Table of content
- Introduction
- Visiting our websites
- Cookies and additional tracking tools
- Affiliate partners
- Basic processing when accessing our websites
- Processor
- Akamai
- Amazon Web Services
- AWIN
- Betacenter
- Cleverbridge
- Crazyegg
- Cloudflare
- Cookiebot
- Google Analytics
- GoogleTagManager
- Hubspot
- Lead Alliance
- Pimcore
- Pingdom
- Selligent
- Survey Monkey
- Twilio
- Zendesk
- Newsletter
- Surveys
- Data upload
- Third-party services that you wish to use
- Like button
- Fan pages
- Google Search and Google Maps
- Kununu
- YouTube
- Other providers
- Google ReCaptcha
- Vimeo
- User accounts
- MyAvira
- Login via third-party provider
- Apple
- Betacenter
- Product download
- Online store
- Germany and all countries except the USA
- USA
- Payment processing
- American Express
- EVO Payments
- Global Collect
- PayPal
- Changes to this Privacy Policy
Introduction
We process different data when you visit our websites, purchase a license through our store or create or use your account. This data may be directly or indirectly of a personal nature, i.e. it may involve other data sources.
We collect much of this data in a pseudonymized or an anonymized form. Pseudonymized means that it is no longer possible to attribute the personal data to a specific data subject without additional information. Anonymized means that the data subject can no longer be identified from the anonymized data.
Visiting our websites
Avira offers a variety of product and user-optimized websites to provide you with a browsing experience tailored to your needs. We also use tools from various national and international providers. Some of the tools we use, how they work and the type of data processed are explained below.
Cookies and additional tracking tools
In addition to the following tools, we also use cookies and tracking tools (hereinafter jointly referred to as "cookies") on our websites. We divide cookies into several categories. If we want to load more than "necessary" cookies, this is done on the basis of your consent. They are managed via a cookie banner.
This means: If no cookie banner with the option to set the use of cookies appears when you access a website for the first time, we only use cookies on this website that are required to correctly display the website.
Please bear in mind that it may also be possible that you already agreed to the use of cookies. If this is the case, no cookie banner will be displayed.
You will find all further information on this topic under Cookies.
Affiliate partners
Please note that cookies can also be set by third parties or read by us. These are sometimes necessary for billing advertising partners, known as affiliate publishers, or for granting cashback and vouchers, for example. We process these cookies to fulfill our contractual obligations towards you or third parties if necessary.
In doing so, we act as an advertiser. We may process personal data to carry out an affiliate marketing campaign. This allows us to track which third-party website, app, or other technology provider referred potential customers to our websites and apps ("referrer") and pay them a commission in return for these referrals.
In doing so, we are pursuing the legitimate interest of conducting an online advertising campaign that is remunerated according to performance.
We work together with various service providers within the framework of order processing and/or joint responsibility.
Basic processing when accessing our websites
When you access our websites, whether by entering one of our URLs or by activating a link, we see this as your declaration of intent to receive (further) information from us. We comply with this wish by sending the contents of our websites. Metadata is exchanged during communication between your browser and our servers. To implement this service in a sensible manner, we use service providers on the basis of data processing agreements.
