Privacy Policy And Data Protection At Recognito

1. Introduction

We are Recognito – the team who operates worldwide through subsidiary and affiliate companies (hereinafter collectively referred to as “Recognito” or “Company”, or “We”) – one of the world’s AI solution providers of on-premise ID verification, biometrics recognition and custom AI solutions.

The objective of this privacy policy is to inform you – the user of the device or services of Recognito – on the objectives, scope and methods of protection, periods of processing of personal data and your rights within the framework of our personal data processing procedures.

In order to ensure service provision and assess the need for the improvement of the content and structure of the websites, information on website visitors and users of services provided therein, contained within the files of access to the website, for instance, IP address, time of the visit, pages viewed, etc., similarly as in other websites, is collected and processed.

Cookies (small data fragments) are also used on the websites of Recognito, which permits to expand the options of the website use. In accordance with the opportunities of the technologies used, it is possible to refuse to use cookies, however, it is not recommended, since, in this event the options of the use of the websites or Recognito services are limited.

We have tried to draw up this privacy policy in plain language in order to avoid complicated legal language that may make the policy difficult to understand. If you have any questions, or you think that we can jointly improve the present policy, feel free to contact us via the electronic mail: hello@recognito.vision.

2. Basic Definitions

This Privacy Policy uses the following basic definitions:

2.1. Policy — the present Privacy Policy.

2.2. User — a natural person, who is using the Website or any other product and/or service of Recognito.

2.3. Personal data — any information that enables direct or indirect, i.e. in connection with other data, identification of you as a natural person (data subject), including name, surname, patronymic, contact information, Face image data, data that identify user device, as well as data that permit identification of the procedures and methods of Website and/or service use by the User.

2.4. Data subject — natural person, who either directly, or indirectly is identified or can be identified by means of personal data.

2.5. Data processing — means any action or a set of actions implemented with the data by using automated equipment or without such equipment, for instance, collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction, etc.

2.6. Third party — a person that is not a representative of the Company, its employee, subsidiary, representative office, associated company and (or) a partner, which is bound with the Company by contractual liabilities regarding non-disclosure of personal data, as well as persons that are not identified by the respective personal data.

2.7. User device – a personal computer, notebook, tablet, smartphone or any other device operated by the user to use the services of Recognito.

2.8. Cookies – identification technologies that are integrated by the Website into the web browser of the User with the purpose of ensuring the operation of a service and/or collection of data on the User device, as well as, on the procedures and methods of Website use.

3. Area Of Policy Application

3.1. The privacy policy is used to ensure the protection of confidentiality and personal data regarding:

3.1.1. Natural persons – users (including potential, former and current users) of the products or services of Recognito;

3.1.2. Visitors of office, production and other premises of Recognito, including persons subject to video surveillance;

3.1.3. Visitors of marketing events, training sessions and other similar events organized or attended by the representatives of Recognito.

3.2. This privacy policy is in effect regarding any information, including personal data in the meaning of the applicable law that Recognito and/or affiliated persons of Recognito may obtain regarding you in the process of the use of any websites, software, products, and/or services of Recognito (hereinafter jointly – Services), the information on which you can find on the websites recognito.vision, docs.recognito.vision (hereinafter jointly– Websites). Please pay attention to the fact that the use of any Website and/or Service may be regulated by additional terms and conditions that may amend and/or supplement the present policy.

3.3. The policy determines the category of personal data collected by the Company, procedures and objectives of the use of data, as well as the conditions of granting access to such data.

4. Moved to clause 10.3 after revision of 07/03/2022

5. Categories Of Personal Data Processed By Us And Methods Of Obtaining Them

The Company receives personal data in the following ways:

5.1. Personal data can be provided by the data subject themselves and/or conclude contractual liabilities between the Company and the data subject, between the Company and the user, etc.; in order to receive the support service of Support Recognito, in order to process the subscription for the mailout of Recognito: the Company may require contact information (name, surname, patronymic (if applicable), e-mail address, contact phone number).

Personal identity number, date of birth, signature and position may be additionally required to draw up contracts and/or perform contractual liabilities.

5.2. From the correspondence of the Company with the user or another data subject. The company may collect personal data from letters sent to the offices of the company, from user messages sent to the information support center of Recognito and to e-mails of Recognito employees, as well as to save the texts of the messages itself. Personal data that are collected by using the aforementioned method include: name, surname, patronymic, mail, contact phone, name of the network user and any other data submitted by the User themselves.

In certain cases, the contact data of the data subject may be at the disposal of Recognito from the partners of the company or other third parties. Recognito undertakes not to use these data for any other purposes except communication with data subject, if it is required in accordance with the interests of data subject.

