Privacy Policy for Websites and Webservices
Kaspersky added a brand-new section describing use of tracking pixels (web beacons) in marketing emails and newsletters, which collect data like your IP address, device, browser, and when you open an email. The rest of the changes are just formatting fixes (heading styles, link spacing) with no effect on your rights.
New tracking pixels in marketing emails collect your IP, device, and browser data
Kaspersky now embeds invisible tracking images in its marketing emails. When you open one, it automatically sends your IP address, device model, operating system, and browser info back to Kaspersky, and is used to build a picture of how you engage with their emails and to target future messages to your interests. This is a new form of data collection that wasn't disclosed before.
“automatically transmitting data such as the date and time the email was retrieved, your email client type, your browser settings, your operating system, device model, and your IP address”
What you can do — Click the 'Manage Tracking Preferences' link in the footer of any Kaspersky marketing email to opt out, or set your email app to block automatic loading of remote images.
Separate 'security' email tracking has no consent or opt-out
Kaspersky also collects a second type of email tracking data to check delivery and detect spam/security threats. This is justified under Kaspersky's own business interests rather than your consent, and the policy doesn't offer a way to opt out of this specific tracking.
“Our legal basis for processing this technical data is safeguarding our legitimate interests, which lie in ensuring the security and technical functionality of our communications.”
| 27 | 27 | To extent required by the applicable local law, the processing of your personal data in certain scenarios must comply with the applicable local law requirements, including but not limited to separate consent and data protection impact assessment, retention period, legal basis and other local applicable requirements. |
| 28 | 28 | |
| 29 | 29 | #### **AUTOMATED DECISION MAKING** |
| 30 | 30 | |
| 31 | 31 | We do not use automated decision making at our Websites and Services. |
| 32 | 32 | |
| 33 | #### **WHAT PERSONAL DATA DO WE PROCESS AND HOW DO WE USE IT** | |
| 33 | **WHAT PERSONAL DATA DO WE PROCESS AND HOW DO WE USE IT** | |
± CHANGEDHeading formatting changes Several section headings had their formatting level changed (e.g., from a larger heading style to plain bold text) or had link spacing adjusted. These are purely cosmetic and don't change any rights or obligations. | ||
| 34 | 34 | |
| 35 | 35 | ### **Visit to our websites or webservices** |
| 36 | 36 | |
| 37 | 37 | ### **Description of Service** |
| 38 | 38 | |
| 39 | 39 | **Display of service** |
| 73 | 73 | Logfiles are deleted no later than 1 year after creation. |
| 74 | 74 | |
| 75 | 75 | Data which we process for the purpose of web analysis is deleted 1 year after creation. |
| 76 | 76 | |
| 77 | 77 | The deletion period of the cookies is given in the cookie center on the specific websites of our company or in the relevant consents or agreements. |
| 78 | 78 | |
| 79 | ### Email Tracking Technologies (Pixels) | |
| 80 | ||
| 81 | **Description of Service** When we send you electronic communications or newsletters, we may collect and process personal data using embedded tracking technologies known as tracking pixels or web beacons (1x1 transparent image files). When an email containing a tracking pixel is opened, your email client or internet browser requests the image file from our remote server, automatically transmitting data such as the date and time the email was retrieved, your email client type, your browser settings, your operating system, device model, and your IP address. | |
+ ADDEDNew section added: Email Tracking Pixels Kaspersky added a new section explaining that it now uses tiny invisible tracking images (pixels) in marketing emails and newsletters. Opening one of these emails sends your IP address, device type, operating system, browser settings, and the date/time you opened the email back to Kaspersky's servers. | ||
| 82 | ||
| 83 | **Purpose & Legal Basis** We process this information to evaluate message deliverability, analyze email campaign performance (such as open rates), measure user engagement with our content, and tailor future electronic communications to better match your interests. | |
+ ADDEDPurpose of pixel tracking: campaign analytics and tailoring emails Kaspersky states it uses this pixel data to see if you opened emails, measure engagement, and tailor future marketing emails to your interests. This is based on your consent, and you can opt out through a link in the email footer or by blocking remote images in your email app. | ||
| 84 | ||
| 85 | The legal basis for processing your personal data for these web analysis and performance measurement purposes is your consent. You can withdraw your consent at any time with effect for the future by clicking the "Manage Tracking Preferences" link located in the footer of every marketing email we send you, or by configuring your email software settings to block the automatic downloading of remote images. | |
| 86 | ||
| 87 | We may also process functional email tracking markers strictly necessary to ensure the technical deliverability, security, and integrity of our electronic communications (such as verifying system delivery or detecting security threats and spam). Our legal basis for processing this technical data is safeguarding our legitimate interests, which lie in ensuring the security and technical functionality of our communications. | |
