Kanton Glarus (BEHÖPV)

Purpose of the Authorities Portal

1 The Authorities Portal can, in particular, offer the following services

a. the transmission of electronic documents to authorities;

b. the receipt of electronic documents from authorities;

c. the electronic handling of business with authorities;

d. electronic communication within the framework of procedures to which the Administrative Justice Act²) applies.

2 The Authorities Portal is referred to as a service portal to users and in internal administrative communication.

Components of the Authority Portal

1 The authority portal notably comprises the following components

a.

User account;

b.

Authentication service;

c.

Authorization service;

d.

Service for the integration of specialized applications;

e.

Technical infrastructure for the secure storage and provision of

electronic documents and messages;

f.

Digital payment system.

Terms of Use

1 Users are obliged

a. to accurately enter and update their data;

b. to use the services of the public authority portal for their intended purpose;

1) GS II H/1

2) GS III G/1

SBE 2024 21

1

II H/4

c. to carefully safeguard their login credentials for the public authority portal and to take all precautions to prevent unauthorized third parties from gaining access.

2 Upon opening a user account, users will be informed in an appropriate manner about the terms of use and the risks associated with its use. Likewise, they will be informed in a timely and appropriate manner of any changes to the terms of use.

3 Prior to opening a user account, users must agree to the terms of use. If the terms of use are amended, use may be restricted until such time as these are agreed to.

**2. User Account**

User Identity

1 The electronic identities recognized by the Government Council are listed in the Annex.

Personal User Account

1 For the opening of a personal user account, users must possess an electronic identity recognized by the Government Council.

2 For the opening of a user account or for trust level 1, the following data concerning the users must be collected

a. Surname and first name;

b. Date of birth;

c. Gender;

d. Nationality;

e. Email address.

3 Starting from trust level 2, the postal address must additionally be collected.

4 For trust level 4, the insurance number according to Article 50c of the Federal Act on Old-Age and Survivors' Insurance³) (AHV-13-No.) must additionally be collected.

5 Further personal data may be provided voluntarily.

Non-Personal User Account

1 For the creation of a non-personal user account, the following data must be collected

a. legal entities and partnerships under private law: company name or name, legal form, registered office, enterprise identification number (UID);

3) SR 831.10

2

II H/4

b. legal entities under public law: name, UID and, for special-purpose associations, public-law companies and institutions with their own legal personality, as well as for public-law foundations, legal form;

c. sole proprietorships: company name or name, legal form, registered office, UID.

2 The requirement to collect the UID may be waived in special cases.

3 The persons authorized to represent a legal entity, partnership, or sole proprietorship must prove their power of representation and identity.

4 Further data may be provided voluntarily.

Authentication and Levels of Trust

1 User authentication is carried out via an electronic identity recognized by the Government Council.

2 A distinction is made between the following levels of trust

a.

Level of Trust 1: "unverified"; this is achieved through self-declaration without verification;

b.

Level of Trust 2: "deliverability-verified"; this is achieved by sending a one-time access code via postal mail;

c.

Level of Trust 3: "identity-verified (without AHV-13-Nr.)"; this is achieved by mail with an ID check from Swiss Post, identity verification at cantonal and municipal counters, or, if available, video identification;

d.

Level of Trust 4: "identity-verified (with AHV-13-Nr.)"; this is achieved by mail with an ID check from Swiss Post, identity verification at cantonal and municipal counters, or, if available, video identification, as well as the deposit of the AHV-13-Nr. and its confirmation via the ZAS interface.

3 The responsible or lead authority determines the required level of trust for each transaction or service.

Logging, Inspection, and Data Backup

1 The log includes the accessing user, the time of access, the time of utilization of services, and the time of transmission of electronic documents.

2 Users have the right to inspect the log.

3 The operator regularly creates backup copies.

4 The log will be deleted after 24 months.

II H/4

5 The electronic documents in the user's mailbox will be deleted after 12 months. Users will be notified in advance and in a timely manner.

Deletion of User Account

1 If users request the deletion of their user account, it will be deleted after 14 days.

2 Reactivation of a deleted user account is not possible.

3 If users wish to regain access to the government portal, they must open a new user account.

**3. Responsibilities**

Responsible and Lead Authority

1 The authority is responsible for the design of the business processes and services it offers. It ensures compliance with data protection.

2 If several authorities are involved in a business process or service, the disposing or decision-making authority, or the authority providing the service, is the lead authority.

3 If lead responsibility cannot be determined in this way, the authorities shall consult with each other and designate the lead authority.

1. Die inhaltliche Weiterentwicklung des Behördenportals erfolgt durch die IT-Koordination und den IT-Steuerungsausschuss und richtet sich nach der Informatikverordnung[[4]](#paragraphtext_content_fn_817277_2_4_c).