Samsung account Privacy Notice

Samsung Electronics prioritizes safe protection of user privacy.

To ensure user trust, Samsung Electronics utilizes personal information provided by users in a lawful manner for the stated purposes, and does its utmost to ensure user rights and choices with regard to the personal information provided. For this, the use and protection of collected personal information are transparently disclosed. Also, rights of the users and how they can be exercised are explained in detail.

1. Items for Personal Information Collection and Methods of Collection

(1) Items for Personal Information Collection

Samsung Electronics collects the following personal information when users register as members or use our services. Only the personal information items absolutely necessary for providing services are collected. If additional personal information is required, these items are only collected with separate and optional user consent.

Category	Details
① Required Information	① Personal information required for membership registration • ID (email address/mobile phone number), password, name, date of birth, country information • Mobile phone number, duplication information (DI), encrypted connecting information (CI), information of the legal representative for children under 14 years of age (name, date of birth, CI, DI of the legal representative) ② Information necessary for using each service, service usage records/purchases or repair-related information • Usage record of each service/information related to purchase or after-sale service • Log data, cookies and web beacons, usage time, app installation and deletion record, search words entered by the user, information uploaded by the user, records of logging in at a store • Device information (information given to the device during the process of production and sale and information given during the operation of the device: includes IMEI, DUID, device model information, MCC, MNC, device OS information, MAC Address, access IP information, etc.), device purchase date (date of first use, date of first call, proof of purchase, etc.) • Phone number, contact list, my profile, incoming/outgoing calls, attached files • Usage record for Samsung Members Community (includes nicknames, postings, photos, comments, etc. entered by the user) • Usage record of Samsung Rewards Service (point usage details) • Location data: Collected only when it is necessary to provide the service (for example, “Find My Mobile” service, etc.) with separate consent. • Voice data: Collected only when it is necessary to provide the service (for example, “S Translator” service, etc.) with separate consent. • Information required to register for Samsung Electronics membership services: (Detailed information on Privacy Notice for Samsung Electronics membership) • Homepage, membership site, Samsung Electronics Store, other event site activity information [ID, password, personally identifiable information, access log, usage record, cookies] ③ Samsung Cloud (collected only when using Samsung Cloud service) • Content backed up or synchronized on Samsung Cloud such as Schedule, Contacts, Messages, Gallery (including details of photos/videos such date and time recorded, location information at the time of shooting, etc.), S Note, Memo, Reminder, Device Settings (ex. internet browser and email settings / accessibility, keyboard, face recognition and fingerprint settings etc. and relevant data • Information received from Microsoft (if Gallery is synchronized with Microsoft OneDrive): Gallery contents synchronized through OneDrive (including details of photos/videos such as path of files, shooting date and time, location information at the time of shooting, etc.) and relevant data, photo/video classification information (person, place, object, etc.) ※ Specific information items provided by Microsoft may vary slightly depending on the Samsung Cloud version, etc. that the User is using. ④ Items collected for the provision of the customization service (collected only when using the customization service) The Company’s devices and services are designed to provide Customization Service by cleverly and intelligently predicting what the user needs and wants. If the user activates the Customization Service option, the user can receive an improved user experience such as customized contents, recommendations, etc. through the device and service, and the information necessary to provide such Customization Service (hereinafter referred to as “information for Customization Service”) is as follows. • Device information (unique identification information, setting information, status information, list of apps installed and frequency of use) • Metadata of played music and saved photos • Contacts and frequency of contact • Internet browser usage record (visited site information, search words, bookmarks, etc., excluding when using the secret mode) • Location data • Information and usage records registered in the Company's services • Third-party service information the user linked to Customization Service ⑤ Items collected for the provision of the Share function (collected only when using the Share function) • Samsung account ID, phone number (SIM, phone numbers saved on the device, or phone numbers registered on the Samsung account), contact information (names/phone numbers/emails saved in Contacts) ※ For a more convenient and accurate registration, the registered phone number may be collected/used for the two-step verification of the Samsung account. ※ Contact information collected to provide Share functions may be commonly used by other services (e.g. Quick Share) that are provided by Samsung through utilizing contact information. ⑥ Items to be collected for the provision of Secure Wi-Fi service (limited to only when using the applicable service) • Data to be transmitted in encrypted form ⑦ Items collected for customer support • Samsung account information, email address or phone number, country information (language information), product model name, service version information, content of inquiries entered by individuals and files attached thereto, and system log files • SIM card serial number, service provider, base station information (only for sending call disconnection logs) • Additional information collected when applying for a refund (of the following, items that require additional collection may vary depending on the payment method, etc.) : Account information (bank, account number, account holder), contacts (phone number), purchased content, payment date and time, payment amount, Samsung Account information used at the time of payment, mobile phone number and service provider or credit card company and authorization number used for payment, reasons for refund request/payment cancellation
② Optional Information	① Reason for registration, occupation, marital status, wedding anniversary, interest categories, main purpose of mobile phone use (personal/business), household information [name(s) of spouse and/or children • phone number • address • E-mail • social media account information • date of birth, etc.] ② Information relating to mobile phone purchase [duration of contract in months, place of purchase, purchase price] ③ Marketing, event details • Information related to marketing activities/events [details of marketing activity and results, details of event participation and results] • Possession and use of coupons/event codes, prize selection/receipt ④ Affiliate details • Information related to the partners and partner franchise stores [partner name, partner membership number, partner membership registration date, event participation date, partner benefits and marketing information] ⑤ Information entered by customers at the time of service registration and use • Information entered at the time of Samsung account registration: Photos • Information entered when using My Profile: Location ⑥ Other information provided by the User himself/herself related to conclusion/maintenance/performance/management/event participation, etc. of agreements

