Acronis Privacy Statement

Acronis Customer Privacy Statement

Effective Date: October 2, 2026

The Acronis Customer Privacy Statement (Privacy Statement) describes how Acronis International GmbH and its affiliates (together, Acronis or we) handles and protects personal information and the choices you have about your personal information.

We appreciate that you trust us with your personal information. Protecting your information is our top priority because we want to keep your trust. We design our products and services with data protection in mind. We work hard to keep your information secure. We regularly monitor and update our security practices to help protect your privacy.

Throughout this Privacy Statement, the following terms have the following meanings:

Acronis Services means:

public portions of the websites owned and operated by or on behalf of Acronis, which include Acronis.com (https://www.acronis.com), developer.acronis.com (https://developer.acronis.com), Acronis.events (https://acronis.events), and Acronis.sport (https://acronis.sport) (collectively, Sites)
Acronis True Image (https://www.acronis.com/products/true-image/)
Acronis Cyber Protect (https://www.acronis.com/products/cyber-protect/backup/)
Acronis Cyber Frame https://www.acronis.com/en/products/cloud/cyber-protect/cyber-frame/
Acronis Cyber Cloud for Service Providers (https://www.acronis.com/cloud/)
Acronis’s mobile applications, including Acronis Cyber Files, Acronis Cyber Protect, Acronis True Protect, Acronis Mobile and Acronis Advanced Automation (collectively, Mobile Apps)
Customer Service and Support, Acronis Professional Services, and other services provided to support the Acronis Services
Other Acronis products and services described at https://www.acronis.com/products/ or https://www.acronis.com/services/.

Controller means the person or entity that determines why and how personal information is Processed. (Please see Section 11 (Privacy Rights and Details) for more details about the Acronis entity that serves as Controller.)

Customer means any managed service provider, distributor, other business customer or natural person that or who subscribes to, orders or otherwise uses the Acronis Services.

data subject means an identified or identifiable natural person to whom personal information relates, including a Consumer as defined in our U.S. State Privacy Rights Notice.

personal information means information that identifies or can be used to identify an individual natural person. Personal information includes direct identifiers (such as name) and indirect identifiers (such as computer or mobile device ID or Internet Protocol (IP) address).

Processing, Process, and Processed means any operation (or set of operations) performed on personal information, such as collecting, combining and storing.

Processor means the person or entity Processing personal information on behalf of a Controller.

Sensitive Personal Information includes categories of information designated as sensitive, special category, highly sensitive, confidential, protected, or otherwise subject to enhanced legal protections under applicable law. Depending upon applicable law, this may include information concerning racial or ethnic origin, religious or philosophical beliefs, trade union membership, biometric or genetic information, health information, precise geolocation, citizenship or immigration status, sexual orientation, information concerning children, government-issued identifiers, financial account credentials, and other similarly protected categories of information.

Service Management Purposes means operational activities reasonably necessary to provide, maintain, secure, support, monitor, administer, analyze, improve, and optimize the Acronis Services, including:

service delivery and administration;
account and subscription management;
billing and financial operations;
customer support and troubleshooting;
fraud prevention and abuse detection;
cybersecurity operations, threat detection, and incident response;
performance monitoring and reliability engineering;
analytics and service improvement;
compliance, audit, and legal obligations; and
development, testing, validation, and deployment of new features and functionality in accordance with applicable law.

you or user means the data subject who accesses and uses the Acronis Services.

How Acronis Processes your personal information is subject to the laws in the places in which Acronis operates or in which you reside. Accordingly, Acronis may have different Processing practices in different places. The Controller of personal information also may differ depending on where a data subject resides. For more information, please see the Privacy Rights and Choices section below or contact us at [email protected].

Please read this Privacy Statement carefully. IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY STATEMENT, THEN PLEASE DO NOT PROVIDE YOUR PERSONAL INFORMATION TO ACRONIS AND PLEASE DO NOT USE THE ACRONIS SERVICES.

1. WHERE AND WHEN THIS PRIVACY STATEMENT APPLIES.

When this Privacy Statement applies depends on your relationship with Acronis. This Privacy Statement applies:

When Acronis asks you to acknowledge it. For example:
- When you visit the Sites
- When you download Acronis’ white papers or other resources
- When you register for a free trial, event or webinar, create an account or complete a fill-in form
- When you contact Acronis Sales.
When Acronis collects data that includes personal information for Service Management Purposes.
When Acronis receives certain personal information about you from third parties, such as part of a marketing activity (e.g., when we receive information on potential leads) and similar functions.
As part of our marketing initiatives.
As part of a corporate transaction (e.g., merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy or other change of ownership or control by Acronis or any affiliate (in each case, whether in whole or in part) or part of another corporate transaction).
When you engage with Acronis through social media. (Please contact [email protected] if you have questions about whether this Privacy Statement applies to personal information connected with a social media platform.)

If you are a U.S. resident, please see our U.S. State Privacy Rights Notice. The U.S. State Privacy Rights Notice describes privacy practices and rights under U.S. state consumer privacy laws. The U.S. State Privacy Rights Notice serves as Acronis’s Notice at Collection for purposes of the California Consumer Privacy Act.

This Privacy Statement does not apply to Acronis’s current and former employees, independent contractors and job applicants. Please see our Recruitment Notice here. Please contact [email protected] for more information.

If a particular part of the Acronis Services or other Acronis website or service links to a different privacy policy, then that privacy policy – not this Privacy Statement – applies when they are inconsistent. (Please make sure to check those other privacy policies to learn how your personal information is Processed.)

Each Customer is responsible for ensuring that use of the Acronis Services complies with applicable law, including obtaining necessary consents from or providing notices to data subjects.

Acronis’s Processing of personal information also is described in our enterprise agreements (Customer Agreements) with managed service providers, distributors and other business Customers (Business Customers). If a provision of a Customer Agreement conflicts or otherwise is inconsistent with a provision of this Privacy Statement, then the term of the Customer Agreement will prevail but only to the extent of the conflict or inconsistency. In Customer Agreements, Acronis acts as a Processor except when Acronis Processes personal information for Service Management Purposes.

2. PERSONAL INFORMATION THAT ACRONIS PROCESSES

Acronis Processes personal information to provide and manage the Acronis Services, including for Service Management Purposes. The specific types of personal information that Acronis collects depend on how you interact with Acronis, the Acronis Services that you use and applicable law.

a. Information you voluntarily give to Acronis

We Process the personal information you choose to share with us. The personal information that you choose to give to us typically includes the following:

