Tinkoff gives contradictory answers to Roskomnadzor and the Central Bank of the Russian Federation regarding the client’s consent to the processing of his biometrics

Tinkoff gives contradictory answers to Roskomnadzor and the Central Bank of the Russian Federation regarding the client’s consent to the processing of his biometrics

In response to the articles “Tinkoff Bank” collects consent to process customer biometrics when entering a PIN code in a new application or ATM and Let’s do biometrics for you. It will not be possible to refuse, I would like to add some interesting news.

Since I have already managed to file a lawsuit with the court of general jurisdiction to recognize paragraph 2.24 of the Tinkoff Bank Code of Conduct as contrary to the law and a complaint to Roskomnadzor, I would like to draw the community’s attention to the obvious contradictions of Tinkoff’s answers to various departments.

In the process of communication with our state structures, one interesting thing emerged. I filed a complaint against the fact that “Tinkoff” included clause 2.24 of the Code of Criminal Procedure, which provides for automatic consent to the processing of biometrics, to the Office of Roskomnadzor in October.

At the same time, in their response, the RKN employees wrote:

Кроме того, АО «Тинькофф Банк» указало, что 03.11.2023 г. Клиентом было предоставлено согласие на обработку биометрических данных, полученных в результате фотографирования и/или записи голоса

.....

Представленное АО «Тинькофф Банк» в ответе на запрос Управления согласие XXXXXX на обработку биометрических персональных данных, соответствует обязательным требованиям законодательства.

Roskomnadzor’s answer

After reading this text, to put it mildly, I was surprised at the arrogance and lies of “Tinkoff”.

Because I do not suffer from bipolar disorder or schizophrenia to first file a complaint with Roskomnadzor about the processing of biometrics at Tinkoff, and then allegedly give consent to it.

Taking into account the provisions of 59-FZ, I wrote a request to get acquainted with the case materials and found there the answer of “Tinkoff”, which they gave to Roskomnadzor:

So, on December 1, 2023, the Head of the Back Office Department of Tinkoff Bank O.G. Babayants. claimed:

Акционерное общество «Тинькофф Банк», лицензия Банка России № 2673, далее по тексту - Банк, в ответ на запрос Управления Федеральной службы по надзору в сфере связи, информационных технологий и массовых коммуникаций по Вологодской области № 7062-1/35 от 09 ноября 2023 г. сообщает следующее.

....

Дополнительно сообщаем, что согласно п. 2.24. Условий комплексного банковского обслуживания физических лиц (ред. 43) клиент дает свое согласие на обработку его биометрических персональных данных, полученных в результате фотографирования и/или записи голоса, любыми способами, ....

Указанный пункт Условий комплексного банковского обслуживания физических лиц не распространяется Банком на лиц, не предоставивших письменное согласие на обработку биометрических персональных данных в соответствии с требованиями действующего законодательства и внесен в целях обеспечения дополнительного информирования лиц, предоставивших такое согласие. Клиенты Банка имеют возможность как согласиться с обработкой биометрических персональных данных и их размещения в Единой биометрической системе, так и отказаться от такой обработки. При этом клиенту не будет отказано в оказании обслуживания Банком.

Head of the Back Office Department of Tinkoff Bank Babayants A.G.

Tinkoff’s response to Roskomnadzor’s request:

At the same time, Babayants indicated in her answer:

Считаем важным сообщить, что 03.11.2023 г. Клиентом было предоставлено согласие на обработку биометрических данных.

Таким образом Клиентом было предоставлено согласие на обработку его биометрических персональных данных, полученных в результате в фотографирования и/или записи голоса.

and attached the document:

I did not sign this agreement and did not see it in my eyes at all.

Not only that, there is no date in it, in addition, it contains outdated passport data. Seeing clear signs of falsification, I filed a complaint with the Central Bank of the Russian Federation, whose employees sent a request to the Ministry of Digital, and also sent a copy of the request to the Ministry of Internal Affairs, as they see signs of a crime in this situation.

At the same time, “Tinkoff” lied so much that I forgot how on November 3, 2023 they sent a message that my biometric data was not processed and I did not consent to their processing.

/

.

Moreover, this document was signed by A.H. Babayants herself. Head of the Back Office Department of Tinkoff Bank.

To my question “where did this fake document come from” Tinkoff answered:

That is, “Tinkoff” believes that the entrance to the Internet bank can be considered as:

  • application for the formation of a simple electronic signature

  • an application for signing consent to the processing of biometric personal data with this Simple electronic signature, although the consent itself was not even shown to the client!!!

A complaint was also filed against this fact of the illegal formation of the PEP and the signing of documents by it. But what prevents “Tinkoff”, guided by its logic, to start signing the issuance of the client’s PEP loan with the transfer of the loan amount in favor of the bank’s management simply upon entering the program?

Thus, in summary:

  1. On December 1, 2023, Head of the Back Office Department of Tinkoff Bank, A.G. Babayants. states that I allegedly consented to the processing of biometrics on November 3, 2023At the same time, Babayants is not embarrassed that Tinkoff sent me a confirmation the same day that he does not process my biometrics;

  2. At the same time, the Head of the Back Office Department of Tinkoff Bank, A.G. Babayants. claims that logging into the bank’s application is equivalent to automatically giving consent to the processing of biometric data.

But there is one big BUT.

On November 21, 2023, Director of the Legal Department – Deputy Chairman of the Management Board V.A. Pavlyukova. in response to the request, the Central Bank of the Russian Federation approved

Так, по состоянию на 21.11.2023 г. Клиент не давал согласия на обработку биометрических данных, обработка биометрических персональных данных Клиента Банком не осуществлялась. Директор Юридического департамента

Deputy Chairman of the Board

Answer of “Tinkoff” of the Central Bank of the Russian Federation

It turns out that the answer of Tinkoff Bank given to employees of the Central Bank of the Russian Federation directly contradicts the answer of Tinkoff Bank given to employees of Roskomnadzor.since:

  • November 21, 2023 Director of the Legal Department – Deputy Chairman of the Board V.A. Pavlyukova V.A. the Central Bank of the Russian Federation claimed that as of November 21, 2023, the client did not consent to the processing of biometric data;

  • and December 1, 2023 Head of the Back Office Department of “Tinkoff Bank” A.G. Babayants. claimed that the Client consented to the processing of biometric data on November 3, 2023;

  • at the same time, the illiterate Tinkoff employees consider entering the application to be sufficient for forming a PEP and signing consent to the processing of biometrics, despite the fact that the text of this consent is not even shown to the client;

  • “Tinkoff” claims that the granting of consent to biometrics, specified in clause 2.24 of the Code of Civil Procedure, is not extended by the Bank to persons who have not given written consent to the processing of biometric personal data in accordance with the requirements of current legislation;

  • but there are already victims whose biometrics were leaked to EBS by Tinkoff without their consent.

Intermediate conclusion

Tinkoff lied to the brim with his attempt to get customers to consent to the processing of Biometrics.

The specified contradictions and documents will be submitted to the Central Bank of the Russian Federation, Roskomnadzor, the Ministry of Internal Affairs, the Ministry of Statistics, MP Gorelkin (he wrote more than once about biometrics and Tinkoff) and the court of general jurisdiction.

Related posts