+ ADDEDSeparate 'functional' email tracking for security/delivery Kaspersky also added a second type of email tracking marker used to confirm emails were delivered and to detect spam or security threats. Unlike the marketing tracking, this is based on Kaspersky's own business interests, not your consent, so there's no opt-out described for this part. | ||
| 88 | ||
| 89 | **How long do we keep your personal data** Personal data processed solely for the delivery and security verification of emails is deleted directly after delivery or within logfiles no later than 1 year after creation. Data processed for the purpose of email performance analysis and engagement tracking is deleted 1 year after creation, or upon the withdrawal of your consent. | |
+ ADDEDRetention period for email tracking data Kaspersky added retention details for this new tracking data: delivery/security tracking data is deleted after delivery or within a year, and marketing engagement data is deleted after a year or when you withdraw consent. | ||
| 90 | ||
| 79 | 91 | [**Kaspersky****Account**](https://auth.eu.uis.kaspersky.com/) |
| 80 | 92 | |
| 81 | 93 | ### **Description of Service** |
| 82 | 94 | |
| 83 | 95 | Kaspersky Account is a service that provides end-to-end authentication across websites, Kaspersky products and third party services, as well as the ability to manage single account settings for Kaspersky users. |
| 84 | 96 | |
| 91 | 103 | **How long do we keep your personal data** |
| 92 | 104 | |
| 93 | 105 | Data is deleted no later than 6 (six) calendar months after the account is deleted. |
| 94 | 106 | |
| 95 | 107 | If the account remains inactive for a period of 5 (five) years, it will be automatically completely deleted from our system. |
| 96 | 108 | |
| 97 | ### [**My Kaspersky**](https://my.kaspersky.com/) **and its customizations (hereinafter referred to as the "Service")** | |
| 109 | [**My Kaspersky**](https://my.kaspersky.com/) **and its customizations (hereinafter referred to as the "Service")** | |
± CHANGEDMy Kaspersky section heading format changed The 'My Kaspersky' section heading was changed from a numbered heading style to plain bold text. No wording or policy content changed. | ||
| 98 | 110 | |
| 99 | 111 | ### **Description of Service** |
| 100 | 112 | |
| 101 | 113 | **_Account registration_**. We will only process and use this data in order to provide you the Service, unless it is allowed by applicable law or you expressly consent to a processing or use for other purposes (for example to receive useful news on Kaspersky products and services via email). You may also need to provide us your mobile phone number for the purpose of additional protection of your account from unauthorized access. We will only use your mobile phone number to send you authorization security codes. |
| 102 | 114 | |
| 103 | 115 | Purpose and legal basis for processing your personal data is the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract. |
| 132 | 144 | The legal basis for data processing is your consent. You may withdraw your consent at any time by updating your account preferences or by following the unsubscribe link in the emails. |
| 133 | 145 | |
| 134 | 146 | **How long do we keep your personal data** |
| 135 | 147 | |
| 136 | 148 | Data is deleted no later than 1 (one) calendar month after the account is deleted. |
| 137 | 149 | |
| 138 | ### [**Kaspersky Business-To-Business Portals (including Kaspersky Business Hub**](https://cloud.kaspersky.com/)**,**[**Kaspersky Endpoint Security Cloud**](https://cloud.kaspersky.com/)**,**[**Kaspersky Security Center Cloud Console**](https://ksc.kaspersky.com/)**,**[**Kaspersky Security for Microsoft Office 365**](https://cloud.kaspersky.com/)**, Kaspersky Next)** | |
| 150 | ### [**Kaspersky Business-To-Business Portals (including Kaspersky Business Hub**](https://cloud.kaspersky.com/)**,** [**Kaspersky Endpoint Security Cloud**](https://cloud.kaspersky.com/)**,** [**Kaspersky Security Center Cloud Console**](https://ksc.kaspersky.com/)**,**[**Kaspersky Security for Microsoft Office 365**](https://cloud.kaspersky.com/)**, Kaspersky Next)** | |
| 139 | 151 | |
| 140 | 152 | ### Description |
| 141 | 153 | |
| 142 | 154 | **_Account registration._** If you need to use Kaspersky Business-To-Business (B2B) products and have access to the Kaspersky products used by your company, you need to create a corporate account. To do this, you need to enter your email address (which will be used as your username) and a password. We will only process and use this data to provide you with Kaspersky B2B Portals functionality and the products used in Kaspersky B2B Portals. This data will only be processed and used for other purposes if you give your explicit consent (for example, to receive the latest news about Kaspersky products and services by email, or to be contacted about your Kaspersky product reviews). You can also provide your mobile phone number to further protect your account from unauthorized access, as well as a security question to regain access to your account if you forget your password. We will only use your mobile phone number to send security codes during your authorization. |
| 143 | 155 | |
| 144 | 156 | Purpose and lawful basis for processing your personal data is the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract. |