Samsung Galaxy Watch8 Classic, Galaxy Watch8, and Galaxy Watch Ultra Pre-orders
Please familiarize yourself with these terms and conditions ("Terms") before purchasing a device in this promotion.
1. Organizer of the Promotion
Samsung Electronics Austria GmbH, with its registered office at Praterstrasse 31/14 Obergeschoss, Vienna, Austria, and registration number FN 217924b (hereinafter referred to as "Samsung"), is organizing the promotion for Samsung Galaxy Watch8 Classic, Galaxy Watch8, and Galaxy Watch Ultra.
2. Promotional Period, Delivery, and Gift
The promotion is available to customers in Bosnia and Herzegovina from July 9, 2025, to July 24, 2025, or earlier if supplies of devices or accompanying gifts secured for this promotion run out before the aforementioned (planned) promotional period.
A "customer" is considered a natural or legal person with permanent residence or registered office in Bosnia and Herzegovina who purchases the device for their own needs, not for resale.
Customers who, during the promotional period, purchase a Samsung Galaxy Watch8 Classic, Galaxy Watch8, or Galaxy Watch Ultra from retail outlets or through the website of Samsung sales partners listed in point 6 of these Terms, and meet the other conditions defined in these Terms, will receive an accompanying gift:
- For the purchase of Samsung Galaxy Watch8 Classic (46mm), the customer is entitled to an Athleisure strap, model ET-SOL33LMEGEU.
- For the purchase of Samsung Galaxy Watch8 (40/44mm), the customer is entitled to a Fabric strap, model ET-SVL33LMEGEU.
- For the purchase of Samsung Galaxy Watch Ultra* (47mm), the customer is entitled to a Trail Strap, model ET-SVL70MOEGEU.
*The promotion applies only to the following Samsung Galaxy Watch Ultra models:
- SM-L705FZB2EUC
- SM-L705FZA2EUC
- SM-L705FZS2EUC
- SM-L705FAW2EUC
3. Purchase Conditions
The purchase of Samsung Galaxy Watch8 Classic, Galaxy Watch8, and Galaxy Watch Ultra (hereinafter: "Device" individually and "Devices" collectively) can be made through Samsung sales partners listed in point 6 of these Terms, under the following cumulative conditions:
- a. The customer purchases the device during the promotional period;
- b. The device is purchased at a retail outlet or through the website of a Samsung sales partner in Bosnia and Herzegovina; the list of sales partners is defined in point 6 of these Terms;
- c. The customer successfully registers the purchase of the device via the website www.samsung.com/ba/offer/preorder-watch8-watch8-classic-watch-ultra-2025/, no later than August 30, 2025, in accordance with point 4 of these Terms.
4. Device Purchase Registration
The prerequisite for receiving the gift is to register the device purchase on the page www.samsung.com/ba/offer/preorder-watch8-watch8-classic-watch-ultra-2025/. The first successfully completed registration is considered authoritative for the purpose of gift allocation.
The registration process involves entering/inputting the data required for successful registration. The data collected to enable the customer to receive the gift, and for the purpose of gift delivery after successful registration, are:
- Name and surname of the device user, or company name,
- E-mail address of the device user,
- Home address/registered office address of the device user in Bosnia and Herzegovina (for gift delivery purposes),
- Serial number of the purchased device.
- Scan or copy of the fiscal invoice or delivery note for the purchased device.
By clicking the submit data button, the customer provides data to Samsung and its subcontractors to verify if the conditions are met, i.e., if the customer is entitled to the gift, and the customer also gives their explicit consent for the use of their personal data in accordance with the provisions of these Terms. Customer consent is necessary for the registration process to be successful.
5. Gift Delivery and Device Pickup
The delivery of the purchased device is carried out in accordance with the sales conditions of the Samsung sales partner.
The delivery of gifts to customers, provided they have successfully registered the device purchase in accordance with these Terms, will be made no later than October 31, 2025, to the address provided during the purchase registration. Gift delivery is only possible within Bosnia and Herzegovina and will be at the Organizer's expense.
A customer who is entitled to a gift is obliged to pick up the gift at the address registered as the delivery address during the device purchase registration. If, due to the customer's fault, the gift cannot be delivered/is not delivered within 6 (six) months after the date specified as the latest delivery date in the preceding paragraph of this point, the customer forfeits the gift.
