Data Protection Policy

1. Introduction

Welcome to the privacy policy of the State Revenue Committee of the Republic of Armenia (hereinafter referred to as the "SRC RA"). This policy outlines our practices regarding the collection, use, and disclosure of your information when you use our mobile application (“Self portal”).

2. Entity Responsible for the App

The State Revenue Committee of the Republic of Armenia is responsible for the App and the protection of your personal data. For any questions or concerns, you can contact us at:

Address: M.Khorenatsi str. /3,7 Kentron 0015, Yerevan Armenia
Email: selfdeclaration@taxservice.am

3. Data We Collect

We collect the following types of information from users of App:

Personal Information: Includes, but is not limited to, names, addresses, phone numbers, email addresses, and taxpayer identification numbers.
Usage Data: Information about how you use and interact with our App.

4. How We Use Data

We use the collected information for the following purposes:

Providing and maintaining App
Notifying you about changes to App
Providing customer support
Gathering analysis or valuable information to improve App
Monitoring the usage of App
Detecting, preventing, and addressing technical issues

5. Data Sharing

We may share your personal data with third parties in the following situations:

Service Providers: To monitor and analyze the use of App.
Legal Requirements: To comply with legal obligations or to protect and defend our rights.

6. Security of Data

We take appropriate security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. Information security management system is designed to comply with ISO/IEC 27001:2013 standards.

7. Your Rights

You have the following rights regarding your personal data:

Access: You can request access to your personal data.
Correction: You can request that we correct or update any personal data that is inaccurate.
Deletion: You can request the deletion of your personal data.
Objection: You can object to the processing of your personal data under certain conditions.

To exercise these rights, please contact us at selfdeclaration@taxservice.am

8. Changes to This Privacy Policy

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page.

9. Contact Us

If you have any questions about this privacy policy, please contact us:

Email: selfdeclaration@taxservice.am
Address: M.Khorenatsi str. /3,7 Kentron 0015, Yerevan Armenia

INFORMATION SECURITY POLICY STATEMENT

Annex To Decree No 202-A of February 25, 2022 of the Chairman of the State Revenue Committee of The Republic of Armenia

- 1. Taking into account the strategic role of the State Revenue Committee of the Republic of Armenia (hereinafter Committee) in normal economic activity and sustainable development, as well as attaching importance to protecting security of information at Committees disposal, the Committees leadership has decided to implement an information security management system meeting the requirements of ISO/IEC 27001:2013 international standard.
- 2. The information security management system is a part of a general management system based on risk assessment and designed to develop, implement, run, monitor, review, protect and improve information security mechanisms.
- 3. The aim of the information security management system is to ensure protection of confidentiality and integrity of information concerning persons (including taxpayers), which prescribes implementation of necessary activities and security means.
- 4. To provide high-level service to taxpayers, to ensure accessibility and smooth running of e-management systems as well as to protect against information threats, the Committee is using state-of-the-art equipment, technology and software: moreover, it has created a backup server area and information systems that will ensure smooth running of business processes during emergency and unpredictable situations.
- 5. The information security management system is designed to carry out information security purposes and solve information security issues.
Aims, objectives and implementation of information security policy
- 6. The main aims of IS policy are:
- - 1) Ensuring security of Committees information processes to achieve the set objectives;
  - 2) Ensuring steadiness of Committees operation irrespective of information security events to prevent the potential effect thereof;
  - 3) Ensuring protection of information received from taxpayers, and Committees other information against unlicensed use;
  - 4) Ensuring Committees information resources against internal, external, accidental or intentional threat that can lead to breach of confidentiality of information;
  - 5) Ensuring smooth operation of Committees main business processes;
  - 6) Ensuring fulfillment of requirements under laws and international treaties of the Republic of Armenia concerning Committees information processes.
- 7. Main objectives of information security policy are:
- - 1) Ensuring smooth operation of services provided by the Committee to taxpayers and economic entities in terms of information processing and provision of information;
  - 2) Ensuring compliance with requirements of internal legal acts and contractual obligations in terms of information security and related stakeholder persons;
  - 3) Minimizing the chance of information threat as a result of which the Committee can bear loss or damage;
  - 4) Minimizing loss or damage in case of security events;
  - 5) Ensuring effective use of resources required for implementation of security programs;
  - 6) Ensuring effective management of information security risks;
  - 7) Setting out activities required for ensuring information security;
  - 8) Notifying all stakeholder parties who have access to Committees information about their responsibility and obligations;
  - 9) Ensuring awareness of employees on ensuring information security;
  - 10) Ensuring safe working environment for Committees employees;
  - 11) Ensuring that Committees information security management system complies with ISO/IEC 27001:2013 international standard requirements.
- 8. To carry out the information security policy, procedures necessary for ensuring it are being developed and implemented.
- 9. The heads of Committees subdivisions are responsible for observation by them and their subordinates of the procedures required for fulfilling the information security policy.
- 10. Fulfillment of the information security policy by Committees employees and stakeholders is mandatory.