Personal information that Acronis collects directly from you	Why Acronis collects this personal information
Contact and account information Name, email address or other username, password, telephone number, postal address and similar contact information (including business card details), translated communications and transcripts, and other information that you choose to share.	• To set up and maintain accounts and create user profiles. • To provide Acronis Services to non-registered / guest users, e.g., uploading files to Acronis Cyber Files or if you are using Acronis Files Sync and Share and Notary service, Acronis also may receive your passport details by a qualified trust service provider. • To match users with Customer accounts and to customize users’ experience of the Acronis Services (in accordance with applicable data protection laws) • To attend one of Acronis’s webinars, marketing, training, sports and other events. • To allow you to download content or attend an event. • To communicate with you and request feedback about the Acronis Services. • To provide information that you request, such as when you download resources, participate in an event or sign up to receive emails from Acronis. • To promote the Acronis Services, such as through targeted advertising (in accordance with applicable data protection laws). • To send information that we think will interest you, which is sometimes personalized based on the information associated with your account (in accordance with applicable data protection laws). • To provide training, education and awareness raising activities. • To enable and communicate on environmental, social and governance initiatives and activities. • To monitor and enforce compliance with Acronis’s legal agreements. • To learn how users interact with our Acronis Services so that we can improve them and develop new features. • For research and innovation, including to do algorithmic data matching to segment and profile users (in accordance with applicable data protection laws). • Certain Acronis Services include AI-enabled features. Information processed through those features is described in Section 2(g) (Artificial Intelligence-Enabled Features).
Ordering and purchase related information, billing and delivery address, payment information and similar information necessary to complete a purchase.	• To complete a purchase. (Acronis does not collect complete payment card information; payment card information is collected and Processed by a third-party payment card processor.)
Information collected in surveys or focus groups	• To learn how users interact with the Acronis Services so that Acronis can improve them and develop new features. • To give Acronis insight and feedback into Acronis’ Services and Acronis’ other initiatives.
Information given during interactions with the customer service team, such as email address, Customer name and Service used	• For customer support and to troubleshoot problems. • To learn how users interact with the Acronis Services so that Acronis can improve them and develop new features. • Acronis may monitor or record these interactions for training purposes and for quality assurance. (If Acronis records the interaction, Acronis will provide a notice and obtain consent as required by applicable law.)
Information collected during interactions with the sales team, such as email address, Customer name and Service used	• With your consent, Acronis also may use an automated system offered to analyze communications between you and Acronis, which may include personal information. With your consent where required by applicable law, Acronis may use automated technologies to analyze business communications, engagement data, customer interactions, and related business communications for customer relationship management, sales effectiveness, customer support, marketing effectiveness, training, quality assurance, service improvement, and related business purposes. Such processing may be supported by third-party technology providers operating under contractual confidentiality, privacy, security, and data protection obligations.

b. Information automatically collected by Acronis’ Services

Acronis automatically collects information about how the Acronis Services are used, the computer or mobile device used to access the Acronis Services and other information automatically generated by use of the Acronis Services. This information is collected to deliver the Acronis Services, to analyze, measure the effectiveness of and improve the Acronis Services, to identify and track and record support, to ensure the security and integrity of the Acronis Services, to diagnose and fix technology problems, for billing and account management, for research and innovation and for similar business purposes in accordance with applicable law.

Some of this automatically-collected information is personal information under certain data protection laws. Acronis may link automatically-collected information with other personal information that Acronis handles.

Category of personal information that Acronis automatically collects	Types of personal information that Acronis automatically collects
Acronis Services usage information	• How a computer or device interacts with the Acronis Services, including the date and time the Acronis Services are accessed, search requests and results, mouse clicks and movements. • Date/time stamps associated with installations, updates and integrations. • How often the Acronis Services are used and in which circumstances and similar performance metrics. • Features used and the results of their operations and disabled features, such as specific webpages accessed and links clicked.
Service Management Purposes	Some of the personal information collected depends on the specific feature you use in our Acronis Services. For example: • Information about software installed on a computer or device, such as version and manufacturer information as part of providing vulnerability assessments and patch management functionality. • Names of potentially malicious files together with their hashes and full paths and blocked website URLs collected to provide antivirus and URL filtering functionality offered through certain of the Acronis Services. The malicious files also may be collected after analysis. • Email contents if identified as malicious as part of Acronis’s email security services. • Information about errors and the activity that preceded or caused the errors. • Systems and users’ activity logs with the respective date and content to provide you Acronis Services, such as endpoint detection and response and DLP functionality. • Information required to establish connection with the third-party integrations you have chosen to use, and information required to operate such integrations.
Device information Acronis automatically collects information from and about the computers and other devices used to access the Acronis Services.	• Hardware and software information. • Browser type. • Operating system version, device-specific settings and operating system settings, characteristics and configuration. • Device or component ID, type and architecture. • Information about ISP, wireless or mobile network connection, such as signal strength. • IP address and broad geographic device location (e.g., country or city-level location). • Data obtained from locally installed software or endpoints. • Identifiers associated with cookies or other technologies that may uniquely identify your device or browser.
Activity and audit logs, including server logs. Acronis’s servers automatically collect and store data in logs. Some logs include metadata which may contain personal information, such as names of files and folders to the extent they include personal information.	• Search queries and IP address. • Browser type and language. • Time zones, date and time of request and referral URL. • Certain necessary cookies that may identify a browser or account.
Information collected through cookies, pixels, web beacons and other similar technologies. (Where required by applicable laws and regulations, we will provide you with additional information (notice) and/or ask for your consent for such Processing.)	• Traffic and usage measurements, such as to monitor the traffic patterns from one webpage to another and to understand whether users visit the Acronis Services after seeing an online advertisement displayed on a third-party website or when you use the chatbot on our website to explore the Acronis Services, connect with Support, learn about free trials and other similar content. • Data about the third-party sites or services accessed before interacting with the Acronis Services, which is used to make advertising more relevant for users. • Interactions with our marketing communications, such as whether and when an Acronis email is opened to help Acronis measure the success of our email marketing campaign.

Acronis automatically collects some information using cookies, pixels, web beacons and similar technology tools (collectively, data collection technology). Please see Section 3 (Data Collection Technology) and the Acronis Cookie Notice for more information.

c. Acronis Customer Experience Programs

Acronis may collect certain personal information as part of the Acronis Customer Experience Programs. The information collected through the Acronis Customer Experience Programs helps Acronis provide more specific feedback and guidance about the Acronis Services and features operation and better analyze and improve the Acronis Services. For example, we track how certain features of the Acronis Services are used so that we understand whether and how they are used and whether they are working correctly. We also track how a new feature affects product stability and the protected workload (i.e., a protected end point, such as a computer or server).

Depending on the Acronis Services that you access and use, Acronis will ask for your consent where required by law. If you access and use the Acronis Services through a Customer Agreement, please contact the Business Customer for details.

d. Voice data

Certain Acronis Services may offer voice-enabled functionality, including voice commands, speech recognition, transcription, captioning, translation, accessibility features, customer support capabilities, meeting support tools, and other voice-based interactions. When you choose to use such functionality, Acronis may process voice recordings, audio streams, spoken content, transcripts, captions, translations, metadata associated with those interactions, and information necessary to provide the requested functionality.

Acronis may use automated speech recognition, machine translation, transcription, captioning, and other artificial intelligence-enabled technologies to:

convert spoken language into text;
translate voice communications, transcripts, captions, messages, documentation, support communications, and other content between languages;
facilitate multilingual communications among users, customers, partners, suppliers, support personnel, and other authorized participants;
improve accessibility and user experience;
provide customer support, training, education, webinars, events, and collaboration capabilities;
maintain, secure, troubleshoot, analyze, and improve the Acronis Services; and
comply with legal, regulatory, contractual, and operational requirements.

Depending on the service used, voice data may be converted into transcripts, captions, translated content, summaries, or other outputs. Acronis may use third-party technology providers to support these capabilities and requires such providers to process information pursuant to applicable contractual confidentiality, privacy, security, and data protection obligations.

Information processed through voice-enabled and translation features may be subject to automated processing, quality assurance activities, abuse-prevention controls, operational logging, security monitoring, and human review where reasonably necessary to investigate incidents, provide support, comply with applicable law, respond to legal obligations, or protect the rights, safety, security, or integrity of Acronis, its customers, users, partners, or services.

Users should not submit sensitive personal information, confidential information, or regulated data through voice-enabled features unless such information is necessary for the intended purpose and permitted under applicable law, applicable Customer Agreements, and relevant organizational policies.