| Purpose | • Provision of our internet presence • Revenue generation • Marketing and public relations • Customer engagement • Evaluations |
| Legal basis | • Provision of websites: Art. 6(1)(b) GDPR – Contract performance • Storage of metadata: Article 6(1)(f) GDPR – Legitimate interest: IT security |
| Data categories | • Website visited • IP address • Request method • Requested URL • Response status • User agent (browser type and version, operating system information) • Processing time • Time to receive the response from the upstream server |
| Recipient category | • Employee • IT service provider • SaaS vendor |
| Retention period | Usually 7 days Error report 30 days |
Processor
The following list is not exhaustive:
Akamai
| Provider | Akamai Technologies GmbH, Parkring 20–22, 85748 Garching, Germany |
| Description | Worldwide delivery of our contents |
| Purpose | • Provision of content for the internet presence and software delivery • Hosting • Information security • Evaluations |
| Retention period | In accordance with legal requirements |
Amazon Web Services
| Provider | Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxemburg |
| Description | Hosting of our applications |
| Purpose | • Provision of the internet presence • Hosting • Information security • Evaluations |
| Retention period | In accordance with legal requirements |
AWIN
| Provider | AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany |
| Description | Services regarding our advertising network |
| Purpose | • Plugin-Integration • Evaluations |
| Retention period | In accordance with legal requirements |
Betacenter
| Tool | Betacenter |
| Provider | Centercode, Inc. 23332 Mill Creek Drive, Suite 260, Laguna Hills, CA 92653, USA |
| Description | We use the Centercode solution to run our beta tester site. You need an account to use it. |
| Purpose | • Provision of services • Testing of products • Revenue generation • Increase of customer satisfaction • Evaluations |
| Retention period | In accordance with legal requirements |
Cleverbridge
| Provider | Cleverbridge AG, Gereonstr. 43–65, 50670 Cologne, Germany |
| Description | Support with performance marketing |
| Purpose | • Documentation of advertising data • Invoicing of advertising services • Marketing optimization • Evaluations |
| Retention period | In accordance with legal requirements |
Crazyegg
| Provider | Crazy Egg, Inc., 16220 Ridgeview Lane, La Mirada, CA 90638, USA |
| Description | Optimization of the internet presence |
| Purpose | • Monitoring of the website • Evaluations |
| Retention period | In accordance with legal requirements |
Cloudflare
| Provider | Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA |
| Description | We use Cloudflare to distribute the load on our web servers and to deliver the content of the websites. |
| Purpose | • Provision of services • Operational processes • Increase of customer satisfaction • Evaluations |
| Retention period | Up to 30 days |
Cookiebot
| Tool | Cookiebot |
| Provider | Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark |
| Description | With Cookiebot we manage your consent for the use of cookies and their transmission. |
| Purpose | • Fulfilling regulatory requirements • Controlling the use of cookies and tracking tools • Evaluations |
| Retention period | Up to 1 year |
Google Analytics
| Tool | Google Analytics |
| Provider | Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland |
| Description | Google Analytics is a key tool from Google for the analysis and optimization of website usage. |
| Purpose | • Operational process • Optimization of websites • Revenue generation • Evaluations |
| Retention period | In accordance with legal requirements |
GoogleTagManager
| Tool | GoogleTagManager |
| Provider | Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland |
| Description | GoogleTagManager gives us the option to centrally manage the use of cookies and other tracking tools. |
| Purpose | • Operational process • Provision of websites and their functions • Evaluations |
| Retention period | None |
Hubspot
| Provider | HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA |
| Description | We use Hubspot to manage our B2B customer relations. |
| Purpose | • Operational process • Customer satisfaction • Revenue generation • Evaluations |
| Retention period | In accordance with legal requirements |
Lead Alliance
| Provider | lead alliance GmbH, Karlstr. 9, 90403 Nuremberg, Germany |
| Description | Services regarding our advertising network |
| Purpose | • Documentation of advertising data • Invoicing of advertising services • Marketing optimization • Evaluations |
| Retention period | In accordance with legal requirements |
Pimcore
| Provider | Pimcore GmbH, Söllheimer Straße 16, 5020 Salzburg, Austria |
| Description | Provision of the content management system |