6. Samsung Channel Partners
The purchase of Samsung devices can only be made from the following Samsung sales partners:
- Asbis
- BH Telecom
- Mtel
- Eronet
- Ekupi
- Tehnomag
- Domod
7. Right to Change Promotion Terms
Samsung reserves the right to amend these Terms at any time for legitimate reasons and to publish them without delay.
These Terms are published on July 9, 2025, on the page www.samsung.com/ba/offer/preorder-watch8-watch8-classic-watch-ultra-2025/, and are effective from that date.
8. Contact
Contact email address regarding this promotion: samsungbih@toolbox.ba
NOTICE ON COLLECTION AND USE OF PERSONAL DATA
Samsung Electronics Austria GmbH, with its registered office at Praterstrasse 31/14 Obergeschoss, Vienna, Austria (hereinafter: "Controller"), hereby informs you about information regarding the processing of personal data:
1. Data Controller
The data controller is Samsung Electronics Austria GmbH, with its registered office at Praterstrasse 31/14 Obergeschoss, Vienna, Austria, through its subsidiary Samsung Electronics Austria GmbH Belgrade (hereinafter: "Controller").
2. Collected Data
The Controller will collect and process the following personal data:
- Name and surname,
- Customer's e-mail address,
- Customer's address in BiH (for gift delivery purposes),
- Serial number of the purchased device.
- Information about the purchase, invoice/delivery note,
- Proof of receipt of the purchased device,
(hereinafter collectively referred to as "Personal Data").
3. Purpose of Personal Data Collection
The Controller will collect and process the aforementioned personal data exclusively for the purpose of determining the fulfillment of the conditions for participation in the "Samsung Galaxy Watch8 Classic, Galaxy Watch8, and Galaxy Watch Ultra" promotion, and for the delivery of gifts if the customer/buyer has exercised their right to it.
4. How We Use Personal Data
Personal data collected with consent will be used exclusively for the aforementioned purposes of the Controller, in accordance with the Data Protection Law (Law) and the Controller's Privacy Policy below.
5. Legal Basis for Data Processing
The Controller collects and processes personal data based on the voluntary consent of the data subject.
6. Retention Period of Personal Data
Personal data will be stored only for as long as necessary to fulfill the stated purpose, and in any case, no longer than 6 months from the date of purchase.
7. Your Rights
The personal data collection controller will, upon the participant's request, supplement, modify, update, and delete personal data if the data is incomplete, inaccurate, or outdated, and if its processing is not in accordance with the law, or if the purpose of data collection has been fulfilled. For more information, please refer to our Privacy Policy or contact us by sending an email to dataprotection.sead@samsung.com.
If participants believe that the processing of their personal data violates their privacy, they can contact the personal data controller or the Agency for Personal Data Protection and request an explanation.
8. Other Information
For detailed information on the measures taken to protect personal data, as well as on the possible disclosure of personal data, please read our Privacy Policy.
PRIVACY POLICY
Effective Date: May 2018.
Samsung Electronics Austria GmbH and its subsidiaries (hereinafter "Samsung", "we", "us", "our") know how important privacy is to our staff, suppliers, customers, and other individuals with whom we cooperate, and we strive to be clear about how we collect, use, disclose, transfer, and store personal data.
The following are the main issues covered by our Data Protection Policy.
- Scope and Purpose
- Responsibility for Compliance
- Our Obligations
- Definitions
- GDPR Principles
- Special Categories of Personal Data
- Sharing of Personal Data (including transfers outside the EEA)
- Profiling and Automated Decision-Making
- Direct Marketing
- Record Keeping
- Individual Data Subject Rights
- Procedure in Case of Data Security Breach
- Policy Updates
- Useful Contact Information
1. Scope and Purpose
This policy defines the data protection rules as well as the legal requirements that must be met when acquiring, handling, processing, storing, transferring, and destroying personal data.
The types of information we will process include details about current, past, and potential staff members, suppliers, customers, and other individuals with whom we communicate. Data held on paper or computer is subject to certain legal safeguards outlined in the General Data Protection Regulation ("GDPR") and applicable data protection laws, which provide limitations on how we may use this information.
Maintaining the highest standards in our handling of personal data is both a collective and individual responsibility, and this policy outlines how we obtain, use, store, and otherwise process the personal data we use in our business operations. It includes an overview of key data obligations that apply to us as an organization, as well as the expectation that you will play your part in compliance.
