Privacy Policy for Websites and Webservices
Kaspersky added a new section disclosing that it uses tracking pixels (web beacons) in marketing emails and newsletters to collect data like IP address, device, browser, and operating system info when you open an email, and to track engagement and tailor future messages. The rest of the diff is cosmetic heading/formatting cleanup with no effect on your rights.
New tracking pixels in emails collect your IP address, device, and browser data
Kaspersky now openly tells you it tracks when you open its marketing emails using hidden tracking images. This lets it see your IP address, device type, operating system, and browser settings, plus whether and when you opened an email. It also says it may use this to tailor future marketing to you. While this is disclosed and you can opt out, it's a new way your activity is being watched that didn't appear in the previous policy version.
“transmitting data such as the date and time the email was retrieved, your email client type, your browser settings, your operating system, device model, and your IP address”
What you can do — To stop marketing email tracking, click the 'Manage Tracking Preferences' link in the footer of any Kaspersky marketing email, or turn off automatic image loading in your email app's settings. Note this won't stop the separate 'functional' tracking Kaspersky does for delivery and security purposes, which has no opt-out.
| 27 | 27 | To extent required by the applicable local law, the processing of your personal data in certain scenarios must comply with the applicable local law requirements, including but not limited to separate consent and data protection impact assessment, retention period, legal basis and other local applicable requirements. |
| 28 | 28 | |
| 29 | 29 | #### **AUTOMATED DECISION MAKING** |
| 30 | 30 | |
| 31 | 31 | We do not use automated decision making at our Websites and Services. |
| 32 | 32 | |
| 33 | #### **WHAT PERSONAL DATA DO WE PROCESS AND HOW DO WE USE IT** | |
| 33 | **WHAT PERSONAL DATA DO WE PROCESS AND HOW DO WE USE IT** | |
± CHANGEDFormatting-only heading changes elsewhere in the document Several section headings had their markdown heading level changed (e.g., a '####' heading became plain bold text, a '###' heading before 'My Kaspersky' was removed) and a stray space was added between two linked product names. These are purely cosmetic and don't change any rights or obligations. | ||
| 34 | 34 | |
| 35 | 35 | ### **Visit to our websites or webservices** |
| 36 | 36 | |
| 37 | 37 | ### **Description of Service** |
| 38 | 38 | |
| 39 | 39 | **Display of service** |
| 73 | 73 | Logfiles are deleted no later than 1 year after creation. |
| 74 | 74 | |
| 75 | 75 | Data which we process for the purpose of web analysis is deleted 1 year after creation. |
| 76 | 76 | |
| 77 | 77 | The deletion period of the cookies is given in the cookie center on the specific websites of our company or in the relevant consents or agreements. |
| 78 | 78 | |
| 79 | ### Email Tracking Technologies (Pixels) | |
| 80 | ||
| 81 | **Description of Service** When we send you electronic communications or newsletters, we may collect and process personal data using embedded tracking technologies known as tracking pixels or web beacons (1x1 transparent image files). When an email containing a tracking pixel is opened, your email client or internet browser requests the image file from our remote server, automatically transmitting data such as the date and time the email was retrieved, your email client type, your browser settings, your operating system, device model, and your IP address. | |
+ ADDEDNew disclosure: email tracking pixels in marketing emails Kaspersky now explains that emails and newsletters it sends you may contain invisible tracking images. When you open such an email, your email client automatically contacts Kaspersky's servers and sends data like the date/time opened, your email client type, browser settings, operating system, device model, and IP address. | ||
| 82 | ||
| 83 | **Purpose & Legal Basis** We process this information to evaluate message deliverability, analyze email campaign performance (such as open rates), measure user engagement with our content, and tailor future electronic communications to better match your interests. | |
+ ADDEDStated purpose: measuring engagement and tailoring future emails The new section says this tracking data is used to check whether emails were delivered, measure how many people open campaign emails, and adjust future marketing emails to match your interests. | ||
| 84 | ||
| 85 | The legal basis for processing your personal data for these web analysis and performance measurement purposes is your consent. You can withdraw your consent at any time with effect for the future by clicking the "Manage Tracking Preferences" link located in the footer of every marketing email we send you, or by configuring your email software settings to block the automatic downloading of remote images. | |
+ ADDEDConsent basis and opt-out method for marketing pixel tracking Kaspersky says this tracking is based on your consent, and you can withdraw it anytime via a 'Manage Tracking Preferences' link in marketing email footers, or by blocking remote images in your email software. | ||
| 86 | ||
