Javascript is required
logo-dastralogo-dastra

GDPR Data processing modelAccess control by biometric authentication during remote payment procedures

By: Ludwig Karneth
PrivateFinanceGeneral optionsSales
This processing model relates to access control by biometric authentication of the debtor during remote payment procedures with the aim of combating identity theft and simplifying customer authentication in accessing remote banking services

Purposes (3)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

1
Control and authentication of the debtor during payment procedures
Legitimate interest
2
Reinforce security measures to combat identity theft
Legitimate interest
3
Simplify the authentication of customers enabling them to access their remote banking services
Legitimate interest

Data categories (1)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Data collected from customers choosing to use facial authentication

Data details


transaction logs

Definition

Allows all biometric authentication requests to be traced (information stored includes customer ID, connection dates and times, and authentication results)

required
Biometric facial modelrequiredsensitive data
Last name, first name, customer detailsrequired
Customer's online banking IDrequired

Data conservation rules

Active base:

All processed data, with the exception of biometric models, are stored for the duration of the experiment (12 months), extended by 3 months to allow for exploitation and assessment. Biometric models will be deleted at the end of the trial (12 months)

Data subject (1)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

  • Customers

Author:
Ludwig Karneth
Ludwig Karneth

Created at:07/08/2023

Updated on:11/20/2023

License: © Creative commons :
Attribution / Pas d'utilisation commerciale
CC-BY-NC AttributionPas d'utilisation commerciale

Nb using:3


Access the full processing template

Try Dastra now to access all of our data processing templates that you can customize for your organization.It's free and there's no obligation for the first 30 days (no credit card required)

Add to my data processings record
Subscribe to our newsletter

We will send you a few emails to keep you informed of our news and what's new in our solution

* You will always be able to unsubscribe on each newsletter. Learn more.