This data protection policy applies to every Samsung employee as well as other personnel providing services to Samsung (including, but not limited to, contractors and agency staff) (collectively referred to as "Personnel"). All Personnel are required to ensure they understand and comply with this policy regarding any personal data they access in the course of their work.
2. Responsibility for Compliance
The responsibility for overseeing data protection compliance, including adherence to this policy, lies with our Data Protection Officer, whose contact details can be found at the end of this policy.
Individuals in management positions are responsible for data protection compliance within their teams.
If you believe that the policy has not been followed regarding your personal data or the personal data of others, you should raise the issue with your immediate manager or with the Human Resources or Legal departments.
3. Our Obligations
GDPR provides for significant fines against organizations that violate its provisions. Depending on the type of violation, organizations can be fined more than 20 million Euros or 4% of their total annual turnover in the previous financial year. These high fines increase the risk exposure in relation to data protection compliance.
4. Definitions
The following definitions may be useful when reading this policy:
Criminal record data is information related to criminal offenses and convictions against a specific person.
Data Controllers are individuals or organizations that determine the purpose and manner of personal data processing. They are responsible for establishing practices and policies in accordance with GDPR. We are controllers of all personal data used in our business. Our suppliers, consultants, and contractors may also be data controllers.
For the purposes of this policy, the term Data Subjects includes all living individuals whose personal data we hold, including current, past, and prospective customers, suppliers, agents, investors, and our staff. A data subject does not have to be a citizen or resident of Bosnia and Herzegovina. All data subjects have certain legal rights regarding their personal data.
The term personal data refers to data relating to a living person who can be identified from that data (or from such data or other information in our possession). Personal data can be factual (such as name, address, or date of birth) or an opinion (such as performance appraisal). The definition of "personal data" used in GDPR and the applicable data protection law is very broad and allows a wide range of personal identifiers to be classified as personal data. This includes name, identification number, and location data.
Processing is any activity that involves the use of personal data. This includes obtaining, using, observing, recording, or holding data, or carrying out any action or group of actions, including organizing, modifying, retrieving, using, disclosing, deleting, or destroying data. Processing also includes the transfer of personal data to third parties.
Special category data (formerly known as sensitive personal data) includes information about a person's racial or ethnic origin, political opinions, religious or similar beliefs, trade union membership, physical or mental health, or condition or sexual life, as well as genetic and biometric data, when used to identify an individual.
5. GDPR Principles
Any person processing personal data must act in accordance with the applicable principles of good practice defined in GDPR, which Samsung is obliged to adhere to.
- We will process personal data lawfully, fairly, and transparently (see "Lawfulness, Fairness, and Transparency" section).
- We will collect personal data for specified, explicit, and legitimate purposes; we will not process it in a manner that is incompatible with those purposes (see "Purpose Limitation and Data Minimisation" section).
- We will process personal data that is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed (see "Purpose Limitation and Data Minimisation" section).
- We will ensure that personal data is accurate and, where necessary, kept up to date; where data is inaccurate, we will take all necessary steps to erase or correct it without delay, taking into account the purposes for which the data is processed (see "Accuracy" section).
- We will not store personal data in a form that allows identification of the data subject for longer than necessary for the purposes for which it is processed (see "Storage Limitation" section).
- We will use appropriate technical or organizational measures to ensure the security of personal data, which will include protection against unauthorized or unlawful processing or accidental loss, destruction, or damage (see "Integrity and Confidentiality" section).
The following provides additional information on each of these principles.
5.1. Lawfulness, Fairness, and Transparency
The purpose of applicable data protection law is not to prevent the processing of personal data, but to ensure that it is done fairly and without negative impact on the rights of the data subject.
For personal data to be processed in accordance with the law, one of the legal conditions for processing must be met. These conditions include the following: the data subject must give explicit and voluntary consent to the processing; processing is required by law; processing is necessary for the performance of a contract we have with the data subject; or processing is necessary for the legitimate interests of Samsung or the data subject (unless these interests are overridden by the interests or fundamental rights and freedoms of the individual). Before we begin processing personal data (e.g., before collecting personal data from an individual), we review our data collection and the reasons why this data is needed. We also identify the legal basis that allows us to obtain and process this information lawfully.
