Consent & Authorization

Consent & Authorization

This page explains the general consent and authorization principles that apply when using Nomakkin services, including screening, verification, professional investigations, case management, and recurring or periodic checks.

Where a requested service involves the processing of personal data, the client represents that the information is being provided lawfully and that the client has the appropriate authority, consent, legal basis, or other valid grounds required to submit the information and request its processing, depending on the nature of the service and the applicable jurisdiction.

This page does not replace any additional consent, written authorization, declaration, or documentation that may be required for a specific service or category of data. Nomakkin may request additional information or evidence before beginning an engagement.

Consent to Data Processing

Where consent is the appropriate legal basis for processing, the relevant individual expressly agrees to the collection, processing, and use of the personal data reasonably necessary to provide the requested service and for the purposes communicated to that individual.

Processing is limited to information reasonably necessary for the defined purpose of the service. Personal data will not be used for unrelated purposes unless another lawful basis permits such processing.

Authorization for Screening and Verification

When requesting screening or verification services, the client authorizes Nomakkin, within the limits of applicable law and the agreed scope of work, to perform the research, verification, and analysis reasonably necessary to provide the service using lawful sources, tools, and service providers.

Depending on the service, verification may include reviewing information supplied by the client, lawful public or commercial sources, licensed databases, legally accessible records, and communications with appropriate organizations or sources where such contact is lawful and relevant.

This authorization does not permit Nomakkin or any service provider working on its behalf to use unlawful methods or obtain unauthorized access to accounts, devices, protected records, systems, or restricted databases.

Requests Concerning Other Individuals

If a client provides information relating to another individual or requests a service involving another person's personal data, the client is responsible for ensuring that a lawful basis exists for providing that information and requesting the relevant service.

Nomakkin may request evidence of consent, authorization, legal authority, or another legitimate basis supporting the request. Nomakkin may refuse, suspend, or limit an engagement where the legal basis for processing cannot be established or where the request creates unacceptable legal, privacy, or compliance risks.

Investigations and Case Management

For services involving civil or commercial investigations or the management of complex matters, authorization is limited to the agreed scope of work and the lawful activities reasonably necessary to carry out the engagement.

Certain matters may require coordination with lawyers, licensed investigators, specialists, data providers, or other qualified professionals. Such providers are engaged where there is a legitimate operational or legal need and within the limits of the applicable service scope and regulatory requirements.

Sensitive Personal Data

Certain categories of personal data may be subject to additional legal restrictions or safeguards. Where a service requires the processing of sensitive personal data, Nomakkin handles such information in accordance with applicable legal requirements and may require explicit consent, written authorization, or other documentation where required by law.

Clients should not provide sensitive personal data that is unrelated to the requested service or for which there is no legitimate need to process.

Recurring and Ongoing Verification

For protection plans, recurring verification, or periodic screening services, the client authorizes checks to be performed according to the scope and frequency specified in the relevant plan or service agreement.

The service may involve conducting new checks periodically and comparing new findings with previously available information in order to identify changes, updates, or relevant indicators within the agreed monitoring scope.

Future recurring checks may be stopped in accordance with the applicable service terms, without affecting processing that was lawfully completed before the request to stop became effective.

Sharing Data with Service Providers and Partners

Nomakkin may share the minimum amount of information reasonably necessary with service providers, professional partners, or other qualified parties who lawfully contribute to delivering the requested service.

Such sharing is subject to appropriate legal and contractual safeguards, including confidentiality and data-protection obligations where applicable.

Cross-Border Data Transfers

Certain cross-border engagements may require personal data to be processed or shared with service providers or professional partners operating outside the country in which the request originated.

Any international transfer of personal data is subject to applicable legal requirements and, where required, appropriate safeguards, approvals, contractual mechanisms, or other lawful transfer arrangements.

Accuracy of Information Provided

Clients are responsible for providing information that is accurate and complete to the best of their knowledge. Incorrect, incomplete, or misleading information may affect Nomakkin's ability to perform the requested service or may affect the accuracy and relevance of the resulting findings.

Nomakkin may request additional information or documentation where reasonably necessary to verify identity, authority, the purpose of the request, or the lawful basis for processing.

Withdrawal of Consent

Where processing is based on consent, the relevant individual may request to withdraw that consent in accordance with applicable law.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal request was received. Nomakkin may also continue to retain or process certain information where another lawful basis or legal obligation permits or requires it.

Data Subject Rights

Depending on the applicable law, individuals may have rights relating to access, correction, updating, deletion, restriction, or objection to certain processing of their personal data.

These rights may be subject to legal conditions, limitations, exemptions, and verification requirements. Requests may be submitted through Nomakkin's official communication channels.

No Authorization for Unlawful Purposes

Nomakkin services may not be used for unlawful surveillance, stalking, harassment, blackmail, threats, unlawful discrimination, unauthorized access to information, unlawful invasion of privacy, or any other purpose that violates applicable law or the legitimate rights of another person.

Nomakkin reserves the right to refuse, suspend, restrict, or terminate any request where the purpose appears unlawful, the client lacks appropriate authority, or continuing the engagement could create unacceptable legal, regulatory, privacy, or professional risks.

Relationship with the Privacy Policy

This page should be read together with Nomakkin's Privacy Policy, Terms and Conditions, and any service-specific agreement, consent form, authorization, or statement applicable to the relevant engagement.

Where additional terms apply to a particular service, those terms operate alongside this page to the extent permitted by applicable mandatory law.

Contact Us

For questions relating to consent, authorization, personal data processing, or the exercise of applicable data-protection rights, please contact Nomakkin through the official communication channels provided on our website.