Electronic signature in Republic of Serbia (in eyes of strangers)…

In omnipresent digitalization process which takes place in our lives as a necessary phenomenon in the correspondence between natural and legal persons, as well as in their correspondence with state authorities, an electronic signature appeared.

An electronic signature is there to exclude the possibility of standing in the queue for hours, for example in tax administration, where you have to sign a pile of paper and forms with your own hands, and you don’t have a pen at that very moment! The electronic signature allows you to sign all tax returns, forms and documents from the armchair via the E-government portal, to make payments and approve transfer orders, etc., without delay and without going to the bank.

When we say electronic signature, we in front of all think about the qualified electronic signature, which is also named electronic certificate.

An electronic certificate is a document that confirms the connection between the data that verifies the electronic signature and the identity of the person who is a signatory, and the characteristic “qualified” is obtained because it is issued by a certification body authorized to issue these certificates.

An electronic certificate is a document that confirms the connection between the data that verifies the electronic signature and the identity of the person who is a signatory, and the characteristic “qualified” is obtained because it is issued by a certification body authorized to issue these certificates. (“Official Gazette of RS” No. 94/2017 of October 19, 2017 The Law), (hereinafter: the Law) which entered into force on the 27th October 2017, the legal basis for the use of electronic certificate was made, and the legal regulations were updated to some extent.

Based on this Law, appropriate bylaws have been adopted for its elaboration and more detailed application, as follows:

• Rulebook on the content and manner of keeping the Register of Qualified Trust Services (“Official Gazette of RS” No. 31/18 dated April 11, 2018);
• Decree on detailed conditions for the provision of qualified services of trust ((“Official Gazette of RS” No. 37/18 of 10 May 2018);
• Rulebook on detailed conditions that must be met by qualified electronic certificates (“Official Gazette of RS” No. 34/18 and 82/18 of April 20, 2018).

Certification bodies that issue electronic qualified signatures as well as trusted service providers (all natural and legal persons that enable electronic identification and enable reliable business activity between two or more parties and guarantee the authenticity of data as electronic identification providers) are obliged to process and store data in accordance with Law on data protection (“ Official Gazette of RS” No. 87/2018 from the day 13th November 2018).

An electronic certificate represents a reliable means of identification as there is a presumption of undeniability in relation to it, which means that only the signatory can activate the means of signing and a valid electronic certificate guarantees the link between the signatory and the verification data (data generated in certain document and related to certain person).

We can state that in our country has been formally legally created a secure basis for the application and use of the electronic certificate.

However, in relation to one group of persons, there is a gap (not legal, but factual) that prevents them from having greater access to the electronic certificate and its more efficient use. These are natural persons, non-residents, who often appear as legal representatives of legal entities, both domestic and foreign.

Foreigners in the Republic of Serbia have access to the so-called a “truncated electronic certificate” that allows them to sign a limited number of documents. If the user of the electronic certificate is a non-resident natural person, legal representative of a resident legal entity, he primarily signs the financial reports and supporting documents of the legal entity in which he is a legal representative, as well as reports for statistical and other purposes, in accordance with Articles 33, 34 and 35 of the Law on Accounting (“Official Gazette RS„, No. 30/2018 of April 20, 2018).

On the other hand, non-residents who have an ID card and an assigned personal identification number on the basis of a regulated stay in the Republic of Serbia can obtain an electronic certificate from the Certification Body of the Ministry of Internal Affairs of the Republic of Serbia, which can be used for full electronic signature.

The main problem in issuing electronic certificates to non-residents is the inadequacy of services for issuing certification bodies and their availability to foreigners. Non-residents in the Republic of Serbia can submit a request and initiate the procedure of obtaining an electronic certificate before the following certification bodies:

• Chamber of Commerce of Serbia
• Post of Serbia
• HALCOM
• E-SMART SYSTEMS DOO
• Ministry of the Interior of the Republic of Serbia (only if the non-resident has an identity card as a foreigner)

The topic of this text refers primarily to the problems of non-residents when initiating the procedure of obtaining an electronic certificate before state authorities, since HALCOM and E-SMART SYSTEMS DOO, to some extent have solved certain problems that occur in practice.

The largest number of non-residents choose the Chamber of Commerce of Serbia as the certification body in which they will obtain the electronic certificate, due to the possibility of completing the entire procedure online. The first problem that non-residents encounter when submitting a request (before that it is necessary to register on the PKS portal) is that the entire procedure is in Serbian without the possibility for the site and procedure to be in at least English.

