This is the privacy policy of AVAR (Association of Anti-Virus Asia Researchers).

This document was last updated on 17 September 2021.

We at AVAR (“AVAR”, “we”, “us”), care deeply about privacy, security, and online safety, all of which are a significant part of our essential mission: to protect users of our services (“you” and “your”) from the risks of theft, disruption, and unauthorized access to their online information and activities.

This Privacy Notice (“Notice”) is designed to inform you about how we collect, use, and share your personal data through our website (our “Site”) or when you interact with us.

When you access or use our Services, you acknowledge that you have read this Notice and understand its contents. This notice is subject to change anytime, based on applicable regulations and law.

If you are a resident of EU, this notice covers your rights too, including GDPR.

WHAT THIS STATEMENT COVERS

This statement describes the following general aspects of our collection and processing of Personal Data concerning you.

• What Personal Data we collect
• How do we use the information we collect
• Who do we share the Personal Data with
• How do we protect your Personal Data
• Managing your Personal Data
• Your Privacy Rights
• Cookies and Tracking Technologies
• Who you can contact if you have any questions regarding the use of your Personal Data

WHAT PERSONAL DATA WE COLLECT?

In order to provide our services, we collect information. Some information you provide directly to us through our site, some we collect through emails or through other communications. In this Notice, “Personal Data” refers to data that could be used, alone or in combination with other data, to identify you as an individual.

The types of Personal Data you may provide includes:

• Contact information (such as name, email address, mailing address, and phone number)
• Payment information
1. Including payment card numbers and associated identifiers and billing address
2. We do not store payment card numbers
• Account log-in credentials

If you believe that one of your contacts has provided us with your Personal Data and you would like to request that it be removed from our database, please contact us at admin@aavar.org.

HOW DO WE USE THE INFORMATION WE COLLECT?

On the basis of your consent, in order to:

• Subscribe you to a newsletter, send updates or alerts
• Send you marketing communications and information on new services
• Communicate with you about, and manage your participation in contests, offers or promotions
• Solicit your opinion or feedback, provide opportunities for you to promote your organization

WHO DO WE SHARE PERSONAL DATA WITH?

AVAR does not share information that identifies you personally with non-affiliated third parties for their own marketing. We do not sell, lease, rent or give away your Personal Data.

Public Authorities

In certain instances, it may be necessary for AVAR to disclose your data to public authorities or as otherwise required by applicable law. No Personal Data will be disclosed to any public authority except in response to:

• A subpoena, or investigation of suspected illicit or illegal activities, or warrant, or other process issued by a court or other public authority of competent jurisdiction
• In connection with, or during negotiations for, an acquisition, merger, asset sale, or other similar business transfer that involves all or substantially all of our assets or functions where Personal Data is transferred or shared as part of the business assets

AVAR does not share information that identifies you personally with non-affiliated third parties for their own marketing use without your permission.

HOW DO WE PROTECT YOUR DATA?

Securing Personal Data is an important aspect of protecting privacy. We use administrative, organizational, technical, and physical safeguards to protect the Personal Data we collect and process. Our security controls are designed to maintain data confidentiality, integrity, and an appropriate level of availability.

GDPR

We also recognises that maintaining compliance with GDPR is a continual effort, and thus our GDPR compliance efforts are part of our ongoing work at AVAR.

The EU General Data Protection Regulation (GDPR) became effective on 25 May 2018. GDPR contains significant requirements concerning the protection of personal data that impact many of our customers. AVAR is committed to complying with GDPR, as we are with all applicable laws and regulations.

What is personal data under GDPR

• Any information relating to an identified or identifiable natural person, such as a name, an identification number, location data, or online identifiers, including IP addresses and cookies.
• Physical, genetic, mental, economic, cultural, or social identifiers if they can be traced back to a specific individual.
• Data for individuals in all personas be that work, public, or private.

COOKIES AND SIMILAR TRACKING TECHNOLOGY

A cookie is a piece of text that gets entered into the memory of your browser by a website, allowing the website to store information on your machine and later retrieve it.

Our Site, may use cookies, unique device identifiers (like Apple ID For Advertisers on iOS devices, and Android Advertising ID on Android devices), and other tracking technologies (collectively, “Cookies“) to distinguish you from other users and better serve you when you return to the Site, and to monitor and analyse the usage of the Site, or service. Cookies also enable us to track and target the interests of our users to enhance the onsite experience through content, features, and advertisements.

We, may also use other Internet technologies, such as Flash technologies, Web beacons or pixel tags, and other similar technologies, to deliver or communicate with cookies and track your use of the Site, or service, as well as serve you ads and personalize/customize your experience when you are using our Site.

Most browsers automatically accept cookies, but you can modify your browser setting to decline cookies by visiting the Help portion of your browser’s toolbar. If you choose to decline cookies, please note that your ability to sign in, customize, or use some of the interactive features of our Site, or service may be impeded, and the advertisements you see may not be as relevant to you.

LOCATION INFORMATION

We may collect different types of information about your location, including general information (for example IP address or ZIP code) and more specific information (for example GPS-based functionality on mobile devices when used to access a site). This information may be used to customize the services provided to you, such as location-based information, advertising, and features.

MANAGING YOUR PERSONAL DATA

How long we retain or store your Personal Data

We will hold your Personal Data on our systems for the longest of the following periods:

• As long as necessary to maintain our ongoing business relationship, or as needed to provide you with the services or information which you are entitled to or can otherwise reasonably expect to receive from us
• For as long as necessary for the purpose for which we collected it or for which you supplied it to us in accordance with any service relevant activity or process
• Any retention period that is necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements
• The end of the period in which litigation or investigations might arise in respect of our business relations or other interactions with you.

YOUR PRIVACY RIGHTS

• To ask us to provide you with information regarding the Personal Data we process concerning you
• To rectify, update or complement inaccurate or incomplete Personal Data concerning you
• To delete or request the erasure of Personal Data concerning you
• In certain circumstances to obtain of us that we restrict the way in which we process Personal Data concerning you
• To withdraw any consent, you may have given for us to process Personal Data concerning you
• To obtain of us the portability of Personal Data concerning you which we process using automated means on the basis of your consent or of a contract you have entered into with us
• In the European Economic Area, to lodge a privacy complaint with a supervisory authority if you are unhappy with the way we have handled your Personal Data or any privacy query or request that you have raised with us.

We will abide by our legal obligation to take reasonable measures to ascertain your identity and the legitimacy of your request, and may ask you to disclose to us any information necessary for that purpose. We will respond to legitimate request within 1 (one) calendar month or 31 (thirty-one) calendar days (whichever is longer). In certain limited circumstances, we may need to extend our response period as permitted by applicable law. Pursuant to any such requests, we may retain certain data necessary to prevent fraud or future abuse or as otherwise required or permitted by law, including to comply with legal obligations we are subject to, as well as to establish, exercise and defend our legal claims.