EU GDPR Privacy Notice for EU Residents

Effective Date: 25/05/2018

Samsung Electronics Co., Ltd. (“Samsung” or “We”) and its affiliated companies respect your concerns about privacy. This Privacy Notice applies to the personal information we collect through the Portable SSD software(the “SW”). It does not apply to information collected by other apps, websites or services provided by Samsung or its affiliated entities.

Our Privacy Policy at https://account.samsung.com/membership/pp(“Samsung Privacy Policy”) will apply to the SW. This Privacy Notice provides further information about how your personal data is used in connection with SW and should be read in conjunction with the Samsung Privacy Policy.

In this Privacy Notice, we describe the types of information collected through the SW, how we may use the information, how long we may keep the information, with whom we may share it and the choices available to you regarding our use of the information and exercising your rights. We also describe the measures we take to safeguard the information and tell you how to contact us about our privacy practices. Samsung is the data controller for the processing of personal data.

A. Information We Obtain

Samsung collects the following personal information of you when you use the SW:

• Required Information
  IP address, OS, OS language and information on the Portable SSD (Portable SSD SW version, Portable SSD Model name, Portable SSD F/W version, Portable SSD serial number, Portable SSD security mode )

B. How We Use the Information We Obtain

Samsung collects the information through the SW, and the collected personal information is used for the purpose of improving services provided by the SW.

1. Optimized Service
   Provides you with convenience via optimization of the product's program in use
2. Enhanced Compatibility
   Leads maximized performance of the product via analysis of various user environments.
3. Enhanced Service Function
   Enhances the functions via analysis of the user environment and usability

Samsung processes personal data for the purposes described above. Samsung’s legal basis to process personal data includes processing that is: necessary for the performance of the contract between you and Samsung (for example, to provide you with the SW) and necessary for Samsung’s legitimate interests (for example, to improve the Services);

You are required, as a necessity to enter into a contract, to provide us with personal data for processing as described above. If you do not provide us with personal data, we will not be able to provide you all of the features available through the SW.

C. Information Sharing

We do not disclose personal information about you through the Services, except as described in this Privacy Notice. Limited members of the SW service team in Samsung may access and other wise process personal data in connection with their job responsibilities or contractual obligations. We may share your personal information with our subsidiaries and affiliates and with service providers who perform services for us. We do not authorize our service providers to use or disclose the information except as necessary to perform services on our behalf or to comply with legal requirements.

Some of these personnel, affiliates and third party service providers are located outside of the EEA, including in countries that may not provide the same level of data protection as the home country of our customers, including, for example and without limitation to the Republic of Korea. Samsung takes appropriate steps to ensure that such recipients are bound to duties of confidentiality and Samsung implements measures such as standard data protection contractual clauses to ensure that any transferred personal data remains protected and secure. A copy of these clauses can be obtained by contacting us as specified in the How to Contact Us section of this Privacy Notice.

Samsung, our subsidiaries and affiliates, and our third-party service providers also may disclose information about you (1) if we are required to do so by law or legal process (such as a court order or subpoena); (2) in response to requests by government agencies, such as law enforcement authorities; (3) to establish, exercise or defend our legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (5) in connection with an investigation of suspected or actual illegal activity; (6) in the event we sell or transfer all or a portion of our business or assets (including in the event of a merger, acquisition, sale, transfer, reorganization, dissolution or liquidation); or (7) otherwise with your separate consent.

D. Retention of Personal Data

Your personal information will be retained in the case of the following conditions and will be destroyed without delay once the purpose of use is achieved.

• During the period for providing the services
• If required with regard to law, contract or statutory obligations
• If required for the purpose of personal information collection or for contract, application, or statistical purposes

E. Your Rights

You have the right to request details about the information we collect about you and to request us to correct inaccuracies in that information, to object to or request the restriction of processing, to request access to, the erasure or portability of your information. Under the laws of some jurisdictions, we may decline to process requests that are unreasonably repetitive, require disproportionate technical effort, jeopardize the privacy of others, are extremely impractical, or for which access is not otherwise required by local law. If you would like to make a request to access your information, please contact us by visiting our Privacy Support page (www.samsung.com/request-desk).

If you request deletion of personal information, you acknowledge that you may not be able to access or use the Business Services and that residual personal information may continue to reside in Samsung’s records and archives for some time, in compliance with applicable law, but Samsung will not use that information for commercial purposes. You understand that, despite your request for deletion, Samsung reserves the right to keep your personal information, or a relevant part of it, in line with our data retention policy and applicable laws, if Samsung has suspended, limited, or terminated your access to the website for violating the Samsung Terms of Use, when necessary to protect the rights, property, or safety of Samsung, or any of our respective affiliates, business partners, employees or customers.

F. How We Protect Personal Information

We maintain appropriate administrative, technical and physical safeguards designed to protect personal information we obtain through the Services against accidental, unlawful or unauthorized destruction, interference, loss, alteration, access, disclosure or use. Samsung also maintains reasonable procedures to help ensure that such data is reliable for its intended use and is accurate, complete and current.

G. Updates to Our Privacy Notice

This Privacy Notice may be updated periodically to reflect changes in our personal information practices with respect to the Services, or changes in the applicable law. We will post a notice on our website and/or your device to notify you in advance of material changes to our Privacy Notice and indicate at the top of the notice when it was most recently updated.