Therefore, in order for a foreigner to obtain an electronic certificate before the Serbian Chamber of Commerce as an authorized certification body, which on the other hand represents one of the most respectable state bodies in the field of economy in the Republic of Serbia, it is necessary to know the Serbian language. In practice, this is very rare.

There is a possibility that the Request for the issuance of an electronic certificate to the SCC will be submitted through an authorized attorney with very strict formal conditions regarding the content of the power of attorney.

Another problem is the payment of a fee / fee for the production of an electronic certificate, which is almost impossible to make from abroad, so a non-resident must also hire an authorized person in the Republic of Serbia for this purpose.

The electronic certificate, when finally, after overcoming all these technical obstacles, is made by the SCC, the non-resident can take over only and exclusively in person at the SCC premises at a specific time. At the time of the COVID-19 epidemic (but also before the outbreak), this condition was an almost impossible mission for foreigners.

It should be emphasized that the validity period of this electronic certificate is related to the validity period of the non-resident’s passport, which means that if you take out the electronic certificate and your passport expires in a few months, you will have to go through this whole procedure again.

With the other (somewhat state) certification body, the Post of Serbia, there is an even bigger problem because the entire documentation submitted with the Request for issuance of an electronic certificate (3 completed and self-signed copies of the Service Certification Body Agreement for qualified electronic certificates for legal entities, 3 completed and self-signed copies of the Annex to the Contract on Provision of Services of the Post Certification Body for Qualified Electronic Certificates, Decision on Registration of Legal Entity in APR, Copy of OP form and Quality photocopy of identification document for the person for whom the electronic certificate is required) must be submitted in person in the Post of Serbia because the submission of documentation is directly a condition for the issuance of a pro forma invoice for the payment of fees and charges for the issuance of electronic certificates.

With the other (somewhat state) certification body, the Post of Serbia, there is an even bigger problem because the entire documentation submitted with the Request for issuance of an electronic certificate (3 completed and self-signed copies of the Service Certification Body Agreement for qualified electronic certificates for legal entities, 3 completed and self-signed copies of the Annex to the Contract on Provision of Services of the Post Certification Body for Qualified Electronic Certificates, Decision on Registration of Legal Entity in APR, Copy of OP form and Quality photocopy of identification document for the person for whom the electronic certificate is required) must be submitted in person in the Post of Serbia because the submission of documentation is directly a condition for the issuance of a pro forma invoice for the payment of fees and charges for the issuance of electronic certificates.

If you look at the goal of electronic signature, which is easier to sign documents remotely with a few clicks on a computer or smartphone, then certainly the procedure for obtaining an electronic signature before state authorities in Serbia is established contrary to that goal.

It is necessary, in addition to the existence of detailed and complete legal regulations, to establish practical mechanisms to facilitate the acquisition of electronic certificates, in order to achieve the full meaning of their existence. It is especially necessary in the process of adjusting the positive regulations and procedures of the Republic of Serbia with the regulations of the European Union in the accession process, to look at positive examples from practice that can contribute to non-residents as legal representatives and managers of domestic companies can obtain electronic certificates.

Elektronski potpis je tu da isključi mogućnost da se nalazite u nekom redu, recimo u poreskoj upravi, gde treba svojeručno da potpišete hrpu papira i formulara i baš u tom trenutku nemate hemijsku olovku! Elektronski potpis vam omogućava da sve poreske prijave, formulare i dokumente potpišete iz fotelje preko portala E-uprave, da bez zadržavanja i odlaska u banku vršite uplate i odobravate naloge za prenos sredstava itd.

Kada kažemo elektronski potpis, pre svega mislimo na kvalifikovani elektronski potpis koji se još naziva i elektronski sertifikat.

Elektronski sertifikat je dokument kojim se potvrđuje veza između podataka koji proveravaju elektronski potpis i identiteta lica koje je potpisnik, a karakteristiku „kvalifikovanog“ dobija zbog toga što je izdat od strane sertifikacionog tela ovlašćenog za izdavanje ovih sertifikata.

