Samsung TV & Soundbar Promotional Offer: Rules

Promotion Rules and Effective Date

Date of Announcement and Effective Date of Promotion Rules: 16.05.2025.

1. Organizer of the Promotional Sale (Promotion)

Samsung Electronics Austria GmbH, Praterstrasse 31/14 Obergeschoss, Vienna, Austria (hereinafter: "Samsung"), is organizing a Promotional Sale (hereinafter: Promotion) for buyers of Samsung devices listed in point 3 of these Rules (hereinafter: Device/s).

2. Participants and Promotion Period

The promotion is available to all private users - natural persons and legal entities (end-users) of the Device who reside or have a delivery address within the territory of the Republic of North Macedonia and who meet the conditions stipulated by these Rules.

The promotion period is from 16.05.2025 to 25.05.2025. The promotion will end earlier if the stock of Devices or the Corresponding Gift, which are the subject of this promotion, is exhausted.

3. Benefits of the Promotion

These Rules govern the conditions for participation in the promotion.

The promotion allows participants, if during the promotion period from 16.05.2025 to 25.05.2025, they purchase one of the televisions listed in Table No. 1 below from Samsung's sales partners listed in point 5 of these Rules, provided they register their purchase via the following link: https://www.samsung.com/mk/offer/redemption/tv-one-launch-2025/ no later than 25.06.2025, and if they meet all other conditions stipulated by these Rules, they are entitled to a Corresponding Gift – a Samsung Soundbar, as listed in Table No. 1 below.

NOTE: Samsung's sales partners listed in point 5 of these Rules independently determine the retail price of the Devices subject to this promotion. Therefore, the retail prices of the Devices may vary depending on the Samsung sales partner from whom the Device was purchased.

Should the stock of gift devices listed in Table No. 1 be exhausted, Samsung reserves the right to provide the buyer with another equivalent gift of the same purpose.

4. Other Conditions for Participation and Obtaining the Promotion Benefit

To exercise the right to participate in the promotion and obtain the benefit of the promotion, the buyer must meet the following conditions:

• The user must purchase one of the Devices subject to this promotion during the promotion period specified in point 2 of these Rules.
• The Device must be purchased exclusively from Samsung sales partners on the territory of the Republic of North Macedonia, listed in point 5 of these Rules.
• The Device must be purchased by the end-user. End-users are natural and legal persons who purchase the device for their own needs, not for resale or distribution, and who have a delivery address in the Republic of North Macedonia.
• To be eligible for the Corresponding Gift from Table No. 1 in point 3 of these Rules, the buyer must, in addition to meeting the conditions of these Rules, register the purchase of the Device via the link: https://www.samsung.com/mk/offer/redemption/tv-one-launch-2025/.
• For a successful registration, the buyer must enter the information specified in this point 4 in the application. Late applications will be automatically rejected.
• Registration/application for purchase must be successfully completed no later than 25.06.2025.
• In case of successful fulfillment of all conditions and successful registration/application via the link https://www.samsung.com/mk/offer/redemption/tv-one-launch-2025/ for the purchased Device within the specified period, the corresponding gift according to Table No. 1 will be delivered no later than 150 days from the date of successful registration of the purchase, to the buyer's address provided during registration/application.
• For a successful application to participate in the promotion via https://www.samsung.com/mk/offer/redemption/tv-one-launch-2025/ for the purchased Device, or for the delivery of the gift provided by this promotion, the buyer must provide the following information during registration:
  • Name and surname of the user – participant in the promotion
  • E-mail address of the user – participant in the promotion
  • Full address of the user – participant in the promotion (for gift delivery)
  • Phone number of the user – participant in the promotion (for gift delivery)
  • Model and serial number of the purchased Device
  • Proof of order showing the date the order was placed (e.g., email, screenshot, photograph of a physically issued receipt, or any similar document from the sales partner listed in point 5 of these Rules, showing that the Device was ordered during the promotion period from point 2 of these Rules)
  • Display (scan) of the fiscal receipt and delivery note for the purchased Device.