Category

Details

① Required Information

① Personal information required for membership registration
• ID (email address/mobile phone number), password, name, date of birth, country information
• Mobile phone number, duplication information (DI), encrypted connecting information (CI), information of the legal representative for children under 14 years of age (name, date of birth, CI, DI of the legal representative)

② Information necessary for using each service, service usage records/purchases or repair-related information
• Usage record of each service/information related to purchase or after-sale service
• Log data, cookies and web beacons, usage time, app installation and deletion record, search words entered by the user, information uploaded by the user, records of logging in at a store
• Device information (information given to the device during the process of production and sale and information given during the operation of the device: includes IMEI, DUID, device model information, MCC, MNC, device OS information, MAC Address, access IP information, etc.), device purchase date (date of first use, date of first call, proof of purchase, etc.)
• Phone number, contact list, my profile, incoming/outgoing calls, attached files
• Usage record for Samsung Members Community (includes nicknames, postings, photos, comments, etc. entered by the user)
• Usage record of Samsung Rewards Service (point usage details)
• Location data: Collected only when it is necessary to provide the service (for example, “Find My Mobile” service, etc.) with separate consent.
• Voice data: Collected only when it is necessary to provide the service (for example, “S Translator” service, etc.) with separate consent.
• Information required to register for Samsung Electronics membership services: (Detailed information on Privacy Notice for Samsung Electronics membership)
• Homepage, membership site, Samsung Electronics Store, other event site activity information [ID, password, personally identifiable information, access log, usage record, cookies]

③ Samsung Cloud (collected only when using Samsung Cloud service)
• Content backed up or synchronized on Samsung Cloud such as Schedule, Contacts, Messages, Gallery (including details of photos/videos such date and time recorded, location information at the time of shooting, etc.), S Note, Memo, Reminder, Device Settings (ex. internet browser and email settings / accessibility, keyboard, face recognition and fingerprint settings etc. and relevant data
• Information received from Microsoft (if Gallery is synchronized with Microsoft OneDrive): Gallery contents synchronized through OneDrive (including details of photos/videos such as path of files, shooting date and time, location information at the time of shooting, etc.) and relevant data, photo/video classification information (person, place, object, etc.)

※ Specific information items provided by Microsoft may vary slightly depending on the Samsung Cloud version, etc. that the User is using.

④ Items collected for the provision of the customization service (collected only when using the customization service)
The Company’s devices and services are designed to provide Customization Service by cleverly and intelligently predicting what the user needs and wants. If the user activates the Customization Service option, the user can receive an improved user experience such as customized contents, recommendations, etc. through the device and service, and the information necessary to provide such Customization Service (hereinafter referred to as “information for Customization Service”) is as follows.
• Device information (unique identification information, setting information, status information, list of apps installed and frequency of use)
• Metadata of played music and saved photos
• Contacts and frequency of contact
• Internet browser usage record (visited site information, search words, bookmarks, etc., excluding when using the secret mode)
• Location data
• Information and usage records registered in the Company's services
• Third-party service information the user linked to Customization Service

⑤ Items collected for the provision of the Share function (collected only when using the Share function)
• Samsung account ID, phone number (SIM, phone numbers saved on the device, or phone numbers registered on the Samsung account), contact information (names/phone numbers/emails saved in Contacts)

※ For a more convenient and accurate registration, the registered phone number may be collected/used for the two-step verification of the Samsung account.
※ Contact information collected to provide Share functions may be commonly used by other services (e.g. Quick Share) that are provided by Samsung through utilizing contact information.

⑥ Items to be collected for the provision of Secure Wi-Fi service (limited to only when using the applicable service)
• Data to be transmitted in encrypted form

⑦ Items collected for customer support
• Samsung account information, email address or phone number, country information (language information), product model name, service version information, content of inquiries entered by individuals and files attached thereto, and system log files
• SIM card serial number, service provider, base station information (only for sending call disconnection logs)
• Additional information collected when applying for a refund (of the following, items that require additional collection may vary depending on the payment method, etc.)
: Account information (bank, account number, account holder), contacts (phone number), purchased content, payment date and time, payment amount, Samsung Account information used at the time of payment, mobile phone number and service provider or credit card company and authorization number used for payment, reasons for refund request/payment cancellation

② Optional Information

① Reason for registration, occupation, marital status, wedding anniversary, interest categories, main purpose of mobile phone use (personal/business), household information [name(s) of spouse and/or children • phone number • address • E-mail • social media account information • date of birth, etc.]

