Privacy Information

1. Data Controller and Data Protection Officer

SEI, as identified at the beginning of the Information, is the Data Controller for all personal data processed through the Site.

You can contact the Data Protection Officer ("DPO") for all SEI affiliates established in the European Union at the following address:

Samsung Electronics (UK) Limited
Samsung House, 2000 Hillswood Drive, Chertsey, Surrey KT16 0PS

And by writing to: dataprotection.sei@samsung.com

2. Personal Data Subject to Processing

If you decide to participate in the Operation, we inform you that SEI will process information concerning you that allows you to be identified or identifiable (hereinafter referred to as "Personal Data") and which may consist of an identifier (such as name, email address, physical address) or one or more characteristics of your identity.

Your Personal Data will be collected when voluntarily provided by you in occasion of your participation in the Operation. In particular, on the order confirmation page of your purchase, you will be asked to enter some information such as: name, surname, email address, physical shipping address, and telephone number, which will be used within the scope of this Operation for the purposes described below.

3. Purposes of Processing

SEI will use your Personal Data, collected through the Site, for the following purposes:

• To allow you to participate in the Operation, for the management of activities connected to the Operation, including the assignment and delivery of the Prize, and to provide you with any further assistance you may require ("Participation in the Operation");
• To fulfill legal obligations that require SEI to collect and/or further process certain types of Personal Data ("Compliance");
• To protect the rights, property, or safety of SEI, its affiliates, its business partners, employees, or customers, for example, in the context of judicial proceedings, internal investigations, and investigations by competent authorities, as well as to prevent or identify any abuse in participation in the Operation or any fraudulent activity, for example, by registering the Personal Data of those who have attempted to commit fraud against SEI within the scope of the Operation to protect SEI from further attempts, including through sample checks of participation requirements via video call. Video calls made for this purpose will not be recorded ("Abuse/Fraud").

4. Legal Basis and Mandatory or Optional Nature of Processing

The legal bases used by SEI to process your Personal Data, according to the purposes indicated in the previous Paragraph 3, are the following:

• Participation in the Operation: the processing for this purpose is necessary to allow you to participate in the Operation and, therefore, to follow up on your request and as necessary for the execution of the contract in place with you. Providing your Personal Data to SEI for this purpose is not mandatory, but otherwise, it will not be possible to participate in the Operation.
• Compliance: the processing for this purpose is necessary for SEI to fulfill any legal obligations. When you provide Personal Data to SEI, it will be processed according to applicable regulations, which may involve its retention and communication to Authorities for accounting, tax, or other obligations.
• Abuse/Fraud: the information collected for this purpose will be used exclusively to prevent and/or identify any fraudulent activities or abuses in the use of the Site or in participation in the Operation (of a criminal relevance).

5. Recipients of Personal Data

Your Personal Data may be shared with the subjects listed below (the "Recipients"):

• Subjects who typically act as data processors, such as individuals, companies, or professional firms that provide assistance and consultancy to SEI in accounting, administrative, legal, tax, financial, and credit recovery matters relating to the management of the Operation, including subjects delegated for the performance of certain activities related to it;
• Subjects with whom it is necessary to interact for the management of SEI's activities (e.g., hosting providers or suppliers of platforms for sending emails);
• Subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks);
• Individuals authorized by SEI to process Personal Data necessary to carry out activities strictly related to its business, including in relation to the Operation, who have undertaken to maintain confidentiality or have an adequate legal obligation of confidentiality (e.g., SEI employees);
• Samsung Group companies for internal administrative purposes;
• Subjects, entities, or authorities to whom your Personal Data must be communicated for Compliance, Abuse, or Fraud purposes, or by order of the authorities.

6. Transfer of Personal Data

Given the international presence of SEI, some of your Personal Data are shared with Recipients who may be located outside the European Economic Area. SEI assures that the processing of your Personal Data by these Recipients takes place in compliance with applicable regulations. Indeed, transfers are carried out through adequate guarantees, such as adequacy decisions, Standard Contractual Clauses approved by the European Commission, or other guarantees considered adequate. Further information is available from SEI by writing to the following address: dataprotection.sei@samsung.com.

7. Retention of Personal Data

Personal Data processed for the purpose of Participation in the Operation will be retained by SEI for the time strictly necessary to pursue the aforementioned purpose and according to what is established within the regulation. In any case, since such Personal Data are processed to allow you to participate in the Operation, SEI may retain them for a longer period, particularly for as long as may be necessary to protect SEI's interests from possible liabilities related to the Operation.

Personal Data processed for Compliance purposes will be retained by SEI for the period provided for by specific legal obligations or applicable regulations.

Personal Data processed for the purpose of preventing Abuse/Fraud will be retained by SEI for the time strictly necessary for the aforementioned purpose and therefore until the moment SEI is required to retain them to protect itself in legal proceedings or to communicate said data to the competent Authorities.

At the end of the retention period, we delete Personal Data in a way that ensures they cannot be reconstructed or read.

8. Rights of the Data Subject

You have the right to ask SEI, at any time:

• For access to your Personal Data (and/or a copy of such Personal Data), as well as further information on the processing operations carried out on them;
• For the rectification or updating of your Personal Data processed by SEI, where they are incomplete or not up-to-date;
• For the erasure of your Personal Data from SEI's databases, where you consider the processing not necessary or unlawful;
• For the restriction of the processing of your Personal Data by SEI, where you consider that your Personal Data are not correct, not necessary, or are unlawfully processed, or where you have objected to their processing;
• To exercise your right to data portability, i.e., to obtain in a structured, commonly used, and machine-readable format a copy of the Personal Data provided to SEI concerning you, or to request its transmission to another Controller;
• To object to the processing of your Personal Data, using a legal basis relating to your particular situation, which you believe should prevent SEI from processing your Personal Data.

You can exercise your rights by writing to the following address: dataprotection.sei@samsung.com or through our GDPRS portal at the address www.samsung.com/request-desk.

In any case, you always have the right to lodge a complaint with the Supervisory Authority or to bring legal action before the competent Judicial Authority, should you believe that the processing of your Personal Data is contrary to the regulations in force. The contact details of all EU Supervisory Authorities are available here: http://ec.europa.eu/newsroom/article29/item-detail.cfm?itemid=612080.