| Purpose | • Provision of the service • Operational processes • Evaluations |
| Retention period | In accordance with legal requirements |
Pingdom
| Provider | SolarWinds Worldwide, LLC, Bldg 400, 7171 Southwest Pkwy, Austin, TX 78735, USA |
| Description | Optimization of the website |
| Purpose | • Monitoring of the website • Evaluations |
| Retention period | In accordance with legal requirements |
Selligent
| Provider | Selligent SA (Selligent Marketing Cloud), Avenue de Finlande 2, 1420 Braine, l’Alleud, Belgien |
| Description | We use Selligent in our marketing to maintain our B2C customer relations and communication. |
| Purpose | • Operational process • Customer management • Revenue generation • Evaluations |
| Retention period | In accordance with legal requirements |
Survey Monkey
| Provider | SurveyMonkey Europe UC, 2 Shelbourne Buildings, Second Floor, Shelbourne Rd, Ballsbridge Dublin 4, Ireland |
| Description | We use Survey Monkey to conduct customer surveys. |
| Purpose | • Operational process • Customer satisfaction • Revenue generation • Evaluations |
| Retention period | In accordance with legal requirements |
Twilio
| Provider | Twilio Inc., 375 Beale Street, Suite 300, San Francisco, USA |
| Description | We use Twilio to transmit the security code as part of our two-factor authentication. |
| Purpose | • Operational process • IT security • Evaluations |
| Retention period | In accordance with legal requirements |
Zendesk
| Provider | Zendesk, Inc, 1019 Market Street, San Francisco, CA 94103, USA |
| Description | We use Zendesk's services as the technical basis for our support website. |
| Purpose | • Rendering of support services • Provision of the website • Revenue generation • Increase of customer satisfaction • Evaluations |
| Retention period | In accordance with legal requirements |
Newsletter
| Description | We offer you newsletters on various topics. You can find an overview of our newsletters and your subscriptions here. You can revoke your consent for the future at any time in the account area. |
| Purpose | • Provision of our newsletter • Marketing and public relations • Customer engagement • Evaluations |
| Recipient category | • Employee • IT service provider • SaaS vendor |
| Retention period | Until such time as consent is withdrawn |
Surveys
| Description | At some points in our offers or in the communication with us, we are interested in your opinion. For this reason, we use tools for conducting surveys and satisfaction measurements. This is done on the basis of your consent or, for customers, on the basis of your approval. |
| Purpose | • Marketing • Customer engagement • Evaluations |
| Recipient category | • Employee • IT service provider • SaaS vendor |
| Retention period | Until such time as consent is withdrawn or an objection filed |
Data upload
| Description | You have the option of sending us suspicious files, files that trigger a false alarm in our software, and website addresses (so-called "URLs") via upload. We then analyze these files. Our signature database or the whitelist is then updated depending on the results. It is also possible to send us files by e-mail. |
| Purpose | • Provision of the service • Contract performance • Marketing • Customer engagement • IT security • Evaluations |
| Recipient category | • Employee • IT service provider |
| Retention period | Normally 30 days |
Third-party services that you wish to use
On our websites we offer you functions from third parties. The necessary data transfer, e.g. your IP address, only takes place when you activate the module, the placeholder or the link, i.e. click on it. At that moment we establish a connection to the service provider and transmit the necessary data.
Social media
Like button
In our offers you will find "Like buttons". These are normal links, which are only activated when you click on them. You will then be redirected to the service provider's page. Your browser data and the IP address are transmitted for this purpose. This also tells the service provider that you have visited our website.
For this data processing, we and the service provider carry joint responsibility. However, we are only jointly responsible for the collection of the data and until the transmission is completed. We have no influence on the further processing by the service provider and are therefore not jointly responsible.
Fan pages
We maintain fan pages on some social media platforms. We are partly responsible for this together with the service provider. In doing so, our responsibility is limited to providing you with information and therefore data on visits to our site is collected by the service provider. In some cases, we may receive a user-behavior evaluation. We have no influence on the further processing by the service provider and are therefore not jointly responsible.
