Privacy policy

Data controller

The data controller for personal data processed through the KAO platform is listed below. When you use services of a specific municipality, that municipality may act as an independent or joint controller for data related to its e-services.

What data we process

• Data from your qualified electronic signature at login
• Information you submit in forms (signals, declarations, applications, payments)
• Technical logs and security identifiers
• Selected administration and language preferences

Purposes and legal basis

We process data to provide electronic services, comply with legal obligations, ensure security, and improve the platform, in accordance with the GDPR and applicable law.

Retention

Data is kept for as long as required for the relevant service and applicable legal requirements.

Your rights

You have the right of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with the supervisory authority.

Contact

For privacy questions, use the contacts shown on this page.

KAO Mobile

This policy also covers the KAO Mobile iOS app and related KAO platform API services.

Registered mobile device data

When you activate and use KAO Mobile, we may process:

• registered device identifier;
• device public key;
• device type and platform;
• KAO Mobile app version;
• registration date and last use;
• activation and removal history for devices.

Security and authentication

To protect access we may process IP address, security and authentication events related to the mobile session and trusted device.

Push notifications

If you enable push notifications, we process a push token and APNs environment (sandbox/production) to deliver notifications, for example about application status changes, ready documents, security alerts, or system messages. You can manage preferences in the app when the feature is available.

Face ID and Touch ID

KAO Mobile may use the operating system biometric mechanisms (Face ID or Touch ID) only for local confirmation of access to the registered device. Biometric verification is performed locally on the device. KAO does not receive or store biometric templates.

Data controller

KAO — online services platform for Bulgarian administrations

Privacy contact

office@kao.bg