② Information relating to mobile phone purchase [duration of contract in months, place of purchase, purchase price]

③ Marketing, event details
• Information related to marketing activities/events [details of marketing activity and results, details of event participation and results]
• Possession and use of coupons/event codes, prize selection/receipt

④ Affiliate details
• Information related to the partners and partner franchise stores [partner name, partner membership number, partner membership registration date, event participation date, partner benefits and marketing information]

⑤ Information entered by customers at the time of service registration and use
• Information entered at the time of Samsung account registration: Photos
• Information entered when using My Profile: Location

⑥ Other information provided by the User himself/herself related to conclusion/maintenance/performance/management/event participation, etc. of agreements

※ Samsung Electronics does not collect sensitive information that may infringe upon the user’s privacy (ideology, beliefs, membership of or withdrawal from unions or political parties, political opinions, information about health, sex life, etc.).

※ Samsung Electronics does not collect personal information from users under 14 years of age. However, when personal information of users under 14 years of age is collected for use of services, prior consent will be obtained from the legal representative. Such personal information will be deleted immediately upon completion of use, and will be managed safely during use.

In addition, the Company shall not use the personal information of users under 14 years of age for marketing purposes.

(2) Methods of Personal Information Collection

Samsung Electronics collects personal information as follows.

• Personal information provided by the user is collected at sign-up or when using services
• Information automatically generated by apps or websites, etc. during use of services (IP addresses, service usage records, etc.) is collected
• Personal information is collected over the phone, or through e-mail, the customer service message board, or the customer service menu while handling customer service inquiries
• Personal information is collected through events, promotions, etc. that the user has participated in
• Personal information is collected following lawful process such as user consent received through external companies and organizations that are partners to Samsung Electronics

2. Purposes of Collecting and Using Personal Information

Samsung Electronics uses collected personal information as follows.

Purpose	Details
① Member management and verification	– User identification, confirmation of intent to register/withdraw membership, age verification and collection of legal representative consent, verification of user or legal representative – Prevention of unlawful use of services, processing user requests such as complaints – Delivery of notices, etc.
② Provision of Services	– Provision of products/services/contents, purchases and payments, and product shipping – Provision of Samsung Rewards services such as points accumulation and use – Provision of user-optimized services (customized contents and recommendations based on prior usage history) – Provision of after-sale service, update information, etc. for goods and services purchased by users
③ Provision of unified services through Samsung account	– Provision of the same usage environment and functions on various devices connected through Samsung account – Provision of continuous customer support services – Using various services based on Samsung account and syncing basic data between services [Example: My Profile] – Provision of communication functions such as profile sharing, content, sending/receiving messages and attached files, sharing functions for sharing content by creating groups or links, and video calls
④ Service improvement and development	– Customer satisfaction surveys, product/service usage analytics and statistics, market trend analyses, improvement of existing services, planning, research and development of new services
⑤ Use for marketing and advertising	– Provision of marketing information such as events and promotions and delivery of prizes, transmission of demographics or interest-based marketing messages and posting of advertisements
⑥ Purchase consultation and responding to customer inquiries	– Consultation reception and response provision, management of inquiries
⑦ Customization Service	– By activating the customization service option, Users can receive a better experience on relevant devices and services. For example, it can improve your user experience with Samsung services by offering hints and information customized for you when using the voice recognition service, or remembering the songs you enjoy listening to on rainy days and recommending it later. Or, if you give the command “Remind me to buy a bottle of water when I am almost home”, it can remember the command and remind you when you are almost home. – The aforementioned information for customization service is analyzed through an automated system and used for the provision of customized content and information, etc. on each service, analysis to provide better services, and the improvement and development of services as stated above. In addition, if there are advertisements that are legally posted/transmitted to the User (for example, if posting of an advertisement is unavoidable to provide the service for free, or if an advertisement is sent according to the User's consent, etc.), it may be used to provide the User with advertisements that the User may find the most useful.
⑧ Provision of Share function	– Support to find shareable Samsung Account Users through using the information saved in the Contacts of all devices logged in with the same Samsung account. – Support Samsung account users to find Share recipients using phone numbers or e-mail addresses on other services provided by Samsung using contact information (e.g. Quick Share) – Support convenient sharing of content (file, schedule, things-to-do, etc.) and profile photos among Samsung Account Users

3. Provision of Personal Information to Third Parties

Samsung Electronics does not provide personal information to third parties without user consent. However, the following cases are exceptions.

• When special legal provisions require personal information to be provided, or when providing personal information is inevitable for compliance with legal obligations
• When necessary for billing for service provision

After obtaining user consent, Samsung Electronics provides personal information to third parties as follows.

① (S Translator) Service

Recipient	Personal information provided	Purpose of use of the recipient	Retention and usage period
Nuance Communications Inc. (United States)	Voice to be translated	Improvement of voice recognition function, development of devices and services	Until the purpose is achieved

② When using the services of partners through Samsung account

Recipient	Personal information provided	Purpose of use of the recipient	Retention and usage period
View partners and information provided to each partner (https://account.samsung.com/membership/terms/privacypolicy/thirdpartyDisplay)	View partners and information provided to each partner (https://account.samsung.com/membership/terms/privacypolicy/thirdpartyDisplay)	Creation of a login credential or account for a partner service using Samsung account information; provision of account connection information to facilitate syncing Samsung with partner services	Until the purpose of service provision is achieved

The personal information provided to overseas third parties is as follows.

