Confidentiality policy of free software solution of the State Tax Service (PRRO)
Free software solution of the State Tax Service of Ukraine in the form of a software registrar of settlement operations (PRRO) was created and put into operation by the State Tax Service of Ukraine in compliance with requirements of the Law of Ukraine № 128-IX as of 20.09.2019 "On amendments to the Law of Ukraine "On the use of registrars settlement operations in trade, public catering and services" and other laws of Ukraine regarding un-shadowing of settlements in trade and services".
PRRO from the State Tax Service is intended for registration of settlement operations in trade, public catering and services.
PRRO from the State Tax Service is a software complex applicable to any device that supports Windows, Android or iOS operating systems with appropriate versions and in which fiscal functions are implemented through the fiscal server of the controlling body.
According to the Law, a qualified electronic signature, qualified electronic time mark in compliance with requirements of the Law of Ukraine "On electronic trust services", improved electronic signature and/or improved electronic seal are used in PRRO.
Fiscal server of the controlling body was created by the State Tax Service according to the specified Law.
Fiscal function of PRRO is implemented through the fiscal server of the controlling body. Fiscal server of the controlling body ensures PRRO registration, electronic settlement documents, electronic fiscal reports and electronic fiscal reporting checks, storage of data on the completed settlement operation in accounting data system of registrars of settlement operations, processing and providing access to information about settlement operations carried out using PRRO, integration with PRRO through a software interface (API).
During registration and operation of PRRO, the State Tax Service of Ukraine receives and processes personal data of business entity – PRRO user.
Processing of personal data means any action or set of actions, such as collection, registration, accumulation, storage, adaptation, change, renewal, use and distribution (implementation, transfer), depersonalization, destruction of personal data, carried out using software tools of the fiscal server of the controlling body, which provides integration with PRRO.
Paragraphs 1 and 2 of Part 2 Article 8, Part 2 of Article 13 of the Law of Ukraine "On personal data protection", the State Tax Service of Ukraine informs about the owner, manager, location, composition and purpose of collecting personal data, which are processed with a help of software tools of the Information and Communication System of the State Tax Service in cooperation with the fiscal server of the controlling body, free software solution from the State Tax Service (PRRO), other PRRO, as well as about third parties to whom such personal data is transferred and rights of the personal data subject.
1. Owner of personal data, which is processed with a software help of the fiscal server of the controlling body, integrated with PRRO and other Information and Communication System of the State Tax Service, is the State Tax Service of Ukraine (legal entity identification code in the Unified State Register of Enterprises and Organizations of Ukraine – 43005393).
2. Administrator of personal data is the State Tax Service of Ukraine (legal entity identification code in the Unified State Register of Enterprises and Organizations of Ukraine – 43005393).
3. Location of personal data: database of the State Tax Service of Ukraine.
4. Personal data includes:
- surname, first name and patronymic;
- passport series and number;
- registration number of the taxpayer's registration card from the State Register of Individuals – Taxpayers;
- territory code according to the codifier of administrative-territorial units and territories of territorial communities, where the business unit is located, on which PRRO is used;
- address of the business unit, which may coincide with address of the actual business entity’s residence place.
Receipt (collection) of data regarding the last name, first name, patronymic and registration number of the taxpayer's account card is carried out during the authorization (electronic identification) of PRRO user by using a personal key.
Other personal data is obtained (collected) by the direct provision of personal data by a person during the registration procedure of PRRO in the controlling body and during reception and transfer of data from PRRO to the fiscal server of the controlling body.
5. Purpose of personal data processing:
- provision using means of Information and Communication System "Electronic cabinet" and the "Unified window for submission of electronic reporting" of electronic services for PRRO registration in the controlling body (acceptance of registration application in electronic form, notifications on the provision of information on qualified / improved public key certificates used in PRRO, on the conduction of settlement operations during the absence of communication connection between PRRO and the fiscal server of the controlling body);
- receipt by the fiscal server of the controlling body of data from PRRO about completed settlement operations in the form of electronic settlement documents, fiscal reports and fiscal reporting checks;
- providing the personal data subject – PRRO owner with data for the formation of fiscal reporting checks;
- providing the personal data subject with access to registration and accounting data regarding PRRO in the Electronic cabinet.