The data subject must be provided with certain information in accordance with the law, including (but not limited to) who the data controller is, the purpose(s) for which the data is processed, the legal basis for processing, the identity of any data subject to whom the data may be disclosed or transferred, and the data subject's rights regarding their personal data. This information must be provided through appropriate privacy notices or fair processing notices.
5.2. Purpose Limitation and Data Minimisation
Personal data may only be processed for specific purposes about which the data subject was informed when the data was first collected, or for any other purposes expressly permitted by applicable data protection laws. This means that personal data cannot be collected for one purpose and then used for another. If it becomes necessary to change the purpose for which data is processed, the data subject will be informed of the new purpose before any processing takes place.
5.3. Accuracy
Personal data must be accurate and up-to-date. Inaccurate information is incorrect and therefore steps must be taken to verify the accuracy of any personal data at the point of collection, and then to do so regularly at specified intervals. Inaccurate or outdated data must be destroyed. When you become aware that personal data we process is inaccurate, you must inform your data processing manager/contact person, and take the necessary steps to destroy or modify it, taking into account our data retention policy requirements where applicable.
5.4. Storage Limitation
Personal data should be kept in a format that does not allow the identification of the data subject for longer than necessary for the purposes for which the data is collected. This means that data must be destroyed or deleted from our systems when it is no longer needed, or the personal data must be managed by them.
Upon expiry of the retention period, unless there is a valid business reason for retention beyond that period (e.g., if the data subject has initiated legal action against us and the retained personal data is relevant to such proceedings), records containing personal data will be eliminated in a secure and efficient manner.
5.5. Integrity and Confidentiality
Maintaining data security means ensuring the confidentiality, integrity, and availability of personal data, in accordance with the following definitions:
- a) Confidentiality means that only persons authorized to use the data can access it.
- b) Integrity means that personal data should be accurate and fit for the purpose for which it is processed, and reliable throughout its lifecycle (i.e., it cannot be altered by unauthorized persons).
- c) Availability means that authorized users should be able to access the data if they need it for permitted purposes. Personal data should therefore be stored on our central computer system rather than on individual personal computers.
Security procedures include:
- a) Access Controls. Any third party observed in access-controlled areas must be reported.
- b) Securing Locked Desks and Cabinets. Keep desks and cabinets locked if they contain confidential information of any kind. (Personal data is always considered confidential.)
- c) Destruction Methods. Paper documents should be shredded. Floppy disks and CD-ROMs should be physically destroyed when no longer needed.
- d) Equipment. Samsung personnel should ensure that individual monitors do not display confidential information to passers-by, and that they log off from their personal computers when they are unattended.
6. Special Categories of Personal Data
From time to time, it may be necessary to process special categories of personal data.
We will only process special categories of personal data when we have a legal basis for processing personal data (see section 5 of this policy) and when one of the special conditions for processing special categories of data applies. These special terms include, but are not limited to, the following cases:
- a) The data subject has given their explicit consent.
- b) Processing is necessary for the purpose of exercising the rights or obligations of Samsung or the data subject under labor law.
- c) Processing is necessary to protect the vital interests of the data subject, and the data subject is physically unable to give consent.
- d) Processing relates to personal data that has been made public by the data subject.
- e) Processing is necessary for the establishment, exercise, or defense of legal claims.
- f) Processing is necessary for reasons of significant public interest.
- g) Processing is necessary for the assessment of an employee's performance.
Special categories of personal data will not be processed until:
- a) The above assessment has been carried out; and
- b) The data subject has been adequately informed (through a privacy notice or otherwise) about the nature of the processing, the purposes for which it is carried out, and the legal basis.
7. Sharing of Personal Data (including transfers outside the EEA)
Personal data may only be transferred to third parties who agree to adhere to the necessary policies and procedures, as well as all relevant contractual provisions, and who agree to implement appropriate measures, in accordance with the requirements.
Personal data may be shared with another member of our group (which includes our subsidiaries, as well as our ultimate holding company, together with its subsidiaries) if the recipient has a business need for the information, and if the transfer complies with applicable cross-border data transfer restrictions (see below).
Data protection laws restrict transfers to countries outside the European Economic Area (hereinafter: "EEA") to ensure that the required level of data protection is not compromised. You transfer personal data originating from one country across borders when you transfer, send, view, or access that information in or to another country. Special permission from the local legal affairs/data protection office must be obtained before transferring personal data across borders to verify that the necessary conditions are met.
