As the world’s most trusted antivirus software company, we aim to defend you against threats in cyberspace. To do so, we may have to collect your personal data to provide you with the best weapons and the most up-to-date security. We do not take your trust for granted. As a multinational company with its headquarters in the Czech Republic, we conform our data use to the European Union’s (“EU”) General Data Protection Regulation (“GDPR”), with effect from 25 May 2018.

Therefore, in our Privacy Policy, we explain what we do, how we do it, your choices, and how we may need your cooperation to help you stay safe. You want to visit What Happens to Your Personal Data and its sections: You want to review each of these sections on this page: If you use HideMyAss Virtual Private Network (“VPN”), please see our HMA! VPN Privacy Policy. For users of Avast/AVG VPN, please see our Avast/AVG VPN Privacy Policy. Please note that Avast Mobile Security now offers VPN as one of its features. Our Policy’s Aims 1.1 The Avast Privacy Policy applies to Avast Software s.r.o.

('Avast') and unless specified, its subsidiaries, including AVG, Piriform (“CCleaner”), Privax Ltd (“HideMyAss!”), AVG Technologies Norway AS, TuneUp Software GmbH, and Jumpshot, Inc., and any contractors, representatives, agents, and resellers while they are working on our behalf (collectively “we,” “us” or “our”). 1.2 Our Privacy Policy explains the processing of your personal data by us and establishes what information we collect, or which is provided to us, and how we use and protect your personal data in compliance with applicable law. 1.3 Personal data refers to any information relating to an identified or identifiable natural person (“data subject”), where this identification can be made directly or indirectly, by means of identifiers such as your name, identification number, email address, phone number, online identifiers such as cookies in some circumstances, your location, your genetic, economic, cultural or social identity or other information that is specific to you. 1.4 We do not mean information that only refers to a business corporation or organization. We also do not mean information that has been 'anonymized,' either by removing or de-identifying all specific identifiers. Anonymous data is not personal data when the anonymization is irreversible. When we refer to anonymous data, we mean data that cannot be reversed into personal data.

1. Sn rk 202 14 2002 calendar. 5 As a data controller, we commit ourselves to protecting the privacy of our website visitors and users of our products and services with respect to the processing of your personal data. 1.6 Where we collect and process your personal data, we will limit the collection and retention to what is adequate, relevant and necessary for our purposes and it will be kept in a form which allows for your identification no longer than necessary for the purpose for which we process your personal data. We refer to this as data minimisation. 1.7 Where we store your personal data for longer periods for statistical purposes, as permitted, we will use appropriate safeguards. Applicable law defines ‘statistical purpose’ as any collection of personal data, where the result of processing is for aggregate data, so the personal data we collect from you is anonymized or pseudonymized.