Effective Date: 05/02/2019

Samsung Electronics Co., Ltd. (“Samsung” or “We”) and our affiliated companies and subsidiaries respect your concerns about privacy. This Privacy Policy applies to the personal data we collect through the Samsung Knox and related services (the “Service”). It does not apply to data collected by other apps, websites or services provided by Samsung or its affiliated entities. Samsung is the data controller for the processing of personal data.

Samsung Knox offers a comprehensive mobile security solution for business and personal use by providing additional security and protection for the operating system.

This Privacy Policy provides information about how Samsung collects, uses and shares your personal data in connection with the Service. Our Privacy Policy at https://account.samsung.com/membership/pp (“Samsung Privacy Policy”) will also apply to your use of the Service, and should be read in conjunction with this Privacy Policy. The Samsung Privacy Policy provides additional information about our personal data practices. In the event that any portion of this Privacy Policy conflicts with the Samsung Privacy Policy, the relevant provisions of this Privacy Policy will apply.

Information We Obtain
Through Samsung Knox.We obtain information about you in various ways. The types of personal data we obtain include:

- Device and App Information. We collect data through automated means about your Samsung Knox-enabled devices, such as device data and identifier(s), device software version, OS version, device models, and other unique identifiers. We also collect data about your apps, such as package name, package version, and hash data of the application. In addition, we may obtain data about how, when, and for how often you use your Samsung Knox-enabled devices, including your usage of Samsung Knox.

Samsung’s servers may receive data when you interact with Samsung Knox, such as data about your use of Samsung Knox and your interactions with Samsung Knox.

How We Use the Data We Obtain

We use the data we obtain through the Service to:

- provide you with the Services
- improve the Services
- operate, evaluate, and improve our business (including developing new products; enhancing and improving our products and services; managing our communications; analysing our products, customer base and services; conducting market research; performing data analytics; and performing accounting, auditing, and other internal functions);
- complying with and enforcing applicable legal requirements, relevant industry standards, and our policies, including this Privacy Policy.

Samsung processes personal data for the purposes described above. Samsung’s legal basis to process personal data includes processing that is: necessary for the performance of the contract between you and Samsung (for example, to provide you with the Services); necessary for Samsung’s legitimate interests (for example, to manage our relationship with you and to improve the Services).

You are required, in order to enter into a contract, to provide us with personal data for processing as described above. If you do not provide us with personal data, we will not be able to provide you all of the features available through Samsung Knox.

Data Sharing

We do not disclose personal data about you through the Services, except as described in this Privacy Policy. Limited members of the Samsung Knox service team at Samsung may access and otherwise process personal data in connection with their job responsibilities or contractual obligations. We may share your personal data with our subsidiaries and affiliates and with service providers who perform services for us. We do not authorise our service providers to use or disclose the data except as necessary to perform services on our behalf or to comply with legal requirements.

Samsung, our subsidiaries and affiliates, and our third party service providers also may disclose data about you (1) if we are required to do so by law or legal process (such as a court order or subpoena); (2) in response to requests by government agencies, such as law enforcement authorities; (3) to establish, exercise, or defend our legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (5) in connection with an investigation of suspected or actual illegal activity; (6) in the event we sell or transfer all or a portion of our business or assets (including in the event of a merger, acquisition, reorganisation, dissolution, or liquidation); or (7) otherwise with your consent.

International Data Transfer

Some of these personnel, affiliates and third party service providers are located outside of the EEA, including in countries that may not provide the same level of data protection as the home country of our customers, including the Republic of Korea. Samsung takes appropriate steps to ensure that such recipients are bound to duties of confidentiality and Samsung implements measures such as standard data protection contractual clauses to ensure that any transferred personal data remains protected and secure. A copy of these clauses can be obtained by contacting us as specified in the How to Contact Us section of this Privacy Policy.

Retention of Personal Data

We take appropriate steps to ensure that data about you is retained based on the following:
1. For at least the duration for which the data is used to provide you with the Service;
2. as required under law, a contract, or with regard to our statutory obligations; or
3. only for as long as is necessary for the purpose for which it was collected, is processed, or longer if required under any contract, by applicable law, or for statistical purposes, subject to appropriate safeguards.

Your Choices

We offer you certain choices in connection with the personal data we obtain about you. To update your preferences, limit the communications you receive from us or submit a request, please contact us as specified in the How to Contact Us section of this Privacy Policy.

Your Rights

You have the right to request details about the data we collect about you and to ask us to correct inaccuracies in that data, to object to or request the restriction of processing, or to request access to your data, its erasure or portability. Under the laws of some jurisdictions, we may decline to process requests that are unreasonably repetitive, require disproportionate technical effort, jeopardise the privacy of others, are extremely impractical, or for which access is not otherwise required by local law. If you would like to make a request to access your data, please contact our data protection support service department at https://www.europe-samsung.com/gdpr/webform/at.

If you request deletion of personal data, you acknowledge that you may not be able to access or use the Service and that residual personal data may continue to reside in Samsung’s records and archives for some time, in compliance with applicable law, but Samsung will not use that data for commercial purposes. You understand that, despite your request for deletion, Samsung reserves the right to keep your personal data, or a relevant part of it, in line with our data retention policy and applicable laws, if Samsung has suspended, limited, or terminated your access to the website for violating the Samsung Terms of Use, when necessary to protect the rights, property, or safety of Samsung, or any of our respective affiliates, business partners, employees or customers.

How We Protect Personal Data We maintain administrative, technical and physical safeguards designed to protect personal data we obtain through the Services against accidental, unlawful or unauthorised destruction, interference, loss, alteration, access, disclosure or use. Samsung also maintains reasonable procedures to help ensure that such data is reliable for its intended use and is accurate, complete and current.

Updates to Our Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in our personal data practices with respect to the Services, or changes in the applicable law. We will indicate at the top of this Privacy Policy when it was most recently updated.

How to Contact Us

If you have any specific questions, please contact us at:

Data Controller
Samsung Electronics Co., Ltd.
129, Samsung-ro, Yeongton-gu
Suwon-si, Gyeonggi-do 16677, Republic of Korea

Samsung Electronics has offices across Europe, so we can ensure that your request or query will be handled by the data protection team based in your region.

The easiest way to contact us is through our Privacy Support Page at https://www.samsung.com/request-desk.

You can also contact us at:
European Data Protection Officer
Samsung Electronics (UK) Limited
Samsung House, 1000 Hillswood Drive, Chertsey, Surrey KT 16 0PS

You may lodge a complaint with a supervisory authority if you consider that our processing of your personal data infringes applicable law. Contact details for all EU supervisory authorities can be found at https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.