Upon receipt of the user's application/registration, Samsung will verify if the submitted data corresponds/complies with the conditions stipulated in these Rules.

By submitting the data, i.e., by applying/registering to participate in the promotion, the user confirms that they are familiar with these Rules.

If the data entered during registration complies with these Rules, and the user has fulfilled all the conditions stipulated in these Rules, the user will be delivered the Gift according to Table No. 1, depending on the purchased device, in the manner and within the timeframe stipulated by these Rules.

NOTE: The right to a gift, as regulated by these Rules, will be exercised by the person who first successfully and completely registers/applies with the serial number of the purchased Device, in accordance with these Rules. Subsequent applications will not be considered for exercising the right to a gift.

5. List of Samsung Sales Partners

• NEPTUN MAKEDONIJA DOO / st. Belasica no.2 – Shoping Center EASTGATE MALL, floor 2, local K2.1, 1000 Skopje
• SETEK SE OD TEHNIKA DOO / st. 1523 no.1, 1000 Skopje
• Tehnomarket Makedonija DOOEL / st. 1732 street number 2, 1000 Skopje

6. Delivery of Purchased Device

The terms and conditions for the delivery of Devices subject to this promotion, which are purchased during the promotion period, are independently determined by the individual Samsung sales partners from point 5 of these Rules from whom the Devices were purchased.

7. Right to Amend Promotion Rules

Samsung reserves the right to amend these Rules at any time for justified reasons, with the obligation to publicly announce them without delay.

8. Contact

E-mail address for contact regarding the promotion: ce.promotion@samsung.com

Notice on Collection and Processing of Personal Data

Exercising rights within the promotion involves the submission of personal data by the user.

The data to be collected for the aforementioned purpose are as follows:

• User's name and surname
• User's e-mail address
• User's contact phone number
• User's full home address

Personal data will be collected and processed in accordance with Samsung's Privacy and Personal Data Protection Rules, which are provided below, and in accordance with the relevant regulations of the Republic of North Macedonia for personal data protection.

The purpose of collecting user's personal data is to meet the need for successful realization and exercise of rights concerning the promotion.

By providing their personal data in the manner and in accordance with the Rules of the promotion, the user (participant in the promotion) confirms that they are familiar with the fact that Samsung Electronics Austria GmbH, its subsidiary in the Republic of Croatia, and their subcontractors will collect and process personal data for the purpose of exercising rights within the promotion.

The user (participant in the promotion) also confirms that they are familiar with Samsung's Privacy Rules, which are attached to this text, and that they are aware that Samsung will process the collected personal data of the user (participant in the promotion) in accordance with the provisions stated in the Privacy Rules.

By applying to participate in this promotion, i.e., by entering their personal data for participation in the promotion, the user (participant in the promotion) also confirms that they are aware of the following:

• The data controller for personal data processing is Samsung Electronics Austria GmbH, Zagreb Subsidiary, Radnička Cesta 37, Zagreb, Croatia.
• The aforementioned data controller will, upon the user's request, supplement, amend, or delete their personal data if it is incomplete, inaccurate, or not up-to-date, and if the processing of such data is not in accordance with the law.
• The legal basis for collecting and processing user's personal data is the fulfillment of rights and obligations within the promotion.
• The user's personal data will be stored until the expiration of the promotion period.
• Access to the user's personal data within the promotion, besides Samsung Electronics Austria GmbH, Zagreb Subsidiary, will also be granted to Samsung's subcontractors.
• If the user believes that their personal data is being processed unlawfully, they have the right to file a complaint with the Personal Data Protection Agency at any time.

Samsung Electronics Austria GmbH

Samsung Electronics Austria GmbH, Zagreb Subsidiary PRIVACY POLICY

Effective: May 2018.

At Samsung Electronics Austria GmbH, our Zagreb subsidiary, and our affiliated companies ("Samsung", "we", "us", "our"), we understand the importance of privacy for our employees, suppliers, clients, and all other individuals with whom we cooperate. Therefore, we strive to be clear about how we collect, use, disclose, transfer, and store personal data.