Donošenjem novog Zakona o elektronskom dokumentu, elektronskoj identifikaciji i uslugama od poverenja u elektronskom poslovanju ( ,,Sl. Glasnik RS“ broj 94/2017 od dana 19.10.2017. godine), (u daljem tekstu: Zakon) koji je stupio na snagu dana 27.10.2017. godine stvorena je pravna osnova za korišćenje elektronskog sertifikata i upotpunjena je donekle pravna regulativa.

Na temelju ovog Zakona doneti su odgovarajući podzakonski akti radi njegove razrade i detaljnije primene i to:

• Pravilnik o sadržaju i načinu vođenja Registra kvalifikovanih usluga od poverenja („Službeni glasnik RS“ broj 31/18 od dana 11.04.2018. godine);
• Uredba o bližim uslovima za pružanje kvalifikovanih usluga od poverenja (“Službeni glasnik RS” broj 37/18 od dana 10.05.2018. godine);
• Pravilnik o bližem uslovima koji moraju da ispunjavaju kvalifikovane elektronski sertifikati („Službeni glasnik RS“ br. 34/18 i 82/18 od dana 20.04.2018. godine).

Sertifikaciona tela koja izdaju elektronske kvalifikovane potpise kao i pružaoci usluga od poverenja (sva fizička i pravna lica koja omogućavaju elektronsku identifikaciju i omogućavaju pouzdanu poslovnu aktivnost između dve ili više strana i garantuju kao pružaoci usluge elektronske identifikacije verodostojnost podataka) dužni su da sve podatke nosioca elektronskog sertifikata čuvaju i obrađuju u skladu sa Zakonom o zaštiti podataka o ličnosti ( ,,Sl. Glasnik RS“ broj 87/2018 od dana 13.11.2018. godine).

Elektronski sertifikat predstavlja pouzdano sredstvo identifikacije, budući da u odnosu na njega postoji pretpostavka neporecivosti, koja podrazumeva da jedino potpisnik može aktivirati samo sredstvo za potpisivanje i validan elektronski sertifikat garantuje vezu između potpisnika i podataka za proveru (podataka koji su generisani u određenom dokumentu i koji se odnose na određeno lice).

Možemo konstatovati da je formalno pravno stvorena pouzdana i sigurna osnova za primenu i korišćenje elektronskog sertifikata u našoj zemlji.

Međutim u odnosnu na jednu grupu lica, ostala je (ne pravna, već faktička) praznina koja im onemogućava veću dostupnost elektronskom sertifikatu i njegovo efikasnije korišćenje. To su fizička lica, nerezidenti, koji se često pojavljuju kao zakonski zastupnici pravnih lica, kako domaćih tako i stranih.

Strancima u Republici Srbiji je dostupan tzv. ,,krnji elektronski sertifikat“ koji im omogućava potpisivanje ograničenog broja dokumenata. Ukoliko je korisnik elektronskog sertifikata nerezidentno fizičko lice, zakonski zastupnik rezidentnog pravnog lica, on pre svega potpisuje finansijske izveštaje i prateću dokumentaciju pravnog lica u kom je zakonski zastupnik, kao i izveštaje za statističke i druge potrebe, u skladu sa članovima 33, 34. i 35. Zakona o računovodstvu (“Službeni glasnik RS“, br. 30/2018 od dana 20.4.2018.godine).

S druge strane, nerezidenti koji imaju po osnovu regulisanog boravka u Republici Srbiji ličnu kartu i dodeljen JMBG mogu u Sertifikacionom telu Ministarstva unutrašnjih poslova Republike Srbije izvaditi elektronski sertifikat kojim mogu vršiti elektronsko potpisivanje u punom obimu kao i državljani Republike Srbije.

Osnovni problem kod izdavanja elektronskih sertifikata nerezidentima jeste neprilagođenost servisa za izdavanje sertifikacionih tela i njihova dostupnost strancima. Nerezidenti u Republici Srbiji mogu podneti zahtev i inicirati postupak pribavljanja elektronskog sertifikata pred sledećim sertifikacionim telima:

• Privredna komora Srbije
• Pošta Srbije
• HALCOM
• E-SMART SYSTEMS DOO
• Ministarstvo unutrašnjih poslova Republike Srbije (samo ako nerezident poseduje ličnu kartu kao stranac)

Tema ovog teksta se odnosi pre svega na probleme nerezidenata kada iniciraju postupak pribavljanja elektronskog sertifikata pred državnim organima, budući da su HALCOM i E-SMART SYSTEMS DOO, donekle rešili određene probleme koji se javljaju u praksi.