Facebook / Meta
| Service provider | Facebook / Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland |
| Purpose | • Marketing and public relations • Customer engagement • Revenue generation • Evaluations |
| Recipient category | • Employee • Service provider • IT service provider • SaaS vendor |
| Retention period | In accordance with legal requirements |
| Service provider's privacy policy | https://www.facebook.com/policy.php |
Google Search and Google Maps
| Tool | Google Search and Google Maps |
| Provider | Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland |
| Description | We are represented as a company in Google search and in Google's map service. |
| Purpose | • Marketing and public relations • Customer engagement • Revenue generation • Evaluations |
| Retention period | In accordance with legal requirements |
| Service provider's privacy policy | https://policies.google.com/?hl=en&gl=en |
Kununu
| Service provider | New Work SE, Dammtorstr. 30, 20354 Hamburg, Germany |
| Purpose | • Marketing and public relations • Employee recruitment • Evaluations |
| Recipient category | • Employee • Service provider • IT service provider • SaaS vendor |
| Retention period | In accordance with legal requirements |
| Service provider's privacy policy | https://privacy.xing.com/en |
LinkedIn
| Service provider | LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2 Ireland |
| Purpose | • Marketing and public relations • Customer engagement • Employee recruitment • Revenue generation • Evaluations |
| Recipient category | • Employee • Service provider • IT service provider • SaaS vendor |
| Retention period | In accordance with legal requirements |
| Service provider's privacy policy | https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy |
Pinterest
| Service provider | Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland |
| Purpose | • Marketing and public relations • Customer engagement • Revenue generation • Evaluations |
| Recipient category | • Employee • Service provider • IT service provider • SaaS vendor |
| Retention period | In accordance with legal requirements |
| Service provider's privacy policy | https://policy.pinterest.com/en/privacy-policy |
Twitter
| Service provider | Twitter Inc., 1355 Market Street, Suite 900 San Francisco, CA 94103, USA |
| Purpose | • Marketing and public relations • Customer engagement • Revenue generation • Evaluations |
| Recipient category | • Employee • Service provider • IT service provider • SaaS vendor |
| Retention period | In accordance with legal requirements |
| Service provider's privacy policy | https://twitter.com/en/privacy |
Xing
| Service provider | New Work SE, Dammtorstr. 30, 20354 Hamburg, Germany |
| Purpose | • Marketing and public relations • Employee recruitment • Evaluations |
| Recipient category | • Employee • Service provider • IT service provider • SaaS vendor |
| Retention period | In accordance with legal requirements |
| Service provider's privacy policy | https://privacy.xing.com/en |
YouTube
| Service provider | Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland |
| Purpose | • Marketing and public relations • Customer engagement • Revenue generation • Evaluations |
| Recipient category | • Employee • Service provider • IT service provider • SaaS vendor |
| Retention period | In accordance with legal requirements |
| Service provider's privacy policy | https://policies.google.com/?hl=en&gl=de |
Other providers
Google ReCaptcha
| Tool | Google ReCaptcha |
| Provider | Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland |
| Description | To ensure data security when entering data, we use Google ReCaptcha in certain cases. This tool helps us to prevent data input from automatic or machine systems. |
| Purpose | • IT security |
| Retention period | In accordance with legal requirements |
| Service provider's privacy policy | https://policies.google.com/privacy?fg=1 |
Vimeo
| Provider | Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA |
| Description | We have integrated information videos into our website, which are distributed by the provider Vimeo. |
| Purpose | • Marketing and public relations • Customer engagement • Revenue generation • Evaluations |
| Retention period | In accordance with legal requirements |
| Service provider's privacy policy | https://vimeo.com/privacy |
User accounts
MyAvira
We offer you the administration of your data and products via a customer account. You can find this function under Avira Connect or via the address www.my.avira.com.
When you buy a product through our online store, a customer account is created automatically for you. In addition, you can voluntarily create an account with us at any time.
This account references your email address and a password that you set. You can also turn on 2-factor authentication (2FA). We will then send you a text message with a security PIN to the stored telephone number.
Please note that the customer account remains valid until you actively delete it in the user administration section of the account. We reserve the right, within the contractual agreements and according to applicable laws and regulations, to delete customer accounts at any time.
When you create or use an account, this is done in accordance with the applicable End User License Agreement and our Terms and Conditions.
| Purpose | • Operational process • Customer engagement / user management • Revenue generation • Evaluations |
| Legal basis | Art. 6(1)(b) GDPR – Contract performance |
| Recipient category | • Employee • Service provider • IT service provider |
| Retention period | Until the account is deleted |
Login via third-party provider
To register with us or to be able to log in later on our pages or in our products, we offer you, in addition to our own procedure, the option to do this via the services Facebook Connect, Google, and Apple ID. For this purpose, we will redirect you to a page of the corresponding provider. You share your log in data exclusively with the provider.
Service provider data is then exchanged between the service provider and us accordingly. Please note that the service provider also receives information from Avira in this way.
