﻿KASPERSKY SECURITY NETWORK (KSN) STATEMENT

Kaspersky Security Network Statement (hereinafter "KSN Statement") relates to the computer program Kaspersky Embedded Systems Security 3.2(hereinafter "Software").
KSN Statement along with the End User License Agreement for Software, in particular in the Section "Conditions regarding Data Processing" specifies the conditions, responsibilities and procedures relating to transmission and processing of the data, indicated in the KSN Statement. Carefully read the terms of the KSN Statement, as well as all documents referred to in the KSN Statement, before accepting it.

When the End User activates the using of the KSN, the End User is fully responsible for ensuring that the processing of personal data of Data Subjects is lawful, particularly, within the meaning of Article 6 (1) (a) to (1) (f) of Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") if Data Subject is in the European Union, or applicable laws on confidential information, personal data, data protection, or similar thereto.

Data Protection and Processing
Data received by the Rightholder from the End User during use of the KSN are handled in accordance with the Rightholder's Privacy Policy published at: https://www.kaspersky.com/Products-and-Services-Privacy-Policy.

Purpose of Using the KSN
To make it possible to increase the Software's speed of reaction to information and network security threats.
The declared purpose is achieved by:
- determining the reputation of scanned objects;
- identifying information security threats that are new and challenging to detect, and their sources;
- taking prompt measures to increase the protection of the data stored and processed by the End User with the Computer;
- reducing the likelihood of false positives;
- increasing the efficiency of Software components;
- investigating of infection of a user's computer;
- improving the performance of the Rightholder's products;
- receiving reference information about the number of objects with known reputation.

Processed Data
While the KSN is enabled, the Rightholder automatically receives and processes the following data:
- Data on the objects being processed: checksum (MD5) of an object being processed.
- Data on silent and recalled detects: ID of the triggered Software anti-virus databases record; timestamp of the triggered Software anti-virus databases record; type of the triggered Software anti-virus databases record; name of the detected malware or legitimate software that can be used to damage the computer or user data.
- Service data on the Software interaction to KSN: encryption characteristics of data package that is being sent to KSN; ID of data package that is being sent to KSN; version of the statistics being sent.
- Statistic data on silent and recalled detects: ID of the triggered Software anti-virus databases record; timestamp of the triggered Software anti-virus databases record; type of the triggered Software anti-virus databases record; date and time of the Software databases release; checksum (MD5) of an object being processed; name of an object being processed; checksum (SHA256) of an object being processed; size of an object being processed; object type code; the Software decision on an object being processed; path to the object being processed; directory code; attribute of an object being processed, that allowed to recall the false positive decision on the object; ID of the task in which detection was performed.
- Statistic data on the detected network attacks: ID of the triggered Software anti-virus databases record; date and time of the Software databases release; local port that was attacked; ID of the detected network attack; mode of the Software Network threat protection component; IP address of the attacker; numeric protocol ID of the IP package where the attack has been detected.
- Statistic data on the Software installation: the Software installation date; the Software activation date; identifier of the partner organization via which the Software license order was placed; the Software ID; serial number of the Software key; the Software localization; indicator of participation in KSN; Computer ID; Software license ID; ID of the information model used to provide the Software license; delay of the statistics sending; list of the Software modules installed and its state.
- Statistic data on the anti-virus protection, and the objects being processed: ID of the triggered Software anti-virus databases record; timestamp of the triggered Software anti-virus databases record; type of the triggered Software anti-virus databases record; date and time of the Software databases release; detect characteristics; checksum (MD5) of an object being processed; name of an object being processed; indicator showing that the object being processed is a PE file; checksum (SHA256) of an object being processed; size of an object being processed; object type code; the Software decision on an object being processed; path to the object being processed; directory code; vulnerability ID; vulnerability danger class; ID of the task in which detection was performed.
- Data on the operating system (OS) installed on the Computer: OS ID; OS Service Pack version; Device Guard (Windows) enablement status; operating system bit version; OS edition; OS version; OS build number; OS update number; extended information about the OS edition.
- Service data on the Software: device ID; full version of the Software; Software update ID; ID of software installation (PCID); type of installed Software.
- Statistic data of the crash stack of the antivirus database modules: identifier of the Software module in which the error occurred, identifier of the job or update category during which the error occurred, error code, module name, source file name and string where the error occurred.

Your Choice to Participate
Providing the above information to the KSN is voluntary. After installing the Software, the End User can at any time enable or disable the use of the KSN in the Software settings as described in the User Manual.

When the End User decides to disable the KSN, the Rightholder will not receive new data. The Rightholder may still process certain data already received under legitimate interest according to point (f) of Article 6 (1) of the EU General Data Protection Regulation (GDPR) for the purposes described in the Privacy Policy at https://www.kaspersky.com/Products-and-Services-Privacy-Policy. If the End User wishes to object to such data processing, the End User must inform the Rightholder in the manner specified in the Privacy Policy. For more information about legal bases for data processing and End User's rights and options, the End User may consult the Privacy Policy at https://www.kaspersky.com/Products-and-Services-Privacy-Policy.

© 2022 AO Kaspersky Lab.