Voice-enabled and translation features may generate transcripts, captions, translations, summaries, or other outputs that are incomplete, inaccurate, or contextually imperfect. Users should independently review and validate such outputs before relying upon them for legal, financial, employment, healthcare, regulatory, safety-critical, or other significant decisions.

Where required by applicable law, Acronis will provide additional notice, obtain consent, or offer choices regarding the processing of voice data, recordings, transcripts, captions, translations, or related information.

Some of the Acronis Services offer voice control options. If you use the voice control options, the Acronis Services allow you to request permission to activate a Google Chrome browser extension (see https://chrome.google.com/webstore/category/extensions for more information). This extension captures voice data using your device microphone and transfers the voice data to Google for Processing. Acronis receives only a text version of voice commands, not voice data. Acronis uses voice commands text for command execution. Since your voice data are Processed by Google, how Google Processes your voice data depends on your Google account settings and preferences. To learn more about how Google Processes your voice data, please carefully read Google’s Privacy Policy & Terms currently available at https://policies.google.com/privacy.

e. Information collected from third parties

We may receive information about you from resellers, distributors, business partners, and publicly available resources. We may also receive information about you from the third parties that help us operate the Acronis Services, such as for fraud detection, digital forensics, marketing services (such as when we acquire information on potential leads) and similar functions. Acronis also relies on third-party providers for obtaining broad geographic device location based on IP addresses. When you allow it, Acronis may receive information associated with your use of any Mobile App.

We may receive information from third parties that provide integrations with Acronis Services which you may choose to use. In such cases, we Process only the personal information necessary for the integration and in accordance with applicable law.

f. Other information with your consent

Acronis does not intentionally seek to collect Sensitive Personal Information unless such collection is necessary for a specific product feature, service, legal obligation, business purpose disclosed at the time of collection, or otherwise permitted by applicable law.

Sensitive Personal Information includes categories of information designated as sensitive, special category, highly sensitive, confidential, protected, or otherwise subject to enhanced legal protections under applicable law. Depending upon applicable law, this may include information concerning racial or ethnic origin, religious or philosophical beliefs, trade union membership, genetic information, biometric information, health information, precise geolocation, citizenship or immigration status, government-issued identification information, financial account credentials, sexual orientation, information concerning children, and other similarly protected categories of information.

Unless specifically requested by Acronis, users should not submit Sensitive Personal Information through the Acronis Services.

If a user voluntarily provides Sensitive Personal Information that Acronis has not requested, Acronis may process such information only as necessary to respond to the communication, provide requested services, comply with legal obligations, establish, exercise, or defend legal claims, protect the security or integrity of the Acronis Services, or as otherwise permitted by applicable law.

Where Acronis intentionally collects or otherwise processes Sensitive Personal Information as a Controller, Acronis will do so in accordance with applicable law and will provide any required notices, obtain any required consents and implement any safeguards required by applicable law.

Note: Acronis may Process Sensitive Personal Information provided by our Business Customers that are using the Acronis Services (e.g., as part of their backups in content data). Acronis Processes that information as a Processor, not a Controller, subject to Customer Agreements.

g. Artificial Intelligence Features

Certain Acronis Services may include artificial intelligence ("AI")-enabled features, including conversational assistance, search, analytics, automation, recommendations, translation, transcription, captioning, summarization, multilingual communications, and other related functionality. Acronis may use AI-enabled technologies to facilitate communications, accessibility, support, collaboration, security operations, product functionality, and other authorized business activities associated with the Acronis Services. When users interact with AI-enabled features, Acronis may process:

prompts, questions, commands, and requests submitted by users;
files, documents, communications, logs, metadata, and other content provided by users;
account, configuration, operational, and usage information associated with AI-enabled feature use; and
outputs generated through such AI-enabled features.

Acronis may use third-party technology providers to support AI-enabled functionality. Acronis requires such providers to process information pursuant to applicable contractual confidentiality, privacy, security, and data protection obligations. Information processed through AI-enabled features may be used to:

provide requested functionality and services;
maintain, secure, monitor, support, troubleshoot, and improve the operation of the Acronis Services;
improve the functionality, reliability, effectiveness, security, accessibility, and operational performance of AI-enabled features and associated Acronis Services;
prevent fraud, misuse, abuse, security threats, and unlawful activity;
comply with legal, regulatory, contractual, and operational requirements; and
protect the rights, safety, property, security, and integrity of Acronis, its customers, users, partners, suppliers, and services.

Unless otherwise disclosed at the time of collection or in applicable service documentation, Acronis does not use customer-submitted prompts, content, files, communications, or outputs processed through AI-enabled features to train third-party foundation models.

Information processed through AI-enabled features may be subject to automated processing, operational logging, quality assurance activities, safety monitoring, abuse-prevention controls, security review, and related service management activities. Human review may occur where reasonably necessary to investigate incidents, provide support, address security concerns, comply with applicable law, fulfill legal obligations, or protect the security and integrity of the Acronis Services. Human review is limited to authorized personnel and service providers with a legitimate business need and is conducted subject to applicable confidentiality obligations, access controls, security safeguards, audit requirements, and data protection obligations. Acronis does not permit unrestricted access to user content for AI review purposes.

Users should not submit confidential information, Sensitive Personal Information, regulated data, or other restricted information to AI-enabled features unless such information is necessary for the intended purpose and permitted under applicable law, Customer Agreements, and applicable organizational policies.

AI-enabled features are intended to assist users and support decision-making processes. Unless expressly stated otherwise, AI-enabled functionality is not intended to replace human judgment, professional advice, or independent review.

AI-generated recommendations, analyses, summaries, translations, transcriptions, captions, search results, and other outputs may contain inaccuracies, omissions, contextual errors, bias, or incomplete information. Users and organizations remain responsible for evaluating outputs, making decisions, and determining whether AI-generated content is appropriate for their intended use. AI-generated outputs should not be relied upon as the sole basis for legal, financial, employment, healthcare, regulatory, safety-critical, or other significant decisions.

Where required by applicable law, Acronis will provide additional notice, obtain consent, offer choices, or implement additional safeguards regarding AI-enabled processing activities.

3. DATA COLLECTION TECHNOLOGY

Cookies are small text files that are sent to or accessed from your web browser or your computer's hard drive. To learn more about cookies and other data collection technologies generally, visit www.allaboutcookies.org. Acronis’s Cookie Notice contains a detailed description of the specific cookies and other data collection technology used in the Acronis Services, including their purpose and expiration period. You can control and manage cookies using the Acronis Privacy Preference Center.

The Acronis Services use Google Analytics and Enhanced Conversions, which are provided by Google.

Google Analytics: Google Analytics offers a suite of tools that helps Acronis collect and analyze data related to use and performance of certain Acronis Services so that Acronis better understands users’ behavior and interactions with the Acronis Services. Acronis uses this information to help improve Acronis’s marketing campaigns and targeted advertising (which Google sometimes refers to as “remarketing”). Acronis uses Google Analytics 4. For more details on Google Analytics 4, please visit https://support.google.com/analytics/answer/10089681?sjid=9895871112548649079-EU.

Google Tag Manager allows Acronis to deploy technologies like “conversion” pixels that record certain user actions (or “events”), such as "Whitepaper Downloaded" or "Product Purchased" based on the webpage visited or button clicked.