Below are the main issues covered by our Privacy Policy:

1. Scope and Purpose
2. Compliance Responsibility
3. Our Responsibility
4. Definitions
5. Principles of the General Data Protection Regulation
6. Sharing of Personal Data (including data transfer outside the EEA)
7. Profiling and Automated Decision-Making
8. Direct Marketing
9. Record Keeping
10. Data Subject Rights
11. Personal Data Breach
12. Updating the Policy
13. Useful Contact Information

1. Scope and Purpose

This document establishes the rules for data protection and the legal conditions that must be met concerning the collection, handling, processing, storage, transfer, and destruction of personal data.

The types of data that may be processed include details about current, past, and potential future personnel, suppliers, clients, and all other individuals with whom we communicate. Data stored on paper, computer, or any other medium is subject to legally protected measures established by the General Data Protection Regulation ("GDPR") and applicable data protection laws that impose restrictions on how we may use the provided data.

Maintaining the highest standards in our handling of personal data is a collective and individual responsibility. Therefore, these Rules apply to the collection, use, storage, deletion, and other forms of processing of personal data that we encounter in our operations. They include a comprehensive summary of the main data protection obligations applicable to us as an organization.

These Privacy Rules apply to all Samsung employees and other service providers for Samsung (including, but not limited to, contractors and agency employees) (collectively: "personnel"). All personnel are obliged to ensure they understand and comply with these Rules regarding any personal data they access in the course of their work.

Personnel are also obliged to attend training regarding these or related rules upon Samsung's request.

2. Compliance Responsibility

The Data Protection Officer is responsible for overseeing the implementation of data protection and compliance with these Rules. Their contact details are at the end of these Rules.

Individuals in management positions are responsible for ensuring that members of their teams comply with data protection.

3. Our Responsibility

The General Data Protection Regulation provides for high financial penalties for organizations that violate its provisions.

4. Definitions

Criminal record data refers to criminal offenses committed by an individual and the judgments issued.

Data controllers are individuals or organizations that determine the purpose and method of data processing. Their duty is to establish practices and rules that will be aligned with the General Data Protection Regulation. Our suppliers, consultants, and contractors may also be data controllers.

Data subjects, within the meaning of these Rules, are individuals whose personal data we hold, including current, past, and potential clients, suppliers, representatives, investors, and our personnel. All data subjects have legal rights concerning their personal data.

Personal data is data relating to a natural person whose identity can be determined based on that data (or based on that and other data we hold). Personal data can be facts (e.g., name, address, or date of birth) or opinions (e.g., performance appraisal).

Processing is any operation involving the use of personal data. It includes collection, use, review, access, marking, or disposal of data, or performing one or a series of actions related to data, including their organization, correction, retrieval, use, disclosure, deletion, or destruction. Processing also includes the transfer of personal data to third parties.

Special categories of data (previously known as sensitive personal data) include data about a person's racial or ethnic origin, their political opinions, religious or similar beliefs, trade union membership, physical or mental health or condition, and sexual life, as well as genetic and biometric data for the purpose of identifying an individual.

5. Principles of the General Data Protection Regulation

Anyone processing data must adhere to the applicable principles of good practice established by the General Data Protection Regulation, to which Samsung will adhere in the following ways:

• We will process personal data lawfully, fairly, and transparently (see "Lawfulness, Fairness, and Transparency").
• We will collect personal data for specific, explicit legal purposes and will not process it in a manner incompatible with those purposes (see "Purpose Limitation and Data Minimisation").
• We will process personal data that is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed (see "Purpose Limitation and Data Minimisation").
• We will ensure that personal data is accurate and kept up to date; if data is inaccurate, we will take every reasonable measure to have it deleted or corrected without delay, considering the purposes for which the data is processed (see "Accuracy").
• We will keep personal data in a form that permits identification of the data subject only for as long as necessary for the purposes for which it is processed (see "Storage Limitation").
• We will implement appropriate technical or organizational measures to ensure the security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage (see "Integrity and Confidentiality").

The following provides additional information on each of these principles.

