geSign Mobile Application Privacy Policy

Article 1. General Provisions

  1. This Privacy Policy (hereinafter – the “Policy”) defines the rules and conditions for the processing of personal data in connection with the use of the geSign mobile application (hereinafter – the “Application”), the categories of data processed during the operation of the Application, and the principal guarantees of data protection.
  2. The Application may be used only after the User confirms, by selecting the relevant checkbox, that they have read and agree to this Policy.

Article 2. Document Identifier

The document identifier is: 02-31-01-01

Article 3. Operation of the Application

  1. The owner of the Application is the Legal Entity under Public Law – Public Service Development Agency (hereinafter – the “Agency”).
  2. Through the Application, personal data are processed locally on the User’s device to the extent necessary for electronic identification and the creation of a qualified electronic signature.
  3. Personal data processed within the Application are not transmitted to the Agency’s information systems and are not stored by the Agency.

Article 4. Categories of Data Processed

1. For the operation of the Application, the following categories of data are processed locally on the User’s device:

  1. identification data, namely: first name, surname, personal number;
  2. authentication data, namely: the result of electronic identification, the fact of authorization, and the result of certificate validation;
  3. signature data, namely: the fact of creation of an electronic signature; the date and time of the operation; and the technical identifiers of the operation;
  4. technical data, namely: device model, operating system version, Application version, Application system logs, and Application security logs.

2. When using the Application, the content of the document to be signed is not processed or stored by the Agency.

Article 5. Purposes of Data Processing

Within the Application, data are processed solely for the purpose of performing the following functions:

  1. electronic authentication of the User;
  2. creation of a qualified electronic signature;
  3. validation of qualified electronic signature certificates and natural person authentication certificates.

Article 6. PIN Codes and Authentication Means

  1. The Application does not store the User’s CAN and PIN codes.
  2. CAN and PIN codes are used only in the process of the User’s electronic authentication and creation of a qualified electronic signature, and the Agency does not have access to the User’s CAN and PIN codes.
  3. The User is responsible for maintaining confidentiality of the CAN and PIN codes.
  4. The User shall immediately take appropriate measures in the event of a compromise of the PIN codes or suspicion of unauthorized use.

Article 7. Receipt of Data

The Application receives personal data directly from the User and from the qualified electronic signature certificates and natural person authentication certificates stored on electronic identity/ residence cards.

Article 8. Data Sharing

When using the Application, the sharing of the User’s data with third parties during authentication in the digital environment and the creation of a qualified electronic signature is performed by the User.

Article 9. Data Security

  1. The Agency shall take appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data processed locally within the Application.
  2. The Agency shall periodically review and update he security measures for the Application, taking into account identified risks, technological advancements, and legal requirements.
  3. In order to ensure security of data processed through the Application, the Agency shall act in accordance with the Law of Georgia on Personal Data Protection, Georgian legislation, information security requirements, and relevant international standards, including ISO/IEC 27001.

Article 10. Contact Information

The Agency’s contact information:

  • Address: No.1 Zviad Gamsakhurdia Sanapiro Street, Tbilisi, Georgia
  • Email: online@sda.gov.ge
  • Websites: sda.gov.ge and id.ge
  • Tel.: (+995 32) 240 10 10

Article 11. Entry into Force and Amendment of the Policy

  1. The Policy applies to all Users of the geSign mobile Application from the moment it is made available through the Application and the User provides consent to its terms.
  2. The Agency has the right to update the Application and the Policy at any time.
  3. The updated Policy will be made available through the Application and shall enter into force upon acceptance by the User.
  4. The Application may be used only upon acceptance of the updated Terms by the User.