1. With the exception of cases of lower risk to which measures under Section 3 apply and irrespective of the application of additional measures in cases of higher risk under Section 4 obliged entities shall obtain at least the following information in order to identify the customer, any person purporting to act on behalf of the customer, and the natural persons on whose behalf or for the benefit of whom a transaction or activity is being conducted:

(a) for a natural person:

(i) all names and surnames;

(ii) place and full date of birth;

(iii) nationalities, or statelessness and refugee or subsidiary protection status where applicable, and the national identification number, where applicable;

(iv) the usual place of residence or, if there is no fixed residential address with legitimate residence in the Union, the postal address at which the natural person can be reached and, where available the tax identification number;

(b) for a legal entity:

(i) legal form and name of the legal entity;

(ii) address of the registered or official office and, if different, the principal place of business, and the country of creation;