Najveći broj nerezidenta kao sertifikaciono telo u kom će izvaditi elektronski sertifikat bira Privrednu komoru Srbije zbog mogućnosti da se cela procedura završi online. Prvi problem na koji nerezidenti nailaze prilikom podnošenja zahteva (pre toga je potrebno izvršiti registraciju na portalu PKS-a) je što je cela procedura na srpskom jeziku bez mogućnosti da sajt i procedura budu na bar engleskom jeziku.

Dakle da bi stranac izvadio elektronski sertifikat pred Privrednom komorom Srbije kao ovlašćenom sertifikacionom telu koje predstavlja sa druge strane i jedno od najrespektabilnijih državnih organa u oblasti privrede u Republici Srbiji, potrebno je da zna srpski jezik. U praksi je to jako retko.

Postoji mogućnost da Zahtev za izdavanje elektronskog sertifikata PKS-u bude podnet preko ovlašćenog punomoćnika uz vrlo stroge formalne uslove u pogledu samog sadržaja punomoćja.

Drugi problem je uplata takse/naknade za izradu elektronskog sertifikata koju je skoro nemoguće izvršiti iz inostranstva, pa nerezident za tu potrebu takođe mora angažovati ovlašćeno lice u Republici Srbiji.

Elektronski sertifikat kada konačno posle prevazilaženja svih ovih tehničkih prepreka bude izrađen od strane PKS-a, nerezident može preuzeti samo i isključivo lično u prostorijama PKS u tačno određenom terminu. U vreme epidemije COVID-19 (ali i pre nastupanja epidemije) ovaj uslov za strance predstavlja gotovo nemoguću misiju.

Potrebno je naglasiti i da rok važnosti ovog elektronskog sertifikata vezan je za rok važnosti pasoša nerezidenta, što znači, ako izvadite elektronski sertifikat, pa vam za par meseci istekne pasoš, celu ovu proceduru ćete morati da prođete još jednom.

Sa drugim (donekle državnim) sertifikacionim telom, Poštom Srbije postoji još veći problem jer je celokupnu dokumentaciju koja se podnosi uz Zahtev za izdavanje elektronskog sertifikata ( 3 popunjena i svojeručno potpisana primerka Ugovora o pružanju usluga Sertifikacionog tela Pošte za kvalifikovane elektronske sertifikate za pravno lice, 3 popunjena i svojeručno potpisana primerka Priloga Ugovora o pružanju usluga Sertifikacionog tela Pošte za kvalifikovane elektronske sertifikate, Rešenje o registraciji pravnog lica u APR-u, Kopiju OP obrasca i Kvalitetnu fotokopiju identifikacionog dokumenta za lice za koje se traži el.sertifikat) potrebno predati lično u Pošti Srbije jer predaja dokumentacije neposredno predstavlja uslov za izdavanje predračuna za plaćanje takse i naknade za izdavanje elektronskog sertifikata.

Dakle da bi nerezident kao zakonski zastupnik pravnog lica u Srbiji pribavio kvalifikovani elektronski sertifikat preko Pošte Srbije kao ovlašćenog sertifikacionog tela, potrebno je da pribavi u papirnoj formi sve zahteve, ugovore i priloge koji su na srpskom jeziku i lično i neposredno (ako uspe da ih popuni) ih preda u Sertifikacionom telu Pošte Srbije.

Ako se pogleda sam cilj postojanja elektronskog potpisa, a to je olakšano potpisivanje dokumenata na daljinu uz par klika na računaru ili pametnom telefonu, onda svakako procedura pribavljanja elektronskog potpisa pred državnim organima u Srbiji je ustanovljena suprotno tom cilju.

Potrebno je uz postojanje detaljne i potpune pravne regulative, uspostaviti praktične mehanizme za olakšano pribavljanje elektronskih sertifikata, kako bi se ostvario pun smisao njihovog postojanja. Posebno je potrebno u postupku prilagođavanja pozitivnih propisa i procedura Republike Srbije sa regulativom Evropske Unije u postupku pridruživanja, sagledati pozitivne primere iz prakse koji mogu doprineti da nerezidenti kao zakonski zastupnici i menadžeri domaćih kompanija mogu lakše i jednostavnije pribavljati elektronske sertifikate.