① Samsung Cloud Service (if Gallery is synchronized with Microsoft OneDrive)

Recipient	Contact information	Items to be transferred	Transferred country, date and time, and method	Recipient’s purpose of use, and retention and usage period
Microsoft	Microsoft Privacy, Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA, (+1) 425-882-8080	Encrypted ID, gallery contents synchronized through OneDrive (including details of photos/videos such as file path, shooting date and time, location information at the time of shooting, etc.) and relevant data	USA, Whenever photo/video files are synced to OneDrive	Until the end of provision of the Gallery Sync service through OneDrive

The matters detailed above are subject to change in the future. If the details to be provided to a third party are changed or additional personal information needs to be provided, such personal information is provided after obtaining separate user consent.

4. Consignment of Personal Information Handling

To provide better services, Samsung Electronics consigns handling of personal information to expert external contractors.

Name of consignee	Work to be consigned
Toss Payments Co., Ltd., KG INICIS Co., Ltd., Korea Information and Communications Co., Ltd.	Purchase and payment, settlement, voucher benefits operation
NICE Information Service Co., Ltd.	Real name verification in accordance with relevant laws
Harman Connected Service, Inc.	Operation and management of global cloud server where personal information is stored
Hydsoft CO., LTD	Operation and management of cloud server in China where personal information is stored
Samsung SDS Co., Ltd. and partners, Contentstech Co., Ltd.	Operation of Samsung account services, handling of customer inquiries
Macromill Embrain, Korea Research Co., Ltd., Korea Management Association Construction Co., Ltd., Nielsen Koreanclick Co., Ltd.	Customer satisfaction and usage behavior survey on devices
Samsung Electronics Service	Processing customer inquiries on Samsung Electronics business website, non-member customer inquiries, and responding to purchase consultation
Staffs Co., Ltd.	Complaint consultation/processing such as answering user inquiries or handling complaints
Nuance Communications Inc. (United States)	S-Translator voice recognition processing
LH Co., Ltd.	Constructing promotion event page/gathering applicants
CIZION	Social media comments service and purchase referral service through the comments service, verification of referral customers for referral bonuses and statistics service
ToBe Networks Inc., SureM Co., Ltd. Infobip Ltd.	Processing text verification required by services provided by Samsung account, Samsung Cloud, and Samsung, sending notices
InfoBank Corp.	Agency for sending event prizes
BIZTALK Co., Ltd.	Agency for sending KakaoTalk notification messages
Amazon Web Services Inc.	Operation and management of domestic cloud server where personal information is stored
eGlue Communications	Running events/promotions, sending prizes
ETNERS Co., Ltd.	Monitoring Samsung Electronics Service app and business website customer inquiry
Google, Inc.	Samsung account website user statistical analysis
Shinsegae Co., Ltd. and its partners (Sunwoo Co., Ltd., Efolium Co., Ltd., The Nature Holdings Co., Ltd.)	Shipping free gifts
TTB Corporation	Processing customer inquiry, checking service usage amount and usage history as per customer inquiry, service statistics system maintenance and operation for Samsung Cloud service
Samsung SDS Co., Ltd., Megazone Corp. and partners (Megazone Cloud Corp., Warepoint Co., Ltd., Matthias Solution Co., Ltd. , LOGOSIN Co., Ltd, ANDSOME&MOBILITY Corp.)	Developing source code related to server system change management, maintenance, and operation of Samsung Cloud service
3Channel Corp.	Running events
Manpower Korea Inc.	Samsung Electronics membership operation work (respond to customer inquiry and change information), provision of service and settlement
Samsung Electronics Philippines Corporation (SEPCO)	Operation and management of the cloud server
Samsung Welstory Co., Ltd. and partners (Young Sky Co., Ltd., MOZEN International Co., Ltd., AIDKOREA Company Co., Ltd., Taejin Com Co., Ltd., Daekyung I&C Co., Ltd., Allo Korea Co., Ltd., PGP Korea Co., Ltd., The Able Commerce Co., Ltd., Hansol Korea Co., Ltd., Starbucks Coffee Korea Co., Ltd., M&S Co., Ltd., Silver Tree Co., Ltd., Cowins Retail Co., Ltd., KT ALPHA Co., Ltd., Human Powertech Co., Ltd.)	Shipping free gifts
STMNET Co., Ltd. and partners (Namutech Co., Ltd., DAE DONG C&G Co., Ltd., Dongyang Kitchen Nara Co., Ltd., Hana Flower Co., Ltd., Coop Marketing Co., Ltd., HMT Co., Ltd., UB Korea Co., Ltd., UK Co., Ltd., JM Korea Co., Ltd., Raon Ato 70 Co., Ltd., Chansol Nara Co., Ltd., Taeyoung Mnet, Taejin Com Co., Ltd., TW CNS Co., Ltd., Haru Zest Co., Ltd., Hansol Korea Co., Ltd., Zlgoon Co., Ltd., Posio Co., Ltd., Eden Glass Co., Ltd., Smartcon Corp., Nature World Co., Ltd., Intervision Co., Ltd., eBizMart Co., Ltd., Jcohs Co., Ltd., CSE Co., Ltd., Lock&Lock Co., Ltd., Millyang BoneChina Co., Ltd., Saewoom Co., Ltd., Allinfok Co., Ltd., ICOMAX Co., Ltd., iMarketKorea Inc., JC Communication Co., Ltd., GB Company Co., Ltd., Alto Design Co., Ltd., iMall PMG Co., Ltd., Yukyung Corporation, Duin Digitech Co., Ltd.)	Shipping free gifts