Targeted ad campaign tracking data means URL parameters added to a web address that include the campaign name, source, medium and a coded description of the type of ad that was run. Conversion events are recorded when a click is made or a page viewed, e.g., if a user clicks a link in a Google Search and makes a purchase on the linked page, Google Tag Manager, Google Analytics and the Google conversion pixel work together to show in Google Analytics that a campaign click resulted in a purchase. Acronis uses Google’s IP masking.

On behalf of Acronis, Google will use this information in Google Analytics to compile reports for Acronis and third parties that help operate and provide the Acronis Services.

Google Consent Mode: Acronis applies Google Consent Mode, Advanced tier. Consent mode communicates users’ cookie or app identifier consent status to Google. Tags adjust their behavior and respect users’ choices. For more information on Google Consent mode, please visit Google’s dedicated page: https://support.google.com/google-ads/answer/10000067?hl=en.

Enhanced Conversions: Enhanced conversions is a feature used by Acronis to improve the accuracy of our conversion measurements for enabling sales and marketing activities. It supplements existing conversion tags by sending hashed first-party conversion data from our websites to Google in a privacy safe way. Acronis is capturing conversion data from our website – e.g., email, hash it, and send it to Google in a hashed form, so that we receive enhanced conversion insights. The feature uses a secure one-way hashing algorithm called SHA-256. For more information on enhanced conversions, please visit https://support.google.com/google-ads/answer/9888656?hl=en.

Certain Acronis Services also may embed videos from YouTube (a Google company) by framing. This means that, after you click the button to play a YouTube video through the Acronis Services, a connection between the Acronis Services and the YouTube servers is established. Then, an HTML link provided by YouTube is inserted into the code of the Acronis Services to create a playback frame. The video stored on the YouTube servers is then played by the frame in the Acronis Services. YouTube also receives information that informs YouTube that you are currently using the Acronis Services: your IP address, browser information, the operating system and settings of the device you are using, the URL of the current web page, previously-visited web pages if you have followed a link, and the videos you watched. If you are logged into your YouTube account, the information may be associated with your YouTube user profile. You can prevent this association by logging out of your YouTube account before using the Acronis Services and deleting the corresponding cookies.

For more information about how Google collects, uses and shares your information, please visit: https://www.google.com/policies/privacy/partners/ or Google’s Privacy Policy: https://policies.google.com/privacy.

For more information about how Google uses cookies in advertising, please visit Google’s Advertising (https://policies.google.com/technologies/ads).

To prevent Google Analytics from using your data, you can install Google’s opt-out browser add-on (https://tools.google.com/dlpage/gaoptout).

To opt out of ads on Google that are targeted to your interests, use your Google Ads settings (https://adssettings.google.com/).

If you are located in the EEA, Switzerland or UK, to learn more about personal information transfers by Google from the EEA, Switzerland or UK to the U.S., please review Google’s Data Privacy Framework Certification.

Do Not Track Signals

Some web browsers (including Safari, Internet Explorer, Firefox, and Chrome) incorporate a "Do Not Track" (DNT) or similar feature that signals to websites that a user does not want to have his or her online activity and behavior tracked. If a website that responds to a particular DNT signal receives the DNT signal, the browser can block that website from collecting certain personal information about the browser’s user. Not all browsers offer a DNT option, and DNT signals are not yet uniform. For this reason, many website operators, including Acronis, do not respond to DNT signals universally or if not required by law.

4. WHY ACRONIS PROCESSES PERSONAL INFORMATION

Why Acronis Processes personal information depends on your relationship with Acronis and the nature of the Acronis Services that you use. Personal information is Processed for the following purposes:

To verify identity and eligibility and set up user accounts.
To operate the Acronis Services, such as personalizing and improving user experience; notifying users about updates and new versions, including via digital adoption platforms; completing transactions; providing training and customer service, and responding to issues and inquiries.
To analyze, improve and upgrade the functionality of the Acronis Services and develop new features, including through the Acronis Customer Experience Programs and other quality assurance and analysis programs.
For data analytics, research and product development that enable us to better understand our users and offer innovations for them.
To create anonymized or pseudonymized data that are used as permitted by contract and law.
To provide access to online or offline events, content and blogs, forums and similar online and interactive experiences.
To promote Acronis’s products and services, including through targeted advertising (also sometimes referred to as personalized or interest-based advertising) based on information generated by a user’s online activity, such as visiting websites that contain our advertising partners’ ads or cookies, some of which are based on geo-location or based on business card details, explicitly provided to Acronis.
To manage our contractual relationships and review compliance with applicable agreements and policies.
To monitor the security and integrity of the Acronis Services and protect them from unauthorized use.
or detection and prevention against fraud and other abusive and unauthorized use of the Acronis Services.
To protect our rights and property.
For risk management and compliance with laws applicable to Acronis.
For education and awareness raising activities, such as the Acronis CyberFit Academy.
For marketing, advertising, personalization, audience measurement, analytics, and profiling activities, Acronis will rely on consent where required by applicable law. Where permitted by applicable law, Acronis may rely on legitimate interests to better understand customer needs, improve user experiences, personalize communications, measure campaign effectiveness, and support its business operations.
To facilitate multilingual communications, accessibility, translation, transcription, captioning, customer support, training, education, collaboration, and related business activities through automated and AI-enabled technologies.
Acronis may use personal information to better understand user interests, improve the Acronis Services, personalize communications and user experiences, measure campaign effectiveness, perform analytics, and support lawful marketing activities.
Where required by applicable law, Acronis will obtain consent before conducting targeted advertising, personalization, analytics, cookie-based tracking, profiling, or similar processing activities that require consent.
Where permitted by applicable law, Acronis may rely on legitimate interests to improve services, understand customer needs, evaluate the effectiveness of communications and products, prevent fraud and abuse, and support its legitimate business operations.
Users may object to, restrict, opt out of, or withdraw consent for certain personalization, profiling, marketing, and advertising activities as described in this Privacy Statement.

Acronis may link personal information that we hold with personal information that we receive from third parties and with personal information available in publicly available databases. Acronis also may anonymize personal information in accordance with applicable laws and use the anonymized data for testing, development and other lawful business purposes.

5. HOW AND WHY ACRONIS SHARES PERSONAL INFORMATION

Acronis shares personal information, subject to this Privacy Statement for various operational and legal purposes depending on the Acronis Services used and context. This includes the following categories of recipients:

With Acronis affiliates: Acronis shares personal information with its affiliates that Process personal information for purposes consistent with this Privacy Statement or notified at the time of collection. For example, Acronis may share contact information concerning event attendees with our affiliates to maintain accurate marketing data. Access to personal information is restricted and granted on a need-to-know basis. Sharing of personal information is subject to the appropriate intracompany arrangements, policies and security safeguards.
With suppliers: Acronis shares information with suppliers to enable them to perform services for Acronis, such as customer service, data analytics, business intelligence, digital adoption, ML, AI and marketing services that, from time-to-time, supplement personal information that we already have, ecommerce operations, surveys and research and security testing. Acronis requires that any supplier with which we share personal information agrees to safeguard it.
With resellers, distributors, channel and other partners: We share personal information with our resellers and other third parties that promote, resell, distribute and/or white label the Acronis Services and receive personal information in connection with doing so.
With professional advisors: We share personal information with lawyers, accountants, insurers and other professional advisers as needed for them to provide their advice.
As part of a corporate transaction: We may share and transfer personal information if we are involved in a merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy or other change of ownership or control by Acronis or any affiliate (in each case, whether in whole or in part). Acronis will take reasonable steps to ensure that any successor entity processes personal information in accordance with applicable law and, where practicable, in a manner consistent with the commitments described in this Privacy Statement.
When required by law: Acronis may disclose personal information when required to do so by applicable law, regulation, legal process, court order, governmental request, or other legally binding obligation, or when Acronis reasonably believes disclosure is necessary to:
- comply with applicable law;
- protect the rights, safety, security, property, or operations of Acronis, its customers, users, suppliers, partners, or the public;
- prevent, investigate, or address suspected fraud, abuse, security incidents, unlawful activity, or violations of applicable agreements;
- establish, exercise, or defend legal claims; or
- respond to emergencies.
Where legally permitted and reasonably practicable, Acronis will seek to limit the scope of any disclosure and provide notice of the request.
To protect legal rights: We also share information (i) as necessary to protect legal rights of Acronis, users, Business Customers, suppliers, business partners or other interested parties; (ii) if disclosure would mitigate Acronis’s liability in an actual or threatened lawsuit; (iii) to pursue available remedies or limit damages; (iv) to enforce our agreements; and (v) to respond to an emergency.
Other third parties with your permission, including third parties that offer integrations with the Acronis Services.