5.3. Use of Cookies and other analytical services. To ensure the functionality of our websites and collection of website user statistics, Recognito uses cookies and other analytical services, for instance, Google Analytics. Cookies and analytical services enable us to provide websites for use and to upgrade them.

5.4. Collection of Personal Data by automatic saving thereof in registration logs (Log files). Every time, when you visit one of the websites of Recognito, your internet browser automatically submits certain information that is stored by us in so called Log files of registration (logs) files.

Registration files (logs) are stored by us for a short period of time in order to detect violations, as well as for security reasons (for instance, to investigate attempted attacks, unsanctioned interference with the functionality of computers or servers, automated systems, computer systems or electronic communication systems), and are deleted afterwards. Registration files, further storage of which is required for the purposes of proving evidence, shall not be deleted until complete clarification of the respective incident and, in some cases, can be submitted to law enforcement institutions.

The following information is stored in registration files (logs):

IP-address of the terminal, from which the access to the on-line offer management platform is performed;
Internet address of the website, from which the on-line platform was referred to (so called uniform resource locator or URL-address of the referrer);
The name of service provider, through which the access to on-line offer management platform is performed;
The names of the requested files or information;
Date, time and duration of request;
Amount of transferred data.

Registration logs do not allow direct identification of the user as a natural person.

5.5. During the use of some products or services (for example Recognito Face SDK) for the service correct operation, the data obtained from the encrypted form might be forwarded to the Recognito server and then processed. The result of processing will be sent back to the mobile device in encrypted form and instantly deleted from Recognito server.

5.6. Video surveillance in office premises. In order to provide the safety of the property, employees and visitors of the company, video surveillance systems and access control systems have been installed in the offices of the Company, in the territory of the company and along its perimeter. The access to these areas is granted to certain groups of responsible persons only. The video is recorded cyclically (the latest video is written over the oldest one), stored on the server for up to 20 calendar days, after which it is automatically deleted, unless the video is needed for the investigation of a incident.

5.7. During the implementation of marketing activities – during product presentations, thematic exhibition visits or user training, after the subject has been informed and he/she has given his/her explicit consent, the event may be captured in photos and/or video for the purpose of preparing and submitting a report on the conducted event.

6. Purposes For The Processing Of Personal Data By Us

Recognito may process personal data for the following purposes:

6.1. To provide services and sell products:

for identification of the Customer/User;
for drafting of and conclusion and implementation of contracts;
for the provision/maintenance of service functionality;
for the servicing and provision of communication with the User/Customer;
for the performance of warranty liabilities;
for the improvement of the products and services, development of new goods and services;
for the review and processing of complaints and applications;
for customer retention, increase of loyalty, for customer satisfaction measurements;
for administration of accounts;
for the assessment of the credit capacity, for supervision of loans;
for the return and recovery of debts;
for the maintenance and improvement of website operation, operation of mobile applications and other services.

6.2. To plan and perform business analysis:

for statistical, analysis and business planning purposes;
for efficiency measurements;
for the provision of service quality;
for the conducting of market research;
for the conduct of customer surveys;
within the framework of risk management measures.

6.3. Improvement of the quality of Web service operation, information posted on-line, including by conducting statistical and marketing research.

6.4. Elimination of technical errors and failures. During the analysis of the procedures and methods of user work with the Web-service, the company can identify the fact of the occurrence of a technical error, failure, detect the causes thereof and promptly eliminate them.

6.5. For the submission of information to state administration bodies and to subjects of operative work in the cases and in the amount provided for by internal regulatory enactments.

6.6. For the provision of security (in the broadest sense of this word) in the territory of Recognito and over its perimeter:

to ensure the safety of the property;
to implement visual situation control in the territory of Recognito, to evaluate the situation in order to take urgent measures for the prevention of illegal activities;
to perform analysis of a situation/incident that has already occurred;
to control production, technological processes that pose direct threat to the health and life of the servicing personnel;
to ensure the safety of the employees and company visitors.

6.7. For other specific purposes, that are communicated to the User prior to the transfer of such data to the Company.

7. Legal Basis For The Processing Of Personal Data

7.1. The Company processes personal data for particular purposes only and based on the following legal grounds:

to conclude, execute or amend contracts – in order to conclude sales, purchase, service contracts or cargo transportation contracts, as well as provision of resources (water, electricity, etc.) and to ensure performance of such contracts;
to ensure the compliance with regulatory enactments – to perform duties that are binding to Recognito as provided for by the external regulatory enactments;
pursuant to the consent of data subject;
for the purposes of legitimate interests – to implement legitimate interests of Recognito or third party that arise from the duties existing between Recognito and data subject, and/or from the concluded contract, and/or applicable legal enactments;
to ensure the vital interests of the data subject or another natural person – for the purposes of ensuring physical safety and safety of the property of Recognito employees, customers and visitors.

