We will never sell your data to third parties!
At Avira, we consider it our responsibility to protect your data and privacy. As a German company with headquarters by Lake Constance, we have always been subject to one of the strictest data protection laws in the world.

We aim to inform you openly and honestly about the processing carried out by us and thus to also comply with the requirements of the European General Data Protection Regulation (GDPR, EU 2016/679). We always adhere to applicable data protection legislation and this Privacy Policy.

We promise that we will never sell personal data concerning you to third parties! We will also never pass on anonymized data to third parties for marketing purposes.

Controller
Avira GmbH & Co. KG
Kaplaneiweg 1
D-88069 Tettnang
Germany

Data protection officer
Avira Data protection officer
Kaplaneiweg 1
88069 Tettnang
Germany
Tel.: + 49 7542/500-0
Email: data-privacy@avira.de

Description of processing activities
We offer you various functions in our extension:

• Safe browsing: We secure your surfing by blocking infected/phishing websites
• Download safely: We prevent you from downloading potentially unwanted applications (PUAs)
  
• Private browsing: We protect your privacy by stopping invisible trackers and ads
• Smarter searches: We highlight infected sites directly in your search results
• Anti-hijacking: We ensure you are never redirected to malicious search engines
• Safe deals: We compare offers and product prices to help you make informed decisions when you shop online
  

Purpose of processing and lawfulness
We process your data for the following purposes: Contract fulfillment, revenue generation, operational processes, marketing, data analysis. The legal basis is Article 6(1)b. GDPR, where processing is necessary for the performance of the contract.

Data categories

Extension data

• URLs to analyze if it is secure or not to protect the customer
  
  • Whitelist hits
    
  • Detection hits
• Extension activity data
  
  • Error logs
    
  • Active user (true/false)
  • Installations and uninstallations
  • Settings trace log (offers enable/disable, open/close)
  • Source of the installation
  • Detection performance
• Session ID to distinguish unique users and malicious hits
• Geolocation (country level) to identify malware campaigns

Offers data

• RNDSNR (Random Serial Number) to distinguish campaigns
• Country for ad localization
• User-agent from browser
• Impressions and clicks
• Language from browser
• URL and scraped data or search string
• Campaign tag

Device data

• Device ID
  
• Browser type and version
• Extension version
• Operating system
• Tracker amount
• Browser language and extension language

Cookies used
We do not use cookies for our extension!

If you use our offer function, the offer pages you visit may install cookies on your computer. This is something Avira is not responsible for and has no control over. In this respect, responsibility for data protection rests solely with the website provider.


Duration of storage
The processed data is stored by us for different lengths of time:
1. URL that is checked in the backend: 7 days
2. Price comparison data for statistical purposes: 14 days
3. Log or product data: According to legal requirements

Recipient

Active employees of Avira:

• Transfer to third countries: No

IT service provider:

• Transfer to third countries: No

Mixpanel:

• Transfer to third countries: Yes, USA
• Appropriate safeguards: EU-US Privacy Shield

Rights of the data subject
You may exercise the following rights in relation to your personal data, subject to possible legal restrictions: Access, rectification, erasure (to be forgotten), restriction of processing, data portability.

If you have given us your consent to certain data processing, you have the right to revoke this consent at any time, even in part.

If the processing is based on a legitimate interest of Avira, you can object to this.

At this point, we expressly state that we reserve the right to perform an identity check of the individual submitting the inquiry, in accordance with legal requirements. Please understand that we can therefore only consider inquiries in writing (e.g. by email or letter).

Right to lodge a complaint
You have the right to lodge a complaint with the data protection authority responsible for you at any time.

Concluding statement
This Privacy Policy is revised on an ad-hoc basis to adapt it to current developments in relation to our company, our products and services, legal requirements, and social developments.

Our detailed data protection notices can be found at: https://www.avira.com/en/general-privacy

Issued: January 16, 2020