Bizmarket Co., Ltd. and partners (Daou Tech., Inc.)	Operation of free gifts (supply, shipping, etc.)
AK S&D Inc. and partners (Hansol Korea Co., Ltd., JS Commerce)	Prize operation (supply and delivery, etc.)
Shinsegae Inc. and partners (Sunwoo Co., Ltd., Efolium Co., Ltd.)	Operation of free gifts (supply, shipping, etc.)
Samsung Card Co., Ltd. and partners (Sunwoo Co., Ltd., CMG Glonet Co., Ltd., JS Korea Co., Ltd., Daedong C&G Co., Ltd., Coop Marketing Co., Ltd., Lock&Lock Co., Ltd., Good&Plus Co., Ltd., Ilshin Enterprise Co., Ltd., UK Co., Ltd., Spigen Korea Co., Ltd., Jupazip Co., Ltd., Sugarbubble Co., Ltd., KwangJuYo Co., Ltd., Sillymann Co., Ltd., Zespa Co., Ltd., Woongjin Foods Co., Ltd., M&J Marketing Co., Ltd., Sunghin General Trading Company, Taekyung Nongsan Co., Ltd., MCore Co., Ltd., SeoHyun PMS Co., Ltd., GNO Networks Co., Ltd., Cloud Nine, Pink, Vaimar Korea Co., Ltd., D&J Commerce, Allerman Co., Ltd., Jcohs Co., Ltd., Dongyang Kitchen Nara Co., Ltd., BCM Korea Co., Ltd., Mozen International Co., Ltd., Narae BNC Co., Ltd., KD Global Co., Ltd., Cuckoo Electronics Co., Ltd., JJ Story Co., Ltd., Ambient Lounge, Daeyu Life Co., Ltd., MarketB Co., Ltd., Mooas Co., Ltd., Living Crafts Co., Ltd., BNK Global Co., Ltd.)	Prize operation (supply and delivery, etc.)
IBM Korea and partners (ICAN managemet Inc., Adobe Systems Korea)	Operation of Korean general NextCDM platform and transmission of campaigns
Samsung SDS, Bespin Global, BTC, DOYUN, DBJ, Fin High, Google LLC	System development, maintanance, service server and data management
Cheil Worldwide Inc. and its partners (DOES interactive, New Turn Group, D.Tribe Co., Ltd., dmajor Company, Designfever, Bstones, I4UWORKS Inc., Mpuzzle Communications, Open Tide China (Korea) Co., Ltd., PentaBreed Co., Ltd., Mega Communications, 99℃, HelloNature, Univ Tomorrow Co., Ltd., Plan-S, Marketing Jiymlab, Sean Communications, iPartners, RED Communications, PengTai Greater China Co., Ltd., digitalDigm Inc., Group IDD, Macon Corp., Oblique Table, Oproject, KPR & Associates, Inc., Samsung Welstory Co., Ltd., Newtype Imageworks, ANP Communications, Imfine, SPtek, DreamYoungs)	Agency for events
Microsoft Korea Inc.	Operation and management of domestic cloud server where personal information is stored
Adobe Systems Software Ireland Limited	Agency for sending messages (emails)
Leo Burnett Korea Inc.	Operating community events and marketing
Concentrix Service Korea Corporation	Managing community postings and VOC processing
Khoros, Persistent, Infogain, Hinterlands, Clarotest, iTalent, Social Edge, Cloud Elements, Akismet, Sumo Logic, Akamai, Smooch, Netbase, Ooyala, Box, Infoesearch, Netmania, ServiceRocket	Development, operation, and maintenance of community solutions
Samsung SDS	Introduction of Korean general Big Data analysis solutions and analysis services
Samsung SDS and its partner (Microsoft Korea Inc.)	Operation of Korean general NextCDM Cloud
Jade Apple Marketing Inc.	Sending promotional MMS to membership customers during offline events
Google Asia Pacific Pte. Ltd.,	Operation and management of cloud server where personal information is stored
Multicampus Co., Ltd. and partner(Samsung SDS)	Website and system management, web page operation, conducting of online marketing
Samsung SDS Co., Ltd. and its partners (Irush Co., Ltd., Uzen Co., Ltd., GentlePie Co., Ltd., Hi Web Solution Co., Ltd., Pickple CNS Co., Ltd.)	Member management of Samsung.com, delivery of notices, handling of customer inquiries, sending DMs, system development and operation for provision of services, system monitoring
Kantar Korea Co., Ltd., Gallup Korea Co., Ltd., Buzzmetrics Co., Ltd. Global Research Co., Ltd.	Samsung Electronics membership, Membership Blue product customer satisfaction and usage behavior surveys
Pengtai Greater China Co., Ltd.	Conducting of Samsung.com and Samsung Electronics membership online marketing tasks
Megazone Corp. and partners (Megazone Cloud Corp.)	Operation and management of Samsung Rewards server
SAMSUNG ELECTRONICS SERVICE CO., LTD and partner(SAMSUNG ELECTRONICS SERVICE CO., LTD Privacy Policy(https://www.samsungsvc.co.kr/utils/dealing))	(Service)Product Repair, Consultation and Research
Ethan & Alice Marketing and partner(Spy Communications, TI Mobile)	Sending advertise MMS to membership customer when ON/OFF events
KMAC and partner(telcoin)	Sending Gifts
FM Communications	Delivery and management of gifts to event customers
Korea Credit Bureau	Cell phone identity certification
Criteo Korea and partner(Equinix Asia Pacific Pte Ltd.)	Digital advertisement service
Samsung SDS and its affiliates (Miracom and Contentstech)	System development and operation to provide Customization Service
Bluein Maketing Service Inc.	Running promotions
Samsung SDS Co., Ltd. and its partner (CMC Global)	Management of secure Wi-Fi members, provision of service, improvement of existing services
Google Cloud Platform	Operation and management of cloud server to provide secure Wi-Fi service
GZ Systems Limited	Operation and management of cloud server to provide secure Wi-Fi service