7.2. The legitimate interests of Recognito are as follows:

Performance of commercial activity;
Checking of the identity of the customer prior to the conclusion of the contract;
Ensuring the performance of contractual liabilities;
Prevention of unsubstantiated financial risks for the commercial activities of the Company (including the assessment of credit risk prior to the sales of the products and services and during the performance of the contract);
Storage of the claims and applications of Customers regarding the purchases of goods and provision of services, other claims and applications, annexes to them;
Analysis of the activity of home pages, websites and mobile applications of Recognito, development and implementation of upgrades thereof;
Administration of the customer account on the home pages, websites and mobile applications of Recognito;
Segmentation of the customer data base for efficient provision of services;
Development and upgrading of products and services;
Advertising of Company products and services;
Forwarding of other notifications on the performance of the contract and important actions for the performance of the contract, as well as conducting of customer surveys regarding goods, services and user experiences;
Prevention of fraud;
Provision of records and analysis of corporate management, finance and business;
Provision of efficient Company management processes;
Efficiency of service provision, product sales and deliveries;
Provision and improvement of service quality;
Administration of payments;
Administration of payments due;
Application to state administration authorities, operative services and courts in order to protect the legal interests of the Company;
Enforcement of debt liabilities;
Informing the existing and potential customers on Company operations.

8. Procedures For The Processing And Storage Of Personal Data

8.1. Recognito processes personal data by using the possibilities offered by contemporary technologies, with consideration of the existing confidentiality risks and reasonably accessible organizational, financial and technical resources.

8.2. Recognito may adopt automated decisions regarding the User. The User shall be informed on these actions of Recognito separately, in accordance with the regulatory enactments. The User may object against adopted automated decisions in accordance with the procedures of the regulatory enactments, however, they must be aware that, in certain cases, this may limit the rights of the User to use certain options that otherwise may be accessible to them (for instance, to receive commercial offers).

8.3. In order to ensure high quality and operative performance of liabilities under the contract concluded with the Customer, Recognito may authorize their business partners (including partners based outside EEA) to perform certain operations of the delivery of goods and provision of services, for instance, delivery of products, etc. Recognito is entitled to transfer the personal data of the Customer required for this type of operations to such partners in the amount that is required for the implementation of the particular objective.

8.4. The business partners of Recognito and Recognito group companies (in the status of personal data processor) will ensure data processing and compliance with the personal data protection requirements in accordance with the requirements of Recognito and the effective regulatory enactments and will not use personal data for purposes other than the performance of duties under the concluded contract.

8.5. Recognito shall store and process the personal data of the User as long as at least one of the following criteria is in effect:

The contract concluded with the User is in effect;
The data are required for the implementation of the objective that they were received for;
As long as Recognito or the User can implement their legitimate interests in accordance with the procedures established by external regulatory enactments (for instance, to submit a claim or to file a case in court);
As long as one of the parties has the legal duty to store the data (for instance, in accordance with the law on accounting, the invoices of the Company must be stored for 5 years, etc.);
As long as the consent of the User for the respective processing of personal data is in effect, unless other legal justification for the processing of data exists.

8.6. As the period for the storage of personal data indicated in Article 8.5 expires, or the consent for the processing of the data given by data subject is recalled, the Company undertakes to permanently delete the respective personal data, backup copies thereof and to cease processing of such Personal data, unless further data processing is required by another external legislative enactments., and unless it is not required to safeguard the legitimate interests of Recognito.

9. Disclosure Of Personal Data To Third Parties

9.1. Recognito does not disclose personal data or any information received during service provision or the effective period of the contract to third parties, except for the cases described in Article 9.2.

9.2. The Company may provide personal data to third parties in the following cases:

9.2.1. If the transfer of data to the respective third party is required within the framework of a concluded contract in order to perform a certain function that is required for the performance of the contract or delegated by law;

9.2.2. The User has provided his/her explicit consent for the disclosure of their personal data to third parties;

9.2.3. Processing of personal data results in anonymous statistical or other data being transferred to third parties in order to conduct research, perform works or provide services at the commission of the Company;

9.2.4. In the cases provided for by external regulatory enactments in order to protect the legitimate interests of the Company, for instance, when filing a case in court or other state authorities against parties that have violated such legitimate interests of Recognito;

9.2.5. Personal data must be transferred in accordance with the legal enactments that are in effect in the territory, where the representative office of Recognito is situated.

