Samsung Privacy Information

Samsung Electronics Italia S.p.A., located at Via Mike Bongiorno 9 – 20124 Milan (“SEI”), is committed to protecting the privacy of users of the online site https://members.samsung.it/promozioni/s25regalabook4ee ("Samsung Members") as part of the "Samsung Galaxy S25 Ultra, S25 Edge, S25+ giveaway Samsung Galaxy Book4 Enterprise Edition" prize promotion (the “Operation”). This document (the “Information”) has been prepared to help you understand how your personal data will be processed as part of your participation in the Operation. This Information is intended to provide you with the necessary information to participate consciously and informedly.

In general, any information or personal data you provide to SEI within the scope of the Operation will be processed according to internationally recognized principles of lawfulness, fairness, transparency, purpose limitation and storage, data minimization, accuracy, integrity, and confidentiality. This Information relates exclusively to the Operation. Further information regarding the processing of your Personal Data during the use of Samsung Members can be found here: https://www.samsung.com/it/info/privacy/.

If you register for the Operation by accessing through your Samsung Account, the processing of your Personal Data will also be carried out according to the relevant privacy information. Any communication of Personal Data between SEI and Samsung Electronics Co. Ltd., the data controller for Samsung Accounts, will occur solely and exclusively in execution of your request to participate in the Operation, without prejudice to any further purpose pursued by Samsung Electronics Co. Ltd. and indicated in the relevant information.

1. Data Controller and Data Protection Officer

SEI, as identified at the beginning of this Information, is the Data Controller for all personal data processed through Samsung Members.

You can contact the Data Protection Officer (“DPO”) for all SEI affiliates established in the European Union at the following address:

Samsung Electronics (UK) Limited
Samsung House, 2000 Hillswood Drive, Chertsey, Surrey KT16 OPS

And by writing to: dataprotection.sei@samsung.com

2. Personal Data Subject to Processing

If you decide to participate in the Operation, we inform you that SEI will process information that identifies or makes you identifiable (hereinafter referred to as “Personal Data”) and which may consist of an identifier (such as name, email address, physical address) or one or more elements characteristic of your identity.

Your Personal Data will be collected when voluntarily provided by you in connection with your participation in the Operation. The Personal Data processed through are as follows:

a. Name, contact details, and other Personal Data

To participate in the Operation, you will be asked to fill out the appropriate form by entering various information such as, by way of example: name, surname, VAT number, email address, full residential physical address, phone number, IMEI of the Promoted Product purchased, and date of purchase of the Promoted Product.

b. Special categories of personal data

When you fill out the forms to participate in the Operation (the “Forms”), you may have the option to send SEI image files, such as a photo of the proof of purchase of the Promoted Product, a photo of the label containing the IMEI, located on the bottom of the Promoted Product, through which you participate in the Operation (the “Submission”). However, you may also, voluntarily or involuntarily, provide SEI with some information that may contain Personal Data.

Through the Submission, you may also, more or less voluntarily, provide SEI with some information that may contain Personal Data or special categories of Personal Data, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data relating to health or sexual life or sexual orientation of the person (“Special Personal Data”).

SEI will not process any information that may contain Special Personal Data and therefore invites you not to communicate such Special Personal Data.

c. Third-party data provided by the data subject

As mentioned above, through the Submission or the Form, you may send SEI, more or less voluntarily, information that may contain Personal Data of other people.

In relation to such hypotheses, you act as an independent data controller, assuming all legal obligations and responsibilities. In this regard, you grant the broadest possible indemnity regarding any dispute, claim, request for compensation for damages from processing, etc., that may be received by SEI from third parties whose Personal Data have been processed through your use of Samsung Members functions in violation of applicable personal data protection regulations.

In any case, if you provide or otherwise process third-party Personal Data within the scope of Samsung Members or the Operation, you guarantee from now on – assuming all connected responsibility – that this particular processing hypothesis is based on the consent of the third-party data subject or on another suitable legal basis that legitimizes the processing of the information in question.

3. Purpose of Processing

SEI will use your Personal Data, collected through Samsung Members, for the following purposes:

• To allow you to participate in the Operation, for the management of activities connected to the Operation and to provide you with any further assistance you may require (“Operation Participation”);
• To comply with legal obligations that require SEI to collect and/or further process certain types of Personal Data (“Compliance”);
• To protect the rights, property, or safety of SEI, our affiliates, our business partners, employees, or customers, for example, in the context of judicial proceedings, internal investigations, and investigations by competent authorities, as well as to prevent or identify any abuse in participation in the Operation or fraudulent activity, for example, by recording the Personal Data of those who have attempted to commit fraud against SEI within the scope of the Operation to protect SEI from further attempts, including through random checks of participation requirements via video call. Video calls made for this purpose will not be recorded (“Abuse/Fraud”).