Personal information handling is consigned as follows outside Korea.

Name of Consignee	Contact information	Items to be transferred	Transferred country, date and time, and method	Recipient’s purpose of use, and retention and usage period
Amazon Web Services Inc.	02-735-6888 (Korea office)	1. Items collected under Paragraph (1), all membership information, all data collected by GCRM (all customer information collected in the AWS Cloud Korea region server)	USA/Germany/Ireland/Japan, real-time update, server-to-server network communication	In the event of unavailability of the AWS Cloud Seoul region server, transfer to the Tokyo region server for uninterrupted service response. The period of retention and use for the recipient of the transfer shall be the same as the period of retention and use of membership customer information by the personal information manager.
Samsung R&D Institute India Bangalore Private Limited	comp.srib@samsung.com	1. All items collected under Paragraph (1), customer information collected from the Samsung account and services such as ID, name, date of birth, and country information	India, real-time update, transmission over the network	The operation and management of the cloud server where personal information is stored during the personal information storage period, system development for service provision, customer data analysis for service improvement (retention period: up to 1 month)
Samsung Electronics Polska Sp. z o.o	dass.srpol@samsung.com	1. All items collected under Paragraph (1), customer information collected from the Samsung account and services such as ID, name, date of birth, and country information	Poland, transmission over the network at the time of data analysis	Customer data analysis for service improvement, retention period: up to 1 month
Joyent Inc.	https://www.joyent.com/contact/+1 415.400.0600	Collected items specified in Section 1. (1)	Netherlands/USA/Singapore, real-time update, server-to-server network communication	The operation and management of the cloud server where personal information is stored during the personal information storage period, the period of retention and use for the recipient of the transfer shall be the same as the period of retention and use of customer information by the personal information manager
Samsung Electronics America, Inc. (SEA) and partners (Infovision, Worldlink)	NAPrivacy@sea.samsung.com	Collected items specified in Section 1. (1)	USA, real-time update, server-to-server network communication	Operating and managing cloud server that stores personal information during the personal information storage period
Infovision	info@infovision.com	Collected items specified in Section 1. (1)	USA, real-time update, server-to-server network communication	Operating and managing cloud server that stores personal information during the personal information storage period
Worldlink	support@worldlink.com.np	Collected items specified in Section 1. (1)	USA, real-time update, server-to-server network communication	Operating and managing cloud server that stores personal information during the personal information storage period
Google INC.	https://analytics.google.com/	Collection of cookies, data related to device browser, IP address, site/app activity (not sending personally identifiable information)	USA, real-time update, web-to-server network communication	For gathering statistics on user interactions taking place on websites and apps (providing and maintaining IP address service security, and notifying User’s access country information), User and event data stored for 26 months
Samsung Electronics Philippines Corporation (SEPCO)	+63 2 7214 7777	Among the collected items, the name, URL, ID and PW of the website selected by the user, the user’s payment methods and payment details, etc. 1. Items collected under Paragraph (1)	Philippines, real-time update, server-to-server network communication	The establishment and operation of a statistical system that operates/manages the cloud server where personal information is stored during the personal information storage period and processes encrypted personal information, the period of retention and use for the recipient of the transfer shall be the same as the period of retention and use of customer information by the personal information manager
Microsoft Korea Inc.	https://azure.microsoft.com/ko-kr/contact/	Collected items specified in Section 1. (1)	Ireland/USA/Singapore, real-time update, server-to-server network communication	Operating and managing cloud server that stores personal information during the personal information storage period
Adobe Systems Software Ireland Limited	02-530-8000 (Korea office)	1. Items collected under Paragraph (1), email address (encrypted, hashed information), behavioral information for the usage and browsing of cookie-based websites	Singapore/Australia, real-time update, network transmission	Used for advertising/targeting purposes (email: information not retained and deleted after using as information for sending emails, cookie data: up to 180 days, uploaded customer information data: up to 24 months)
Khoros, AWS, Infogain, iTalent, Social Edge, Cloud Elements, Akismet, Sumo Logic, Akamai, Smooch, Netbase, Ooyala, Box, ServiceRocket	support@khoros.com	Nickname, follow/following list, postings created by the User	USA, real-time update, network transmission	Server provision and server maintenance for community operation, retention until the purpose of use is achieved, until withdrawal, or until data deletion is requested
Persistent, Infoesearch	support@khoros.com	Nickname, follow/following list, postings created by the User	India, real-time update, network transmission	Server provision and server maintenance for community operation, retention until the purpose of use is achieved, until withdrawal, or until data deletion is requested
Hinterlands	support@khoros.com	Nickname, follow/following list, postings created by the User	Australia, real-time update, network transmission	Server provision and server maintenance for community operation, retention until the purpose of use is achieved, until withdrawal, or until data deletion is requested
Clarotest	support@khoros.com	Nickname, follow/following list, postings created by the User	Argentina, real-time update, network transmission	Server provision and server maintenance for community operation, retention until the purpose of use is achieved, until withdrawal, or until data deletion is requested
Netmania	support@khoros.com	Nickname, follow/following list, postings created by the User	United Kingdom, real-time update, network transmission	Server provision and server maintenance for community operation, retention until the purpose of use is achieved, until withdrawal, or until data deletion is requested
Google Asia Pacific Pte. Ltd.	02-531-9000 (Korea office)	1. Items collected under Paragraph (1), hashed email address/mobile phone number, behavioral information for the usage and browsing of cookie-based websites	USA, Chile, Ireland, Netherlands, Denmark, Finland, Belgium, Singapore, Taiwan (Google Data Center), real-time update, network transmission	Used for advertising/targeting purposes (consignment of processing), deleted immediately after advertising/targeting is complete (usually within 48 hours)
Criteo Korea(Equinix Asia Pacific Pte Ltd.)	d.kim@criteo.com (ylo@ap.equinix.com)	1. Items collected under Paragraph (1), hashed email address, hashed mobile phone number, behavioral information for the usage and browsing of cookie-based websites	Japan (Criteo Data Center), transfer when uploading data list to data center	Use for advertising/targeting purposes (consignment of processing), Hashed email : deletion after maximum 13 months storage, Cookie ID : deletion after maximum 13 months storage
Samsung Research India-Noida	https://research.samsung.com/sri-n	1.(1) Among the collected items of personal information, Samsung Account country code, information necessary for use of service, records of use of service/purchase-related information	India, Transmission over network at the time of use of service	Operating and managing cloud server that stores personal information during the personal information storage period
Samsung SDS Co., Ltd.’s partner (CMC Global)	https://cmcglobal.com.vn/contact-us	1.(1) Among the collected items of personal information, Samsung Account country code, information necessary for use of service, records of use of service/purchase-related information	Vietnam, Transmission over network at the time of use of service	Operating and managing cloud server that stores personal information during the personal information storage period
GZ Systems Limited	finance@purevpn.com	1.(1) Among the collected items of personal information, Samsung Account country code, information necessary for use of service, records of use of service/purchase-related information	Pakistan, Transmission over network at the time of use of service	Operating and managing cloud server that stores personal information during the personal information storage period
DataDome	privacy@datadome.co	1. Account/identification/access information required for security solution operation among the items collected under Paragraph (1)	France, real-time update (network communication)	Operation of security solutions for personal information protection, 30 days
Samsung SDS Co., Ltd.’s partner (Samsung Data Systems India Private Limited)	https://www.samsungsds.com/in/index.html	Collected items specified in Section 1. (1)	India, real-time update, server-to-server network communication	Operating and managing cloud server that stores personal information during the personal information storage period

