Privacy Policy

ESET, spol. s r. o., having its registered office at Einsteinova 24, 851 01 Bratislava, Slovak Republic, registered in the Commercial Register administered by Bratislava I District Court, Section Sro, Entry No 3586/B, Business Registration Number: 31333532 as a Data Controller ("ESET" or "We") would like to be transparent when it comes to processing of personal data and privacy of our customers. To achieve this goal, We are publishing this Privacy Policy with the sole purpose of informing our customer ("End User" or "You") about following topics:

•Processing of Personal Data,

•Data Confidentiality,

•Data Subject's Rights.

Processing of Personal Data

Services provided by ESET implemented in our web-based product are provided under the terms of ESET Cloud Office Security Agreement (hereinafter referred to as "Terms"), but some of them might require specific attention. We would like to provide You with more details on data processing connected with provision of our products and services. We render various services described in the Agreement and documentation. To make it all work, We need to process following information:

•One-way hashes related to infiltrations as part of ESET LiveGrid® Reputation System which improves the efficiency of our anti-malware solutions by comparing scanned files to a database of whitelisted and blacklisted items in the cloud.

•Suspicious samples and metadata from the wild as part of ESET LiveGrid® Feedback System which enables ESET to react immediately to the needs of our end users and keep us responsive to the latest threats providing. We are dependent on You sending us

oinfiltrations such as potential samples of viruses and other malicious programs and suspicious; problematic, potentially unwanted or potentially unsafe objects such as executable files, email messages reported by You as spam or flagged by our product;

oinformation about devices in local network such as type, vendor, model and/or name of device;

oinformation concerning the use of the internet such as IP address and geographic information, IP packets, URLs and ethernet frames;

ocrash dump files and information contained.

We do not desire to collect your data outside of this scope but sometimes it is impossible to prevent it. Accidentally collected data may be included in malware itself (collected without your knowledge or approval) or as part of filenames or URLs and We do not intend it to form part of our systems or process it for the purpose declared in this Privacy Policy.

•Quarantine with retention period 30 days.

•Licensing information such as license ID and personal data such as name, surname, address, email address is required for billing purposes, license genuineness verification and provision of our services.

•Contact information and data contained in your support requests may be required for service of support. Based on the channel You choose to contact us, We may collect your email address, phone number, license information, product details and description of your support case. You may be asked to provide us with other information to facilitate service of support such as generated log files.

Data Confidentiality

ESET is a company operating worldwide via affiliated entities or partners as part of our distribution, service, and support network. Information processed by ESET may be transferred to and from affiliated entities or partners for the performance of the Terms, such as the provision of services, support, or billing. Based on your location and service You choose to use, We might be required to transfer your data to a country with the absence of an adequacy decision issued by the European Commission. Even in this case, every transfer of information is subject to the regulation of data protection legislation and takes place only if required. Standard Contractual Clauses, Binding Corporate Rules, or another appropriate safeguard must be established without any exception.

We are doing our best to prevent data from being stored longer than necessary while providing services under the Terms. Our retention period might be longer than the validity of your license just to give You time for easy and comfortable renewal. Minimized and pseudonymized statistics and anonymized data may be further processed for statistical purposes.

ESET implements appropriate technical and organizational measures to ensure a level of security which is appropriate to potential risks. We are doing our best to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and Services. However, in case of data breach resulting in a risk to your rights and freedoms, We are ready to notify supervisory authority as well as data subjects. Data Subject has a right to lodge a complaint with a supervisory authority.

Data Subject’s Rights

ESET is subject to regulation of Slovak laws and We are bound by data protection legislation as part of European Union. Subject to conditions laid down by applicable data protection laws, You are entitled to following rights as a data subject:

•right to request access to your personal data from ESET,

•right to rectification of your personal data if inaccurate (You also have the right to have the incomplete personal data completed),

•right to request erasure of your personal data,

•right to request restriction of processing your personal data,

•right to object to processing,

•right to lodge a complaint as well as,

•right to data portability.

We believe that every information we process is valuable and necessary for the purpose of our legitimate interest which is provision of services and products to our customers.

If You would like to exercise your right as a data subject or You have a question or concern, send us a message at:

ESET, spol. s r.o.
Data Protection Officer
Einsteinova 24
85101 Bratislava
Slovak Republic
dpo@eset.sk