How to comply with GDPR requirements when using Kaspersky Embedded Systems Security
Kaspersky Embedded Systems Security may transmit data to Kaspersky in the following scenarios:
- When you are using Kaspersky Security Network (KSN).
- If you activate the application with an activation code.
- When you download updates for anti-virus databases and application modules.
- When following links in the interface.
Irrespective of the data classification and territory from which the data is received, Kaspersky adheres to the highest standards for data security and employs various legal, organizational and technical measures to protect the data of users, to guarantee its security and confidentiality, and also to ensure the fulfillment of users' rights as guaranteed by applicable legislation. For details, see the article about the privacy policy for Kaspersky solutions and services.
In accordance with the requirements of the General Data Protection Regulation and according to the Kaspersky classification for the B2B segment, personal information may be contained only in data that is transmitted to Kaspersky during use of Kaspersky Security Network. Nevertheless, individual companies may also deem information transmitted in other traffic as sensitive data in accordance with their own internal classifications and standards.
For this reason, prior to beginning use of Kaspersky Embedded Systems Security, please carefully read the description of transmitted data presented below. Find more information about processed data in the About data provision section in the Administrator’s guide for Kaspersky Embedded Systems Security.
If specific data transmitted from Kaspersky Embedded Systems Security under any of the scenarios described above may be classified as personal data according to your local legislation or other regulations, you must ensure that such data is processed legally and obtain the consent of end users for the collection and transmission of such data.
If you do not want to submit the data described below to Kaspersky, follow our recommendations to disable the transmission of such data.
Data transmitted to Kaspersky when using Kaspersky Security Network
The use of Kaspersky Security Network ensures faster responses by Kaspersky Embedded Systems Security to new threats, improves the performance of some protection components, and reduces the likelihood of false positives.
When using Kaspersky Security Network, the application will automatically send Kaspersky the data described in the Kaspersky Security Network Statement. You can read the Statement in the following resources:
- In the article Kaspersky Security Network Statement in Kaspersky Embedded Systems Security 2.0 and 2.1.
- In the application interface when the Kaspersky Security Network option is enabled.
- In the Kaspersky Embedded Systems Security administration components installation folder.
You must accept the KSN Statement to run the task Use Kaspersky Security Network (KSN).
A portion of the data transmitted from Kaspersky Embedded Systems Security to Kaspersky Security Network is classified as personal data according to the legislation of certain countries (including the General Data Protection Regulation for countries within the European Union). For more details about the General Data Protection Regulation, please visit the official website.
For this reason, prior to enabling participation in Kaspersky Security Network, you must independently ensure that data is processed legally. This shall include data that may be classified as personal data in accordance with your local legislation. For this purpose, you must obtain the consent of end users prior to beginning use of the application.
If you do not want to provide Kaspersky with the data described in the Kaspersky Security Network Statement, you can:
- Use a local reputation database of Kaspersky Private Security Network on your own network. Kaspersky Private Security Network can be installed and used in your data center under the complete control of your IT professionals. Your IT infrastructure and security operations center (SOC) will reap the full benefits of cloud technologies while your company maintains confidentiality and fulfills all the requirements of regulatory agencies. For details, visit www.kaspersky.com.
- Do not use Kaspersky Security Network in Kaspersky Embedded Systems Security.
- Limit the data sent to Kaspersky Security Network (KSN).
- Disable sending statistics to Kaspersky Security Network (KSN). In this case, the application will only request the reputation of the scanned files. The data thread of such type will not contain any personal data according to the Kaspersky classification for B2B.
Data transmitted to Kaspersky when the application is activated
All supported versions of Kaspersky Embedded Systems Security let you use 2 different methods for activating the application: using an activation code or using a key file.
If an activation code is used to activate the application, Kaspersky Embedded Systems Security will automatically send Kaspersky the following information:
- Type, version, and localization of Kaspersky Embedded Systems Security
- Versions of installed updates for Kaspersky Embedded Systems Security
- ID of the computer and ID of the specific Kaspersky Embedded Systems Security installation on the computer
- Activation code and unique ID of the specific activation of the current license
- Type, version and bit rate of the operating system, and name of the virtual environment (if Kaspersky Embedded Systems Security is installed in a virtual environment)
- IDs of Kaspersky Embedded Systems Security components that are active when the information is transmitted
According to the Kaspersky classification for the B2B segment, information that is transmitted as part of activation does not contain personal data.
Kaspersky requires such information to verify that Kaspersky Embedded Systems Security is being legitimately used, and such information may also be used to generate statistical information on the dissemination and use of the software.
If you do not want to submit this information to Kaspersky, please use a key file to activate the application.
Data transmitted to Kaspersky when downloading anti-virus database updates and application updates
When updating from Kaspersky servers, all supported versions of Kaspersky Embedded Systems Security will automatically transmit the following information:
- Version of Kaspersky Embedded Systems Security
- ID of the active license
- ID of Kaspersky Embedded Systems Security
- Serial number of the active license
- Unique ID of the upgrade task start
- Unique ID of the Kaspersky Embedded Systems Security installation
According to the Kaspersky classification for the B2B segment, this information does not contain personal data.
Kaspersky requires this information to verify that Kaspersky Embedded Systems Security is being legitimately used.
If you do not want to provide this information to Kaspersky, use one of the update options that does not require connecting to the Kaspersky servers directly:
- Update through Kaspersky Security Center as an update server.
- Update from the shared folder using Kaspersky Update Utility.
Data transmitted to Kaspersky when following the links in Kaspersky Embedded Systems Security logs
When the error event is registered in the Kaspersky Embedded Systems Security log, a link to the knowledge base article is generated. When you follow these links, Kaspersky Embedded Systems Security transfers the following information:
- Information about the localization of Kaspersky Embedded Systems Security
- Type of the redirecting link
- Application ID (ALIAS)
- Full version number of Kaspersky Embedded Systems Security
- ID of the error for which the log entry was generated
According to the Kaspersky classification for the B2B segment, this information does not contain personal data.
If you don’t want to transfer this information:
- Do not use the links in the Kaspersky Embedded Systems Security logs.
- Do not install Kaspersky Embedded Systems Security console and manage the application through Kaspersky Security Center instead.