Apple
| Service provider | Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Republik Irland |
| Further information from the provider | https://www.apple.com/de/privacy/features/ |
| Data protection provisions of the service provider | https://www.apple.com/legal/privacy/ |
Facebook
| Service provider | Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland |
| Data protection provisions of the service provider | https://www.facebook.com/privacy/explanation |
Google
| Service provider | Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland |
| Further information from the provider | https://support.google.com/accounts/answer/112802?hl=en&ref_topic=7188760 |
| Data protection provisions of the service provider | https://policies.google.com/privacy?hl=dehttps://policies.google.com/privacy?hl=en |
Betacenter
| Description | To become active as a beta tester for us, you need your own account on our beta center page. |
| Purpose | • Operational process • Customer engagement / user management • Revenue generation • Evaluations |
| Legal basis | • Art. 6(1)(b) GDPR – Contract performance |
| Recipient category | • Employee • Service provider • IT service provider • SaaS vendor |
| Service provider | Centercode Inc., 23332 Mill Creek Drive, Suite 260, Laguna Hills, CA 92653, USA |
| Transfer to third countries | USA, standard EU contractual clauses |
| Data protection provisions of the service provider | In accordance with legal requirements |
Product download
You can download all products as a registered or non-registered customer via our website. Depending on the product you download, we may process personal data. You can find further information under Products.
| Purpose | • Operational process • Customer engagement / user management • Revenue generation • Evaluations |
| Legal basis | Art. 6(1)(b) GDPR – Contract performance |
| Recipient category | • Employee • IT service provider |
| Retention period | In accordance with legal requirements |
Online store
Germany and all countries except the USA
You can purchase product licenses through our online store. ,This store is operated on our behalf by Cleverbridge AG, Cologne, Germany.
In our area of responsibility, we collect the data necessary for the purchase. These include such data as your email address, name data, license information, zip code, and payment data. As part of the checkout process, we will automatically create a customer account for license management if you do not already have one.
| Purpose | • Operational process • Distribution / sales processing • Revenue generation • Evaluations |
| Legal basis | Art. 6(1)(b) GDPR – Contract performance |
| Recipient category | • Employee • IT service provider • Payment provider |
| Service provider | Cleverbridge AG, Gereonstr. 43–65, 50670 Cologne, Germany |
| Retention period | In accordance with legal requirements |
USA
In the USA, the Cleverbridge AG online store integrated on our website is operated independently by its subsidiary, Cleverbridge Inc. Cleverbridge acts as our reseller there.
| Service provider | cleverbridge, Inc., 350 N Clark, Suite 700, Chicago, IL 60654, USA |
| Purpose | • Operational process • Distribution / sales processing • Revenue generation • Evaluations |
| Recipient category | • Employee • Service provider • IT service provider • SaaS vendor |
| Retention period | In accordance with legal requirements |
| Service provider's privacy policy | https://shop.avira.com/819/?scope=opprivacy&id=GC3U5gIp7w |
Payment processing
Depending on the payment method you choose, we or our partners collect the necessary data. These data are processed according to international standards. Our partners act as processors in their own right in terms of data protection. Further information can be found in the partners' privacy policies.
American Express
| Service provider | American Express Europe S. A., Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany |
| Recipient category | • Employee • IT service provider • Payment provider |
| Service provider's privacy policy | https://www.americanexpress.com/us/privacy-center/?inav=footer_privacy_statement |
EVO Payments
| Service provider | EVO Payments International GmbH, Elsa-Brändström-Straße 10–12, 50668 Cologne, Germany |
| Recipient category | • Employee • IT service provider • Payment provider |
| Service provider's privacy policy | https://www.evopayments.eu/en/data-protection/ |
Global Collect
| Service provider | Global Collect Services B. V., Neptunstraat 41-63, 2132 JA Hoofddarp, Netherlands |
| Recipient category | • Employee • IT service provider • Payment provider |
| Service provider's privacy policy | https://www.ingenico.de/privacy-policy/ |
PayPal
| Service provider | PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg |
| Recipient category | • Employee • IT service provider • Payment provider |
| Service provider's privacy policy | https://www.paypal.com/en/webapps/mpp/ua/privacy-full?locale.x=de_DE#14 |
Changes to this Privacy Policy
This Privacy Policy is revised on an ad-hoc basis to adapt it to current developments in relation to our company, our products and services, legal requirements and social developments.
Version: 22.06.2022