| 87 | We may also process functional email tracking markers strictly necessary to ensure the technical deliverability, security, and integrity of our electronic communications (such as verifying system delivery or detecting security threats and spam). Our legal basis for processing this technical data is safeguarding our legitimate interests, which lie in ensuring the security and technical functionality of our communications. | |
+ ADDEDSeparate 'functional' tracking markers for delivery/security, based on legitimate interest Kaspersky also uses tracking markers it says are strictly needed to confirm emails were delivered and to detect spam or security threats. Unlike the marketing tracking, this is based on Kaspersky's own business interest rather than your consent, so there's no opt-out described for it. | ||
| 88 | ||
| 89 | **How long do we keep your personal data** Personal data processed solely for the delivery and security verification of emails is deleted directly after delivery or within logfiles no later than 1 year after creation. Data processed for the purpose of email performance analysis and engagement tracking is deleted 1 year after creation, or upon the withdrawal of your consent. | |
+ ADDEDRetention periods set for the new email tracking data Data used only to confirm delivery/security is deleted shortly after delivery or within log files after at most 1 year. Data used for marketing analytics is deleted after 1 year or when you withdraw consent, whichever comes first. | ||
| 90 | ||
| 79 | 91 | [**Kaspersky****Account**](https://auth.eu.uis.kaspersky.com/) |
| 80 | 92 | |
| 81 | 93 | ### **Description of Service** |
| 82 | 94 | |
| 83 | 95 | Kaspersky Account is a service that provides end-to-end authentication across websites, Kaspersky products and third party services, as well as the ability to manage single account settings for Kaspersky users. |
| 84 | 96 | |
| 91 | 103 | **How long do we keep your personal data** |
| 92 | 104 | |
| 93 | 105 | Data is deleted no later than 6 (six) calendar months after the account is deleted. |
| 94 | 106 | |
| 95 | 107 | If the account remains inactive for a period of 5 (five) years, it will be automatically completely deleted from our system. |
| 96 | 108 | |
| 97 | ### [**My Kaspersky**](https://my.kaspersky.com/) **and its customizations (hereinafter referred to as the "Service")** | |
| 109 | [**My Kaspersky**](https://my.kaspersky.com/) **and its customizations (hereinafter referred to as the "Service")** | |
| 98 | 110 | |
| 99 | 111 | ### **Description of Service** |
| 100 | 112 | |
| 101 | 113 | **_Account registration_**. We will only process and use this data in order to provide you the Service, unless it is allowed by applicable law or you expressly consent to a processing or use for other purposes (for example to receive useful news on Kaspersky products and services via email). You may also need to provide us your mobile phone number for the purpose of additional protection of your account from unauthorized access. We will only use your mobile phone number to send you authorization security codes. |
| 102 | 114 | |
| 103 | 115 | Purpose and legal basis for processing your personal data is the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract. |
| 132 | 144 | The legal basis for data processing is your consent. You may withdraw your consent at any time by updating your account preferences or by following the unsubscribe link in the emails. |
| 133 | 145 | |
| 134 | 146 | **How long do we keep your personal data** |
| 135 | 147 | |
| 136 | 148 | Data is deleted no later than 1 (one) calendar month after the account is deleted. |
| 137 | 149 | |
| 138 | ### [**Kaspersky Business-To-Business Portals (including Kaspersky Business Hub**](https://cloud.kaspersky.com/)**,**[**Kaspersky Endpoint Security Cloud**](https://cloud.kaspersky.com/)**,**[**Kaspersky Security Center Cloud Console**](https://ksc.kaspersky.com/)**,**[**Kaspersky Security for Microsoft Office 365**](https://cloud.kaspersky.com/)**, Kaspersky Next)** | |
| 150 | ### [**Kaspersky Business-To-Business Portals (including Kaspersky Business Hub**](https://cloud.kaspersky.com/)**,** [**Kaspersky Endpoint Security Cloud**](https://cloud.kaspersky.com/)**,** [**Kaspersky Security Center Cloud Console**](https://ksc.kaspersky.com/)**,**[**Kaspersky Security for Microsoft Office 365**](https://cloud.kaspersky.com/)**, Kaspersky Next)** | |
| 139 | 151 | |
| 140 | 152 | ### Description |
| 141 | 153 | |
| 142 | 154 | **_Account registration._** If you need to use Kaspersky Business-To-Business (B2B) products and have access to the Kaspersky products used by your company, you need to create a corporate account. To do this, you need to enter your email address (which will be used as your username) and a password. We will only process and use this data to provide you with Kaspersky B2B Portals functionality and the products used in Kaspersky B2B Portals. This data will only be processed and used for other purposes if you give your explicit consent (for example, to receive the latest news about Kaspersky products and services by email, or to be contacted about your Kaspersky product reviews). You can also provide your mobile phone number to further protect your account from unauthorized access, as well as a security question to regain access to your account if you forget your password. We will only use your mobile phone number to send security codes during your authorization. |
| 143 | 155 | |
| 144 | 156 | Purpose and lawful basis for processing your personal data is the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract. |