
    • Scan of ID document
      • Dutch BSN number will always be masked
    • Applicant image
    • Nationality
    • ID issuance date
    • Issuing authority
    • Machine Readable Zone
      • Dutch BSN number will always be masked

How is your data protected?

We use a combination of technical, administrative, organisational and physical safeguards to protect your personal data. Access to your personal data is restricted to those who are necessary for the delivery of the services. These safeguards are tested as part of our annual audits and accreditations. For further details please see details of our accreditations.

Automated Decision Making and Profiling

The remote identity verification process does involve the use of automated decision making, wherein you use a mobile device with a camera to capture images of yourself which are then compared to your image on the uploaded ID document. The process is designed to verify your identity with reference to the ID document. If you do not wish to use this optional automated process, you may elect to have a human agent verify your identity in a face-to-face setting.

We do not engage in profiling.

Your Options

Individuals have the option to use the remote identity verification process or the traditional in-person identity verification process, which includes a third-party person verifying an individual’s identity and ID documents in person. To set up an in-person verification of your identity, please contact the respective validation team.

Additional Information

To learn more about QuoVadis data handling practices, please review other privacy notices here.

This Privacy Notice

As our organisation grows, this Privacy Notice is also expected to change over time. This Privacy Notice may be updated periodically to reflect changes in our personal information practices. You should check our site frequently to see the current Privacy Notice that is in effect.

The Privacy Notice was last updated on 11 August 2022.

Contact

If you have questions regarding this Privacy Notice, please contact us via email at: privacy@digicert.com.