Notice of Changes to Privacy Policy : August. 30. 2021 (Monday)

■ Effective Date for Changes to Privacy Policy : August. 30. 2021 (Monday)
■ Major Changes

• BEFORE

  ■ 1. Processing Personal Information
  
  To serve users better and understand users’ needs and interests, the Company processes the content and other information users provide during visiting sessions, including when users sign up for additional information, register an enquiry. This can include information in or about the content users provide, such as the date user enquiry has been registered. Company also processes information about how users use the Company’s Website, such as the types of content users view or engage with or the frequency and duration of user’s activities.

  ■ 3. Sharing Personal Information with Third Parties
  
  In principle, the Company does not disclose any of the personal information collected; however, the following are exceptions:
  
  - If the user has given consent to disclose information in advance; or
  - The Company may also use or disclose Marketing Information as we believe to be necessary or appropriate

  ■ 4. Retention of Collected Information
  
  (1) Retention of information in accordance with the Company's policies:
  
  - Retained items: email address, name, user’s company (department or store), user’s position at user’s company
  - Reason for retention: To manage users’ activity history
  - Retention period: 2 years from the user’s last access to the website
  

  ■ 5. Outsourcing
  
  The Company delegates some of the tasks required for providing services to an outside service provider :
  
  - Outsourcing company: Oracle
  - Outsourced work: Marketing Activity
  - Information provided: Information described in 1.a) and b)
  - Retention: Destroyed upon visitor’s discard request
  

  ■ 6. International transfer of personal information
  
  The Company may transfer users’ personal information to South Korea and Australia in order to better facilitate the Service. By using this website or providing any personal information to the Company, users consent to the transfer, processing, and storage of such information outside of user’s country of residence where data protection standards may be different.
  

• AFTER

  ■ 1. Processing Personal Information
  
  The Company processes the following personal information in order to respond to and manage inquiries on the Company, its services/products, investment, career opportunities, website, events and registration services, EBC visitations; reports on wrongful practices; and security reports. Samsung SDS does not collect personal information from users under 14 years of age.
  

  ■ 3. Transfer of Personal Information to Third Parties
  
  In principle, the Company does not disclose any of the personal information collected; however, the following are exceptions:
  
  - If the user has given consent to disclose information in advance; or
  - The Company may also use or disclose Marketing Information as we believe to be necessary or appropriate
  - When coordination and communication among members of Samsung SDS offices at home and abroad using internet relevant services provided by the Company’s website(www.samsungsds.com) is needed.
  

  ■ 4. Retention of Collected Information
  
  (1) Retention of information in accordance with the Company's policies:
  
  - Retained items: collected information under Article 1(1)
  - Reason for retention: To manage users’ activity history
  - Retention period: 2 years
  

  ■ 5. Outsourcing
  
  The Company delegates some of the tasks required for providing services to an outside service provider, ensuring necessary measures to safely manage personal information in accordance with relevant laws. The following are the outsourcing company and the outsourced work:
  However, reports on wrongful practices and security reporting center (reports) specified in Article 1.1 is excluded from outsourced work.
  
  - Outsourcing company: Oracle Corporation
  - Outsourced work: Processing personal information for the purposes of providing resource materials downloading and viewing services, responding to general inquiries on the Company, managing partner program applications, preparing, hosting, reviewing and managing events matching customers’ needs and to check identification for event participation
  ※ The information above includes not only initially collected information but also edited information.
  - Retention: 2 years from user’s consent to collection and use of personal information
  

  ■ 6. International transfer of personal information
  
  The Company transfers user’s personal information to third party overseas as detailed below and may process the information at a server outside user’s country of residence.
  
  (1) Receiving business and contact information
  - Name : Oracle Corporation Data Center (Australia)
  - Contact info. : https://www.oracle.com/legal/privacy/services-privacy-policy.html
  Chief Privacy Officer, Oracle Corporation
  10 Van de Graaff Drive
  Burlington, MA 01803
  USA
  
  (2) Destination Country, Date and Method of Transfer
  - Destination country: Australia
  ※ Location of overseas base : Oracle Corporation Data Center (Australia)
  - Date and method of transfer: Transfer through network at the time of using internet related service provided via Samsung SDS website
  (3) Transferred Personal Information: Among the items of collected personal information of Article 1.(1), reports of wrongful practices and security report center(reports) are excluded.
  ※ The information above includes not only initially collected information but also edited information.
  
  (4) Purpose of Using Transferred Personal Information
  The Company transfers personal information to the outside service provider so that it can conduct the tasks required to provide the following services, and oversees them to ensure that the service provider complies with the relevant privacy laws:
  
  - To respond to and manage inquiries concerning the company, services/products, investment, career opportunities, website management.
  - To provide events and other services, and to carry out email marketing activities
  - To respond to event-related inquiries, confirm users’ identity for their participation in events, and prepare, conduct, review, and manage events based on customer requirements.
  
  (5) Purpose of using personal information and retention period of the receiver
  - Users’ personal information shall retained for 2 years following consent to collection and use of personal information and be immediately destroyed after 2 years. However, if the retention of any personal information is required under applicable laws and regulations, such information shall be retained for a period in accordance with these laws and regulations.
  
  (6) Right to refuse consent and resulting disadvantages
  - Users have the right to refuse to collection of information. There may be restrictions in services if user refuse to consent.