4. Legal Basis and Mandatory or Optional Nature of Processing

The legal bases used by SEI to process your Personal Data, according to the purposes indicated in the preceding Paragraph 3, are as follows:

• Operation Participation: the processing for this purpose is necessary to allow you to participate in the Operation and, therefore, to follow up on your request and as necessary for the execution of the contract in place with you. The provision of your Personal Data to SEI for this purpose is not mandatory, but otherwise, it will not be possible to participate in the Operation.
• Compliance: the processing for this purpose is necessary for SEI to comply with any legal obligations. When you provide Personal Data to SEI, they will be processed in accordance with applicable regulations, which may include their storage and communication to Authorities for accounting, tax, or other obligations.
• Abuse/Fraud: the information collected for this purpose will be used exclusively to prevent and/or identify any fraudulent activities or abuses in the use of Samsung Members or in participation in the Operation (with criminal relevance).

5. Recipients of Personal Data

Your Personal Data may be shared with the subjects indicated below (the “Recipients”):

• Subjects who typically act as data processors, such as persons, companies, or professional firms that provide assistance and consultancy to SEI in accounting, administrative, legal, tax, financial, and debt collection matters relating to the management of the Operation, including subjects delegated to carry out certain activities related to it;
• Subjects with whom it is necessary to interact for the management of SEI’s activities (e.g., hosting providers or email service providers);
• Subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks);
• Persons authorized by SEI to process Personal Data necessary to carry out activities strictly related to its business, including in relation to the Operation, who have undertaken to maintain confidentiality or have an adequate legal obligation of confidentiality (e.g., SEI employees);
• Samsung Group companies for internal administrative purposes;
• Subjects, entities, or authorities to whom it is mandatory to communicate your Personal Data for Compliance, Abuse, or Fraud purposes, or by order of the authorities.

6. Transfer of Personal Data

Given SEI’s international presence, some of your Personal Data are shared with Recipients who may be located outside the European Economic Area. SEI ensures that the processing of your Personal Data by these Recipients complies with applicable regulations. Indeed, transfers are carried out through adequate guarantees, such as adequacy decisions, Standard Contractual Clauses approved by the European Commission, or other considered adequate guarantees. Further information is available from SEI by writing to the following address: dataprotection.sei@samsung.com.

7. Retention of Personal Data

Personal Data processed for the purpose of Operation Participation will be retained by SEI for the time strictly necessary to pursue the aforementioned purpose and in accordance with the regulation. In any case, since this Personal Data is processed to allow you to participate in the Operation, SEI may retain it for a longer period, particularly for as long as may be necessary to protect SEI’s interests from possible liabilities related to the Operation.

Personal Data processed for Compliance purposes will be retained by SEI for the period provided by specific legal obligations or applicable regulations.

Personal Data processed for the purpose of preventing Abuse/Fraud will be retained by SEI for the time strictly necessary for the aforementioned purpose and therefore until SEI is required to retain them to protect itself in legal proceedings or to communicate such data to the competent Authorities.

At the end of the retention period, we delete Personal Data in a way that ensures they cannot be reconstructed or read.

8. Rights of the Data Subject

You have the right to request from SEI, at any time:

• Access to your Personal Data (and/or a copy of such Personal Data), as well as further information on the processing operations carried out on them;
• Rectification or updating of your Personal Data processed by SEI, if they are incomplete or not updated;
• Erasure of your Personal Data from SEI’s databases, if you believe the processing is not necessary or is illegitimate;
• Limitation of the processing of your Personal Data by SEI, if you believe that your Personal Data are incorrect, not necessary, or are illegitimately processed, or if you have objected to their processing;
• To exercise your right to data portability, i.e., to obtain in a structured, commonly used, and machine-readable format a copy of the Personal Data provided to SEI concerning you, or to request their transmission to another Controller;
• To object to the processing of your Personal Data, using a legal basis relating to your particular situation, which you believe should prevent SEI from processing your Personal Data.

You can exercise your rights by writing to the following address: dataprotection.sei@samsung.com or through our GDPRS portal at the address www.samsung.com/request-desk.

In any case, you always have the right to lodge a complaint with the Supervisory Authority or to appeal to the competent Judicial Authority, if you believe that the processing of your Personal Data is contrary to the regulations in force. The contact details of all EU Supervisory Authorities are available here: (http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080).