Activity	Processing purpose and legal basis	Personal data categories	Data source
Installer locator	When you search for an installer via our Installer locator, the data you submit will be processed for the purpose of processing your request and furthermore to pursue our legitimate interest to process your request, and to obtain commercial and statistical insights about how the installer locator is used by our Website visitors.	Location as provided by you (for example postal code/place name).	You
Installer locator contact form & Get in touch with an installer through the heating solution advice tool	When you submit your contact details via the contact form within the Installer locator your data is immediately shared by our system (Adobe Experience Manager) with our e-mail client Sendgrid in order to inform the relevant installer and send you a confirmation e-mail. The data only remains in the working memory of AEM and Sendgrid. When the data is sent to the installer, all personal data is immediately deleted from our system. Only anonymous statistical data is kept, such as the amount of contact requests submitted for each installer and when these are submitted. The processing of your data in this context is based on the purpose of our legitimate interest to facilitate initial contact between you and a selected installer and on the grounds of performing under our agreement that we will share this data with the installer. The installer is an independent data controller for your personal data. Please contact the installer for their privacy notice on how they process your personal data.	Your name, surname, email address, telephone number, mobile phone number, information about your home and household that you provided, other information that you requested to the installer.	You
Get in touch with our sales team through the contact form	When you submit your contact details via the “Get in touch” contact form, your data is immediately shared by our system (Adobe Experience Manager) with our service provider Verticurl whom engages Oracle. Oracle shares your data with Salesforce.com (“SFDC”) in order to connect you to a representative from our sales team so that you can receive a call back or an email reply to your request, depending on the option you chose via the contact form. When the data is sent to Eloqua, all personal data is immediately deleted from our system (Adobe Experience Manager). The data only remains in the working memory of Eloqua and SFDC. If there is no usage history for lead, contact or opportunity within seven (7) years, the data will be deleted from the  SFDC system. Additionally, the data will be deleted if you exercise your right to deletion of data under GDPR. The legal basis for our collection, use and sharing of your personal data is your consent you provide to us at the point of collection of your information through the “Get in touch” contact form. You may withdraw your consent any time.	Your name, surname, email address, telephone number	You
Cookies and similar techniques	Multiple categories of cookies are used on our Website for different purposes, including for technical, analytical and marketing purposes. Data collected by us through the use of cookies may qualify as "personal data" within the meaning of data protection regulations, especially where it concerns so-called analytical and tracking cookies. Kindly refer to our Cookie Notice for more information about the specific cookies used on our Website and how to manage your cookie preferences via the Cookie Management Tool on the Website.	Kindly refer to our Cookie Notice.	Kindly refer to our Cookie Notice.
Delivery of website	When you visit our Website, the server on which the website is hosted processes the IP-address of the device you use to visit the Website. The processing of such data is based on the purpose of our legitimate interest to provide you with the requested web page.	IP-address	Your device.
Newsletter with SEACE marketing and sales communication	When you sign up via our contact form to receive the Newsletter from SEACE, the data you submit will be processed for the business and commercial purpose of providing you with relevant SEACE communication. This communication can include Samsung news, and information on our services; as well as marketing, sales and product updates. The legal basis for our collection, use and sharing of your personal data is your consent you provide to us at the point of collection of your information. We will periodically send you relevant email newsletters or promotional emails. You may withdraw your consent any time.	Name E-mail address Professional role Country	You
Connecting you to our business partners	When you sign up via our contact form and choose your country to be “Germany” or “the Netherlands”, you may be directly contacted by our local business partners in Germany: MTF)or in the Netherlands: Ambrava. The data you submit will be processed for the business and commercial purpose of connecting you for further communication by our local partners. This communication can include news, information on services, as well as marketing, sales and product updates. The legal basis for our and their collection, use and sharing of your personal data is your consent you provide at the point of collection of your information. You may withdraw your consent any time with Samsung and our local partners.	Name E-mail address Professional role Country	You

 

Where required and provided with adequate protection measures, we may process your data beyond the purposes mentioned above, for the purpose of complying with a legal obligation or the legitimate interests of our own or those of third parties. Legitimate interests may include:

-        to ensure that our networks and information are secure

-        the assertion of legal claims and defence of legal disputes;

-        enabling external experts to advise us (including for example accountants and legal advisors); and

-        the possible disclosure and transfer of information in the context of a corporate transaction or merger in which SEACE is involved.

