Biometric Data Processing Consent

═══════════════════════════════════════════════════════════════════
BIOMETRIC DATA COLLECTION NOTICE AND CONSENT REQUEST
═══════════════════════════════════════════════════════════════════

No full biometric templates or raw biometric data are stored in any
central system or persistent device database.

IMPORTANT: Please read this notice carefully before providing consent.
This notice explains how your biometric information will be collected,
used, stored, and protected.

Notice Generated: 2026-05-16 12:10:06 UTC
Notice ID: 01CE9E0A

───────────────────────────────────────────────────────────────────
SECTION 1: WHO IS COLLECTING YOUR BIOMETRIC DATA?
───────────────────────────────────────────────────────────────────

Organization Name: Ones Technology
Address: Ankara, Ankara, TR 06000, Turkey
Website: https://ones.com.tr
Privacy Contact: [email protected]
Privacy Policy: https://ones.com.tr/privacy

───────────────────────────────────────────────────────────────────
SECTION 2: WHAT BIOMETRIC DATA WILL BE COLLECTED?
───────────────────────────────────────────────────────────────────

We will collect and process the following biometric identifiers:

  • Face Geometry

IMPORTANT: Biometric identifiers are unique to you and cannot be changed
if compromised. Unlike passwords or ID cards, your biometric data is
permanently linked to your physical characteristics.

───────────────────────────────────────────────────────────────────
SECTION 3: WHY IS YOUR BIOMETRIC DATA BEING COLLECTED?
───────────────────────────────────────────────────────────────────

Your biometric data will be used for the following purposes ONLY:

  • Physical Access Control

Your biometric data will NOT be used for any other purpose without
obtaining your separate, additional consent.

───────────────────────────────────────────────────────────────────
SECTION 4: LEGAL BASIS FOR PROCESSING
───────────────────────────────────────────────────────────────────

We process your biometric data based on your EXPLICIT CONSENT as
required by the following laws:

  • Illinois, USA: Illinois Biometric Information Privacy Act (740 ILCS 14)
  • European Union: General Data Protection Regulation (Regulation (EU) 2016/679)
  • Turkey: Kisisel Verilerin Korunmasi Kanunu (Law No. 6698)

Under these laws, we are required to:
  • Obtain your written/electronic consent BEFORE collection
  • Inform you of the specific purpose for collection
  • Inform you of the retention period and destruction schedule
  • Protect your biometric data with reasonable security measures

───────────────────────────────────────────────────────────────────
SECTION 5: HOW LONG WILL YOUR DATA BE KEPT?
───────────────────────────────────────────────────────────────────

Retention Period: 3 years
Retention Basis: Employment duration + 3 years

DESTRUCTION POLICY:
Your biometric data will be permanently destroyed:
  • Within 30 days of purpose completion
  • Method: Secure cryptographic erasure

You may request earlier destruction by contacting: [email protected]

───────────────────────────────────────────────────────────────────
SECTION 6: WILL YOUR DATA BE SHARED?
───────────────────────────────────────────────────────────────────

Your biometric data will NOT be sold, leased, or otherwise disclosed
to any third party, except as required by law or with your additional consent.

We will NEVER sell your biometric information.

───────────────────────────────────────────────────────────────────
SECTION 7: YOUR RIGHTS
───────────────────────────────────────────────────────────────────

You have the following rights regarding your biometric data:

  • RIGHT TO ACCESS: Request a copy of your biometric data
  • RIGHT TO CORRECTION: Request correction of inaccurate data
  • RIGHT TO DELETION: Request destruction of your biometric data
  • RIGHT TO WITHDRAW CONSENT: Withdraw your consent at any time
  • RIGHT TO COMPLAIN: File a complaint with the appropriate authority

To exercise these rights, contact: [email protected]

NOTE: Withdrawing consent may affect your ability to access facilities
that require biometric authentication.

───────────────────────────────────────────────────────────────────
SECTION 8: CONSENT ACKNOWLEDGMENT
───────────────────────────────────────────────────────────────────

By providing my consent below, I acknowledge that:

   I have read and understood this Biometric Data Collection Notice
   I understand that my biometric data is sensitive personal information
   I consent to the collection of my biometric data for the stated purposes
   I understand my rights and how to exercise them
   I understand I may withdraw consent at any time

CONSENT TYPE:  Written   Electronic   Verbal (where permitted)

This consent is:
   FREELY GIVEN (not a condition of employment/service unless required)
   SPECIFIC (for stated purposes only)
   INFORMED (I understand what I'm consenting to)
   UNAMBIGUOUS (my action clearly indicates consent)

───────────────────────────────────────────────────────────────────
SIGNATURE BLOCK
───────────────────────────────────────────────────────────────────

Name (Print): _________________________________________________

Signature: ____________________________________________________

Date: ________________________________________________________

Employee/Subject ID (if applicable): ___________________________

═══════════════════════════════════════════════════════════════════
NOTICE METADATA
═══════════════════════════════════════════════════════════════════

This notice complies with:
  = Kantara Initiative TPI v1.0 (ANCR WG) - IPR OPTION - RAND (Reasonable And Non-Discriminatory)
  = Kantara Consent Receipt Specification v1.1.0
  = ISO/IEC TS 27560:2023 Consent Record Information Structure
  = W3C Data Privacy Vocabulary (DPV) v2.2

Registration Authority: Not Verified
Credential Verification: Not Verified

For questions about this notice, contact: [email protected]
Privacy Policy: https://ones.com.tr/privacy

───────────────────────────────────────────────────────────────────
DISCLAIMER — NOT LEGAL ADVICE
───────────────────────────────────────────────────────────────────

This consent record is generated by the Vision2 TPI Layer (IDmachines LLC) under Kantara ANCR WG IP Policy: RAND. It is a compliance support tool and does not constitute legal advice. The deploying organization is the Data Controller and is solely responsible for regulatory compliance. TPI scores reflect technical evaluation only and do not guarantee legal sufficiency. Framework mappings are informational references subject to change.

Powered by IDmachines LLC | Kantara TPI v1.0 | ISO/IEC 27560:2023 Compliant | ANCR WG IP Policy: RAND

© 2026 Ones Technology. All rights reserved.
═══════════════════════════════════════════════════════════════════