1. Purpose of Data Processing: Facial recognition technology is used to perform access control to Fair Play Casino. This includes identifying individuals who wish to enter and granting access if there are no impediments.
2. Basis for data processing: Your explicit consent. By checking the boxes for the consent questions and signing these terms and conditions, you give your consent for the processing of your (biometric) personal data for the purpose of identifying you at our access control. Furthermore, we have a legal basis for processing the other data required for access control (age and Cruks check).
3. Collected Data: We will collect biometric data in the form of (passport) photos and facial vectors derived from them, which are necessary to verify your identity. The facial recognition software uses the photo taken to calculate a unique facial vector of your face. This data will not be used for any purpose other than access control.
   In addition, we collect the necessary data that we need to collect for age and Cruks checks. This data includes your first name, last name, date of birth, social security number, place of birth, and a photo of your face. For more information, see our privacy statement at www.fairplay.nl.
4. Storage and Security: Your (biometric) data is stored securely and encrypted. We take appropriate technical and organizational measures to ensure the security and confidentiality of your data. This also applies to the other data we process about you. We do not store your social security number, but only use it once to match your data with the Cruks system of the Gaming Authority.
5. Retention period: Your (biometric) data will only be stored for as long as necessary for the intended purpose, namely to perform access checks when you wish to enter Fair Play Casino. After performing the access control, we only store an encrypted facial vector in your Fair Play Casino account. This means that we immediately delete the photo you have to take for the facial scan once the access control has been completed. If you do not visit our establishments for a period of more than three months, we will automatically delete the facial vector.
   We will retain your other data for as long as required by law and regulations.
6. Sharing data: we share your data with third parties who supply the software for performing access control using facial recognition.
7. Voluntary participation: Your participation in Fast Access with Facial Recognition is entirely voluntary. You may choose not to participate and use alternative access control methods, such as identification, fingerprint, or facial recognition.
8. Withdrawal of Consent: You may withdraw your consent to the use of facial recognition at any time by contacting one of our employees or our Data Protection Officer.
9. Your rights regarding your personal data:
   – Right of access: You have the right to request access to your personal data. You can contact us at any time to obtain information about how we process your data, including facial vectors, and to receive a copy of your data.
   – Right to Rectification: You have the right to request rectification of inaccurate or incomplete personal data we hold about you.
   – Right to Erasure: You have the right to request the erasure of your personal data, including facial vectors, under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
   – Right to Restriction of Processing: You have the right to request restriction of the processing of your personal data under certain circumstances. This means that we will temporarily suspend the processing of your data, including facial vectors, while we assess your request.
   – Right to Data Portability: You have the right to receive your personal data, including facial vectors, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller where technically feasible.
   – Right to Object: You have the right to object to the processing of your personal data on grounds of legitimate interest. We will assess your objection and, unless we have compelling legitimate grounds, we will stop processing your data.
   – Automated Decision-Making: We do not make decisions that significantly affect you based on automated processing, including profiling. If we ever implement such processes, we will provide you with the necessary information and mechanisms to exercise your rights.
   To exercise any of these rights, or if you have any questions or comments about the processing of your personal data, including facial vectors, please contact our Data Protection Officer at fairplay.nl/contact or via the email address provided at the bottom of this privacy statement.
10. Complaints: If you believe that your data is not being processed in accordance with these terms and conditions, you have the right to lodge a complaint with our Data Protection Officer or the Dutch Data Protection Authority. 

Data Protection Officer:

Name: Peter Kager – fg@jhgroup.nl

By consenting to the use of Facial Recognition for Fast Access at Fair Play Casino, you acknowledge that you have read, understood, and agree to these terms and conditions.