In regards to our Website and Newsletter activities, we have engaged the following service providers to process personal data on our behalf:

-        Adobe Systems Software Ireland Limited (ADIR), 4-6 Riverwalk, Citywest Business Campus, Saggart, Dublin 24, Ireland;

-        Dept Design & Technology B.V., Delftseplein 27N, 3013 AA Rotterdam, the Netherlands;

-        Verticurl Marketing UK Limited Sea Container House, Upper Ground, London, SE1 9RQ United Kingdom

-        Salesforce Japan Co., Ltd. (f/k/a Kabushiki Kaisha Salesforce.com),  1-1-3, Marunouchi, Chiyoda-ku, Tokyo 100-0005, Japan, a Japan corporation 

-        Sendgrid Inc., 1801 California Street, Suite 500, Denver, CO 80202, United States of America

Furthermore, we may share personal data with other legal entities, when necessary relating to the processing purposes as described above:

-        Affiliates: other legal entities that are part of the Samsung Group;

-        Other parties when required by law or as necessary to protect our services: For example, it may be necessary by law, legal process, or court order from governmental authorities to disclose your information. They may also seek your information from us for the purposes of law enforcement, national security, anti-terrorism, or other issues that are related to public security.

-        Other parties in connection with corporate transactions: We may disclose your information to a third party as part of a merger or transfer, acquisition or sale, or in the event of a bankruptcy.

-        Installers of our products upon your request to share information with them.

-        Our business partners: Partners who we work together with. For example, when you consent to receiving our Newsletter, we may connect with you with our local business partners. These business partners control and manage your personal data. Please note that they are independent data controllers for your personal data. We refer to their privacy policy regarding the processing of your data. You may contact them for their relevant privacy notice. Currently, the following business partners may contact you in relation to the Newsletter if you are located in Germany or the Netherlands:

-        Marken-Distributions GmbH Niedersachsenstraße 12 48465 Schüttorf Germany

-        Ambrava NV, Beukenlei 50 2960 Brecht, Belgium.

The security of your personal data is important to us. We are committed to protecting the information we collect. We maintain administrative, technical and physical safeguards designed to protect the personal information you provide, or we collect against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. These safeguards are intended to protect the confidentiality, integrity and availability of the information you provide to us. We periodically assess risks to your information and update our policies, procedures and technology accordingly.

Within the context of the processing of personal data as described in this Notice, we may transfer personal data from within the European Economic Area to the United Kingdom, Japan, South Korea, and vice versa. Both the European Economic Area and the United Kingdom, Japan, and South Korea, are recognized as offering appropriate safeguards under applicable data protection legislation.

In the context of cookies used on our Website, data collected through such cookies may be transferred outside the European Economic Area and the United Kingdom to third countries of which it has not been formally established that such countries ensure an adequate level of protection of personal data. Such third-countries include the United States of America. In accordance with applicable data protection legislation, so-called formally approved model agreements are entered into between the exporting party and importing party involved in such data transfer to serve as appropriate safeguard to protect your personal data. Kindly refer to our Cookie Notice to learn which cookies involve a transfer of personal data outside the European Economic Area and the United Kingdom.

In accordance with applicable law, it is your right to:

-        request access to your personal data;

-        request correction, update and deletion of your personal data;

-        object, for legitimate reasons, to your personal data being processed;

-        withdraw any consent given through the Website (without affecting the lawfulness of processing based on consent before its withdrawal);

-        object to your personal data being processed (including for direct marketing purposes);

-        lodge a complaint with the relevant supervisory authority if you consider that our processing of your personal data infringes applicable law. Contact details for all EU supervisory authorities can be found at https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080. If you are in the UK, you can make a complaint to the UK data protection regulator: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, phone number: 0303 123 1113, website: https://ico.org.uk/make-a-complaint/.

We retain personal data no longer than is permitted under applicable data protection laws. The applicable data retention period may vary per data category. The criteria on which our retention policy is based are:

-        the necessity to retain personal data in light of the purpose for which they have been collected;

-        compliance with applicable data retention obligations under mandatory law (such as tax or company law);

-        the relevance of personal data in light of pending or potential legal proceedings; and

-        applicable (statutory) limitation periods under applicable civil law.

For retention periods applicable to data processed through the use of cookies and similar techniques, kindly refer to our Cookie Notice.

Please let us know in case you have specific enquiries regarding the applicable retention period to specific categories of personal data.

For any enquiries regarding the processing of personal data or to raise a complaint with us, please contact us via: https://www.samsung.com/request-desk .

Or via:

European Data Protection Officer Samsung Electronics (UK)

Limited Samsung House

2000 Hillswood Drive, Chertsey

Surrey KT16 0RS, UK