OSRC Privacy Notice

Effective Date: 30/06/2018

Samsung Electronics Co., Ltd., (collectively, “Samsung” or “We”) and its affiliated companies respect your concerns about privacy. This Privacy Notice applies to the personal information we collect through the OSRC services or websites (the “Service” or “Website”). It does not apply to information collected by other apps, websites or services provided by Samsung or its affiliated entities. Samsung Electronics (UK) Limited is a joint controller with regards to the data processing of EU residents.

In this Privacy Notice, we describe the types of information collected through OSRC, how we may use the information, how long we may keep the information, with whom we may share it and the choices available to you regarding our use of the information and exercising your rights. We also describe the measures we take to safeguard the information and tell you how to contact us about our privacy practices. Samsung is the data controller for the processing of personal data.

Information We Obtain

Through OSRC, we obtain information about you in various ways. The types of personal information we obtain include:

• We will collect personal information that you provide, such as your name, e-mail address, job title, nationality, service use record, access log, cookies, IP address, Open Source Community Name, Open Source Community URL you send or deliver to us;

• OSRC Interactions. We collect information you exchange with OSRC through your interactions with the Services or Websites, including other inputs and the information you receive from the Services or Websites (such as responses, answers and content). If you submit information to OSRC that is sensitive in nature (i.e., health information), that will also be collected and processed for the purposes set out below. We will not actively collect such information without first obtaining your separate explicit consent, or as provided for by applicable law. We also may obtain other information related to your use of OSRC, including the information we receive from other services or websites that are accessed or used by OSRC to provide you with the Services (such as social media and email).

How We Use the Information We Obtain

We use the information we obtain through the Services to:

• provide you with the Services or Websites, including to enable us to fulfill our obligations under any contract with you, such as to respond to your requests, questions and instructions made through OSRC;

• identify and authenticate you so you may use certain Services;

• respond to your requests and inquiries;

• for assessment and analysis of our market, customers, products, and services (including asking you for your opinions on our products and services, carrying out customer surveys; performing data analytics) to understand the way people use our Services or Websites so that we can improve them and develop new products and services;

• protect against, identify and prevent fraud and other criminal activity, claims and other liabilities; and

• comply with and enforce applicable legal requirements, relevant industry standards and our policies, including this Privacy Notice.

Through OSRC, we may use third-party analytics services on our Services. The providers that administer these analytics services help us analyze your use of the Services and improve our Services. The information we obtain may be disclosed to or collected directly by these providers and other relevant third parties who use the information, for example, to evaluate use of the Services, help provide the Services, and diagnose technical issues.

Samsung processes personal data for the purposes described above. Samsung’s legal basis to process personal data includes processing that is: necessary for the performance of the contract between you and Samsung (for example, to provide you with the Services and to identify and authenticate you so you may use certain Services); necessary to comply with legal requirements (for example, to comply with applicable accounting rules and to make mandatory disclosures to law enforcement); necessary for Samsung’s legitimate interests (for example, to manage our relationship with you and to improve the Services).

You are required, as a necessity to enter into a contract, to provide us with personal data for processing as described above. If you do not provide us with personal data, we will not be able to provide you all of the features available through OSRC.

Information Sharing

We do not disclose personal information about you through the Services, except as described in this Privacy Notice. Limited members of the OSRC service team in Samsung may access and other wise process personal data in connection with their job responsibilities or contractual obligations. We may share your personal information with our subsidiaries and affiliates and with service providers who perform services for us. We do not authorize our service providers to use or disclose the information except as necessary to perform services on our behalf or to comply with legal requirements.

Some of these personnel, affiliates and third party service providers are located outside of the EEA, including in countries that may not provide the same level of data protection as the home country of our customers, including, for example and without limitation to the Republic of Korea. Samsung takes appropriate steps to ensure that such recipients are bound to duties of confidentiality and Samsung implements measures such as standard data protection contractual clauses to ensure that any transferred personal data remains protected and secure. A copy of these clauses can be obtained by contacting us as specified in the How to Contact Us section of this Privacy Notice.

When you use OSRC to access or interact with third-party websites or services, we may send certain personal information to the providers of such third-party websites and services to provide you with the services you request. These third parties also may collect certain personal information directly from your devices through OSRC. Samsung is not responsible for these third-party providers’ privacy or security practices. The privacy and security practices of the relevant providers, including details on the information they receive from us or collect about you, are subject to the privacy statements of these parties, which we strongly suggest you review.

Samsung, our subsidiaries and affiliates, and our third-party service providers also may disclose information about you (1) if we are required to do so by law or legal process (such as a court order or subpoena); (2) in response to requests by government agencies, such as law enforcement authorities; (3) to establish, exercise or defend our legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (5) in connection with an investigation of suspected or actual illegal activity; (6) in the event we sell or transfer all or a portion of our business or assets (including in the event of a merger, acquisition, sale, transfer, reorganization, dissolution or liquidation); or (7) otherwise with your separate consent.

Retention of Personal Data

We take appropriate steps to ensure that information about you based on the following logic:
1. at least the duration for which the information is used to provide you with the Service;
2. as required under law, a contract, or with regard to our statutory obligations; or
3. only for as long as is necessary for the purpose for which it was collected, is processed, or longer if required under any contract, by applicable law, or for statistical purposes, subject to appropriate safeguards.

Your Choices

We offer you certain choices in connection with the personal information we obtain about you. To update your profiles or preferences, limit the communications you receive from us, or submit a request, please contact us as specified in the How to Contact Us section of this Privacy Notice. Please note that if you decline to allow OSRC to collect or share certain information, you may not be able to use all of the features available through OSRC.

Your Rights

You have the right to request details about the information we collect about you and to request us to correct inaccuracies in that information, to object to or request the restriction of processing, to request access to, the erasure or portability of your information. Under the laws of some jurisdictions, we may decline to process requests that are unreasonably repetitive, require disproportionate technical effort, jeopardize the privacy of others, are extremely impractical, or for which access is not otherwise required by local law. If you would like to make a request to access your information, please contact our customer service department at oss.request@samsung.com or here .
If you request deletion of personal information, you acknowledge that you may not be able to access or use the Services or Websites and that residual personal information may continue to reside in Samsung’s records and archives for some time, in compliance with applicable law, but Samsung will not use that information for commercial purposes. You understand that, despite your request for deletion, Samsung reserves the right to keep your personal information, or a relevant part of it, in line with our data retention policy and applicable laws, if Samsung has suspended, limited, or terminated your access to the website for violating the Samsung Terms of Use, when necessary to protect the rights, property, or safety of Samsung, or any of our respective affiliates, business partners, employees or customers.
You may lodge a complaint with a supervisory authority if you consider that our processing of your personal data infringes applicable law.

How We Protect Personal Information

We maintain appropriate administrative, technical and physical safeguards designed to protect personal information we obtain through the Services against accidental, unlawful or unauthorized destruction, interference, loss, alteration, access, disclosure or use. Samsung also maintains reasonable procedures to help ensure that such data is reliable for its intended use and is accurate, complete and current.

Updates to Our Privacy Notice

This Privacy Notice may be updated periodically to reflect changes in our personal information practices with respect to the Services, or changes in the applicable law. We will post a notice on our website and/or your device to notify you in advance of material changes to our Privacy Notice and indicate at the top of the notice when it was most recently updated.

How to Contact Us

If you have any specific questions, please contact us at:
European Data Protection Officer
Samsung Electronics (UK) Limited
Samsung House, 1000 Hillswood Drive, Chertsey, Surrey KT16 0PS
You can also contact us at oss.request@samsung.com or here .