Our Demo App
This application (the Demo App) is designed to demonstrate the functionality of GBG IDscan’s Mobile Journey Capture Service, which can be used as part of a customer on-boarding process. This includes identity document and A4 document capture and processing; face match, which provides instant validation of facial features between the photograph on an identity document and the image captured as part of the mobile journey; and a liveness test, which verifies that the person using the device is live and not using a static image, and that they match the presented identity document.
You may only use the Demo App for the purpose of evaluating GBG’s technology. You shall not be entitled to make any commercial benefit from the Demo App or any materials derived from its use.
This Demo App and all intellectual property rights in it are owned by GBG, our licensors or both (as applicable). Intellectual property rights means rights such as: copyright, trademarks, domain names, design rights, database rights, patents and all other intellectual property rights of any kind whether or not they are registered or unregistered (anywhere in the world). We reserve all of our rights in any intellectual property in connection with our Demo App.
You must not:
- Use the Demo App for any unlawful purpose or activity;
- Use the Demo App in any way that does or could potentially breach a legal duty to anyone else (including a duty of confidentiality), infringe a person’s right to privacy or may infringe the intellectual property rights (e.g. copyright, trademarks, patents, database rights, know-how and design rights) of anyone else (including ours);
- Distribute, license, sell, rent, lease or otherwise deal in or encumber the Demo App;
- Modify, add to, or otherwise enhance the Demo App; or
- Infringe or copy our code or the content or the design of the Demo App.
GBG may suspend or terminate operation of the Demo App at any time as we see fit. While we try to make sure that the Demo App is available for your use, we do not guarantee that the Demo App will be available at all times nor do we guarantee uninterrupted use of the Demo App.
What information GBG is collecting on you and lawful basis for processing
By using the Demo App during a demonstration given to you by a GBG employee, you may choose to provide your identity document(s) and/or A4 documents to GBG for processing in order to test the Demo App. If you do so, GBG will rely on consent as the lawful basis for processing under Article 6(1)(a) of the General Data Protection Regulation (GDPR).
The personal data extracted from the document will vary according to the journey configuration, the country/area profile that is chosen (if none is selected the default is the UK) and whether the offline or online setting is used, and will be a combination of some or all of the information held on the document presented during the demonstration.
If you wish the mobile journey to be configured to test the app’s face match and/or liveness test capabilities, your biometric data will be processed. This is special category data under the GDPR, and GBG will rely on explicit consent under Article 9(2)(a) to process such data.
If you are using the Demo App as provided to you by a company that is not GBG please consult them directly for their lawful basis for processing your data.
What GBG is using it for
GBG’s customers access GBG products and services to prevent and detect fraud. GBG has developed the Demo App to showcase its Mobile Journey Capture Service and customer onboarding capabilities.
Where, how and why GBG is storing your information
If the Demo App is used in its online setting, the document images collected are stored in GBG’s demo database. All the data uploaded to our servers as part of a demo are deleted within 24 hours or sooner if you request it.
If you choose to use the Demo App’s offline setting, the validation of the documents and extraction of the personal data occurs on device and no images or extracted data are stored once you end the journey.
Use by GBG and third parties
Your identity document will only be used by GBG as set out in this Privacy Notice. GBG shall not disclose or permit the disclosure of your identity document to any third party.
GBG will implement and maintain appropriate technical and organisational security measures against unauthorised or unlawful processing of your identity document(s).
International data transfers
GBG’s demonstration database is managed and supported by GBG’s DevOps and Infrastructure teams, which are based in Turkey. Controller-processor standard contractual clauses are in place with our Turkish office.
GBG shall at all times process your personal data in accordance with its obligations under applicable data protection laws including the GDPR and the Data Protection Act 2018. Please contact us at firstname.lastname@example.org if you require further information on any of the following:
Access to your information
You can find out what personal information we hold about you (if any) by making a subject access request.
Right to object to processing your information
GBG has an obligation to inform you about your rights to object to processing and this is covered under the next two headings.
If you change your mind, you can withdraw your consent to allow GBG to process your information at any time during the demonstration.
Right to erasure
You are entitled to require GBG delete your personal data at any time during the demonstration. Please note that no data collected during a demonstration is stored by GBG for longer than 24 hours.
How to contact us if you’re not happy
If you have any questions about how your personal information is used by GBG or wish to make a complaint, you can contact our Data Protection Officer by email at DPO@gbgplc.com or call 01244 657277.
What to do if you remain dissatisfied
If you remain dissatisfied with GBG’s response to your complaint, you have the right to refer the matter to the Information Commissioner’s Office (ICO), who will investigate your complaint and will give an independent ruling on the issues you have raised. Contact details for the ICO are available here.