When consigning handling of personal information, Samsung Electronics enters into an agreement containing the following terms with the consignee to ensure safe protection of personal information, and manages consignees to ensure safe handling of personal information.

• Prohibition on handling of personal information not associated with the consigned affairs
• Technical and administrative measures to protect personal information
• Restrictions on re-consignment of consigned affairs to other firms
• Obligation to return or delete personal information after completion of consigned affairs
• Matters relating to obligations including compensation for damage, etc.

If there are changes to consignees or the affairs consigned, Samsung Electronics will inform users through the Privacy Notice or through individual notice.

5. Deletion of Personal Information

Upon termination of collection and utilization of personal information such as withdrawal of membership, Samsung Electronics will immediately delete the personal information in question.

However, some items are destroyed after being stored for a certain period of time after membership withdrawal for the purposes of preventing fraudulent subscription/use of services, settlement of reward points, and processing of CS as follows.
– For the purposes of preventing fraudulent subscription/use of services and settlement of reward points: Encrypted CI, reward points accumulation/use history → Store for 12 months after membership withdrawal
– CS processing purposes: GUID, Samsung account ID, encrypted CI, reward points accumulation/use history → Store for 90 days after membership withdrawal

However, pursuant to Article 39-6 of the Personal Information Protection Act, the personal information of users that has not been used for a period of one year shall be stored separately, and if not used again, shall be destroyed after four years.

In the following cases where personal information must be retained for a certain period in accordance with other laws and statutes, Samsung Electronics will delete the personal information after safely retaining the personal information for the applicable period.