Acronis may aggregate, anonymize, de-identify, or pseudonymize information collected through the Acronis Services. Where information has been anonymized such that it can no longer reasonably identify or be associated with an individual, household, device, or user, Acronis may use and share such information for lawful business purposes in accordance with applicable law. Pseudonymized information remains subject to applicable data protection requirements and may continue to constitute personal information under certain laws.

6. LEGAL BASIS FOR PROCESSING PERSONAL INFORMATION

In some jurisdictions, Processing of personal information requires a legal basis. The legal bases on which Acronis relies for its lawful Processing of personal information vary depending on the context in which the personal information is Processed, the purpose for the Processing and applicable law.

The legal bases on which Acronis relies are:

Performance of the contract between Acronis and a user or Customer. We rely on this legal basis to Process contact and payment details, to permit access to the Acronis Services, to provide customer support, to manage a Customer Agreement; to perform our obligations or exercise our rights or to manage our contractual relationship with you.
Processing is in our legitimate business interests. We also Process personal information when the Processing is in the legitimate interests of Acronis or a third party and not overridden by privacy or other fundamental rights and freedoms. Legitimate interests include conducting and organizing our business operation, such as marketing of the Acronis Services (if permitted by applicable laws) and other Acronis products, protecting Acronis’s legal interests, securing Acronis’s IT platform or addressing the requirements of Customers and users. For example, we may Process personal information to understand your use of the Sites and to improve them; to authorize and manage access to certain Acronis Services; to respond to queries; to combine contact information together with information about an event you attended or content you accessed to enhance our marketing and business intelligence; to customize our interactions with you; to promote the Acronis Services and other Acronis products; and to operate, maintain and secure the Acronis Services for users and Customers. We also may have other legitimate interests and, if appropriate, we will make them clear at the relevant time.
Processing based on consent. We may ask for consent to Process personal information for certain reasons, such as for direct marketing. You may withdraw your consent at any time by contacting us at [email protected] or by navigating through the particular Settings menu, e.g., by clicking our “Unsubscribe” link at the bottom of promotional emails. Withdrawing consent does not affect the lawfulness of Processing based on consent before its withdrawal.
Processing for a legal obligation. In some cases, Acronis Processes personal information based on a legal obligation. For example, Acronis must Process personal information to comply with a court order or subpoena or applicable anti-money laundering laws may require Acronis or its agent to collect and report certain information. Acronis will notify you when providing your personal information is mandatory and inform you on the possible consequences if you do not provide your personal information.

If you have questions about or need further information concerning the legal basis for Acronis’s Processing of personal information, please contact [email protected].

7. PROTECTION AND RETENTION OF PERSONAL INFORMATION

We take precautions intended to help protect personal information that we Process. We use a variety of measures to protect personal information from unauthorized access and use. Our safeguards are designed to provide a level of security appropriate to the risk of Processing your personal information and include (as applicable) measures to ensure the ongoing confidentiality, integrity, availability, and resilience of Processing systems and a procedure for regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures for ensuring the security of the Processing of personal information.

For more information on Acronis’s security measures, please check https://www.acronis.com/security/cloud/data-processing-terms/ .

Acronis also expects that Business Customers and users will use appropriate security measures to protect information. Acronis may suspend your use of all or part of the Acronis Services without notice if we suspect or detect any breach of security.

If you believe that information you provided to us is no longer secure, please notify us immediately at [email protected]. If we become aware of an incident that affects the security of your personal information, we will provide you with notice as required by applicable law. When permitted by applicable law, Acronis will provide this notice to you through the email address associated with your account.

How long Acronis retains specific personal information varies depending on the purpose for its collection, the Acronis Services used, data categories and the context of Acronis’s relationship with Business Customers and users. Acronis retains personal information to provide the Acronis Services, to comply with legal obligations (such as for tax and accounting purposes), to enforce our agreements, to resolve disputes, to fulfill the purposes described in this Privacy Statement, and as otherwise disclosed to you. Acronis will delete personal information in accordance with applicable law.

In some circumstances, users may request deletion of personal information. Acronis evaluates such requests and responds in accordance with applicable law, contractual commitments, legal obligations, security requirements, legitimate business needs, applicable retention schedules, and the nature of the Acronis Services involved. Where deletion is not immediately possible, including where information must be retained for legal, regulatory, security, accounting, fraud prevention, business continuity, dispute resolution, or evidentiary purposes, Acronis may retain the information until the applicable retention obligation or legitimate purpose no longer applies.

Acronis retains personal information only for as long as necessary to fulfill the purposes described in this Privacy Statement, comply with legal obligations, resolve disputes, enforce agreements, protect the security and integrity of the Acronis Services, and support legitimate business operations.

Retention periods vary depending on the nature of the information, the services involved, contractual requirements, legal obligations, and legitimate business needs. Acronis’s retention practices may apply to voice recordings, transcripts, captions, translated content, and related metadata generated through voice-enabled or AI-enabled features.

Factors used to determine retention periods include:

the duration of the customer, partner, supplier, or user relationship;
the period required to provide requested products and services;
applicable legal, regulatory, tax, accounting, and recordkeeping requirements;
applicable statutes of limitation and legal defense requirements;
cybersecurity, fraud prevention, business continuity, and incident response requirements; and
whether information has been anonymized, aggregated, or otherwise de-identified.

When personal information is no longer required, Acronis will securely delete, anonymize, aggregate, or otherwise dispose of such information in accordance with applicable law and established retention practices.

8. CHILDREN’S PERSONAL INFORMATION

The Acronis Services are not directed to, designed for, or intentionally offered to individuals under the age at which consent for personal information processing is required under applicable law. Acronis does not knowingly collect personal information directly from children except where permitted by applicable law or authorized by a parent, guardian, educational institution, employer, or other legally authorized entity. If Acronis becomes aware that personal information has been collected directly from a child in a manner inconsistent with this Privacy Statement or applicable law, Acronis will take reasonable steps to delete or otherwise address the information in accordance with applicable legal requirements.

