UNHCR Verify Plus privacy notice
UNHCR Verify Plus privacy notice
1. Your Privacy with UNHCR Verify Plus
UNHCR is committed to protecting individual privacy and securing the personal data that you make available when using UNHCR Verify Plus, a UNHCR application (available on the Google Play store and Apple's app store). By using UNHCR Verify Plus you are accepting the provisions set out in this notice. This privacy notice describes what personal data is made available to UNHCR when installing and operating UNHCR Verify Plus, and how UNHCR uses and stores your personal data. Any personal data voluntarily disclosed to UNHCR by users of UNHCR Verify Plus is held with the utmost care and security and will not be used in ways other than as set forth in this privacy notice. This Privacy Notice is issued pursuant to and in fulfillment of the UNHCR General Policy on Personal Data Protection and Privacy UNHCR/HCP/2022/02.
2. How UNHCR Verify Plus functions and uses your personal data
UNHCR Verify Plus is designed to uphold the integrity of identification processes by confirming the authenticity of UNHCR-issued identification documents. UNHCR Verify Plus allows for the scanning of UNHCR-issued IDs and obtaining a full report on the document ownership and validity. The operation of UNHCR Verify Plus involves the collection of specific personal data elements from its users, which is essential for reinforcing the verification procedure. This data collection is instrumental in ensuring the system's precision and dependability. Personal data processed via UNHCR Verify Plus is gathered strictly for analytical and statistical purposes, aligning with the overarching goals and responsibilities of UNHCR. The principle of data minimization is strictly adhered to, ensuring that only relevant data is preserved, reflecting UNHCR's dedication to responsible data handling.
Personal data processed via UNHCR Verify Plus is processed in accordance with the UNHCR General Policy on Personal Data Protection and Privacy UNHCR/HCP/2022/02.
3. What personal data UNHCR collects
The following categories of personal data are processed in reference to users of UNHCR Verify Plus:
- email address
- geolocation (optional)
- device make, model and operating system.
Scanning a UNHCR-issued ID will provide the user with a digitalized version of the same ID, including the following personal data of the card holder:
- UNHCR-issued ID number
- ID Picture
- ProGres number
- government-issued ID numbers, when applicable
- full name
- date of birth
- sex
- country of origin
- name of relatives, when applicable
- marital status, when applicable
- address, when applicable
- contact information, when applicable.
4. Third-party sharing
Personal data processed via UNHCR Verify Plus is not shared with any third parties, except for hosting purposes on third-party servers under special conditions. UNHCR is dedicated to ensuring the confidentiality and security of your personal information. All personal data processed by UNHCR to provide the services of UNHCR Verify Plus is managed in accordance with UNHCR’s data protection policies.
5. Personal data storage and retention
UNHCR may store and process personal data of UNHCR Verify Plus users for as long as necessary to fulfill its mandate.
When verifying an ID through UNHCR Verify Plus, a data set is collected and recorded in UNHCR's central directory with each scan that includes the user’s email, the ID number of the scanned UNHCR-issued ID and, when optionally agreed by the user, geolocation data. These personal data elements are retained for statistical and archiving purposes. No other data is collected throughout the process.
UNHCR ensures that all personal data is stored securely and handled in accordance with its data protection policies. These measures include encryption, secure data storage, and restricted access to personal data.
6. Your rights
In accordance with UNHCR/HCP/2022/02, General Policy on Personal Data Protection and Privacy, as a user of UNHCR Verify Plus you have the right to:
- access your own personal data.
- obtain rectification or completion of inaccurate or incomplete personal data.
- have your personal data deleted where there is no legitimate basis for the processing or where the personal data is no longer necessary for the specified or compatible purposes for which it was collected, unless there are grounds for retention.
- object to the processing of your personal data, at any time of the processing, for legitimate grounds relating to their particular situation.
7. Present a request or raise a concern
Any request for access, rectification, deletion, or objection to the processing of your personal data may be lodged to the relevant Personal Data Controller, by filling out our contact form.
8. Changes to privacy notice
UNHCR may update this Privacy Notice from time to time. It is advisable to review this policy periodically to stay informed about how personal data is being protected.
9. Preservation of immunities
Nothing in or relating to this Privacy Notice shall be deemed a waiver of any of the privileges and immunities of UNHCR under the Convention on the Privileges and Immunities of the United Nations adopted by the General Assembly of the United Nations on 13 February 1946 or under applicable national or international legal instruments.