Retained Items	Retention Period	Legal Grounds
Records on contracts or cancellation of purchases:	5 years	Act on the Consumer Protection in Electronic Commerce, etc.
Records of payments and supply of goods, etc.	5 years	Act on the Consumer Protection in Electronic Commerce, etc.
Records of the handling of consumer complaints or disputes	3 years	Act on the Consumer Protection in Electronic Commerce, etc.
Records of the collection, handling, usage, etc. of credit information	3 years	Credit Information Use and Protection Act
Records on labeling/advertising	6 months	Act on the Consumer Protection in Electronic Commerce, etc.
User logs such as Internet logs / data recording users’ place of access	3 months	Protection of Communications Secrets Act
Other data used for verifying communication	12 months	Protection of Communications Secrets Act

(1) Procedure for deletion

Users’ personal information is deleted immediately upon termination of use. As mentioned above, if personal information needs to be retained, the personal information will be retained for the legally prescribed period after moving to a separate database (DB) or location, and will be deleted immediately upon termination of this period.

(2) Method of deletion

Samsung Electronics will delete personal information saved in electronic file form in a manner that prevents access of records, and personal information recorded on paper will be deleted by shredding or incinerating.

6. Rights of Users and Legal Representatives and Methods of Exercise of Such Rights

Samsung Electronics respects users’ rights to personal information. Users (legal representatives if the user is under 14 years of age) may, at any time, file a request to Samsung to view, correct, delete, suspend handling of, or withdraw consent to furnishing of personal information using the following methods. However, exercise of some rights may be restricted in accordance with the Personal Information Protection Act and other related laws and statutes.

• Using the personal information settings menu in a webpage, app or service
• Using the Samsung Privacy Site (https://privacy.samsung.com)
• By telephone (1588-4730)
• Contacting the customer support department or personal information protection manager (see next section)

7. Customer Support Department and Personal Information Protection Manager

To protect users’ personal information and address personal information-related inconveniences, Samsung Electronics designates customer service department and personal information protection managers.

Users may file requests with our personal information protection managers to exercise rights to their personal information, and may report all personal information protection-related complaints arising while using Samsung Electronics services. Samsung Electronics will promptly and faithfully respond to all user reports.

(1) Customer Support Department
• Customer Support Department: Samsung Electronics Big Data Center
• Telephone: 1588-3366
• Direct inquiries to: https://help.content.samsung.com

(2) Personal information protection manager and personal information protection department
• Personal information protection manager: Head of Personal Information Protection Office
• Personal information protection department: Personal Information Protection Office
• Telephone: 1588-4730
• Direct inquiries to: privacy.sec@samsung.com

(3) Other Institutions
Please inquire with the agencies below to report other infringement of personal information or request consultation.

• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118 without area code)
• Cyber Investigation Department, Supreme Prosecutor’s Office (www.spo.go.kr / 1301 without area code)
• Cyber Investigation Bureau, Korean National Police (ecrm.cyber.go.kr / 182 without area code)

8. Matters Relating to Installation, Operation, and Rejection of an Automatic Personal Information Collection Tool

Samsung Electronics uses cookies to save and retrieve user information as needed. Cookies are very small text files sent by the server used to operate the Company’s website to the user’s browser, and are stored in the user’s device storage.

(1) Purpose of use of cookies
Samsung Electronics uses cookies for the following purposes.

• Implementing automatic sign-in features
• Analyzing member/non-member visit frequency or visit duration, etc.
• Identifying user preferences and areas of interest, and checking usage records
• Identifying participation in various events and number of visits, etc. for targeted marketing and furnishing of customized services

(2) How to Set Cookies
Users can choose whether or not to allow cookies. Cookie permissions can be changed in the settings menu of the user’s web browser. A user may also choose to refuse all cookies (e.g. Internet Explorer 11.0: Tools > Internet Options > Personal Information). Please note that some services may become unavailable if a user does not allow cookies.

9. Processing of personal location information

Samsung Electronics processes personal location information as follows.

< Customization Service >

Category	Details
Purpose of processing personal location information	Provision or recommendation of information search results and content using location information
Period of retention of personal location information	30 days
Grounds and period for retaining data verifying the collection, use, and provision of personal location information	Refer to Article 5 Paragraph 3 of the Location Information Terms and Conditions
Procedures and methods of destroying personal location information	Same as the procedure and method of deleting personal information specified in Article 5
Provision of personal location information to third parties	Not applicable, as there is no personal location information provided to third parties
Method of notice when providing personal location information	Not applicable, as there is no personal location information provided to third parties
Rights of the legal guardian of a child eight years or younger, etc.	Refer to Article 10 and Article 12 of the Location Information Terms and Conditions
Information of the person responsible for management of location information	Same as the person responsible for management of personal information specified in Article 7

10. Measures for Safe Protection of Personal Information

Samsung Electronics employs a variety of protective measures and efforts for safe protection of users’ personal information.

• Administrative measures: Establishing and executing internal management plans, administering personal information education and training
• Technical measures: Operation of devices to restrict access to personal information, restrictions on access privileges, keeping of personal information handling system access records and use of security features to prevent forgery/falsification, encryption of personal information, installation of vaccine programs and security programs, etc.
• Physical measures: Restricted access to server rooms and document repositories

11. Updates to the Privacy Notice

The Privacy Notice may be updated at any time to reflect changes such as the personal information items handled. If the Privacy Notice is updated, users will be informed beforehand through notices, etc. at least 7 days before the update enters into effect.

Privacy Policy Version Number: V 10.7
Privacy Policy Enforcement Date: October 25, 2022