9. CHANGES TO THIS PRIVACY STATEMENT

We may amend this Privacy Statement to reflect new features of the Acronis Services and other business changes and for compliance with applicable laws. When Acronis updates this Privacy Statement, Acronis will post the updated version and change the Effective Date above. Acronis also will take appropriate measures to provide notice to you in advance of changes that we believe reduce or materially change your privacy rights so that you have an opportunity to review the revised Privacy Statement before it applies to your personal information. If your consent is required by applicable data protection laws, Acronis also will obtain your consent to changes before the revised Privacy Statement applies to your personal information. Otherwise, your continued use of the Acronis Services after the Effective Date (new Customers) and/or the end of the notice period described above (current Customers) constitutes acceptance of the amended Privacy Statement. As of the Effective Date, the amended Privacy Statement supersedes all previous versions.

10. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION

Use of the Acronis Services sometimes involves transfers to and Processing of personal information in a jurisdiction other than your place of habitual residence. These other jurisdictions may have data protection laws that are different and, in some cases, not as protective.

As a multi-national company, Acronis may transfer personal information to or from any of the jurisdictions in which we do business. We also allow access to personal information to individuals outside of the jurisdiction in which we collected that personal information, such as when Acronis personnel access your personal information to provide customer support. A list of our locations is available here.

Acronis may transfer personal information to our subprocessors – both Acronis affiliate subprocessors and third-party subprocessors - located around the world. Subprocessors are listed here.

To protect personal information subject to a cross-border transfer, Acronis has implemented technical and administrative safeguards that protect personal information in accordance with this Privacy Statement and applicable data protection laws, including entering into legally binding agreements that accord at least the same or comparable standards of protection to transferred personal information as in its originating jurisdiction as required by applicable data protection laws.

For transfers from the EEA, Switzerland or UK by Acronis to its subprocessors, Acronis uses Standard Contractual Clauses (with supplements in accordance with Switzerland’s Federal Act on Data Protection and the UK’s Data Protection Act 2018) (collectively, Standard Contractual Clauses). Acronis also transfers personal information using the lawful method directed by the relevant Customer. For cross-border transfers of personal information from the EEA, Switzerland or UK to the United States, Acronis also complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Our current DPF Privacy Policy is available here. Acronis’s DPF certification with the DPF is available here.

Please contact us at [email protected] to request a copy of the safeguards applicable to transfers of your personal information.

In some cases, use of the Acronis Services may involve international transfers of personal information which Acronis does not control, for example, when you enable a third-party integration with our Acronis Services. In such cases, you are responsible for evaluating and confirming the legality of the cross-border transfers.

In connection with international transfers, Acronis applies technical, organizational, contractual, and administrative safeguards appropriate to the nature of the information and the transfer involved. Such safeguards may include transfer impact assessments, contractual transfer mechanisms, encryption, access controls, security monitoring, employee confidentiality obligations, data minimization measures, Standard Contractual Clauses, Data Privacy Framework participation where applicable, and other supplementary measures required by applicable law.

11. PRIVACY RIGHTS AND CHOICES

You can make choices about Acronis’s Processing of your personal information. You can exercise your privacy rights by contacting Acronis as described in this section or using various tools that Acronis makes available. In some cases, your ability to access or control your personal information is limited by applicable law.

Mobile Device Preferences

Mobile operating systems and app platforms (e.g., Google Play, App Store) have permission settings for specific types of mobile device data and notifications, such as for geo-location services and push notifications. Your settings in your mobile device’s operating system allow you consent to or deny certain information collection and/or push notifications. Certain Mobile Apps also may have settings that allow you to change permissions and push notification settings.

You can stop all information collection from a Mobile App by uninstalling it. If you uninstall the Mobile App, please also consider checking your operating system’s settings to confirm that the unique identifier and other activity associated with your use of the Mobile App is deleted from your mobile device.

Cookie Preferences

You can control and manage cookies and other data collection technology using the Acronis Privacy Preference Center (if Acronis makes it available in your region) or in your browser settings. If you delete or block cookies directly in your browser, then you may need to reset your preferences and some functionality may no longer be available, including the ability to opt-out and mange cookies via the Privacy Preference Center which uses cookie for keeping your preferences.

Opting Out of Marketing Emails and Text Messages

To stop receiving promotional emails from Acronis, please click the “Unsubscribe” link at the bottom of the email. After you opt out, Acronis may send you non-promotional communications, such as receipts for purchases or administrative information about your account.

To stop receiving promotional text messages (SMS or MMS), please send a text message back to Acronis indicating that you wish to stop receiving promotional text messages from us.

Data Controller

The Controller for personal information collected pursuant to this Privacy Statement varies depending on where you reside. Unless a different Controller is identified in the location-specific sections that applies to you, the Controller is Acronis International GmbH, Rheinweg 9, 8200 Schaffhausen, Switzerland.

A different Acronis entity also may act as Controller of your personal information when stated in a separate notice made available to you or in a Customer Agreement.

Privacy Rights and Choices By Location

Following is information about privacy rights and choices for specific locations. Please carefully review the sections that apply to you.

If you are located in Argentina

To the extent provided under the privacy laws applicable to you, you have the following rights with respect to your personal information:

Right to receive information about the Processing of your personal information
Right to request access to the personal information Acronis holds about you
Right to request correction or update of your personal information
Right to request erasure or deletion of your personal information

You can exercise your privacy rights by submitting your request via email to [email protected]

In your request, please make clear the personal information to which your request relates. Please also attach a copy of your National Identity Document. For your protection, we may verify your identity and geographic residency before fulfilling your request. Legal Representatives must attach the documentation that proves the validity of the legal representation. We will comply with your request as soon as reasonably practicable.

If you are located in Australia

To the extent provided under the privacy laws applicable to you, you have the following rights with respect to your personal information:

Right to know why your personal information is being collected, including how it will be used and to whom it will be disclosed
Right to request to refrain from identifying yourself, or to use a pseudonym
Right to request access to the personal information Acronis holds about you, free of charge
Right to correct inaccurate personal information Acronis holds about you
Right to object to direct marketing
Right to submit a complaint

You can exercise your privacy rights by submitting your request via email to [email protected].

Data Protection Regulator:

You have the right to lodge a complaint with the Australian Information Commissioner, if you first submit a complaint to Acronis and your complaint is not resolved. You may submit a complaint to the Australian Information Commissioner in writing:

Online: the privacy complaint form

In a letter to: Office of the Australian Information Commissioner, GPO Box 5288, Sydney NSW 2001

By fax to: +61 2 6123 5145

If you are located in Brazil

To the extent provided under the privacy laws applicable to you, you have the following rights with respect to your personal information:

Right to obtain information about the Processing of your personal information, including information about the entities with which your personal information was shared and information about the possibility of denying consent for Processing
Right to confirm the Processing of your personal information
Right to request access to your personal information
Right to correct your inaccurate personal information
Right to request anonymization or deletion of your personal information
Right to portability of your personal information
Right to object to and revoke consent for Processing of your personal information
Right to request a review of decisions made solely based on automated Processing of personal information affecting your interests, if Acronis engages in such Processing in the future

You can exercise your privacy rights by submitting your request via email to [email protected].

In your request, please make clear the personal information to which your request relates. For your protection, we may verify your identity and geographic residency before fulfilling your request. We will comply with your request as soon as reasonably practicable.

You may contact our Data Protection Office Team at [email protected].

Data Protection Regulator:

Autoridade Nacional de Proteção de Dados

https://www.gov.br/anpd/pt-br

If you are located in Canada

To the extent provided under the privacy laws applicable to you, you have the following rights with respect to your personal information:

Right to request information about the personal information Acronis holds about you
Right to request access to the personal information Acronis holds about you
Right to request correction or completion of your personal information
Right to withdraw consent to the Processing of your personal information
Right to lodge a complaint about the Processing of your personal information with the Office of the Privacy Commissioner of Canada (Data Protection Regulator)

Residents of Quebec: The data protection officer can be contacted by email at [email protected].

