About GDPR.
Can you use face scan for access control in EU?
In the EU, face scan technology is permissible for access control, similar to how it's used for unlocking phones. It is legal to use facial recognition for door access as long as compliance measures, such as obtaining consent and ensuring system activation, are met. Additionally, alternative access methods, such as two-factor authentication codes, must be available. Our Justface system adheres to these requirements, has been approved by Data Protection Authorities, and has earned the D-seal for data responsibility and security.
What personal data do you process?
We process a photo (eg. a selfie) as well as basic information such as name. A code is created which, just like on your phone, consists of a string of numbers which is used to give you access. You can always see in our declaration of consent which personal data we process about you.
For what purpose do you process personal data?
We process personal data in connection with support, access control and statistics for our client. Statistics are, for example, how many people have been in a building at a certain time.
What do you use personal data for?
Personal information is used to create a informationcard in the Justface system. In the Justface solution, the personal data is only used to verify you upon access, as well as record the arrival time for statistics - just like if you used a plastic card or other forms of physical check-in credentials.
How do you store personal data?
Personal information is stored securely, encrypted and within the EU. We store personal data in accordance with all regulations in the GDPR and only for the purpose stated in the declaration of consent. The personal information will not be transferred to a third party for other purposes.
Do I have to use face scan?
Only if you give your consent. There is always an alternative on the our clients tablet, such as using a code. Contact the client or Justface if you want to hear more.
What kind of image is used?
We use a normal member photo, which is a passport-like photo, e.g., a selfie taken with your mobile phone. We don't need a 3D image.
When is personal data deleted?
If you are stopped to access by our client (fx no longer member/employee or other) or withdraw your consent, personal data will be automatically deleted. Photos taken at access control are automatically deleted after one week.
What if there is something I haven't gotten an answer to?
Then you are always welcome to write to us at support@justface.io or call +45 7674 1265. For compliance related question you are welcome to write compliance@justface.io