5.1. Lawfulness, Fairness, and Transparency

The purpose of data protection law is not to prevent the processing of personal data, but to ensure that it is done fairly and without adversely affecting the rights of the data subject.

Processing of personal data is lawful if one of the legal conditions for processing is met.

5.2. Purpose Limitation and Data Minimisation

Personal data may be processed only for specific purposes for which the data subject was informed at the time of initial collection, or for other purposes expressly permitted by applicable data protection law. This means that personal data must not be collected for one purpose and used for another. If the purpose for which personal data is processed needs to be changed, the data subject must be informed of the new purpose before any processing begins.

5.3. Accuracy

Personal data must be accurate and up-to-date. Incorrect data or data that leads to misinterpretation is not accurate, and therefore steps must be taken to verify the accuracy of all personal data at the time of collection and at regular intervals thereafter. Inaccurate or outdated data should be destroyed.

5.4. Storage Limitation

Personal data should be kept in a form that does not allow identification of the data subject only for as long as is necessary for the purposes for which the data is collected. This means that data should be destroyed or deleted from our system when it is no longer needed.

After the retention period expires, records containing personal data will be securely removed and destroyed, unless there is a justified business reason for retaining them beyond this period (e.g., if the data subject has initiated legal proceedings against us and the retained personal data is relevant to that dispute).

5.5. Integrity and Confidentiality

We are obliged to take appropriate measures to protect against unlawful or unauthorized processing of personal data and against accidental loss or damage to data.

Ensuring data security implies ensuring the confidentiality, integrity, and availability of personal data, defined as follows:

• Confidentiality means that access to personal data is restricted only to those individuals authorized to use it.
• Integrity means that personal data must be accurate and relevant to the purpose for which it is processed and reliable throughout its lifecycle (i.e., unauthorized persons must not alter that data).
• Availability means that authorized users must be able to access data if they need it for approved purposes. Therefore, instead of individual personal computers, personal data should be stored on our central system.

Security procedures include:

• Access Control: Controlling access for unauthorized persons to premises with controlled entry.
• Secure Desks and Lockers: Locking desks and lockers where confidential information of any kind is stored. (Personal data is always considered confidential).
• Method of Destruction: Paper documents should be shredded. Read-only disks and CD-ROMs should be physically destroyed when no longer needed.
• Equipment: Samsung personnel are obliged to ensure that confidential information is not visible to passers-by on screens and to log out of their personal computers when leaving them unattended.

Samsung adheres to its procedures and uses all available technologies to ensure the security of all personal data from the moment of collection until its destruction.

In practice, this means the following:

• Access to personal data may only be granted to those for whom there is authorization and only for authorized purposes.
• No other person (including other Samsung personnel) shall be allowed access to personal data, unless they have appropriate permission to do so.
• Personal data is protected first by adhering to rules for access to premises, computer access, password protection and encryption, enabling secure data storage and destruction, and other security measures stipulated in Samsung's Data Security Rules.
• Personal data (including data in files) or devices containing personal data (or devices that can be used to access personal data) must not be removed from Samsung premises, unless appropriate security measures are taken (e.g., pseudonymization, encryption, or password protection) to protect the data and devices.
• Personal data is not stored on local drives or personal devices used for work purposes.

6. Sharing of Personal Data (including transfer of data outside the EEA)

Personal data may only be transferred to a third-party service provider that agrees to adhere to the necessary rules and procedures and to comply with all relevant contractual provisions required of it, and which agrees, upon request, to implement appropriate measures.

Personal data may be shared with other personnel within our group (which includes our subsidiaries and our parent company along with its subsidiaries) only if such data is necessary for the recipient's work, and the transfer complies with applicable cross-border transfer limitations (see below).

Personal data originating from one country is transferred across borders if it is delivered, sent, viewed, or accessed in another country. Before cross-border transfer of personal data, it will be verified whether the necessary conditions are met.