6. Third parties to whom the processed personal data are transferred are:
- state bodies, local self-government bodies, enterprises, institutions, organizations belonging to the sphere of their management, to which the processed personal data are transferred in order of interaction defined by legislation;
- other persons who apply to the State Tax Service of Ukraine and have a right to receive personal data exclusively on the grounds specified by the law.
Transfer of personal data to foreign subjects of relations related to personal data (cross-border transfer of personal data) is not carried out.
Access to information about a person (personal data), which is formed by means of the Information and Communication System in order of interaction with the fiscal server of the controlling body and PRRO, has access only to the PRRO owner (subject of personal data), having authorized using a qualified electronic signature and exclusively to that information which applies to such user.
7. Personal data is stored by the State Tax Service of Ukraine during a period of operation of the fiscal server of the controlling body and PRRO, but not longer than 5 years, unless another storage period is specified by the law.
8. Rights of the personal data subject according to Part 2 of Article 8 of the Law of Ukraine "On personal data protection" are the following:
1) to know about sources of collection, location of personal data, purpose of their processing, location of the owner or manager of personal data or to give an appropriate mandate to obtain this information to persons authorized by him / her, except for cases established by the law;
2) to receive information about conditions for granting access to personal data, in particular information about the third parties to whom personal data is transferred;
3) to access to own personal data;
4) to receive not later than thirty calendar days from the date of receipt of request, excepting cases provided by the law, answer on whether own personal data is being processed, as well as receive the content of such personal data;
5) to present a reasoned demand to the personal data owner with an objection to processing of his / her personal data;
6) to make a reasoned demand for the change or destruction of own personal data by any owner and administrator of personal data, if these data are processed illegally or are unreliable;
7) to protect own personal data from illegal processing and accidental loss, destruction, damage due to the intentional concealment, failure to provide or untimely provision of data, as well as protection from providing information that is unreliable or dishonors honor, dignity and business reputation of a person;
8) to file complaints about processing of own personal data to the Human Rights Commissioner of the Verkhovna Rada of Ukraine or to the court;
9) to apply legal remedies in case of legislative violation on the personal data protection;
10) to enter a reservation regarding the limitation of a right to process one's personal data giving consent;
11) to withdraw consent to the personal data processing;
12) to know mechanism of personal data automatic processing;
13) to have protection against an automated decision that has legal consequences.
State Tax Service of Ukraine is not responsible for possible leakage of information due to the fault of third parties, as well as for the personal data disclosure by the personal data subject in mobile applications, application software interfaces and applications.
9. Safety
State Tax Service of Ukraine takes all necessary measures to protect data from unauthorized access, modification, disclosure or destruction.
These measures include, in particular: internal review of data collection, storage and processing processes and security measures, including appropriate encryption and physical data security measures to prevent unauthorized access to systems where personal data is stored.
State Tax Service of Ukraine provides internal access to PRRO data users only to those employees of the State Tax Service of Ukraine who need them within the scope of performance of functional powers determined by relevant Order of the State Tax Service of Ukraine.
For integration of PRRO with the fiscal server of the controlling body for a purpose of exchanging electronic documents, sufficient measures have been taken to protect information, however, the State Tax Service asks to take into account that there is no absolutely safe and error-free way of data transmission over the Internet.
State Tax Service is not responsible for functioning of servers, providers of Internet access services, work of third parties, due to whose fault access to the Internet may be impossible or limited, and, according to the fiscal server of the controlling body, whether information leakage is possible due to the fault of third parties, as well as disclosure by the PRRO user of his / her personal data in mobile applications, application software interfaces and applications.
Electronic documents sent from the fiscal server of the controlling body to PRRO are subject to the qualified electronic signature of the State Tax Service of Ukraine, which guarantees security and integrity of data contained in these documents.
10. User consent
PRRO user confirms that he / she is familiar with terms of this Privacy policy, in particular, with a purpose of processing personal data specified in this Policy.
11. Additional information
State Tax Service of Ukraine reserves a right to change the Privacy policy.
If there are any questions about the Privacy policy, send an email to idd@tax.gov.ua