9.3. In certain cases, it may be possible that external partners, in co-operation with Recognito, determine the objectives and methods of personal data processing (for instance, in the event, where Website analysis tools are used, see Section 11). In this event, these external partners and Recognito are deemed to be joint operators of personal data. Joint operators of personal data shall determine their duties themselves in accordance with the requirements of the transparent way, especially regarding the implementation of the rights of subjects and the liabilities of the company to observe transparency of data processing, except for the cases where these liabilities have already been determined by the law.

10. Access To Personal Data By Subjects From Third Countries

10.1. Since the clients of the Company and strategic partners of the Company are based in several countries of the world, including the USA, in order to reach previously indicated objectives (see Section 6), the processing of your data may be performed in the territory of the EEA, as well as beyond that. For instance, in order to perform its contractual liabilities and to send the products outside the EEA, or in the event, where the particular product is sent to the recipient from beyond the EEA, the contact information of the recipient and other information required for the loading of the cargo shall be forwarded to the division of Recognito in the country of the sender.

10.2. In the event the data is transferred to third countries within the process of data processing, Recognito undertakes to ensure a high standard of personal data protection in accordance with the strict requirements of the General Data Protection Regulation of the EU. In the event of international transfer of personal data, Recognito undertakes to inform the subject on the intention to transfer their personal data to the third country or an international organization and on the presence or the absence of the respective decision of the European Commission.

At the same time, Recognito will notify the data subject on the appropriate data protection measures and methods of obtaining a copy of data or the place, where the data will be available, as well as on whether the data transfer complies with the respective protective measures in accordance with Article 46 of the GDPR regarding the application of special binding corporate rules in accordance with Article 47 of GDPR, or, if applicable, Sub-paragraph 2, Paragraph 1, Article 49 of GDPR. Any transfer of personal data to third countries shall be performed in accordance with Chapter V of GDPR.

11. Third Party Plug-ins

11.1. In order to ensure the operation of some of our services, we use third party applications or plugins. We will inform you on these plug-ins within this section.

11.2. Plug-ins – are independent extensions of social network providers and other services. Therefore, we do not control the amount of data collected and saved by the providers of the social network performed via a plug-in. The objectives and the scope of data collection, further data processing by social network, as well as the rights and parameters of settings for the protection of your privacy associated with them can be found in the data protection policy of the respective social network. You should not use the respective plug-ins, if you do not wish the providers of social networks to receive data regarding this on-line offer or to continue using these data.

12. Measures Implemented For Data Protection Purposes

12.1. Personal data collected by the Company are stored on secured networks, the access to which can be granted to representatives, employees, subsidiaries, associated companies, representative offices and partners of Recognito that are bound to Recognito by contractual obligations on non-disclosure of personal data to third parties.

12.2. Recognito takes the following technical measures for the protection of Personal Data:

For data security and retention, we use not only our servers located in our offices, but also the services of a data center in Germany, which has signed an agreement to ensure all possible safeguards to the data and their confidentiality;
To prevent physical access of unauthorized personnel, all premises owned by the Company have been equipped with means of technical security alarm, fire alarm, video surveillance and access control system;
Data encryption during data transfers (SSL encryption);
Firewall;
Intrusion detection and protection software;
Other protective measures in accordance with the current possibilities of technology.

12.3. Measures for the protection of personal data indicated in Paragraphs 12.1, 12.2 of the present section shall be used until the moment of their depersonalization thereof.

13. Right To Receive Information On The Storage And Processing Of Personal Data

13.1. You are entitled to receive information regarding the processing of your personal data provided for by regulatory enactments and to send the request containing the requirement to provide information on your personal data that are stored and processed by the Company to Support Recognito center (see Feedback section).

13.2. Recognito is entitled to request the confirmation of your identity in order to provide the information on your personal data that can be processed by such confirmation, we are entitled to refuse the provision of the respective information to you.

13.3. Recognito undertakes to process the request that has been received by the enquiries center Support Recognito in accordance with Article 12.1, 12.2 of the present section within the shortest period possible, but no later than within a month since the moment of the provision of the confirmation of the identity of the subject or, if such confirmation was not requested by the Company, since the moment of the receipt of subject’s request and to transfer the respective information to the subject.

Considering the complexity of the received request or the quantity of requests, the Company is entitled to extend the indicated time period of information provision by two more months, by notifying the person, who has submitted the request in advance.

13.4. If Recognito does not process the requested data, Recognito will inform the subject on the causes why the processing of the requested data is not performed in accordance with the queue, but no later than within a month.

