Terms and conditions of use for video identification
Before a new business relationship can be established, REYL & Cie Ltd (hereinafter the “Bank”) is required to verify the identity of its clients. To this end, the Bank offers an online video identification service (hereinafter the “Service”) in partnership with Swisscom (Suisse) SA (hereinafter “Swisscom”). The Bank only offers the Service to adult, natural persons.
By using the Service, the user acknowledges having read, understood and accepted the present terms and conditions of use. In particular, the user acknowledges and understands that the Service is a service provided by the Bank in partnership with Swisscom and that the personal data which is communicated to the Bank will be transmitted to Swisscom in accordance with the procedures of the Service. In this context, the user frees the Bank of any obligation to respect banking secrecy and any other legal or contractual confidentiality obligation. The user also agrees to the processing of their personal data by the Bank and by Swisscom.
Service operation
The user will receive an email inviting them to connect to a specialised Swisscom website. On the website, the user will be asked to enter their personal data and accept the present terms and conditions of use.
The user then receives an SMS with an authorisation code (TAN) which they enter in the Swisscom application. A secured connection is then established between the user’s device (computer, smartphone or tablet) and Swisscom’s servers to proceed with the video interview with a Swisscom employee.
The Swisscom employee will ask the user to present a valid identification document to the camera and display it in different positions to allow the Swisscom employee to i) take photos of the user and their identification document, and ii) verify if the information stated on the identification document matches the data entered into the system.
Once the identification process is complete, the data (including the photographs and audio recording) is sent to the Bank. The user’s personal data are stored by Swisscom solely in order to transmit them to the Bank, after which they are deleted.
Service requirements
- Have a Swiss passport, a Swiss identity card or a valid, machine-readable foreign passport.
- Have access to a computer with a camera and a microphone, or to a smartphone or tablet with an Android or iOS operating system.
- Ensure that the image and/or audio quality of the device allows for correct identification.
- Accept that the entire conversation with the Swisscom employee be recorded, that the photographs of the user and their identification document be recorded and that the data will be sent to REYL & Cie Ltd to be processed.
Service security level
The Bank and Swisscom comply with the legal provisions concerning the protection of data and use IT infrastructure managed in accordance with the technical and practical conditions commonly used in the banking sector. Data is always transmitted over the Internet through a secure connection.
However, there are risks with standard electronic communication channels (email and SMS) and, in particular, with data transmitted over an open network. Data can be intercepted and recorded by third parties (in Switzerland and abroad), even if the sender and the recipient are both in Switzerland.
The user therefore acknowledges that a third party could access their data when transmitted through standard electronic communication channels and that an encrypted transmission between the sender of the data and the recipient does not exclude the possibility that a third party could identify the nature of the contractual relationship between the user and the Bank. It is therefore recommended that the user employ updated security software (for example, by installing firewalls and anti-malware programmes).
The Bank attempts to minimise these risks in its own IT environment by adopting suitable technical measures comparable to those generally taken by similar banks. The Bank cannot be held liable unless it has seriously failed to perform its due diligence responsibilities and has consequently caused a significant prejudice. In any case, the Bank does not assume liability for damages which could have been avoided through the use of suitable protective measures (use of standard antivirus and firewall programs, regular operating system updates).