7. Profiling and Automated Decision-Making

There are significant limitations regarding the circumstances under which automated decision-making for individuals is permitted (this refers to decisions made solely automatically, without human intervention). This also applies to profiling (automated processing of personal data to assess certain aspects related to an individual, e.g., whether they would be interested in specific products).

This type of decision-making is only possible for the execution of a contract, when permitted by law, or if the individual has given explicit consent. Individuals have the right to information about decision-making and have certain rights that must be communicated to them, including the right to request human intervention or to challenge a decision. Strict limitations also apply to this type of decision-making regarding the use of special categories of personal data.

Any profiling activity will be carried out in full compliance with applicable legislation.

8. Direct Marketing

There are strict data protection requirements regarding direct marketing aimed at our clients, and we follow all applicable guidelines.

9. Record Keeping

It is important that we can demonstrate our adherence to data processing principles. Where necessary, we maintain appropriate records of our handling of personal data. This may include records of the legal grounds on which we process personal data, records of data sent to data subjects, and records of our data processing.

10. Data Subject Rights

Personal data is processed in accordance with the rights of data subjects. Data subjects have the following rights:

• If consent for processing has been given, they may withdraw that consent at any time (this must be as easy as giving consent).
• They have the right to clear, transparent, and easily understandable information about how their personal data is used (this is why we provide the privacy statement).
• They have the right to request access to all data held by the data controller that relates to them.
• They have the right to request correction and rectification of inaccurate data.
• They have the right to request the deletion of data relating to them that is held by the data controller, provided that certain conditions stipulated by applicable law are met.
• They have the right to request restriction of processing in cases where certain conditions stipulated by applicable law are met.
• They have the right to request the transfer of data to another data controller if certain conditions stipulated by applicable law are met.
• They have the right to object to the processing of personal data if certain conditions stipulated by applicable data protection law are met.
• They have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless they have given explicit consent or it is necessary for the conclusion or performance of a contract with them.
• They have the right to lodge a complaint with the Personal Data Protection Agency regarding our data processing (contact details are provided below), although we encourage data subjects to contact us first in case of any doubts so that we can try to resolve the issue.

If a data subject wishes to exercise any of their rights, they should contact the Data Protection Officer. It may be necessary to take appropriate steps to establish the identity of the person making the request.

A formal request from a data subject (the applicant) for access to personal data relating to them and held by the Zagreb subsidiary of Samsung Electronics Austria GmbH may be submitted in writing. However, the data subject's request for access to personal data does not necessarily have to be formal or submitted in writing (access to personal data can be requested via social media or by phone). Any personnel member who receives a request for access to personal information will promptly forward the request to the Data Protection Officer and/or the legal department and the compliance department.

The Data Protection Officer will, except in exceptional cases, respond to the request within 30 days of its receipt. If Samsung cannot provide the requested personal data, the reasons for this will be fully documented, and the data subject will be informed of them in writing. Additionally, the data subject will be provided with information about the competent supervisory authority to which they can lodge a complaint, in accordance with the requirements of applicable data protection law.

11. Personal Data Breach

A personal data breach is a security violation that leads to accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data that has been transmitted, stored, or otherwise processed. A breach does not necessarily mean the disclosure of personal data to an external source without proper authorization, but it can also mean that someone from within has accessed that data without proper authorization.

We are obliged to report certain forms of breach to the competent regulatory body, and in a limited number of cases, to the data subjects themselves.

For any personal data breach or suspected breach, we will promptly notify the European headquarters' Security Department, the Samsung Electronics Austria GmbH – Zagreb Subsidiary Data Protection Officer, and/or the legal department and the compliance department so that they can take necessary measures or, if necessary, escalate the case further.

13. Updating the Policy

You will be notified of any updates or amendments to these Rules via email or by publication on the website.

14. Useful Contact Information

For data protection inquiries, you can contact the following address:

Samsung Electronics Austria GmbH, Zagreb Subsidiary (Samsung Electronics Austria GmbH, Podružnica Zagreb)
Radnička cesta 37, Zagreb, Republic of Croatia (Radnička cesta 37b, Zagreb, Republika Hrvatska)
E-mail: dataprotection.sead@samsung.com