Privacy Notice
Samsung Electronics Italia S.p.A with registered office in Via Mike Bongiorno, 9 – 20124 Milan (MI) ("SEI"), is consistently committed to protecting the privacy of Resellers and of their employees. This document ("Notice") has been drafted in order for you to understand how your personal data will be processed when using the website samsungcare.samsung.it (the "Portal").
In general, any information or personal data provided to SEI through the Portal, or that is otherwise collected through it, when using the services offered by SEI, as further defined below in Paragraph 3, will be processed according to the internationally recognised principles of lawfulness, fairness, transparency, purpose and storage limitation, data minimisation, accuracy, integrity and confidentiality.
It should be noted that this notice concerns the processing of the personal data of those who are registered and access the Portal, while it does not concern the processing of the personal data of the Reseller's customers, for whom the latter shall be considered as autonomous Controller.
- Controller and Data Protection Officer
SEI, as identified at the outset of the Notice, is the Controller with regards to all the personal data processed through the Portal.
You can contact the single Data Protection Officer ("DPO") for all of SEI's affiliates with registered office in the European Union, at the following address:
Samsung Electronics (UK) Limited
Samsung House, 1000 Hillswood Drive, Chertsey, Surrey KT16 0PS
and writing to dataprotection.sei@samsung.com
- Personal Data Processed
Following your registration on the Portal, you are informed that SEI will process information about you, which may consist of an identifier such as a name, an identification number, an online identifier or of one or more specific elements of your physical, physiological, mental, economic, cultural or social identity that may identify you or make you identifiable (hereinafter only "Personal Data").
The Personal Data processed through the Portal are the following:
- Name, Contact Details and Other Personal Data
In the section of the Portal dedicated to the registration, you will be asked to specify your company name, VAT number, the address of the store and your name, surname, e-mail address and phone number, as the contact person within the company.
- Special Categories of Personal Data
When using the Portal, you may communicate to SEI (either deliberately, or not) Personal Data belonging to special categories, such as those revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or such as genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation ("Special Categories of Personal Data"). SEI will not process any information which may contain Special Categories of Personal Data and therefore invites you not to communicate such Special Categories of Personal Data.
- Third Parties' Data Provided by the Data Subject
Through the registration form on the Portal, you may send SEI Personal Data relating to third parties (either colleagues or employees).
In this case, you act as an autonomous Controller, therefore assuming all relevant legal obligations and responsibilities. Hereby, you grant SEI to keep it harmless and indemnified with regards to any dispute, claim, request for compensation for damages caused by the processing, etc. which may be addressed to SEI from third parties whose Personal Data have been processed through your use of the Portal's functions, in breach of the applicable data protection legislation.
In case you provide or otherwise process third parties' Personal Data when using the Portal, you guarantee, as of now – hereby assuming any relevant responsibility – that such specific processing is grounded on the third Data Subject's consent or on another suitable legal basis which legitimises the processing of the concerned information.
- Purposes of the Processing
SEI will use your Personal Data, collected through the Portal, for the following purposes:
- Allowing you to register and use the Portal in order to process sale orders for extended warranties with regards to Samsung Products ("Portal Use");
- Complying with legal obligations imposing on SEI the collection and/or the further elaboration of certain Personal Data ("Compliance");
- Protecting the rights, property or safety of SEI, its affiliates, its commercial partners, employees or customers, for instance in the context of judicial proceedings, internal investigations and investigations carried out by the competent authorities, and preventing or identifying any abuse in the use of the Portal or any fraudulent activity ("Abuses/Frauds").
- Legal Basis and Mandatory or Optional Nature of the Processing
The legal bases used by SEI to process your Personal Data, according to the purposes of the processing detailed in Paragraph 3 above, are the following:
- Use of the Portal: the processing for this purpose is necessary in order for you to use the Portal and, therefore, for the performance of the contract. Providing your Personal Data to SEI for this purpose is not mandatory, but in case you decide not to do so, it will not be possible for you to access the Portal and SEI will not be able to provide you with any service.
