Panda Security is committed to protecting your privacy. This privacy policy explains how your personal information is collected, used, and disclosed by Panda Security. In compliance with the conditions laid down in the European Union General Data Protection Regulation (“GDPR”), below we provide you with detailed information regarding the processing of your personal data.

I. Data controller

Panda Security, S.L.U. (the “Society”), with VAT number B-48435218, registered in the Mercantile Register of Bilbao, Tome BI-59, Book 134, Sheet BI-767-B, 1st inscription, with registered offices at Santiago de Compostela, 12, 1st floor, 48003 Bilbao, Bizkaia (Spain), and contact email

II. Data Protection Officer (DPO)

The Data Protection Officer (DPO) is the person responsible for ensuring that the Society processes personal data in compliance with the applicable data protection rules. You may contact the DPO at the following email address

III. Purpose and legal basis for the processing

Your personal data will be processed for the following purposes:

IV. Data retention period

The Society will store your personal data for as long as the contractual relationship with you is in force and, once it is terminated, for as long as the applicable fiscal, economic, civil and criminal regulations are in effect. In addition, in the event that the contractual relationship with you is finally not formalized, the data retention period will be six years.

V. Recipients of the personal data

We inform you that under no circumstances will your personal data be passed on to any third party, unless required by a legal obligation, and to the corresponding public bodies. Furthermore, we inform you that your personal data may be accessed, as data processors, by the following parties: (i) Technology service providers (such as software or hardware developers as well as developers of applications related to the software license) in order to effectively provide the computing services related to the software license granted to you, as well as optimizing it; (ii) marketing and advertising service providers involved in the launch of product offers and promotions; (iii) companies belonging to the Society's group in order to effectively fulfill the contractual relationship with you; and (iv) product distributors.

VI. International transfers of personal data

To allow the aforementioned third-party providers to access your personal data, said data may be shared with the following international data processors outside of the EU:

You can obtain a copy of the aforementioned safeguards by contacting the Data Protection Officer at

VII. Rights available to data subjects

We inform you that you are entitled to exercise the following rights:

(i) Right of access: Right to find out what kind of personal information is being processed, and the processing activities performed on said data;

(ii) Right of rectification: Right to ask for your information to be corrected;

(iii) Right to erasure: Right to have your personal information deleted;

(iv) Right to object: Right to object to the processing of your personal data, for reasons related to your personal situation;

(v) Right to withdraw your consent when your consent is the legal basis for the processing of your personal data;

(vi) Right to restriction of processing: Right to ask for your personal information to stop being processed in certain cases (e.g. If you believe that the personal information about you is incorrect, for a period enabling the controller to verify the accuracy of the personal data); and

(vii) Right to portability: Right to receive a copy of the information which you have provided to the Society in a structured, commonly used and machine-readable format, and right to transmit that data to another controller.

To exercise these rights, you must submit your request in writing to, or to the Society's registered offices (indicated above.

Your request to exercise your rights must include your full name as well as the right to be exercised, along with a copy of your national ID card or equivalent personal identification document.

In addition, you are entitled to lodge a complaint with the Spanish Data Protection Agency, if you consider that you have not been satisfied when exercising your rights.

You may exercise any of these rights free of charge.