14. The Right Of The Subject To Access Personal Data And Change Thereof

14.1. In accordance with the regulatory enactments, you are also entitled to request the Company to provide access to your personal data. You may request to supplement, correct, delete or limit the processing of the data associated with you. You are entitled to object to processing (including the processing of personal data, which is performed on the basis of the legitimate interests of the Company), as well as you have the right to the transfer of data. This right shall be exercised to the extent that such processing does not result from Recognito‘s obligations under applicable law, the safeguarding of Recognito‘s legitimate interests and the performance of contractual obligations between the data subject and Recognito.

14.2. To implement your right you may submit the request:

In writing by personally submitting your request at one of the offices of the Company or at its legal address, by presenting a document that confirms your identity;
By e-mail, by singing it with a secure electronic signature.

14.3. After the receipt of the request for the implementation of your rights, we must verify your identity, evaluate the request and implement it in accordance with the applicable requirements.

14.4. In the event of the identification of the subject, we undertake to satisfy the request within the shortest period of time possible, but no later than within one month since the notification of the data subject, or, if the satisfaction of the request is not possible and data processing is not governed by external regulatory enactments, to provide the explanation why we cannot satisfy the request.

14.5. In the event the subject, who has submitted the request is not identified, an informative notification on inability to identify shall be sent to him/her at the indicated correspondence address.

14.6. The withdrawal of consent does not affect the processing of data that has been performed, when the consent of the Customer was in force.

14.7. In the event of the recall of consent, the processing of data that is performed on the basis of other legal grounds, for instance, where data processing is performed in accordance with the requirements of the law, may not be terminated.

15. The Right To Withdraw Consent For The Processing Of Data

15.1. You are entitled to withdraw your consent given for the processing of data at any time by using any method that is convenient for you.

15.2. The Company, after the receipt of the refusal to process personal data, is entitled to identify the person who has expressed a wish to withdraw consent.

15.3. The withdrawal of consent does not affect data processing that has been performed, when the consent was in force.

15.4. In the event of the withdrawal of consent, the data processing that is performed on the basis of other legal grounds cannot be terminated.

16. The Right To Apply To A Supervising Authority And Procedure For The Resolution Of Disputes

16.1. To comply with the requirements of personal data processing and protection, Recognito considers the requirements of the EU regulation 2016/679 (General Data Protection regulation), as well as generally recognized international laws and regulations in the field of personal data protection.

16.2. In the event of objections associated with the compliance of the procedure and/or conditions of your personal data by the Company and to resolve such objections, you are always entitled to address the responsible representative of the Company or to transfer it to the enquiry center Support Recognito (see section Feedback).

16.3. The Company undertakes to review the complaint, in accordance with Paragraph 16.2 of the present section, within a month since the receipt thereof and to provide a motivated reply to the sender of the complaint.

16.4. You are also entitled to appeal the decision to the supervising authority for data protection. To do that, you may contact the supervising authority for data processing that has jurisdiction in the territory of your place of residence.

17. Mailing Of Commercial Notifications

17.1. Recognito is entitled to forward notifications on new products and/or services of Recognito, as well as information on upcoming events organized by or attended by Recognito to the Users, who have subscribed for the mailings of Recognito newsletter.

17.2. You can subscribe for our mailings by authorization on the internet websites of Recognito (for instance, by using the subscription form for the receipt of news).

17.3. The consent for the receipt of commercial notifications provided by you will be in effect until you decide to opt-out of receiving newsletters. After subscribing for the mailings of Recognito, you are entitled to opt-out of receiving newsletters by clicking “unsubscribe” link at the end of any commercial notification received to your e-mail.

17.4. We will terminate the sending of commercial notifications, as soon as your request will be processed. The processing of the request depends on technological capacities and can take up to 7 days.

18. Policy Changes

18.1. The amendments to the provisions of the Policy may be implemented occasionally, within the limits permissible by the legal enactments of the EU, as well as generally adopted standards of international laws and regulations in the area of personal data protection.

18.2. All amendments to the Privacy Policy will be reflected in the present website, indicating the date, when the amendment has come into effect.

18.3. By continuing to use the Website after the changes in Privacy Policy are made you, as a User, give your consent to collection, processing and storage of your personal data in accordance with the amended Privacy Policy.

19. Feedback

All queries regarding the provisions of the Policy or GDRP enquires may be sent to 14th Floor ADGM Square, Al Maryah Island Abu Dhabi – United Arab Emirates. electronic mail: hello@recognito.vision

DATE OF LAST REVISION: 01/08/2026

Address: 14th Floor ADGM Square, Al Maryah Island Abu Dhabi – United Arab Emirates

Email: hello@recognito.vision

Contact Number: +14158003112

Privacy Policy