- Compliance: the processing for this purpose is necessary in order for SEI to comply with any legal obligation. When you provide Personal Data to SEI, these will be processed according to the applicable legislation, which may involve the storage of your data and communication to the competent Authorities for accounting, tax or other obligations.
- Abuses/Frauds: information collected for this purpose will be processed exclusively in order to prevent and/or identify any fraudulent activity or abuse in the use of the Portal.
- Personal Data Recipients
Your Personal Data can be shared with the subjects listed below ("Recipients"):
- Subjects acting as data controllers, i.e.: natural persons, companies or professional firms that provide consultancy service to SEI in accounting, administrative, legal, tax, financial, marketing, market search and credit recovery matters, or with whom it is necessary to interact in order to guarantee the proper functioning of the Portal;
- Persons authorised by SEI to the processing of Personal Data which is necessary to carry out activities strictly linked to the provision of Services, who have committed to confidentiality or have an adequate legal obligation of confidentiality (e.g., SEI's employees);
- Companies belonging to the Samsung Group for internal administrative purposes;
- Subjects, entities or authorities to whom it is mandatory for you to disclose your Personal Data for Compliance purposes, purposes related to Abuses of Frauds, or by order of the authorities.
- Transfers of Personal Data
Given SEI's international presence, some of your Personal Data may be disclosed to Recipients located outside of the European Economic Area. SEI ensures that the processing of your Personal Data by these Recipients is done according to the applicable legislation. Transfers are carried out through appropriate safeguards, such adequacy decisions, Standard Contractual Clauses approved by the European Commission or other safeguards considered appropriate. Further information is available from SEI, by writing to the following address: dataprotection.sei@samsung.com.
- Retention of Personal Data
Personal Data processed for the purpose of the Use of the Portal will be stored by SEI for no longer than is strictly necessary to pursue such purpose. In any case, because these Personal Data are processed in order for you to use the Portal provided by SEI, the latter may store them for a longer period, in particular as may be necessary to protect SEI's interests from potential liabilities.
Personal Data processed for the purpose of Compliance will be stored by SEI for the period provided for by specific legal obligations or by the applicable legislation.
Personal Data processed to prevent Abuses/Frauds will be stored by SEI for no longer than is strictly necessary to pursue such purpose and therefore until such time as SEI is obliged to retain them to protect itself in court and to communicate such data to the competent Authorities.
At the end of the storage period, we delete Personal Data so to grant that they cannot be reconstructed or read.
- Data Subject's Rights
You may have the right to ask SEI, at any time:
- Access to your Personal Data, (and/or a copy of your Personal Data), as well as further information on the ongoing processing of your Personal Data;
- The rectification or update of your Personal Data processed by SEI, in case they were incomplete or not updated;
- The erasure of your Personal Data from SEI's databases, in case you believe the processing is not necessary or unlawful;
- The restriction of the processing of your Personal Data by SEI, in case you believe that your Personal Data are incorrect, unnecessary or unlawfully processed, or in case you made an opposition against their processing;
- To exercise your right to data portability, i.e., to obtain in a structured, commonly used, machine-readable format a copy of your Personal Data provided by SEI, or to ask that a copy be sent to another Controller.
You can exercise your rights by writing to the following portal: http://www.samsung.com/request-desk
In any case, you always have the right to lodge a complaint with the competent Supervisory Authority, if you believe the processing of your Personal Data to be in violation of the applicable legislation.
- Amendments
This notice is effective as of the 17 December 2018. SEI reserves the right to modify or simply update its content, in part or entirely, including due to changes in applicable legislation. SEI will inform you of such amendments as soon as they are introduced and they will be binding as soon as they are published on the Portal. SEI therefore invites you to regularly visit this section to become aware of the most recent and updated version of the Notice so as to be kept up-to-date on the Personal Data collected and on the use that SEI makes of them.