Informativa Privacy

1. Data Controller and Data Protection Officer

SEI, as identified at the beginning of this Information, is the Data Controller for all personal data processed through the Site.

You can contact the Data Protection Officer ("DPO"), unique for all SEI affiliates established in the European Union, at the following address: Samsung Electronics (UK) Limited, Samsung House, 2000 Hillswood Drive, Chertsey, Surrey KT16 0PS, or by writing to: dataprotection.sei@samsung.com.

2. Personal Data Subject to Processing

If you decide to participate in the Operation, SEI will process information that identifies or makes you identifiable (hereinafter referred to as "Personal Data"). This may consist of an identifier (such as name, email address, physical address) or one or more characteristic elements of your identity.

Your Personal Data will be collected when voluntarily provided by you during your participation in the Operation. Specifically, on the order confirmation page of your purchase, you will be asked to provide information such as: name, surname, email address, physical shipping address, and phone number. This information will be used within the scope of this Operation for the purposes described below.

3. Purposes of Processing

SEI will use your Personal Data, collected through the Site, for the following purposes:

• To allow you to participate in the Operation, manage activities related to the Operation, including prize assignment and delivery, and provide any further assistance you may require ("Participation in the Operation");
• To comply with legal obligations that require SEI to collect and/or further process certain types of Personal Data ("Compliance");
• To protect the rights, property, or safety of SEI, its affiliates, business partners, employees, or customers, for example, in the context of legal proceedings, internal investigations, and investigations by competent authorities, as well as to prevent or detect any abuse in participation in the Operation or any fraudulent activity, such as by recording the Personal Data of those who have attempted to commit fraud against SEI within the Operation to protect SEI from further attempts, including through sample checks of participation requirements via video call. Video calls made for this purpose will not be recorded ("Abuses/Frauds").

4. Legal Basis and Mandatory or Optional Nature of Processing

The legal bases used by SEI to process your Personal Data, according to the purposes indicated in the preceding Paragraph 3, are as follows:

• Participation in the Operation: Processing for this purpose is necessary to allow you to participate in the Operation and, therefore, to follow up on your request and as necessary for the execution of the contract in place with you. Providing your Personal Data to SEI for this purpose is not mandatory, but failure to do so will prevent participation in the Operation.
• Compliance: Processing for this purpose is necessary for SEI to fulfill any legal obligations. When you provide Personal Data to SEI, it will be processed according to applicable regulations, which may involve its retention and communication to Authorities for accounting, tax, or other obligations.
• Abuses/Frauds: Information collected for this purpose will be used exclusively to prevent and/or detect any fraudulent activities or abuses in the use of the Site or participation in the Operation (of a criminal nature).

5. Recipients of Personal Data

Your Personal Data may be shared with the following subjects (the "Recipients"):

• Subjects acting typically as data processors, such as individuals, companies, or professional firms providing assistance and consultancy services to SEI in accounting, administrative, legal, tax, financial, and debt collection matters related to the management of the Operation, including those delegated for specific activities related to it;
• Subjects with whom interaction is necessary for the management of SEI's activities (e.g., hosting providers or email sending platform providers);
• Subjects delegated to perform technical maintenance activities (including maintenance of network equipment and electronic communication networks);
• Persons authorized by SEI to process Personal Data necessary for activities strictly related to its business, including in relation to the Operation, who have committed to confidentiality or have an adequate legal obligation of confidentiality (e.g., SEI employees);
• Samsung Group companies for internal administrative purposes;
• Subjects, entities, or authorities to whom your Personal Data must be communicated for Compliance, Abuses, or Frauds purposes, or by order of the authorities.

6. Transfer of Personal Data

Given SEI's international presence, some of your Personal Data are shared with Recipients who may be located outside the European Economic Area. SEI ensures that the processing of your Personal Data by these Recipients complies with applicable regulations. Indeed, transfers are carried out through adequate guarantees, such as adequacy decisions, Standard Contractual Clauses approved by the European Commission, or other considered adequate guarantees. More information is available from SEI by writing to: dataprotection.sei@samsung.com.

7. Retention of Personal Data

Personal Data processed for the purpose of Participation in the Operation will be retained by SEI for the time strictly necessary to achieve the aforementioned purpose and as established within the regulations. In any case, as this Personal Data is processed to allow you to participate in the Operation, SEI may retain it for a longer period, particularly as may be necessary to protect SEI's interests from potential liabilities related to the Operation.

Personal Data processed for Compliance purposes will be retained by SEI for the period required by specific legal obligations or applicable regulations.

Personal Data processed to prevent Abuses/Frauds will be retained by SEI for the time strictly necessary for the aforementioned purpose and therefore until SEI is required to retain it for legal defense or to communicate said data to the competent Authorities.

At the end of the retention period, we delete Personal Data in a way that ensures they cannot be reconstructed or read.

8. Rights of the Data Subject

You have the right to request from SEI, at any time:

• Access to your Personal Data (and/or a copy of such Personal Data), as well as further information on the processing activities carried out on them;
• Rectification or updating of your Personal Data processed by SEI, if they are incomplete or not up-to-date;
• Erasure of your Personal Data from SEI's databases, if you believe the processing is unnecessary or unlawful;
• Restriction of processing of your Personal Data by SEI, if you believe your Personal Data is incorrect, unnecessary, or unlawfully processed, or if you have objected to their processing;
• To exercise your right to data portability, i.e., to obtain a copy of the Personal Data you have provided to SEI in a structured, commonly used, and machine-readable format, or to request its transmission to another Controller;
• To object to the processing of your Personal Data, using a legal basis related to your particular situation, which you believe should prevent SEI from processing your Personal Data.

You can exercise your rights by writing to the following address: dataprotection.sei@samsung.com or through our GDPRS portal at www.samsung.com/request-desk.

In any case, you always have the right to lodge a complaint with the Supervisory Authority or to appeal before the competent Judicial Authority, should you believe that the processing of your Personal Data is contrary to current regulations. The contact details of all EU Supervisory Authorities are available here: (http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080).