We will never sell your data to third parties!
At Avira, we consider it our responsibility to protect your data and privacy. As a German company with headquarters by Lake Constance, we have always been subject to one of the strictest data protection laws in the world.

We aim to inform you openly and honestly about the processing carried out by us and to also comply with the requirements of the European General Data Protection Regulation (GDPR, EU 2016/679). We adhere to applicable data protection legislation and to this Privacy Policy.

We promise that we will never sell personal data concerning you to third parties! We will also never pass on anonymized data to third parties for marketing purposes.

Controller
Avira GmbH & Co. KG
Kaplaneiweg 1
D-88069 Tettnang
Germany

Data protection officer
Pembroke Privacy Ltd.
4 Upper Pembroke Street
Dublin 2
Ireland D02VN24
E-Mail: data-privacy@avira.com

Description of processing activities
We offer you various functions in our extension:

• Storage of usernames, emails, passwords, notes, credit cards, files and photos in an encrypted format
• Autofill usernames and passwords for matching websites
• Synchronize encrypted data between user’s devices
• Screen usernames and passwords for potential breaches

Purpose of processing and lawfulness
We process your data for the following purposes: Contract fulfillment, revenue generation, operational processes, marketing, data analysis. The legal basis is Article 6(1)b. GDPR, where processing is necessary for the performance of the contract.

Data categories

Encrypted Vault Data

• Usernames
• Emails
• Passwords
• Notes
• Credit Cards
• Files
• Photos
• Domains / URLs

Anonymous user statistics

• Installation
  
  • Source
• Usage events (save, fill, copy)
  
  • Domain
• Device data
  
  • Device ID
  • Browser type and version
  • Extension version
  • Operating system
  • Browser language and extension language
• Account data
  
  • Number of passwords, notes, credit cards
  • Number of generated passwords
• Settings
• Country / Region / City
• License

Error logs


Cookies used
We do not use cookies for our extension!


Duration of storage
The processed data is stored by us for different lengths of time:
1. Log or product data: According to legal requirements

Recipient

Active employees of Avira:

• Transfer to third countries: Yes, USA
• Appropriate safeguards: Standard EU Contractual Clauses

IT service provider:

• Transfer to third countries: No

Mixpanel:

• Transfer to third countries: Yes, USA
• Appropriate safeguards: Standard EU Contractual Clauses

Rights of the data subject
You may exercise the following rights in relation to your personal data, subject to possible legal restrictions: Access, rectification, erasure (to be forgotten), restriction of processing, data portability.

If you have given us your consent to certain data processing, you have the right to revoke this consent at any time, even in part.

If the processing is based on a legitimate interest of Avira, you can object to this.

At this point, we expressly state that we reserve the right to perform an identity check of the individual submitting the inquiry, in accordance with legal requirements. Please understand that we can therefore only consider inquiries in writing (e.g. by email or letter).

Right to lodge a complaint
You have the right to lodge a complaint with the data protection authority responsible for you at any time.

Concluding statement
This Privacy Policy may be revised and/or updated in accordance with the terms and conditions of our contract with you.Our detailed data protection notices can be found at: https://www.avira.com/en/general-privacy

Issued: September 20, 2021