JusProg Consent procedure

The parental consent process starts on the website that the child wants to use. If the minor is not yet digitally mature (“under the age of digital consent”), then he or she will be directed from the website to a JusProg Consent input screen.

The child receives an input mask in which it can enter the e-mail address of the mother, father or another legal guardian and its own first name. By clicking on “Send”, the child sends the request to the legal guardian.

Tip: If parents agree to the setting of a cookie on the child’s end device after completing the Parental Consent, the parents’ email address and the child’s first name can be pre-entered in the fields for future Consent requests, which makes typing easier.

The mother, father or other guardian whose email address the child has entered in the Consent form will receive an automatic email from JusProg Consent with a personal link in it and a short explanation. When the adult clicks on this link, they will be taken to the JusProg Consent verification page.

To prevent the child from simply entering his or her own email address or that of a friend, the parents must be verified. Since the legal parent-child relationship cannot be verified for data protection reasons, JusProg Consent checks whether the person requested by the child can realistically be the father, mother or other legal guardian – i.e. is at least 25 years old themselves.

This check only needs to be done once. If the adult has already proven his or her age to JusProg Consent or another parental consent partner in the euCONSENT network or has proven the parent-child relationship in another way, the verification will not be necessary in the future.

If the parent or guardian is not yet known to the Consent System, the age is verified. For this purpose, JusProg Consent uses the age verification system YOTI, which has been positively evaluated in Germany by the state KJM, among others.

For age verification, adults can choose between:

• ID card scan: The ID card is scanned and checked for authenticity using a notebook or smartphone cam. The date of birth is then read from the scan. The scan is deleted immediately, no data is stored.
• Face recognition (recommended): This check is particularly quick and easy. The adult, who is at least 25 years old, briefly shows his or her face to the notebook or smartphone camera for an anonymous scan and the approximate age is determined on the basis of artificial intelligence, which is surprisingly correct. No data is stored. The scan takes a few seconds.
• YOTI app: If you are already registered with YOTI and have the YOTI app, you can simply scan a QR code and prove your age..

All systems have been thoroughly checked for data protection.

If the parent or guardian has already been verified with another partner in the euCONSENT network, JusProg Consent can recognise this (in line with data protection requirements) and briefly directs the adult to the website of the partner with whom verification has already taken place for confirmation. After confirmation, the adult returns to JusProg Consent immediately.

Once the parent or guardian has been verified (once), the actual parental consent can start.

The necessary questions are asked for parental consent. According to legal requirements (DSGVO / GDPR), the consent should be as specific as possible. For example, it is asked whether the child may register with a certain portal and agree to the general terms and conditions with the processing of personal data or whether certain SafeMode default settings should apply. Usually there are two or three questions.

Finally, there is the question whether JusProg Consent may save a cookie on the child’s smartphone, notebook or other end device during his or her next visit. This cookie will then contain the parent’s email address and the child’s first name so that the child does not have to laboriously type this in the next time he or she asks for Consent. The cookie is stored exclusively on the child’s end device and cannot be accessed by third parties. No other data is linked to it.

Parents are free to decide whether they agree to all Consent questions, only some of them or whether they refuse their consent altogether.

After the Consent questions have been answered, the mother, father or other guardian will receive two offers, which they can use both or individually:

• Sending a withdrawal email. If the adult wishes, JusProg Consent does not store any personal data. In order to be able to revoke consent once it has been given (parental consent), there is a revocation e-mail with a special link in it that the adult can save. If the consent is to be revoked later, this can be done via this link.
• Registration with PIN. Parents can register with JusProg Consent and assign a PIN as an easy-to-remember password (we want to avoid you writing down a complicated password somewhere where the child could find it). With the PIN, parents can later quickly authorise themselves for further consent requests and also view the consents already given so that they can revoke them if necessary.