You can exercise your privacy rights by submitting your request via email to [email protected].

If you are located in EEA, Switzerland or UK

For personal information for which Acronis is the Controller, please contact our Data Protection Office Team at [email protected] to submit a request about your personal information. We may not allow you to review certain data for legal, security or other reasons.

Acronis’s EU representative according to Art. 27 GDPR is Acronis Germany GmbH, Landsberger Straße 110, 80339 München, Germany. Acronis’s EU representative can be contacted at [email protected].

Specifically, you have the following rights with respect to your personal information:

Right to access personal information that Acronis holds about you. If you are a registered user, you can review certain personal information that you provided to Acronis by logging in to your account. If you are not a registered user, Acronis may take reasonable steps to verify your identity before providing access to personal information.
Right to receive a copy of your personal information: If you are a registered user, you can download certain personal information that you provided to Acronis by logging in to your account. If you are not a registered user, Acronis may take reasonable steps to verify your identity before providing your personal information to you.
Right to correct or delete personal information, to restrict or object to some of our Processing of your personal information. The easiest way to correct or delete certain account-related personal information that you have provided to the Acronis Services is to log in to your account and enter the necessary changes in your profile settings.
Right to data portability. This means you have the right to receive your personal information in a structured, commonly used and machine-readable format and have it transmitted to another Controller provided that the Processing is based on your respective consent or to execute a contractual relationship or a relationship prior to entering into contract with you.
Right to withdraw consent in certain circumstances. When Acronis Processes your personal information based on your consent, you have the right to withdraw your consent by contacting us at [email protected] or by navigating through the Settings menu. Withdrawing consent does not affect the lawfulness of Acronis’s Processing before you withdrew your consent and also will not change Processing that is based on a basis other than your consent.

At the time of this Privacy Statement, Acronis does not engage in solely automated decision-making that produces legal or similarly significant effects on individuals in circumstances where applicable law would provide additional rights, protections, explanations, review rights, or safeguards. Certain Acronis Services may include AI-enabled functionality that assists users in generating information, recommendations, summaries, analyses, translations, transcriptions, or other outputs. Such functionality is intended to support user decision-making and should not be treated as the sole basis for significant legal, financial, employment, healthcare, regulatory, safety-critical, or other important decisions.

If you wish to exercise your privacy rights, in your request, please make clear what personal information you would like to have changed or to what Processing you object, whether you would like to have your personal information deleted or what other limitations you would like to put on Acronis’s use of your personal information. We will respond to your request as soon as reasonably practicable and in accordance with data protection regulations. You can exercise your privacy rights by submitting your request via email to [email protected].

Your privacy rights are not absolute and do not apply in every circumstance. We may limit or reject certain requests when the applicable requires or allows us to do so, such as when a request is unlawful, duplicative or may infringe on privacy rights of a third party or if we are not able to verify your identity.

We often need to retain certain data for recordkeeping purposes and/or to complete any transaction that you began prior to requesting a change or deletion (e.g., when you make a purchase, you may not be able to change or delete the personal information provided until after the completion of such purchase). Our databases and other records may have residual data which will not be removed.

Data Protection Regulator (EU):

You have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how we Process your personal information. To exercise such right and lodge a complaint, you can contact the supervisory authority competent for your place of residence or the one competent for our place of business. Please see https://www.edpb.europa.eu/about-edpb/our-members_en.

Data Protection Regulator (UK):

If you are a resident of the United Kingdom, Acronis is registered at the Information Commissioner’s Office (ICO) (https://ico.org.uk/ESDWebPages/Search). You have the right to lodge a complaint to ICO. For more details, please see https://ico.org.uk/make-a-complaint/.

Data Protection Regulator (CH):

If you are a resident of Switzerland, the contact information for the data protection authority is:

Office of the Federal Data Protection and Information Commissioner (FDPIC)

Feldeggweg 1

CH – 3003 Berne

Telefon: +41 (0)58 462 43 95 (Mon.-Fri., 10-12 am)

Telefax: +41 (0)58 465 99 96

https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt.html

If you are located in India

Current laws in India i.e., the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011) regulates only a sub-set of personal information categorized as “Sensitive Personal Data or Information.”

“Sensitive Personal Data or Information” is defined as personal information that consists of (i) passwords; (ii) financial information; (iii) physical, physiological and mental health conditions; (iv) sexual orientation; (v) medical records and history, (vi) biometric information, and; (vii) any details relating to the information as received by a body corporate for providing service or for Processing/ storing under a lawful contract.

For all residents of India, the term personal information as defined in this Privacy Statement should accordingly be read to mean Sensitive Personal Data or Information (as set out above) till the promulgation of the Digital Personal Data Protection Act 2023, which, once notified shall eclipse the extant laws set out above, and regulate all classes of personal information as defined in this Privacy Statement.

Data Controller:

Acronis India Private Limited

Laxmi Towers, C-25 G block, Behind ICICI Bank Ltd.,

Bandra (East)

Bandra, Mumbai-400051, Maharashtra, India

If you are located in Japan

To the extent provided under the privacy laws applicable to you, you have the following rights with respect to your personal information:

Right to request access to the personal information Acronis holds on you and information about the Processing of your personal information
Right to request copies of your personal information
Right to correct or supplement your inaccurate personal information
Right to request erasure of your personal information
Right to object to certain Processing of your personal information
Right to lodge a complaint with the Personal Information Protection Commission of Japan

Acronis shares personal information collected from or about residents of Japan or otherwise subject to the privacy laws of Japan under the following terms:

All personal information described in this Privacy Statement is used jointly (within the meaning of the privacy laws of Japan).
The joint users are Acronis International GmbH, Acronis Japan KK, Roppongi Hills Mori Tower 8/F 10-1 Roppongi 6-Chrome Minato-ku Tokyo, Japan 106-6108 and the Acronis Group Subprocessors, as described in https://www.acronis.com/compliance/subprocessors/. The purpose of joint use of personal information is described above in this Privacy Statement.
Acronis International GmbH is responsible for the management of personal information under this Privacy Statement.

You can exercise your privacy rights by submitting your request via email to [email protected].

Data Protection Regulator:

You have the right to lodge a complaint with the Personal Information Protection Commission of Japan. You may submit a complaint to the Personal Information Protection Commission of Japan here.

If you are located in New Zealand

To the extent provided under the privacy laws applicable to you, you have the following rights with respect to your personal information:

Right to obtain confirmation of whether Acronis is Processing your personal information
Right to request access to the personal information Acronis holds on you
Right to correct your inaccurate personal information
Right to request erasure of your personal information
Right to lodge a complaint with the New Zealand Privacy Commissioner

You can exercise your privacy rights by submitting your request via email to [email protected].

Data Protection Regulator:

You have the right to lodge a complaint with the New Zealand Privacy Commissioner: https://www.privacy.org.nz/your-rights/making-a-complaint-to-the-privacy-commissioner/.

If you are located in Singapore

To the extent provided under the privacy laws applicable to you, you have the following rights with respect to your personal information:

Right to request access to the personal information Acronis holds on you
Right to obtain information about the Processing of your personal information
Right to correct or supplement your inaccurate personal information
Right to withdraw your consent for the Processing of your personal information

You may have the right to opt out of receiving promotional text messages (SMS/MMS) by registering your Singapore telephone number with the national Do Not Call registry at https://www.dnc.gov.sg/index.html. We will only send promotional texts to a Singapore number if we reasonably believe that we have obtained your consent to do so (but you will always have the right to opt out at any time). Please be reminded that the Singapore Do Not Call registry requirements do not apply to business-to-business communications, email messages, and/or texts that are of an informational or transactional nature.

