DATA PRIVACY STATEMENT KASPERSKY LAB CAREER SITE (CAREERS.KASPERSKY.RU)


DATA CONTROLLER INFORMATION


AO Kaspersky Lab, located at address: 39A/3 Leningradskoe Shosse, Moscow 125212, Russian Federation (“Kaspersky”, “Kaspersky Lab”, “KL” or “we”)

If you have any questions regarding the processing of your personal information, please contact our Kaspersky Lab EU representative via e-mail or phone: Kaspersky Labs GmbH, Ingolstadt, Germany, info@kaspersky.de, +49 (0) 841 98 18 90

If you have any additional questions about Kaspersky Lab’s privacy practices or if you would like us to update information or preferences you provided to us, please contact our Data Protection Officer — click here.


YOUR PERSONAL DATA — WHAT IS IT?


Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data within the EU is governed by the General Data Protection Regulation 2016/679 (the “GDPR”).


WHY WE PROCESS YOUR PERSONAL DATA


We process the following categories of your personal data for the following purposes:


Categories
of personal data
Purpose of processing and legitimate interests, where applicable Legal basis Storage period
First and second name Email address Password Account creation, preparation of an application In order to take steps prior to entering into a contract, Art. 6 (1) (b) GDPR Until account is deleted by the user
First and second name Email address Static IP address Process your invite for public events holding by «Kaspersky Lab» Legitimate interests, Art. 6 (1) (f) GDPR Until account is deleted by the user
CV (file) Portfolio (file) List of skills University of graduation Company name Previous employment Date of Birth Country of residence Phone number Process your application for jobs opened at «Kaspersky Lab» Competition selection and signing of employment contract In order to take steps prior to entering into a contract, Art. 6 (1) (b) GDPR Period of application to position, plus 6 months in case of refusal
First and second name Email address Detecting of candidate in case of repeated application, preventing fraud or hiding information by candidate Legitimate interests, Art. 6 (1) (f) GDPR 6 years from the date of refusal
First and second name Email address Providing marketing and service information Consent, Art. 6 (1) (a) GDPR Until the withdrawal or expiry of consent, maximum 12 months after last distribution of marketing information

We have obtained your personal data from you directly.

SHARING YOUR PERSONAL DATA

We may disclose your personal data as follows, provided the legal requirements are met:

  • Within the Group of Companies Kaspersky Lab with strict access policy rights.
  • With the LLC CatzWolf Media (Moscow, Russia), developers of this website according to client-to-processor agreement including utilizing the European Commission’s Standard Contractual Clauses for transfers of personal information
  • With the IE Savchenkov (NotAgency) (Moscow, Russia), developers of this website according to client-to-processor agreement including utilizing the European Commission’s Standard Contractual Clauses for transfers of personal information

TRANSFER OF DATA ABROAD


The personal data provided by users to Kaspersky Lab can be processed in the following countries, including countries outside European Union (EU) or the European Economic Area (EEA) which have not been deemed to have an adequate level of data protection by the European Commission: EEA: Germany, Netherlands, France, United Kingdom; non-EEA: Switzerland, Canada, Singapore, Russia, Japan, USA, Mexico, China, Azerbaijan. According to our general business practice, the data received from users in the EU are processed on servers located in the EU.

Kaspersky Lab has taken appropriate security measures to protect your personal data in accordance with security and privacy best practices (more information https://www.kaspersky.com/global-privacy-policy), including, utilizing the European Commission’s Standard Contractual Clauses for transfers of personal information between group companies (You can find these standard contract clauses under the following link), which requires all group companies to protect personal information being processed from the EEA to an equivalent standard to that required under EU data protection law. Where we share your personal data with a third party service provider outside of the European Economic Area and Switzerland (as detailed in the section entitled “Sharing your information”), we contractually oblige the third party service provider to implement adequate safeguards to protect your information.


HOW LONG DO WE KEEP YOUR PERSONAL DATA?


We retain your personal data only as long as necessary to fulfill the stated purposes, see column “storage period” in the chapter “WHY WE PROCESS YOUR PERSONAL DATA” above.


AUTOMATED DECISION MAKING


We do not use automated decision making.


YOUR RIGHTS AND YOUR PERSONAL DATA


We inform you that you have certain rights regarding the personal data we maintain about you:

  • Right to be informed. You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data, and your rights.
  • Right of access. You have the right to request information about how we use your personal data. In addition, you can request to receive a copy of the Personal Data we process about you and to check that we are lawfully processing it.
  • Right to rectification. Request correction of the personal data that we process about you.
  • Right to erasure (Right to be forgotten). This enables you to ask us to delete or remove personal data where there is no good reason, such as statutory retention periods, for us continuing to process it.
  • Right of restriction of processing. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
  • Right to data portability. Insofar as the processing of your personal data is based on your consent or on a contract (Articles 6 (1) (a) and (b) GDPR, you may request to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to have the personal data transmitted to another controller.
  • Right to object. You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) (f) of the GDPR (data processing for the purposes of the legitimate interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. Additionally, you have the right to object at any time to processing of personal data for direct marketing purposes without giving any reasons.
  • Right to withdraw data protection consent. If you have given us your consent to the processing of your personal data, you may withdraw the consent at any time with effect for the future. This does not affect the lawfulness of the processing of your personal data before the withdrawal of the consent.
  • Right to complain. You have the right to contact the data protection authority in order to lodge a complaint against our data protection and privacy practices.

HOW TO EXERCISE YOUR RIGHTS


IIf you wish to exercise these rights towards us, you may at any time contact us directly or our representative in EU: Kaspersky Labs GmbH, Ingolstadt, Germany, info@kaspersky.de, +49 (0) 841 98 18 90.

IPrincipally, you will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, except in relation to consent withdrawal, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, or, we may refuse to comply with your request in these circumstances.

IWe may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

IWe try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.


COMPLAINTS


IIf you would like to make a complaint regarding this Privacy Statement or our practices in relation to your personal data, please contact us at click here.

If you consider that the processing of personal data relating to you infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority at any time. Which supervisory authority has competence for your complaint can depend on the country where you reside.