Privacy Policy

1. What data we collect

1.1 We collect all information from the composition of certificates (registration certificates) of users issued by NCA RK and used for generating digital signatures, which in addition to data about individuals, may contain data of legal entities in case of using certificates of legal entities. The volume of data contained in certificates issued by NCA RK is provided in the document “Rules for the use of registration certificates of subscribers of the National Certification Authority of the Republic of Kazakhstan” available on the NCA RK portal https://pki.gov.kz. All this information is contained in the electronic signature, we receive it automatically in the process of registering signatures on the service.

1.2 We also collect the following information:

1.2.1 Cookies files;

1.2.2 network (IP) addresses of users and information systems;

1.2.3 email addresses specified in account settings.

2. How we use collected data

2.1 We use information from certificates for:

2.1.1 displaying data about the subject who signed the document with a digital signature;

2.1.2 restricting access to documents with limited access;

2.1.3 obtaining email addresses for sending notifications about document actions.

2.2 We use Cookies files to confirm the login status of users on the website https://sigex.kz.

2.3 We use network (IP) addresses of users and information systems to prevent network attacks and unwanted activity.

2.4 We use email addresses specified in account settings to send notifications about document actions.

3. What data we share with third parties

3.1 We do not share data with third parties, except in cases where we are required to provide it in accordance with the legislation of the Republic of Kazakhstan.

4. How to change or delete your data

4.1 The user can at any time change or clear the data specified in their account settings.

4.2 The ability to delete certificate data used for generating digital signatures is not provided, since this data is contained in digital signatures under electronic documents.

5. Protection of collected data

5.1 We apply all reasonable means to ensure the confidentiality of collected data, such as: technical means of controlling access to data and servers on which they are hosted, organizational measures to limit the number of employees having access to collected data and servers on which they are hosted.

6. Contact address for data processing issues

6.1 Requests, wishes and complaints regarding data processing should be sent by email to: info@sigex.kz.

7. Changes to privacy policy

7.1 The privacy policy may be changed without prior notice. The current version of the privacy policy is available at https://sigex.kz/privacy-policy/.