Who has access to the data shared when verifying my identity?

Who has access to the data shared when verifying my identity?

When you verify your identity with ebioro, certain personal data is processed by identity verification and compliance providers that work with us to meet legal obligations related to anti-money laundering and other regulations.

What data is shared?

To complete identity verification (KYC) or business verification (KYB), ebioro may share the following data with these providers:

• Identification details: name, date of birth, nationality, and address.
• Official identification documents: passport, national ID card, driver's license, and tax identification numbers.
• Biometric data: selfies or videos used for identity verification.
• Business information (for KYB): company name, registration details, position, and business address.

Who can access this data?

Your data may be processed by:

• Identity verification and compliance providers, which perform verification and sanctions screening.
• Financial institutions and infrastructure partners, when they are involved in opening virtual accounts or providing payment rails.
• Technology and hosting providers, which support the operation of our services.
• Regulators, supervisory authorities, or law enforcement agencies, when required by law.
• Affiliated entities or acquirers, in the context of a corporate restructuring.

ebioro does not sell personal data.

Where is this data processed?

Some of these providers may be located outside the European Economic Area (EEA). In such cases, ebioro applies the safeguards required under the GDPR, such as standard contractual clauses or European Commission adequacy decisions.

How long is the data retained?

Identity and compliance data (KYC, KYB, AML/CTF, sanctions screening, and transaction monitoring) is retained throughout your relationship with ebioro and for up to 10 years after your account is closed, as required by applicable regulations.

Can I reuse my verification?

Yes. Where permitted by law, and to provide additional services you request, ebioro may reuse previously collected verification information and share it with trusted service providers, such as banking, payment, or account infrastructure partners, so you do not have to submit the same information multiple times.

What rights do I have regarding this data?

You can exercise your rights of access, rectification, erasure, objection, data portability, restriction of processing, and withdrawal of consent by writing to help@ebioro.com.

What does each right mean?

• Access: Find out what personal data is being processed and obtain a copy.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request the deletion of your data when it is no longer necessary for the purposes for which it was collected.
• Objection: Object to the processing of your data in certain circumstances, for example, for marketing purposes.
• Data portability: Receive your data in a structured, commonly used format and transfer it to another data controller.
• Restriction of processing: Request the temporary suspension of the use of your data in specific situations, while a dispute is resolved or the accuracy of the information is verified. During this period, the data will be retained but not actively used.
• Withdrawal of consent: Withdraw consent you previously gave at any time, without affecting the lawfulness of processing carried out before the withdrawal.

If you reside in the EU, you can also file a complaint with Lithuania's State Data Protection Inspectorate (VDAI).

Important

ebioro uses automated systems to assess the risk associated with each customer and transaction. If a decision is based solely on automated processing and significantly affects you, you have the right to request human intervention by writing to help@ebioro.com.

Updated on: 15/10/2026