For any data protection related queries or requests, you may contact our Data Protection Office Team at [email protected].

If you are located in South Africa

To the extent provided under the privacy laws applicable to you, you have the right to make the following requests about your personal information:

to ask whether Acronis holds personal information about you, free of charge
to ask whether your personal information has been accessed or acquired by an unauthorized person
to request a record or a description of your personal information that Acronis holds about you
to request that Acronis update or correct inaccurate or incomplete personal information about you
to request that Acronis stops using your personal information for any reason
to object to the Processing of your personal information
to request that Acronis deletes your personal information
to request that Acronis restrict how your personal information is used, shared and otherwise Processed
to request not to be subject to a decision based solely on automated Processing of your personal information
to request that Acronis transmit a copy of your personal information to you or to a third party selected by you.

We may (and in some cases are required to) verify your identity before we can act on your request to exercise your privacy rights.

Electronic direct marketing communication will be sent to you (until you opt out) when:

you consent to receive direct marketing communication in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA); or
we received your personal information in connection with the Acronis Services so that we can communicate with you about our other products or services. You can choose to opt out of receiving these marketing communications at any time by using the “unsubscribe” link or contacting Acronis using the contact information below.

For any data protection related queries or requests, please contact our Data Protection Office Team at [email protected]. You also have a right to lodge a complaint with the Information Regulator (South Africa) via email at [email protected].

If you are located in Türkiye

Data Controller

Acronis Türkiye Siber Teknolojiler A.S

Sanayi Mahallesi, Teknopark Bulvarı, Teknopark 1

Etap 4A Blok K:3 D:401

Pendik, İstanbul, Türkiye

Transfer of Your Personal Information Abroad

Your personal information is transferred abroad as described above. Acronis uses standard contracts clauses which are published by Turkish Data Protection Authority (TDPA) under the Article 9 of the Turkish Data Protection Law no. 6698 (KVKK).

Your Rights under Turkish Law

When our data Processing activities fall in the scope of the KVKK, you may exercise certain privacy rights arising from KVKK Article 11:

Right to request whether your personal data are Processed or not and information about the Processing of your personal information
Right to request the rectification of incomplete or inaccurate personal information
Right to request the erasure or destruction of your personal information
Right to request notification of the operations carried out in compliance with the KVKK
Right to request information about the third parties to whom your personal data has been transferred and
Right to claim compensation for the damage arising from the unlawful Processing of your personal data.

If you would like to exercise any of these rights, please contact [email protected]. Within the scope of Article 11 of the KVKK, you can send your requests to us in writing or by using the registered electronic mail (KEP) address, secure electronic signature, mobile signature or the electronic mail address previously notified to the data Controller by the relevant person and registered in the data Controller's system. The following must be included in the application sent to us:

a) Name, surname and signature if the application is in writing,

b) Turkish Republic identity number for citizens of the Republic of Türkiye, nationality, passport number or identity number if applicable for foreigners,

c) Residence or workplace address for notification,

d) Electronic mail address, telephone and fax number for notification, if applicable,

e) Subject of the request.

In addition to the above, please attach information and documents related to the subject to the application.

If you are located in the U.S.

Please see our U.S. State Privacy Rights Notice. The U.S. State Privacy Rights Notice describes privacy rights available under U.S. state privacy laws and how to exercise those privacy rights.

All Other Locations

If you are located in a jurisdiction with data protection laws that offer you privacy rights not described below, please contact us at [email protected]. We respect your privacy rights and will do our best to accommodate your requests.

For your protection, we may need to verify your identity and place of residence before fulfilling your request. We will comply with your request as soon as reasonably possible and within the time periods required by applicable law. If Acronis has valid reasons not to honor your request, we will provide you with a written explanation.

If at any time you believe that Acronis has not adhered to this Privacy Statement, please contact us at [email protected]. We will use good faith efforts to determine and correct the problem.

12. GOOGLE WORKSPACE TERMS AND CONDITIONS

Acronis utilizes certain Google APIs to provide backup and recovery services for your data in the following Google Workspace products: Gmail, Google Contacts, Google Calendar, Google Drive, Google Team Drives (collectively, Google User Data). In order to provide such backup and recovery Services to you, Acronis requires read-only access to the lists of users and Team Drives in your Google Workspace organizational structure as well as reading and writing access to all other Google User Data.

Acronis stores Google User Data in data centers operated by Acronis or Acronis’s data center providers.

Acronis does not share Google User Data with third parties without appropriate consent except as follows:

For Corporate Transactions: We may share and transfer Google User Data if we are involved in a merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy or other change of ownership or control by Acronis or any affiliated company (in each case, whether in whole or in part);
When Required by Law: Acronis or Acronis’s affiliates may use servers and other equipment to provide the Acronis Services that are located in countries where litigants, law enforcement, courts, and other agencies of the government may have the right to access Google User Data stored within their jurisdictions upon terms and conditions provided by local law.
Acronis may disclose personal information when required to do so by applicable law, regulation, legal process, court order, governmental request, or other legally binding obligation, or when Acronis reasonably believes disclosure is necessary to:
- protect the rights, safety, security, or property of Acronis, its customers, users, partners, or the public;
- investigate, prevent, or address suspected fraud, abuse, security incidents, or unlawful activity;
- enforce applicable agreements; or
- establish, exercise, or defend legal claims.
Where legally permitted and reasonably practicable, Acronis will seek to limit the scope of disclosure and provide notice of the request.
Acronis reserves the right, consistent with data privacy and other user data protection requirements applicable to the jurisdiction where Google User Data is stored, and if mandated by applicable law, regulation, legal process, or governmental order, to disclose Google User Data, but only to the extent required to satisfy those laws, regulations or orders. Unless prohibited by law or other order, Acronis will provide you with reasonable notice of any such required or requested disclosure and reasonably cooperate to limit such disclosure to the extent allowed by law.

Google User Data is processed, shared, transferred, retained, protected, and disclosed in accordance with this Privacy Statement, including Section 5 (How and why Acronis Shared Personal Information), Section 7 (Protection and Retention of Personal Information), Section 10 (International Transfers of Personal Information), and applicable requirements governing Google APIs and Google Workspace services.

Where Google User Data is subject to additional contractual, regulatory, platform, or service-specific requirements, Acronis will process such information in accordance with those requirements in addition to the commitments described in this Privacy Statement.

Other Lawful Disclosures: We also share Google User Data (i) if disclosure would mitigate Acronis’s liability in an actual or threatened lawsuit; (ii) as necessary to protect legal rights of Acronis, users, Business Customers, vendors, business partners or other interested parties; (iii) to pursue available remedies or limit the damages; (iv) to enforce our agreements; and (v) to respond to an emergency.

13. HOW TO CONTACT ACRONIS

If you have questions about this Privacy Statement, please contact our Data Protection Office at [email protected].

* G Suite™, Gmail™, Google Contacts™, Google Calendar™, Google Drive™, and Google Team Drives™ are trademarks of Google Inc.

Prior versions of Privacy Statement:

Sorry, your browser is not supported.

It seems that our website is incompatible with your current browser's version. Don't worry, this is easily fixed!
To view our complete website, simply update your browser now or continue anyway.