8. Profiling and Automated Decision-Making
There are significant limitations on the circumstances under which automated decisions can be made about individuals (where a decision is made solely automatically without any human intervention). This is also the case when it comes to profiling (which is the automated processing of personal data to evaluate certain things about an individual, for example, whether they like a particular product).
This type of decision-making may only be applied where it is necessary for the performance of a contract, where it is permitted by law, or in cases where the individual gives their explicit consent. In addition, individuals have the right to be informed about decision-making and have certain rights that must be communicated to them, including the right to request human intervention or to challenge a decision, and there are strict limitations on the use of special category data for this type of decision-making.
In any case, any profiling activity will be processed in full compliance with any applicable law.
9. Direct Marketing
We adhere to strict data protection requirements regarding direct marketing.
10. Record Keeping
It is important that we are able to demonstrate that we comply with data processing principles. Where necessary, we maintain appropriate records regarding our handling of personal data. Specifically, this may include records of our legal basis for processing personal data, records of data sent to data subjects, and records of our data processing.
11. Individual Data Subject Rights
Data must be processed in accordance with the rights of data subjects. Data subjects have the right to:
- a) If they have consented to data processing, withdraw their consent to processing at any time (and it must be as easy for them as it was to give consent).
- b) Be provided with clear, transparent, and easily understandable information about how their personal data is used (for this reason, we provide a privacy notice).
- c) Request access to all data that the data controller holds about them.
- d) Request the correction and rectification of inaccurate data.
- e) Request that data held by the data controller be erased when certain conditions stipulated by applicable law are met.
- f) Request restriction of processing when certain conditions stipulated by applicable laws are met.
- g) Request the transfer of personal data to another controller when certain conditions stipulated by applicable laws are met.
- h) Object to the processing of personal data when certain conditions stipulated by applicable laws are met.
- i) Not be subject to a decision based solely on automated processing, including profiling, where it has legal or other significant consequences for them, unless they have explicitly consented to it, or where it is necessary for the conclusion or performance of a contract with them.
- j) Lodge a complaint with the Information Commissioner and Personal Data Protection Authority regarding our data processing, providing details below, although we encourage the data subject to inform us of any problems they have, so that we can try to resolve them.
When you know that a data subject wishes to exercise any of their rights, you should contact the Legal Affairs/Personal Data Protection Office. There is a possibility that appropriate steps will need to be taken to identify the person making the request.
A formal request for access to data by a data subject (requester) for information that Samsung Electronics Austria GmbH can provide in writing, using Appendix 2 (Data Subject Request Form). However, data subject requests for access to data do not have to be formal or in writing (they can be submitted, for example, via social media or by phone). Any staff member who receives a request (whether made using the attached form or not) should forward it immediately to the Data Protection Officer and/or the Legal Affairs and Compliance team. If you have any doubts about whether a request has been submitted, you should discuss the circumstances with them.
The Data Protection Officer will respond to any request within 30 days of receipt, with certain exceptions (unless applicable law provides a shorter period, in which case that shorter period will apply). If Samsung is unable to provide the requested personal data, the reasons for this will be fully documented and the data subject will be notified in writing. The data subject will also be provided with details of the relevant supervisory authority to whom a complaint may be made, as required by applicable data protection law.
12. Procedure in Case of Data Security Breach
A data security breach is a "breach of security that leads to accidental or intentional destruction, loss, alteration, unauthorized disclosure, or other processing." A breach does not necessarily mean that personal data has been externally disclosed without proper authorization, but it may mean that someone has accessed it internally without proper permission.
We are obliged to notify the competent regulatory authority of certain data breaches and, in more limited cases, the data subject themselves.
13. Data Access Authorization
Authorization for access to personal data collected and/or used by Samsung Electronics Austria GmbH, Zagreb Branch is granted only to the following persons:
- For customer personal data collected through websites established for specific marketing purposes:
- authorized legal representatives of Samsung Electronics Austria GmbH, Zagreb Branch
- marketing managers whose job responsibilities include handling personal data collected for specific marketing purposes
14. Useful Contact Information
You can contact the Data Protection Service at:
Samsung Electronics Austria GmbH, Zagreb Branch, Radnička cesta 37b, Zagreb, Republic of Croatia
Email: Please contact us by sending an email to dataprotection.sead@samsung.com.
